This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json) Hash identifier: 4xy0jFftiAKhHy09tsr/+fFD6+D+xW3gfx10rkOxEsA= Subject key identifier: 42:35:6E:74:DF:A2:A5:15:71:71:6E:5A:80:D8:AF:E5:F4:5C:84:21 Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd Certificate serial: 019AF12EBC936AE02D901B3A5D058AC30FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft Manifest number: 09A9 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: SiG7a3Rxl1tm/qabDO7Zv+IIOPHpB9lEV8OOE38NvkM=) 2: BoO9SwQEMHsLwB3D3d0QdThU64M.roa (hash: xEZ0t9PxPtT9JsjJCaQCvAAhYcQDNvD5JhyTg8dedDI=) 3: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=) 4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=) 5: i9UroOeG3v0LQXKmV9ahi8I0w0c.roa (hash: WzgmOp30C9OQ/f6QU939qr7xdVO2Usi3fvlLxJ7jHeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bc:93:6a:e0:2d:90:1b:3a:5d:05:8a:c3:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=42356e74dfa2a51571716e5a80d8afe5f45c8421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:45:17:37:d3:d2:7b:0f:3f:3f:1e:fe:be: b7:a3:81:fb:2f:78:33:38:83:7d:25:9f:f7:0d:fd: 78:17:67:ee:ba:93:69:f7:49:a2:78:cf:7a:cc:1e: 11:62:c4:bf:ef:d4:4e:e7:f8:ee:a0:45:ea:b9:ab: 3e:2d:b5:30:d3:fa:62:90:c6:df:b6:c3:ee:9c:de: a7:e4:5b:d7:1a:c9:b2:0d:08:ec:22:ab:5f:0c:42: 68:2d:9f:c8:b5:1e:5d:aa:24:0e:61:73:5a:d0:4d: 86:34:49:36:35:79:bf:f5:db:5c:a2:60:27:fb:6c: b0:a4:ed:c8:5e:1c:90:19:7a:35:5d:e8:a3:f0:b8: b9:c2:5c:75:c6:58:92:f4:46:7f:8a:d3:59:3e:d9: 44:e9:5b:ac:46:bf:e5:65:05:03:4a:15:e2:57:a4: 95:cb:f4:5f:fb:d4:f4:f3:38:12:f8:28:0b:46:6c: db:1e:da:30:d1:71:e7:18:7e:43:8d:84:87:24:ab: fe:f7:48:da:27:93:78:15:37:4e:8e:42:32:b4:68: aa:b9:6f:8b:85:16:58:de:a7:08:49:f9:38:ac:78: 76:77:23:6b:2c:2c:c5:a8:6b:d3:96:af:e1:a6:c7: a7:4a:08:78:ea:e2:e1:7a:24:e2:df:ef:f6:f7:4a: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:6E:74:DF:A2:A5:15:71:71:6E:5A:80:D8:AF:E5:F4:5C:84:21 X509v3 Authority Key Identifier: keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d0:0c:d9:bb:e8:87:23:9c:d0:f9:4b:33:d3:37:93:88:c4: 54:78:7e:d6:fe:89:b7:f9:22:22:52:4c:e2:6a:dc:8d:d1:37: d6:9b:37:65:99:8a:ce:6e:a1:ed:16:5a:04:12:25:33:04:07: a0:43:7d:4a:6e:54:b8:6d:b6:46:bd:f4:68:22:ac:6d:e5:79: 79:30:53:d0:da:0b:a4:c9:94:78:bb:69:56:b7:5c:38:3f:7f: 89:0d:3b:db:48:d1:c2:e1:4d:16:ee:b0:56:7c:c7:33:2f:59: 66:ea:05:40:69:b5:bd:c2:19:52:95:5d:46:90:0b:8c:e9:8b: c1:f5:2d:26:45:e5:f2:76:8c:62:73:21:c5:fb:8c:27:b6:ba: 21:89:36:20:13:ae:6d:11:c5:ba:6d:d7:3c:1d:2c:ef:fa:13: be:c0:61:8f:a4:42:da:66:28:69:db:33:55:fa:48:2c:1c:37: 59:de:f2:c0:d0:6a:5b:fd:80:b9:64:ff:82:b6:79:7f:99:8e: 36:a6:7b:d6:4d:d8:ca:f0:f6:ab:f4:cb:98:88:17:8b:d0:9a: ce:4a:c2:ac:4d:42:3f:28:ba:da:84:3b:44:c5:f0:fa:91:a3: 99:7e:f6:83:d5:09:48:a4:7c:ce:d9:f2:ed:5b:7a:cc:3b:a1: d2:86:6f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLryTauAtkBs6XQWKww+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk ZjQ5ZGQwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD Eyg0MjM1NmU3NGRmYTJhNTE1NzE3MTZlNWE4MGQ4YWZlNWY0NWM4NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6VFFzfT0nsPPz8e/r63o4H7L3gz OIN9JZ/3Df14F2fuupNp90mieM96zB4RYsS/79RO5/juoEXquas+LbUw0/pikMbf tsPunN6n5FvXGsmyDQjsIqtfDEJoLZ/ItR5dqiQOYXNa0E2GNEk2NXm/9dtcomAn +2ywpO3IXhyQGXo1Xeij8Li5wlx1xliS9EZ/itNZPtlE6VusRr/lZQUDShXiV6SV y/Rf+9T08zgS+CgLRmzbHtow0XHnGH5DjYSHJKv+90jaJ5N4FTdOjkIytGiquW+L hRZY3qcISfk4rHh2dyNrLCzFqGvTlq/hpsenSgh46uLheiTi3+/290oOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI1bnTfoqUVcXFuWoDYr+X0XIQhMB8GA1UdIwQY MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNAM2bvo hyOc0PlLM9M3k4jEVHh+1v6Jt/kiIlJM4mrcjdE31ps3ZZmKzm6h7RZaBBIlMwQH oEN9Sm5UuG22Rr30aCKsbeV5eTBT0NoLpMmUeLtpVrdcOD9/iQ0720jRwuFNFu6w VnzHMy9ZZuoFQGm1vcIZUpVdRpALjOmLwfUtJkXl8naMYnMhxfuMJ7a6IYk2IBOu bRHFum3XPB0s7/oTvsBhj6RC2mYoadszVfpILBw3Wd7ywNBqW/2AuWT/grZ5f5mO NqZ71k3YyvD2q/TLmIgXi9CazkrCrE1CPyi62oQ7RMXw+pGjmX72g9UJSKR8ztny 7Vt6zDuh0oZvCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:49:00 2025 by rpki-client