This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json) Hash identifier: H+JWdOH5woZg5cEKqOmmSJuWyVsOzgTu8My/ZVE8T2c= Subject key identifier: BA:56:02:51:3F:31:A5:86:16:66:65:CD:A9:0E:26:D7:6A:C2:8D:13 Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Certificate serial: 019B2D0C54757B1EF05808C1F4D9B51AED16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 16:02:21 +0000 Manifest this update: Wed 17 Dec 2025 16:02:21 +0000 Manifest next update: Thu 18 Dec 2025 16:02:21 +0000 Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=) 2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: TGMnuzH/elCJ2jELux677Iw5j1SxjZovXUNjLTlANVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:54:75:7b:1e:f0:58:08:c1:f4:d9:b5:1a:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Validity Not Before: Dec 17 16:02:21 2025 GMT Not After : Dec 18 16:02:21 2025 GMT Subject: CN=ba5602513f31a586166665cda90e26d76ac28d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:ca:04:17:19:d2:2c:ac:9e:53:e8:8b:cf: 47:7b:40:58:51:14:93:4f:65:62:a3:83:f7:9a:07: 23:71:2c:e2:67:e5:48:ea:70:5c:3e:79:9b:01:a5: 61:53:d4:84:11:3c:b9:77:09:d9:41:0d:81:09:e5: 50:bc:11:c7:7d:76:ab:8d:50:5b:c2:ec:ab:6d:c6: b6:3e:58:fe:9a:89:0c:3b:f9:17:c2:4f:28:ff:16: e3:34:2e:2b:58:de:ea:6a:f5:b8:48:38:1d:88:00: ec:0d:33:b5:62:cb:23:6f:14:f3:47:dd:08:86:ca: ae:08:b0:bc:1b:8d:ca:9a:f2:f0:31:7a:07:29:4d: a3:a0:0e:9e:9a:24:11:ce:5e:39:c3:c2:43:5a:4b: 54:d0:c1:b1:72:52:aa:fa:92:77:17:12:d7:1d:f4: 28:fd:5b:61:c4:5e:55:8f:9c:0c:79:ac:ef:77:bc: cb:c5:0c:e8:4e:9f:a8:f3:dd:80:0f:d0:c3:bf:4e: 79:ca:f7:84:3b:2b:99:64:35:2c:3a:53:cd:38:b2: ac:22:5c:9a:da:14:fd:e8:8f:33:c1:52:7e:06:68: 14:98:51:c9:ba:9c:05:2a:ea:96:84:35:c9:54:37: 39:8e:41:21:d3:e2:f3:b2:b1:e7:dc:29:1b:37:44: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:02:51:3F:31:A5:86:16:66:65:CD:A9:0E:26:D7:6A:C2:8D:13 X509v3 Authority Key Identifier: keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:96:3a:8f:b5:c2:f2:23:ba:6c:fc:a7:30:9b:76:8d:9d:43: 05:cf:2e:5f:76:99:27:3c:52:9f:bb:7e:0f:52:9d:e8:bb:6f: ce:be:11:c8:cd:1d:91:13:c9:74:27:1b:e2:43:6f:d4:46:7d: 50:ce:51:b0:8e:d3:7d:c0:c9:a5:1a:d8:68:b7:fa:bf:34:6d: a9:80:28:b3:a6:aa:98:7a:8e:60:8b:39:a1:1c:d3:47:e0:58: 90:35:6b:7f:e8:c9:a6:e0:e6:3b:cc:27:cd:a4:60:fc:06:79: 97:f5:fc:f9:8b:c5:32:8e:d7:08:d6:37:07:38:ea:2d:8e:13: c1:bd:35:7c:07:7b:48:c9:55:c5:cb:02:53:46:08:fa:9c:67: 97:64:68:9d:b7:68:d1:18:d3:52:c7:02:3d:eb:06:9a:9d:f7: 3d:8c:3e:18:d4:5a:c6:7c:f4:52:37:75:cd:e4:b2:4d:73:44: 1d:8b:9c:dc:03:12:6b:e6:db:28:75:eb:ba:3e:5b:3c:08:a1: a0:5a:36:ac:79:19:1f:4a:cc:ee:d1:e3:f9:1e:84:5b:16:78: 24:e6:b6:7e:1f:32:fc:2a:31:c0:43:49:6d:9e:2a:3f:c4:cb: 51:5a:0c:b3:54:46:6d:3b:42:3d:9c:8e:35:d0:58:d1:8f:29: 8e:a8:10:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDFR1ex7wWAjB9Nm1Gu0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh Y2I0NGQwHhcNMjUxMjE3MTYwMjIxWhcNMjUxMjE4MTYwMjIxWjAzMTEwLwYDVQQD EyhiYTU2MDI1MTNmMzFhNTg2MTY2NjY1Y2RhOTBlMjZkNzZhYzI4ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwzKBBcZ0iysnlPoi89He0BYURST T2Vio4P3mgcjcSziZ+VI6nBcPnmbAaVhU9SEETy5dwnZQQ2BCeVQvBHHfXarjVBb wuyrbca2Plj+mokMO/kXwk8o/xbjNC4rWN7qavW4SDgdiADsDTO1YssjbxTzR90I hsquCLC8G43KmvLwMXoHKU2joA6emiQRzl45w8JDWktU0MGxclKq+pJ3FxLXHfQo /VthxF5Vj5wMeazvd7zLxQzoTp+o892AD9DDv055yveEOyuZZDUsOlPNOLKsIlya 2hT96I8zwVJ+BmgUmFHJupwFKuqWhDXJVDc5jkEh0+LzsrHn3CkbN0Rs1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpWAlE/MaWGFmZlzakOJtdqwo0TMB8GA1UdIwQY MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Y6j7XC 8iO6bPynMJt2jZ1DBc8uX3aZJzxSn7t+D1Kd6Ltvzr4RyM0dkRPJdCcb4kNv1EZ9 UM5RsI7TfcDJpRrYaLf6vzRtqYAos6aqmHqOYIs5oRzTR+BYkDVrf+jJpuDmO8wn zaRg/AZ5l/X8+YvFMo7XCNY3BzjqLY4Twb01fAd7SMlVxcsCU0YI+pxnl2Ronbdo 0RjTUscCPesGmp33PYw+GNRaxnz0Ujd1zeSyTXNEHYuc3AMSa+bbKHXruj5bPAih oFo2rHkZH0rM7tHj+R6EWxZ4JOa2fh8y/CoxwENJbZ4qP8TLUVoMs1RGbTtCPZyO NdBY0Y8pjqgQFg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:45 2025 by rpki-client