This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: f4R/IGzWwcjc/a048mDql1a9SoRaHJhozBFugwNQuRM=
Subject key identifier: 5B:46:6C:FB:8C:FA:A4:A6:6C:01:B8:7B:31:03:0C:5D:33:91:86:1F
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019AF12D8A4F315A9C3240B81B7AB711EDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 1457
Signing time: Sat 06 Dec 2025 01:01:24 +0000
Manifest this update: Sat 06 Dec 2025 01:01:24 +0000
Manifest next update: Sun 07 Dec 2025 01:01:24 +0000
Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=)
2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=)
3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=)
4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: mrEAvGeSj9WU/PnUp9fJ25Dc0OobQmakWQZ+ZijFOe0=)
5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=)
6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=)
7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=)
8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=)
9: pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa (hash: DrEWgUVj7gCBwHBTYVQ96Bg2DTFMTX1DlgA0NmJXb+E=)
10: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:8a:4f:31:5a:9c:32:40:b8:1b:7a:b7:11:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Dec 6 01:01:24 2025 GMT
Not After : Dec 7 01:01:24 2025 GMT
Subject: CN=5b466cfb8cfaa4a66c01b87b31030c5d3391861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:38:f0:b1:eb:f2:97:e3:d9:94:d1:89:1c:
f5:5b:13:eb:ff:70:27:a8:9a:45:67:d0:ec:b1:aa:
84:b4:2b:97:50:28:aa:ab:46:80:49:41:49:2a:f6:
56:40:1a:ea:54:de:16:16:10:97:90:b8:5a:2c:38:
ed:b6:04:c7:bc:ad:74:73:19:68:47:6a:9f:2b:d5:
f4:7b:6f:c1:bb:4e:d2:ef:21:91:3b:18:2d:a4:19:
0b:2c:ba:cb:f4:22:8b:a7:92:bb:e2:2a:17:00:1b:
f9:59:be:c1:41:7d:66:2f:af:7e:87:a3:05:55:55:
3c:2a:06:35:8e:29:14:7a:25:f7:86:6f:5c:a7:4b:
26:88:b9:23:a2:95:04:dc:fb:b6:79:ce:d4:01:be:
f8:47:73:d5:31:15:1e:da:62:2c:e7:81:3d:ad:55:
e4:23:e1:84:e8:fb:c3:45:33:b3:ca:6f:53:c3:39:
ad:88:82:ee:55:40:c6:fc:7e:74:a0:f8:87:4a:4d:
0e:51:b9:40:88:87:34:32:3f:57:d7:c2:16:1a:c3:
51:f8:0d:52:c1:76:e8:66:fc:36:3b:f2:43:e0:d7:
0e:1a:2e:52:60:9e:ce:c7:47:c0:2a:ac:62:ef:ef:
c2:65:ec:d1:37:29:55:4d:dd:91:38:59:a4:57:d3:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:6C:FB:8C:FA:A4:A6:6C:01:B8:7B:31:03:0C:5D:33:91:86:1F
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:03:3c:a7:8f:5c:f1:00:bc:70:20:c2:a0:a8:30:51:71:ea:
b4:c6:97:ed:90:98:c2:84:8e:84:1f:40:0d:1d:64:a7:f9:a0:
39:bf:2b:34:0b:2f:67:be:1d:45:06:b6:69:08:2d:a1:f7:85:
63:cb:d8:71:9f:a1:a1:14:45:83:56:c5:ff:66:00:01:de:33:
89:75:4d:92:d7:ec:7e:49:36:b0:a2:15:aa:6b:59:cc:85:fa:
a9:90:a8:04:14:7a:5b:d7:5d:47:2d:ca:ab:a6:b6:01:db:49:
a8:23:d4:72:42:63:20:71:1a:33:2a:53:35:3b:de:5d:83:b8:
f5:e2:e7:89:49:6a:1d:ff:e2:67:59:d8:6f:89:90:0b:b7:00:
6a:a7:22:de:d5:70:3c:10:9a:ee:6e:2e:05:8d:4f:e2:8b:39:
c9:68:69:6b:17:7c:cd:66:61:74:b5:21:c7:e0:b9:eb:0f:eb:
31:a9:a9:a8:23:dd:0c:57:05:cd:1f:93:40:d1:31:0f:6c:ea:
00:a4:85:98:ed:8e:36:36:33:c3:ed:ba:19:2a:7d:9e:96:6d:
8b:65:e9:d7:bb:41:10:cd:89:b6:10:d8:3d:df:d2:49:49:e4:
22:10:bd:6e:25:b7:dc:b1:e2:6e:24:a7:6f:59:b7:c9:90:2f:
c9:af:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:06:49 2025 by rpki-client