This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json) Hash identifier: gZzek5+0nBxWNkdTSuyYcoBSpb2Tsx7wjMrP7u4SFxU= Subject key identifier: B0:27:F8:95:42:4E:AF:71:43:EC:A0:EB:10:2D:00:1E:6F:AE:8B:F4 Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Certificate serial: 019AF5E5ED653176BFC744108FC7C300CE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft Manifest number: 16F8 Signing time: Sat 06 Dec 2025 23:01:17 +0000 Manifest this update: Sat 06 Dec 2025 23:01:17 +0000 Manifest next update: Sun 07 Dec 2025 23:01:17 +0000 Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=) 2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: W7TSEzeE2zmpNtiwyjp3J58b6t3psrxkqOmbDBolb8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ed:65:31:76:bf:c7:44:10:8f:c7:c3:00:ce:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Validity Not Before: Dec 6 23:01:17 2025 GMT Not After : Dec 7 23:01:17 2025 GMT Subject: CN=b027f895424eaf7143eca0eb102d001e6fae8bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:0d:05:0c:ef:a5:10:af:55:98:2e:62:ab: 7a:a2:4b:d4:19:a9:c1:1a:be:cf:11:4d:b0:24:b5: 23:f5:e0:1b:1c:2a:e8:28:4a:9e:31:fd:28:01:9a: 40:98:28:ef:fc:6c:47:2e:41:46:ce:11:73:47:85: 20:8e:22:e1:78:cb:5c:bc:c6:11:1d:d4:9d:16:f4: 86:d5:62:8f:d2:cd:aa:30:e5:d9:49:16:db:20:7d: c2:90:fc:bf:15:38:4a:4f:12:92:b5:92:a0:3e:ef: 8e:fb:fc:f9:4b:00:ad:c4:45:66:f8:7c:13:e4:9d: 72:f9:84:2a:20:06:7c:ff:b4:79:e4:99:d0:7c:a4: af:da:6b:d7:df:59:6e:db:88:bf:12:74:bd:7e:d2: 87:df:d7:cf:dd:e0:7a:b8:cc:1b:4b:27:b9:43:46: 1b:fa:16:62:a6:48:3e:c4:bc:fc:38:1f:24:f0:f9: 82:50:58:95:38:78:3e:7e:fa:ce:ba:15:4d:cf:67: 07:ea:e9:2d:e5:4e:5f:0f:0a:ff:6d:01:aa:91:ae: b2:db:87:37:75:ec:fc:ff:9b:60:b6:bf:ea:bf:31: e5:84:8f:82:72:d0:ae:f7:19:bc:8d:0d:62:15:f0: 18:ba:c5:e1:6a:89:3f:a1:28:e4:89:f4:d0:2a:0f: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:27:F8:95:42:4E:AF:71:43:EC:A0:EB:10:2D:00:1E:6F:AE:8B:F4 X509v3 Authority Key Identifier: keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1f:7e:25:55:b9:b7:8e:28:95:a9:91:c4:7a:27:87:b9:8a: 8d:aa:d2:bf:42:3a:50:7d:bb:3f:fa:61:69:82:3a:10:3d:31: 5d:d0:c8:0c:14:67:ab:7c:46:72:c8:9a:b0:d2:29:e6:a6:c6: 60:3b:a6:2e:13:cc:80:ac:33:68:b1:62:45:c8:5f:ee:7a:ca: 3a:f9:f8:f6:d2:40:ba:e2:33:ff:a8:71:c6:c9:e1:8e:92:19: fb:7c:f9:c1:e5:d0:23:89:77:98:2a:d8:33:c4:ee:0f:27:b5: 4c:ac:72:59:b2:12:60:54:5b:c4:df:cf:5a:66:21:56:d4:a1: 6d:a9:61:f8:e3:09:30:46:22:9c:4c:b9:bc:7a:18:c3:fe:e3: f5:08:c5:60:41:fb:cd:75:76:ce:d4:2e:53:df:c2:79:dd:ac: 81:a7:d9:11:ac:87:2d:ba:b6:df:a1:c1:4c:59:41:fd:f1:3e: 8c:c8:e6:2a:62:a5:2e:c5:bd:9c:51:dc:7a:2c:3d:ed:ec:d3: 96:3d:6a:1b:95:36:7e:06:68:c1:90:82:bf:8b:27:58:ec:4a: ef:d4:a8:9b:70:41:7d:fe:f0:f8:66:c4:32:f4:e7:b7:6e:ec: 1f:79:d6:0b:3a:ff:ff:85:60:c0:b9:bb:0b:0b:5c:8b:da:00: 84:a7:83:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15e1lMXa/x0QQj8fDAM4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi OWYzYjgwHhcNMjUxMjA2MjMwMTE3WhcNMjUxMjA3MjMwMTE3WjAzMTEwLwYDVQQD EyhiMDI3Zjg5NTQyNGVhZjcxNDNlY2EwZWIxMDJkMDAxZTZmYWU4YmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy4NBQzvpRCvVZguYqt6okvUGanB Gr7PEU2wJLUj9eAbHCroKEqeMf0oAZpAmCjv/GxHLkFGzhFzR4UgjiLheMtcvMYR HdSdFvSG1WKP0s2qMOXZSRbbIH3CkPy/FThKTxKStZKgPu+O+/z5SwCtxEVm+HwT 5J1y+YQqIAZ8/7R55JnQfKSv2mvX31lu24i/EnS9ftKH39fP3eB6uMwbSye5Q0Yb +hZipkg+xLz8OB8k8PmCUFiVOHg+fvrOuhVNz2cH6ukt5U5fDwr/bQGqka6y24c3 dez8/5tgtr/qvzHlhI+CctCu9xm8jQ1iFfAYusXhaok/oSjkifTQKg/94QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAn+JVCTq9xQ+yg6xAtAB5vrov0MB8GA1UdIwQY MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt MzlmNzUzNzU3ODQ4LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4 LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh9+JVW5 t44olamRxHonh7mKjarSv0I6UH27P/phaYI6ED0xXdDIDBRnq3xGcsiasNIp5qbG YDumLhPMgKwzaLFiRchf7nrKOvn49tJAuuIz/6hxxsnhjpIZ+3z5weXQI4l3mCrY M8TuDye1TKxyWbISYFRbxN/PWmYhVtShbalh+OMJMEYinEy5vHoYw/7j9QjFYEH7 zXV2ztQuU9/Ced2sgafZEayHLbq236HBTFlB/fE+jMjmKmKlLsW9nFHceiw97ezT lj1qG5U2fgZowZCCv4snWOxK79Som3BBff7w+GbEMvTnt27sH3nWCzr//4VgwLm7 Cwtci9oAhKeDbg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:20 2025 by rpki-client