This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json) Hash identifier: N8O6CcPP3n4ZOMELJFAp3tihsDF+3Klelb76hTVFhmU= Subject key identifier: 42:33:8C:99:EC:FF:DA:1B:D4:DE:F5:0F:D7:AA:A7:1D:ED:49:25:4E Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Certificate serial: 019B24ACE536071779B7EB60CCD8DB9D0FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 01:01:09 +0000 Manifest this update: Tue 16 Dec 2025 01:01:09 +0000 Manifest next update: Wed 17 Dec 2025 01:01:09 +0000 Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=) 2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=) 3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: dpXmk/B2XNs8nysRgrd5LRG1Xa7UfOlpuSv33HSiVso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:e5:36:07:17:79:b7:eb:60:cc:d8:db:9d:0f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Validity Not Before: Dec 16 01:01:09 2025 GMT Not After : Dec 17 01:01:09 2025 GMT Subject: CN=42338c99ecffda1bd4def50fd7aaa71ded49254e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:0c:f6:ab:ea:48:c0:bf:de:3c:19:55:47: f8:34:69:e1:3f:60:72:10:f0:b8:84:5f:b5:82:e6: bd:e4:b2:57:84:e5:19:1e:6c:32:c5:b3:ea:c1:8e: a4:26:51:2a:76:a6:57:b8:2b:49:5e:03:31:ef:65: ee:93:23:38:79:2b:36:82:50:77:c1:03:be:ae:e2: 27:0b:50:a9:54:f8:74:2f:8b:ad:e0:5b:74:27:bd: b9:d6:90:5f:35:a8:10:b8:0e:98:25:59:da:2f:98: ca:bd:b7:55:a8:ff:6b:31:8d:e4:73:a3:b9:b7:03: ae:62:ac:75:b3:4e:62:08:07:01:ac:6b:b4:97:4c: 72:08:35:bf:31:43:12:11:00:48:fd:eb:99:0e:c8: 1e:c7:dc:a7:4c:ae:41:e3:41:eb:ff:a2:f3:22:d4: 48:dd:4c:68:0a:76:6c:c0:b8:14:40:e9:fd:9a:6e: 32:9a:23:ae:04:dc:75:d3:79:80:9f:b2:e1:1d:1a: 51:62:29:0b:a3:fb:69:c8:6a:7d:12:19:4f:8a:f0: de:9c:b1:83:84:c2:50:1e:48:88:f9:88:fb:07:35: fa:92:aa:58:dc:5c:e4:4f:6f:40:d6:36:bb:62:36: b4:a7:d1:90:a1:fa:1b:af:b9:14:c8:e8:c5:c5:54: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:33:8C:99:EC:FF:DA:1B:D4:DE:F5:0F:D7:AA:A7:1D:ED:49:25:4E X509v3 Authority Key Identifier: keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e6:9b:cc:e3:26:1b:52:b4:33:77:31:bc:69:a7:fa:c7:a4: a5:12:82:a8:34:e9:c3:d5:b2:ec:96:d0:c9:46:2f:f1:4f:9b: e0:b0:bc:a1:7f:c2:02:1e:29:12:1c:dd:e7:01:6f:c3:13:52: 49:8e:63:77:df:24:99:62:b9:e8:0e:f6:5a:89:ac:e2:75:dd: 1c:80:60:99:5b:32:58:6c:39:cb:fd:bc:33:7c:7f:a3:57:06: b7:ae:3d:da:0a:b8:de:43:f2:db:a7:85:45:0a:df:d8:ef:19: c4:85:c0:1c:b1:8a:79:ca:d2:42:25:02:3c:82:7a:6f:8c:51: 20:37:01:96:2e:16:21:c6:d8:1b:38:c6:5b:b5:38:3b:74:94: 6d:2a:6c:94:d9:cd:85:fa:97:fb:45:a0:d1:7f:6e:9e:6a:af: 82:cd:9f:68:4e:e4:4f:2b:ed:e2:db:b4:f4:bb:12:d3:23:a7: 06:2f:9f:95:b3:fe:e5:6a:22:0d:5a:c7:ee:b0:c9:e7:22:c5: c9:4a:bc:9c:74:60:47:4d:f8:b9:b3:5b:90:ca:94:45:42:d3: 25:52:c3:0d:48:2b:95:9a:f3:80:01:64:be:cc:fa:34:d4:30: 5e:e5:e8:d0:95:53:67:60:9d:5b:5c:8f:d2:20:96:c9:16:68: dd:bf:c3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrOU2Bxd5t+tgzNjbnQ/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk NTMyYzIwHhcNMjUxMjE2MDEwMTA5WhcNMjUxMjE3MDEwMTA5WjAzMTEwLwYDVQQD Eyg0MjMzOGM5OWVjZmZkYTFiZDRkZWY1MGZkN2FhYTcxZGVkNDkyNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW4M9qvqSMC/3jwZVUf4NGnhP2By EPC4hF+1gua95LJXhOUZHmwyxbPqwY6kJlEqdqZXuCtJXgMx72XukyM4eSs2glB3 wQO+ruInC1CpVPh0L4ut4Ft0J7251pBfNagQuA6YJVnaL5jKvbdVqP9rMY3kc6O5 twOuYqx1s05iCAcBrGu0l0xyCDW/MUMSEQBI/euZDsgex9ynTK5B40Hr/6LzItRI 3UxoCnZswLgUQOn9mm4ymiOuBNx103mAn7LhHRpRYikLo/tpyGp9EhlPivDenLGD hMJQHkiI+Yj7BzX6kqpY3FzkT29A1ja7Yja0p9GQofobr7kUyOjFxVTCWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIzjJns/9ob1N71D9eqpx3tSSVOMB8GA1UdIwQY MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOabzOMm G1K0M3cxvGmn+sekpRKCqDTpw9Wy7JbQyUYv8U+b4LC8oX/CAh4pEhzd5wFvwxNS SY5jd98kmWK56A72Woms4nXdHIBgmVsyWGw5y/28M3x/o1cGt6492gq43kPy26eF RQrf2O8ZxIXAHLGKecrSQiUCPIJ6b4xRIDcBli4WIcbYGzjGW7U4O3SUbSpslNnN hfqX+0Wg0X9unmqvgs2faE7kTyvt4tu09LsS0yOnBi+flbP+5WoiDVrH7rDJ5yLF yUq8nHRgR034ubNbkMqURULTJVLDDUgrlZrzgAFkvsz6NNQwXuXo0JVTZ2CdW1yP 0iCWyRZo3b/Dog== -----END CERTIFICATE-----Generated at Tue Dec 16 10:47:46 2025 by rpki-client