This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json) Hash identifier: 8br+HXz762XV30BVBBPPZHq/W1q20LCMKUgRiy7/PLU= Subject key identifier: CD:16:A8:C0:E6:9F:FE:07:14:9D:54:9F:F3:E8:C6:19:FF:15:5C:3B Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Certificate serial: 019AF42DCB52556FF95B82DA8EB40A212D76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft Manifest number: 1693 Signing time: Sat 06 Dec 2025 15:00:33 +0000 Manifest this update: Sat 06 Dec 2025 15:00:33 +0000 Manifest next update: Sun 07 Dec 2025 15:00:33 +0000 Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: SG9VUch/xodF9U22XcQcbHglNeiqeNHlpj7YcZicSV0=) 2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:cb:52:55:6f:f9:5b:82:da:8e:b4:0a:21:2d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Validity Not Before: Dec 6 15:00:33 2025 GMT Not After : Dec 7 15:00:33 2025 GMT Subject: CN=cd16a8c0e69ffe07149d549ff3e8c619ff155c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:1c:6d:26:47:3e:e0:81:6b:70:55:4f:7d: 54:97:68:3c:b9:f2:eb:96:1d:3c:8c:93:e1:37:9b: 90:7d:81:a7:10:45:8e:3c:66:bf:97:cb:a8:fe:1c: de:a2:73:b8:80:99:c7:b0:5a:a5:1c:a8:6e:52:ea: 67:20:40:5b:33:e9:72:40:ee:af:89:b4:9e:db:f4: 34:25:86:74:dd:bf:a1:dd:a5:53:a3:a2:84:8a:08: e7:6a:70:58:78:54:25:3b:5d:32:6e:02:2c:75:75: ff:ed:4d:f8:f4:cd:23:ad:17:c8:2a:00:da:b4:96: ea:49:19:40:56:a5:b5:c1:a4:3a:2c:56:c8:07:98: 84:c0:14:6d:bd:aa:50:23:6f:e9:60:44:72:32:b7: fd:0b:fc:4d:ef:0e:39:a2:6a:0d:9e:9b:32:45:30: ac:64:df:fc:22:42:b4:fa:30:68:16:5e:53:c0:cb: cd:b0:bf:32:2f:a8:ea:5d:b6:7b:3b:3f:d5:95:e1: 43:d5:bc:69:91:bb:a7:c0:d7:52:49:73:9b:cf:46: 1a:ae:47:43:49:8a:fc:16:75:ca:af:93:c1:47:6b: 91:78:dc:11:c6:c8:ff:f1:2e:1b:61:9c:ce:42:49: 79:a9:e8:f2:13:d0:b6:d4:a0:96:56:6b:35:27:14: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:16:A8:C0:E6:9F:FE:07:14:9D:54:9F:F3:E8:C6:19:FF:15:5C:3B X509v3 Authority Key Identifier: keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ce:d6:6e:29:5c:ab:2b:c7:f4:04:04:99:d0:be:28:32:5f: 62:9f:5c:64:98:5a:61:41:f7:9e:03:ba:20:cd:b2:d7:48:1d: 91:dc:4d:71:c6:43:d3:a4:8a:a4:9f:eb:c9:1a:88:a7:c5:c5: c7:e7:25:12:8c:41:82:2c:cf:ca:52:8c:fb:67:21:23:73:b7: 99:13:d1:90:f9:cb:52:e6:b7:31:3b:9d:76:68:b8:4f:16:80: 09:ba:59:d1:02:84:34:1b:2b:f9:40:b0:4c:97:d7:91:98:62: e5:2c:89:20:2f:03:6e:22:34:16:07:42:35:20:c2:9f:52:b8: c5:fc:6c:20:eb:b2:1f:1b:b2:d5:31:7f:58:89:af:c9:a7:f2: e4:ad:aa:cf:18:01:ac:21:35:7e:43:a6:17:db:46:9c:58:ab: 6d:a4:3a:cd:ea:e3:27:f8:26:85:f2:75:52:f0:08:db:9b:1f: 0b:80:c1:62:68:b3:6a:fd:80:4a:b0:8d:a6:2b:dd:72:6b:2b: d6:a2:7b:f9:0d:a2:43:80:19:7d:f4:b3:45:5e:bc:e1:40:89: 79:1e:6a:26:e8:c7:26:ab:8c:5b:a7:d8:e1:1c:44:f4:49:74: d9:b8:9f:30:27:b8:07:a3:9c:71:09:a8:37:cf:e1:77:ff:05: 6a:38:f0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LctSVW/5W4LajrQKIS12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2 YjgyNGUwHhcNMjUxMjA2MTUwMDMzWhcNMjUxMjA3MTUwMDMzWjAzMTEwLwYDVQQD EyhjZDE2YThjMGU2OWZmZTA3MTQ5ZDU0OWZmM2U4YzYxOWZmMTU1YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRwcbSZHPuCBa3BVT31Ul2g8ufLr lh08jJPhN5uQfYGnEEWOPGa/l8uo/hzeonO4gJnHsFqlHKhuUupnIEBbM+lyQO6v ibSe2/Q0JYZ03b+h3aVTo6KEigjnanBYeFQlO10ybgIsdXX/7U349M0jrRfIKgDa tJbqSRlAVqW1waQ6LFbIB5iEwBRtvapQI2/pYERyMrf9C/xN7w45omoNnpsyRTCs ZN/8IkK0+jBoFl5TwMvNsL8yL6jqXbZ7Oz/VleFD1bxpkbunwNdSSXObz0YarkdD SYr8FnXKr5PBR2uReNwRxsj/8S4bYZzOQkl5qejyE9C21KCWVms1JxQBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0WqMDmn/4HFJ1Un/Poxhn/FVw7MB8GA1UdIwQY MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0s7Wbilc qyvH9AQEmdC+KDJfYp9cZJhaYUH3ngO6IM2y10gdkdxNccZD06SKpJ/ryRqIp8XF x+clEoxBgizPylKM+2chI3O3mRPRkPnLUua3MTuddmi4TxaACbpZ0QKENBsr+UCw TJfXkZhi5SyJIC8DbiI0FgdCNSDCn1K4xfxsIOuyHxuy1TF/WImvyafy5K2qzxgB rCE1fkOmF9tGnFirbaQ6zerjJ/gmhfJ1UvAI25sfC4DBYmizav2ASrCNpivdcmsr 1qJ7+Q2iQ4AZffSzRV684UCJeR5qJujHJquMW6fY4RxE9El02bifMCe4B6OccQmo N8/hd/8Fajjw2A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:46 2025 by rpki-client