This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json) Hash identifier: KGeh4j4W7Lsve5yrZG2iJ5U+n1N5V2lRmQX+SqLiMVI= Subject key identifier: B7:71:BE:98:B3:6B:C9:AB:E2:F6:15:86:A8:9C:D5:48:19:97:5C:41 Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e Certificate serial: 019AF164016DD1340FF1E7765DD4928B4476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft Manifest number: 09DC Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=) 2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: DRzab7YTf/zvYhqc3vDw5GXEmDQBq+DDrnnPIzGEFho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:01:6d:d1:34:0f:f1:e7:76:5d:d4:92:8b:44:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=b771be98b36bc9abe2f61586a89cd54819975c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:13:93:c9:a7:da:ae:83:28:32:72:ea:80: 59:16:2d:2c:93:33:ce:4a:5c:ae:35:a3:3b:18:6d: 1b:2c:9e:44:2b:39:52:ed:39:6d:74:68:2f:34:4e: 9e:d4:c8:e7:39:e2:9c:84:a9:61:65:1e:09:ef:77: 64:25:20:54:4e:c1:0b:54:ec:ab:95:d7:14:12:72: de:8d:3e:a2:58:79:67:ea:3f:8f:31:5c:e9:fc:7c: 6d:90:fc:a0:18:cb:e6:f4:69:d5:c0:00:78:ea:b5: 5c:5b:b4:e2:8f:e8:e1:47:01:24:e5:09:aa:73:cc: 52:48:83:3b:ae:de:c9:5d:bc:7c:06:97:6b:5e:c4: 09:6e:eb:d3:e3:35:f9:a9:5a:86:99:5e:d0:ac:ef: 69:10:a2:9c:03:20:7a:2e:63:4b:3b:b0:8b:94:80: da:b7:09:4f:4f:50:77:74:00:f9:b2:cf:c0:24:6a: 30:34:68:02:ff:c1:b9:10:20:d9:e5:f8:94:f8:4c: 0f:c1:4b:8b:a5:ee:ad:59:47:38:63:7a:1a:be:95: 2f:77:ec:ec:f2:9b:ce:7b:ed:a8:0b:b4:48:ed:45: 1e:dd:c7:4c:89:94:3e:2a:59:18:7c:97:2b:7d:db: fd:c0:79:94:4d:cd:c8:ea:4a:37:f2:c0:c0:0c:21: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:71:BE:98:B3:6B:C9:AB:E2:F6:15:86:A8:9C:D5:48:19:97:5C:41 X509v3 Authority Key Identifier: keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ad:d0:23:f4:9a:c7:15:5e:0c:26:f9:32:fa:8c:f7:ed:c6: 23:79:98:66:9c:20:6a:e9:f7:d3:70:f9:08:12:57:1a:e1:cd: 5d:ce:6b:78:e3:10:07:92:91:a6:35:93:6f:b7:bf:96:4a:05: 06:97:95:c9:a7:90:66:80:95:5f:8b:f5:05:5f:47:9b:26:a1: a2:72:68:82:fa:ab:d0:1f:3c:62:fd:6a:50:e7:5f:93:1c:e9: 97:30:45:9a:ba:25:9b:ec:bf:6f:98:7c:84:cc:e9:a1:8d:6a: da:5c:24:25:ce:fc:55:73:03:76:cb:1c:ae:3f:54:75:e8:c7: 54:1f:95:2c:73:5d:63:41:dc:e5:fb:7a:95:46:9a:d0:49:63: 8e:61:d4:12:35:13:f9:ab:18:38:82:f0:8e:cd:8b:bc:73:5f: 35:80:f3:05:7d:32:74:f4:3c:21:4d:f5:64:1f:fb:bf:fd:48: db:95:eb:88:e3:36:5b:05:a4:58:1f:93:d0:bd:86:a8:a9:42: 6f:30:fa:30:df:68:90:3e:8c:66:73:bb:75:06:35:48:b1:58: e4:25:c5:91:44:91:37:fd:a5:a6:8f:48:24:df:d7:f3:b0:4a: fe:9b:f7:c2:00:d8:9d:58:29:10:01:25:13:b2:e1:00:99:7e: 7b:d5:e0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAFt0TQP8ed2XdSSi0R2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4N2M2NzNmMzVhN2I3MDVhNmI0MjRkMzM5MTRmYTM5MmQz Yjk2MmUwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD EyhiNzcxYmU5OGIzNmJjOWFiZTJmNjE1ODZhODljZDU0ODE5OTc1YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPwTk8mn2q6DKDJy6oBZFi0skzPO SlyuNaM7GG0bLJ5EKzlS7TltdGgvNE6e1MjnOeKchKlhZR4J73dkJSBUTsELVOyr ldcUEnLejT6iWHln6j+PMVzp/HxtkPygGMvm9GnVwAB46rVcW7Tij+jhRwEk5Qmq c8xSSIM7rt7JXbx8BpdrXsQJbuvT4zX5qVqGmV7QrO9pEKKcAyB6LmNLO7CLlIDa twlPT1B3dAD5ss/AJGowNGgC/8G5ECDZ5fiU+EwPwUuLpe6tWUc4Y3oavpUvd+zs 8pvOe+2oC7RI7UUe3cdMiZQ+KlkYfJcrfdv9wHmUTc3I6ko38sDADCHCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdxvpiza8mr4vYVhqic1UgZl1xBMB8GA1UdIwQY MBaAFKh8Zz81p7cFprQk0zkU+jktO5YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDIt OTRlNjQ3MjYyMTYwLzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDItOTRlNjQ3MjYyMTYw LzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq3QI/Sa xxVeDCb5MvqM9+3GI3mYZpwgaun303D5CBJXGuHNXc5reOMQB5KRpjWTb7e/lkoF BpeVyaeQZoCVX4v1BV9HmyahonJogvqr0B88Yv1qUOdfkxzplzBFmrolm+y/b5h8 hMzpoY1q2lwkJc78VXMDdsscrj9UdejHVB+VLHNdY0Hc5ft6lUaa0EljjmHUEjUT +asYOILwjs2LvHNfNYDzBX0ydPQ8IU31ZB/7v/1I25XriOM2WwWkWB+T0L2GqKlC bzD6MN9okD6MZnO7dQY1SLFY5CXFkUSRN/2lpo9IJN/X87BK/pv3wgDYnVgpEAEl E7LhAJl+e9XgfA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:22 2025 by rpki-client