This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json) Hash identifier: a1nH503HkyKVLsHg6iHJAW9N+8NGfFpVceqqv8BEY/w= Subject key identifier: 7B:1A:AC:11:FC:58:25:7C:CA:02:2A:C1:1F:6F:E0:23:35:EB:4D:8E Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Certificate serial: 019AF61C91C82F9737DA1903FD0E900828E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft Manifest number: 0AAD Signing time: Sun 07 Dec 2025 00:00:58 +0000 Manifest this update: Sun 07 Dec 2025 00:00:58 +0000 Manifest next update: Mon 08 Dec 2025 00:00:58 +0000 Files and hashes: 1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=) 2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=) 3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: t2jQ/hh0T7EUPnaBncVyPPYjRMUJNmCKAIlN5D52VLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:91:c8:2f:97:37:da:19:03:fd:0e:90:08:28:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Validity Not Before: Dec 7 00:00:58 2025 GMT Not After : Dec 8 00:00:58 2025 GMT Subject: CN=7b1aac11fc58257cca022ac11f6fe02335eb4d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:53:8e:68:45:aa:cb:4c:42:a2:d1:02:83: 74:c0:7a:82:a6:41:0e:6b:11:a9:8e:1e:3b:77:94: 62:b1:48:a0:ab:4d:98:13:f2:d8:af:b0:c5:a3:a2: 60:df:cf:eb:00:c0:de:ef:62:1e:61:1c:dc:71:b7: 9d:4c:1f:47:bc:04:d4:3a:86:c6:fb:60:aa:8c:a9: 79:18:fc:c2:67:18:fd:67:4e:62:fa:df:05:12:90: ad:30:85:50:af:d3:cf:bb:2f:61:b9:32:ae:f8:a7: 1c:e4:3f:9a:19:ab:1f:2a:0c:3f:54:54:99:5a:0c: 5e:32:aa:c8:76:8c:40:dc:05:fd:6c:73:96:b9:2a: 65:b3:03:4f:fe:39:b5:68:6f:c2:ea:11:25:13:97: a4:89:4b:b7:e1:4a:8a:e0:b7:b6:d9:b8:91:d3:51: ca:45:d2:3b:1d:a1:2d:31:d9:37:f7:f5:57:e4:10: 18:03:21:49:b9:74:8c:a8:ba:a1:c3:fa:5e:f9:67: bb:2d:21:99:fd:9a:7d:ef:83:52:8f:e2:bc:1e:ef: 9b:15:7a:72:4c:e2:35:8a:54:88:63:2e:a5:31:9d: 34:78:ba:fd:0b:cf:f4:48:c2:20:aa:5a:d4:47:c9: 7e:86:e8:85:ce:6c:d1:3e:da:06:e6:db:02:79:72: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:AC:11:FC:58:25:7C:CA:02:2A:C1:1F:6F:E0:23:35:EB:4D:8E X509v3 Authority Key Identifier: keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c2:01:6b:14:a5:8e:d2:ab:a1:23:3b:d4:91:57:41:18:f2: 6d:57:72:95:68:9b:55:7f:10:9c:d9:c2:5d:62:36:45:c6:ba: 43:21:5d:d5:aa:3b:6c:ac:c3:d0:bf:5a:40:98:66:cf:cb:8a: 79:a8:b5:d1:4c:39:a4:25:63:db:37:bf:23:89:ac:cf:5c:65: 27:40:e9:ac:c5:c2:52:a7:0a:78:35:49:c3:f5:e0:09:06:1b: 6a:93:55:78:01:c5:0a:69:88:7c:e3:13:94:dd:f7:d8:32:86: e2:d4:2a:b0:10:ea:a4:4d:2e:39:30:b1:85:a4:c3:ab:7e:8c: 63:b9:ae:43:64:49:10:d6:e0:75:49:bd:13:18:d6:aa:b2:6b: 36:68:2d:7e:f5:87:d0:57:16:7b:66:2e:fb:bc:cc:c9:a7:2b: 15:2c:cb:a8:b0:38:cf:20:6c:24:91:1f:09:6a:ff:33:04:e7: 05:43:37:78:58:b6:44:ee:07:98:31:79:00:98:69:67:80:12: 28:35:76:e3:5e:d0:22:fb:96:ea:4e:f2:4e:5f:d9:6b:ff:c5: 18:a7:ac:80:2e:ed:1b:ca:8c:f9:a2:e8:34:37:41:30:6e:d1: ab:51:de:62:84:4a:8e:14:5b:3a:77:40:75:9c:df:74:bd:53: fa:5a:f0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJHIL5c32hkD/Q6QCCjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy YzA2ZjQwHhcNMjUxMjA3MDAwMDU4WhcNMjUxMjA4MDAwMDU4WjAzMTEwLwYDVQQD Eyg3YjFhYWMxMWZjNTgyNTdjY2EwMjJhYzExZjZmZTAyMzM1ZWI0ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2chTjmhFqstMQqLRAoN0wHqCpkEO axGpjh47d5RisUigq02YE/LYr7DFo6Jg38/rAMDe72IeYRzccbedTB9HvATUOobG +2CqjKl5GPzCZxj9Z05i+t8FEpCtMIVQr9PPuy9huTKu+Kcc5D+aGasfKgw/VFSZ WgxeMqrIdoxA3AX9bHOWuSplswNP/jm1aG/C6hElE5ekiUu34UqK4Le22biR01HK RdI7HaEtMdk39/VX5BAYAyFJuXSMqLqhw/pe+We7LSGZ/Zp974NSj+K8Hu+bFXpy TOI1ilSIYy6lMZ00eLr9C8/0SMIgqlrUR8l+huiFzmzRPtoG5tsCeXJfyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsarBH8WCV8ygIqwR9v4CM1602OMB8GA1UdIwQY MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcIBaxSl jtKroSM71JFXQRjybVdylWibVX8QnNnCXWI2Rca6QyFd1ao7bKzD0L9aQJhmz8uK eai10Uw5pCVj2ze/I4msz1xlJ0DprMXCUqcKeDVJw/XgCQYbapNVeAHFCmmIfOMT lN332DKG4tQqsBDqpE0uOTCxhaTDq36MY7muQ2RJENbgdUm9ExjWqrJrNmgtfvWH 0FcWe2Yu+7zMyacrFSzLqLA4zyBsJJEfCWr/MwTnBUM3eFi2RO4HmDF5AJhpZ4AS KDV2417QIvuW6k7yTl/Za//FGKesgC7tG8qM+aLoNDdBMG7Rq1HeYoRKjhRbOndA dZzfdL1T+lrwvw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:04 2025 by rpki-client