This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json) Hash identifier: B+UTokVV37pyR1F2DNwEFh0hPWh4DlPHnHARA3U3kSQ= Subject key identifier: 35:EA:83:AC:66:C8:4E:2C:C3:BC:FA:C0:74:A3:E4:1B:03:6C:5B:95 Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Certificate serial: 019AF0BF53293A009FB96645FBC59E1212E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft Manifest number: 04CD Signing time: Fri 05 Dec 2025 23:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:01:01 +0000 Manifest next update: Sat 06 Dec 2025 23:01:01 +0000 Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=) 2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: ZboQO/O0FA+CuKbdTcpZsCFwg3rMvzIibTZhN7/aOcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:53:29:3a:00:9f:b9:66:45:fb:c5:9e:12:12:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Validity Not Before: Dec 5 23:01:01 2025 GMT Not After : Dec 6 23:01:01 2025 GMT Subject: CN=35ea83ac66c84e2cc3bcfac074a3e41b036c5b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:3c:f1:8c:2a:82:0c:21:17:86:0e:2f:1f: 3b:1a:d0:9a:32:cd:5d:5e:4f:98:a0:de:c1:1f:5b: 36:2a:bc:cb:2e:13:c9:09:97:73:6a:e9:b5:c8:0c: 46:07:41:dc:34:88:45:b8:f7:de:4b:39:1e:8c:48: a3:28:3d:f1:94:36:c5:e8:09:02:93:94:f2:51:32: 7a:01:ed:3f:9c:a9:0d:88:47:b1:f4:ed:c8:fa:6b: df:57:cc:51:c7:77:ab:c1:54:a0:62:d8:0f:3e:83: 9b:94:28:5f:9b:01:09:2f:9a:3b:50:33:78:cc:8a: e9:d6:c0:c9:51:ef:d7:ba:2a:f7:13:f5:09:c8:63: 06:1d:11:b5:b9:50:fd:7e:4f:96:a0:81:dd:bc:fe: 97:41:4d:81:91:be:b7:7f:38:32:0f:f2:60:98:ad: b9:dc:73:c8:ab:07:33:22:a4:32:8e:99:64:7e:b3: 98:c4:aa:8c:e8:7c:21:a7:d7:15:dc:c6:91:0a:d0: 20:50:ea:55:08:27:3b:e4:70:12:17:4a:82:b5:a2: a1:97:d2:73:31:84:be:ba:2d:8a:0e:af:8b:74:3e: 7e:f9:11:73:5e:1d:be:6f:eb:9d:b4:62:2b:47:65: 04:fc:08:e5:b2:0d:f6:ed:ba:b2:51:34:b1:c7:37: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EA:83:AC:66:C8:4E:2C:C3:BC:FA:C0:74:A3:E4:1B:03:6C:5B:95 X509v3 Authority Key Identifier: keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d5:c2:86:e1:56:f5:19:ea:1f:a1:8b:d1:22:f1:89:43:81: cd:0b:d0:39:0b:79:84:85:29:da:3b:38:b5:2a:22:4a:17:e8: b5:6b:06:fe:00:55:f8:37:3a:b8:b7:59:38:47:30:a4:33:b6: 00:85:54:85:b7:36:19:e4:5a:66:40:65:18:2d:14:8b:a3:62: 8f:23:cd:f8:b5:81:6e:45:15:2e:f4:1d:6f:e5:96:03:3c:73: 41:e4:5b:0f:3d:35:23:f7:2e:55:b7:a6:25:ed:c3:3b:1e:5a: 9e:49:a2:6e:b8:a9:c0:d0:73:ee:29:2e:2e:49:19:ea:9a:0e: f0:c8:d0:35:6e:99:41:eb:34:fc:21:08:ca:c9:8c:93:75:b6: 2e:27:93:b5:72:39:52:be:85:4a:81:59:83:8f:de:81:d7:aa: 58:ea:a0:b7:c6:5e:c1:21:e1:7c:5c:16:da:e9:85:de:37:54: 7c:e2:16:30:2f:68:99:82:cb:28:b7:ae:6a:47:df:4d:22:34: 10:0d:d2:42:63:fe:0e:5e:25:c6:8b:84:25:fa:65:c5:e1:34: b9:fd:f3:58:23:3a:99:36:55:58:9c:b2:72:49:d0:c2:e1:15: b6:6f:89:a1:14:b8:ae:36:bb:13:f6:ab:66:cb:af:2a:af:2c: b8:dd:02:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1MpOgCfuWZF+8WeEhLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTUxNDhiMzk5YjUzYmE1MmZkNjhlYWJkYmRmNmFkOTlj YzcxZjQwHhcNMjUxMjA1MjMwMTAxWhcNMjUxMjA2MjMwMTAxWjAzMTEwLwYDVQQD EygzNWVhODNhYzY2Yzg0ZTJjYzNiY2ZhYzA3NGEzZTQxYjAzNmM1Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeE88YwqggwhF4YOLx87GtCaMs1d Xk+YoN7BH1s2KrzLLhPJCZdzaum1yAxGB0HcNIhFuPfeSzkejEijKD3xlDbF6AkC k5TyUTJ6Ae0/nKkNiEex9O3I+mvfV8xRx3erwVSgYtgPPoOblChfmwEJL5o7UDN4 zIrp1sDJUe/Xuir3E/UJyGMGHRG1uVD9fk+WoIHdvP6XQU2Bkb63fzgyD/JgmK25 3HPIqwczIqQyjplkfrOYxKqM6Hwhp9cV3MaRCtAgUOpVCCc75HASF0qCtaKhl9Jz MYS+ui2KDq+LdD5++RFzXh2+b+udtGIrR2UE/Ajlsg327bqyUTSxxzdrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXqg6xmyE4sw7z6wHSj5BsDbFuVMB8GA1UdIwQY MBaAFKjlFIs5m1O6Uv1o6r299q2ZzHH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQt ZTczNDk5M2YxMWFjLzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQtZTczNDk5M2YxMWFj LzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtXChuFW 9RnqH6GL0SLxiUOBzQvQOQt5hIUp2js4tSoiShfotWsG/gBV+Dc6uLdZOEcwpDO2 AIVUhbc2GeRaZkBlGC0Ui6NijyPN+LWBbkUVLvQdb+WWAzxzQeRbDz01I/cuVbem Je3DOx5ankmibripwNBz7ikuLkkZ6poO8MjQNW6ZQes0/CEIysmMk3W2LieTtXI5 Ur6FSoFZg4/egdeqWOqgt8ZewSHhfFwW2umF3jdUfOIWMC9omYLLKLeuakffTSI0 EA3SQmP+Dl4lxouEJfplxeE0uf3zWCM6mTZVWJyycknQwuEVtm+JoRS4rja7E/ar ZsuvKq8suN0CAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:22 2025 by rpki-client