This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json) Hash identifier: VDJtDKzJ9mS0ay2f824u6ymLWn0sb9YUa02FneSK3gM= Subject key identifier: 73:A6:03:E7:5F:E1:BD:9F:B0:55:94:23:52:0C:8B:25:50:FC:1A:ED Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Certificate serial: 019AF31D41A30404E4BDEE39C6FBEEEDA9D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=) 2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: ivPw3wcxeJFC6Ss9it9d6a9cptWBpx2rN4OM39s1Hg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:41:a3:04:04:e4:bd:ee:39:c6:fb:ee:ed:a9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=73a603e75fe1bd9fb0559423520c8b2550fc1aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:4c:50:11:41:6b:68:4a:fe:08:fd:45:53: 02:84:5d:22:fa:ed:b0:9b:33:c4:2a:30:5f:dd:8f: 92:68:a7:04:5c:f5:c2:23:cd:20:a6:01:22:0f:1f: 62:c8:4b:71:e4:52:ee:68:5f:5d:57:cc:72:e3:be: 0d:f8:85:3b:56:6d:e5:e2:59:dd:a7:ea:14:4d:39: 68:c5:09:14:50:19:77:19:5c:fe:35:62:9b:0c:76: 9f:fe:01:25:74:72:62:2e:c8:01:8e:ae:04:aa:33: dd:c0:d4:ac:60:ef:9d:38:61:5b:76:e9:0f:39:e5: 52:e8:08:f3:bc:12:14:ee:ae:4c:66:23:c0:b9:ce: a6:4d:0f:6e:fa:6e:e8:69:66:b6:a8:1c:13:b9:13: a0:a0:e5:0f:02:6b:b0:49:a4:31:fc:8c:72:90:49: ec:3a:5f:41:cd:16:0b:b4:bb:da:86:b3:86:f0:18: b3:f1:8f:84:a9:58:f5:76:9b:de:6e:99:9a:98:db: 69:d3:37:5c:f6:1c:33:94:87:89:f9:4a:3b:a1:38: 33:df:f4:bf:3b:e1:41:dc:a7:f1:e5:24:24:41:fb: 75:95:66:55:40:a9:a3:25:89:ba:69:60:6d:45:a5: 1e:4a:e8:59:47:24:19:73:d9:ad:12:d8:86:ae:f8: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:03:E7:5F:E1:BD:9F:B0:55:94:23:52:0C:8B:25:50:FC:1A:ED X509v3 Authority Key Identifier: keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:fa:1d:7e:4d:24:4b:ad:e1:fa:38:a5:26:30:fc:83:ee: 75:9e:91:89:81:6a:ab:ac:a9:69:b3:30:0e:31:5b:4d:10:7f: 37:68:af:57:ac:3e:fc:44:8f:59:5c:81:7b:42:42:f0:7e:33: 35:5a:07:55:75:43:ea:db:92:c4:ec:2f:a6:27:43:88:f1:40: d9:3a:38:40:3d:29:6e:2d:c7:6d:6e:ec:23:01:cd:6e:57:69: d4:f7:cd:fe:46:9b:c3:bd:f4:21:f2:0d:8c:60:7d:5c:8f:4e: 3e:13:b8:f2:96:a5:f3:43:2f:3f:3b:bf:aa:5f:23:1a:d0:cc: 4c:be:9c:b5:ec:49:f8:a7:dd:b4:2a:c3:da:ff:82:2a:52:40: 97:61:b5:a5:b1:ee:72:fa:9a:c5:e7:f2:5b:56:c2:47:15:aa: e1:0b:8b:fa:8c:70:2b:89:2c:62:ea:0a:3f:8d:68:06:18:cf: 12:86:bc:52:91:0e:43:67:ff:18:9a:5b:33:1a:b0:52:85:30: 03:fe:1f:ef:4e:e3:f9:0d:2d:24:67:de:65:e4:b8:08:06:22: 3d:00:59:82:8a:fa:b9:95:75:56:31:0a:dd:77:4b:6d:5c:23: fb:9a:d0:99:5d:50:95:60:c6:eb:b9:b0:a2:67:8a:b3:e8:93: 4d:92:61:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUGjBATkve45xvvu7anXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh Y2I0NGQwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD Eyg3M2E2MDNlNzVmZTFiZDlmYjA1NTk0MjM1MjBjOGIyNTUwZmMxYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ1MUBFBa2hK/gj9RVMChF0i+u2w mzPEKjBf3Y+SaKcEXPXCI80gpgEiDx9iyEtx5FLuaF9dV8xy474N+IU7Vm3l4lnd p+oUTTloxQkUUBl3GVz+NWKbDHaf/gEldHJiLsgBjq4EqjPdwNSsYO+dOGFbdukP OeVS6AjzvBIU7q5MZiPAuc6mTQ9u+m7oaWa2qBwTuROgoOUPAmuwSaQx/IxykEns Ol9BzRYLtLvahrOG8Biz8Y+EqVj1dpvebpmamNtp0zdc9hwzlIeJ+Uo7oTgz3/S/ O+FB3Kfx5SQkQft1lWZVQKmjJYm6aWBtRaUeSuhZRyQZc9mtEtiGrvh5NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOmA+df4b2fsFWUI1IMiyVQ/BrtMB8GA1UdIwQY MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTX6HX5N JEut4fo4pSYw/IPudZ6RiYFqq6ypabMwDjFbTRB/N2ivV6w+/ESPWVyBe0JC8H4z NVoHVXVD6tuSxOwvpidDiPFA2To4QD0pbi3HbW7sIwHNbldp1PfN/kabw730IfIN jGB9XI9OPhO48pal80MvPzu/ql8jGtDMTL6ctexJ+KfdtCrD2v+CKlJAl2G1pbHu cvqaxefyW1bCRxWq4QuL+oxwK4ksYuoKP41oBhjPEoa8UpEOQ2f/GJpbMxqwUoUw A/4f707j+Q0tJGfeZeS4CAYiPQBZgor6uZV1VjEK3XdLbVwj+5rQmV1QlWDG67mw omeKs+iTTZJhCw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:47 2025 by rpki-client