This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json) Hash identifier: fxXf5ran+2Zl/grYYjhtoWC23QhMBRY0bnwu7WEg7Wc= Subject key identifier: 6E:A9:9E:3F:D1:E0:B1:90:F3:A1:73:B6:BC:23:11:8C:59:13:ED:57 Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16 Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716 Certificate serial: 019AF5783B88310914649EDDB7B15286ADA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:01:28 +0000 Manifest this update: Sat 06 Dec 2025 21:01:28 +0000 Manifest next update: Sun 07 Dec 2025 21:01:28 +0000 Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=) 2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: uwAHoCvylPmB22GVPKxoPlmbHJnet5ztJUJB0DQOVTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:3b:88:31:09:14:64:9e:dd:b7:b1:52:86:ad:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716 Validity Not Before: Dec 6 21:01:28 2025 GMT Not After : Dec 7 21:01:28 2025 GMT Subject: CN=6ea99e3fd1e0b190f3a173b6bc23118c5913ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:0d:3b:0e:7c:dc:b3:c8:10:fc:2a:23:55: 4a:92:e6:49:46:90:1f:81:f6:6b:02:86:76:c9:9f: 1d:5a:40:fc:ec:45:25:2a:75:6c:47:6b:aa:50:8a: 34:d2:35:1f:ec:b1:c2:28:ad:23:09:06:4b:dc:04: 4f:2b:7b:d7:a2:2a:5e:93:9b:f5:76:55:79:a8:76: 44:97:44:ca:cc:67:1e:d4:af:c5:2a:dc:0e:e9:b1: 89:5f:a1:72:73:a0:04:4d:d4:16:fa:2a:99:b1:b7: 8e:2a:ef:bd:9e:52:5e:68:7c:75:ba:50:81:97:70: 20:02:b2:fd:8d:af:97:19:78:98:4f:75:60:ef:c1: df:15:eb:fa:ea:f1:92:06:e1:ff:d9:4f:db:75:54: 7f:95:98:ad:ff:52:dd:74:13:d4:fb:03:3a:c4:c0: d4:b9:f7:4c:28:a8:1a:48:9c:42:81:0a:e8:8e:4f: 71:f8:32:18:0a:e4:03:00:11:e9:4f:a2:9f:a4:f1: fe:6c:a5:76:13:ea:18:06:9c:64:53:a2:88:6d:77: 6e:43:2b:51:a3:5b:d9:48:07:e0:6e:bf:59:3b:ed: 8b:12:21:b7:cf:9e:c6:00:91:97:5c:db:68:eb:4f: 38:83:a0:9e:67:7f:47:b7:a4:a6:2a:5b:8a:d0:f7: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A9:9E:3F:D1:E0:B1:90:F3:A1:73:B6:BC:23:11:8C:59:13:ED:57 X509v3 Authority Key Identifier: keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d9:8f:de:92:07:43:11:bf:a5:c2:2c:b7:90:37:c9:69:ec: c1:52:9c:6b:3b:f2:66:6f:ff:b8:ca:7e:be:f4:5f:fd:e5:98: b7:3c:78:69:42:84:6d:62:6c:96:7d:57:74:02:1d:25:c2:98: f0:dc:8b:97:dc:74:2e:39:50:b3:4a:ee:f8:e9:af:73:c4:58: ce:83:55:05:b1:b0:e1:b8:c2:be:fc:ab:d9:07:3a:ea:e4:d9: cb:ca:48:00:a1:26:c1:b9:c8:8f:83:c1:63:06:e2:b7:c7:2c: b1:5e:6e:aa:68:02:df:6b:18:57:14:ca:2f:ce:c9:46:09:9e: fe:ba:03:fd:dc:33:63:61:de:1d:4c:b7:17:1a:c4:21:89:d3: 33:b5:b8:a1:bc:77:03:66:3f:7f:f9:dd:91:34:24:e0:04:31: 1d:c8:03:26:1a:e1:c7:57:db:74:e2:41:5e:64:b1:e0:22:e8: e0:17:8b:5e:8f:b0:19:a1:dc:d8:8d:90:dc:25:21:3c:ed:b3: d6:66:66:2a:11:0d:92:13:21:76:25:71:0c:89:9d:1c:7d:49: e4:24:33:d3:2c:42:7e:8a:c8:a1:ec:ea:e3:8b:f8:46:2c:c4: fe:1a:ea:7e:8e:1f:29:cb:2c:f6:38:7e:c5:a3:37:11:92:1e: 6b:39:f0:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eDuIMQkUZJ7dt7FShq2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZkMWEzYTAyNThkY2NhNjdmYzlkZGRiZjRlMzYxNTdl NmE3MTYwHhcNMjUxMjA2MjEwMTI4WhcNMjUxMjA3MjEwMTI4WjAzMTEwLwYDVQQD Eyg2ZWE5OWUzZmQxZTBiMTkwZjNhMTczYjZiYzIzMTE4YzU5MTNlZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvoNOw583LPIEPwqI1VKkuZJRpAf gfZrAoZ2yZ8dWkD87EUlKnVsR2uqUIo00jUf7LHCKK0jCQZL3ARPK3vXoipek5v1 dlV5qHZEl0TKzGce1K/FKtwO6bGJX6Fyc6AETdQW+iqZsbeOKu+9nlJeaHx1ulCB l3AgArL9ja+XGXiYT3Vg78HfFev66vGSBuH/2U/bdVR/lZit/1LddBPU+wM6xMDU ufdMKKgaSJxCgQrojk9x+DIYCuQDABHpT6KfpPH+bKV2E+oYBpxkU6KIbXduQytR o1vZSAfgbr9ZO+2LEiG3z57GAJGXXNto6084g6CeZ39Ht6SmKluK0PfYkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6pnj/R4LGQ86FztrwjEYxZE+1XMB8GA1UdIwQY MBaAFEJP0aOgJY3Mpn/J3dv042FX5qcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2Njct NzQ3YjBlNTdhYjVlLzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2NjctNzQ3YjBlNTdhYjVl LzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9mP3pIH QxG/pcIst5A3yWnswVKcazvyZm//uMp+vvRf/eWYtzx4aUKEbWJsln1XdAIdJcKY 8NyLl9x0LjlQs0ru+Omvc8RYzoNVBbGw4bjCvvyr2Qc66uTZy8pIAKEmwbnIj4PB Ywbit8cssV5uqmgC32sYVxTKL87JRgme/roD/dwzY2HeHUy3FxrEIYnTM7W4obx3 A2Y/f/ndkTQk4AQxHcgDJhrhx1fbdOJBXmSx4CLo4BeLXo+wGaHc2I2Q3CUhPO2z 1mZmKhENkhMhdiVxDImdHH1J5CQz0yxCforIoezq44v4RizE/hrqfo4fKcss9jh+ xaM3EZIeaznwbg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:23 2025 by rpki-client