This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json) Hash identifier: aedEo4ZiSHaMQY2R9deTBVMduqDvZRt89IgYEJbtKhM= Subject key identifier: C2:C3:1B:D4:35:64:B2:2E:AC:19:12:AC:86:2F:4D:AF:86:CA:BC:85 Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019AF16454684A048BF8A645F16F6F105205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft Manifest number: 1490 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: ND4/Ei/H/sESytzPVl7yA734rk6DXFRyBdshemOWWO8=) 2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=) 3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=) 4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:54:68:4a:04:8b:f8:a6:45:f1:6f:6f:10:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=c2c31bd43564b22eac1912ac862f4daf86cabc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:19:fb:38:9d:e4:94:6b:9b:83:50:9e:09: 3f:a6:4b:0f:20:3c:95:d7:61:2e:8b:bd:f1:50:d8: 56:a3:cf:42:d3:7e:37:43:1e:4b:0f:80:e0:ed:34: 8c:cc:37:2d:cd:eb:df:bc:66:bd:05:1b:4c:63:17: df:6d:b8:22:bb:36:9e:1f:6b:b7:4e:64:26:10:ba: d8:51:4d:84:5b:23:dc:a8:98:e6:bd:63:34:5a:06: e8:0a:bf:81:19:53:78:6c:f1:91:87:90:11:81:a0: 42:d9:61:02:a9:0d:2b:00:26:9a:8e:29:06:22:c6: 4b:15:b1:2b:98:ab:27:08:9b:9d:66:bd:62:b4:be: 86:43:82:b5:cc:da:c0:89:6e:18:1d:21:81:43:07: 45:95:e1:ec:79:2a:48:d4:d0:19:ba:bb:26:79:18: 80:03:f0:10:87:dd:d0:1d:f2:2a:b9:7f:91:f1:c4: ab:3b:50:68:3b:2d:3e:7a:20:55:31:35:8e:f6:1f: fe:fe:14:e7:1d:f8:36:c4:f7:85:41:bc:f6:2b:fe: e4:83:46:d3:1f:ca:07:c5:58:a2:81:f1:14:ac:76: c6:06:4e:f5:f9:fd:da:02:15:9d:d3:3f:b1:5d:f1: 8c:18:c0:f3:f8:6a:9a:d4:0d:6a:4f:40:c3:dc:32: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:1B:D4:35:64:B2:2E:AC:19:12:AC:86:2F:4D:AF:86:CA:BC:85 X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5f:5c:58:5d:e7:33:7b:43:d4:4d:dc:95:44:d6:bd:d6:43: 81:d9:7a:41:c7:36:b1:ca:bf:b7:91:37:02:5c:5f:48:88:b6: ee:a5:0e:85:6c:cb:8d:05:a3:bc:b6:46:73:f3:4e:dd:2a:0e: 9e:b6:22:7d:06:73:18:13:bc:f3:8b:68:ee:9c:d0:9c:50:78: 52:14:5b:ba:7f:8e:0a:9b:ad:de:32:69:dc:2e:fa:b3:31:5b: cd:f9:d0:5d:28:c6:ba:53:be:e9:e3:7d:fd:45:42:14:b0:a3: f6:c6:8c:05:0e:46:7e:4f:4d:f6:3c:1c:b4:87:78:9d:4e:05: d3:d3:77:b2:01:33:1a:e1:50:47:86:03:53:4b:d4:26:0b:ef: 9e:e1:da:aa:bc:1e:0e:4d:e5:2e:c8:0f:6f:54:4c:ff:89:08: 6b:ea:8a:3b:e7:18:40:a7:45:97:05:f8:a2:89:15:e2:dc:17: 70:75:a7:38:77:41:9a:75:ce:e8:74:09:75:55:69:0c:2c:e3: d6:97:67:ea:8c:34:99:b5:e7:00:73:70:7c:91:17:3e:79:3a: 3b:b9:a6:bf:9a:8d:d6:e6:24:b8:8e:60:71:e6:2b:da:d9:44: 31:cb:d1:9e:fb:49:92:01:ec:04:7a:62:d8:9f:00:47:1f:b5: 62:2a:f7:0b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZFRoSgSL+KZF8W9vEFIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EyhjMmMzMWJkNDM1NjRiMjJlYWMxOTEyYWM4NjJmNGRhZjg2Y2FiYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+EZ+zid5JRrm4NQngk/pksPIDyV 12Eui73xUNhWo89C0343Qx5LD4Dg7TSMzDctzevfvGa9BRtMYxffbbgiuzaeH2u3 TmQmELrYUU2EWyPcqJjmvWM0WgboCr+BGVN4bPGRh5ARgaBC2WECqQ0rACaajikG IsZLFbErmKsnCJudZr1itL6GQ4K1zNrAiW4YHSGBQwdFleHseSpI1NAZursmeRiA A/AQh93QHfIquX+R8cSrO1BoOy0+eiBVMTWO9h/+/hTnHfg2xPeFQbz2K/7kg0bT H8oHxViigfEUrHbGBk71+f3aAhWd0z+xXfGMGMDz+Gqa1A1qT0DD3DJv1QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMLDG9Q1ZLIurBkSrIYvTa+GyryFMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0 YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil9c WF3nM3tD1E3clUTWvdZDgdl6Qcc2scq/t5E3AlxfSIi27qUOhWzLjQWjvLZGc/NO 3SoOnrYifQZzGBO884to7pzQnFB4UhRbun+OCput3jJp3C76szFbzfnQXSjGulO+ 6eN9/UVCFLCj9saMBQ5Gfk9N9jwctId4nU4F09N3sgEzGuFQR4YDU0vUJgvvnuHa qrweDk3lLsgPb1RM/4kIa+qKO+cYQKdFlwX4ookV4twXcHWnOHdBmnXO6HQJdVVp DCzj1pdn6ow0mbXnAHNwfJEXPnk6O7mmv5qN1uYkuI5gceYr2tlEMcvRnvtJkgHs BHpi2J8ARx+1Yir3Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:33 2025 by rpki-client