This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json) Hash identifier: VMkpctIb3CtjRhRGYzsCl7uECDNeoHM9MpTUF0qCJCc= Subject key identifier: A2:4A:B0:C4:42:C4:65:20:5C:43:70:71:19:75:53:3C:31:7A:77:5D Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019B2EF9579E5437B60F7336100CDABAA086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 01:00:51 +0000 Manifest this update: Thu 18 Dec 2025 01:00:51 +0000 Manifest next update: Fri 19 Dec 2025 01:00:51 +0000 Files and hashes: 1: Jd9KhT8D9dzrmclXzaM2LsTcdvk.roa (hash: Xz0hJFnyzCZED2jN3f6gRmu551al736EIaABcjiPvLQ=) 2: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=) 3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: dHW2+TalmukfHw77umJKMk3Fk0/grpupe46edXisC/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:57:9e:54:37:b6:0f:73:36:10:0c:da:ba:a0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Dec 18 01:00:51 2025 GMT Not After : Dec 19 01:00:51 2025 GMT Subject: CN=a24ab0c442c465205c4370711975533c317a775d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:37:12:63:2e:bc:9f:b7:3f:98:8e:48:c4: d7:14:21:ba:8d:cd:04:32:59:19:ae:1c:a2:43:25: 68:86:da:fb:3e:42:96:f3:f5:f8:e0:65:46:b9:a0: 5c:af:5a:e3:16:6a:9b:04:57:ef:49:6e:aa:03:41: 50:05:a7:49:45:b5:4b:f6:92:3b:14:86:1b:2c:7d: e7:f7:b4:20:51:29:7a:85:42:25:97:63:7e:72:87: 4b:b0:19:80:a5:74:cf:6c:83:90:dd:cc:e6:5f:14: d6:4e:20:36:c4:06:1c:11:e9:dd:0d:78:91:b8:04: f5:09:fa:bb:e6:f1:79:b8:7f:5e:bb:02:2a:cd:97: 85:44:7d:91:01:26:ed:68:a8:4d:ef:15:08:7d:28: 24:0f:28:e6:b1:18:b5:33:29:75:6e:6f:81:b5:fe: d5:7c:e2:5e:97:61:bf:bf:92:95:9e:ec:30:79:a1: db:38:86:d1:05:4c:a4:6f:a3:d2:19:b6:14:18:8b: b2:38:23:67:dc:88:ae:13:18:87:d3:c2:e2:20:c1: 17:89:17:7c:5a:75:de:98:a6:9e:35:53:01:8d:7d: 7b:0a:41:57:d8:fb:80:c1:c5:93:f1:1f:f3:be:e5: 8f:7c:58:14:c4:1b:80:f5:bb:53:c5:12:bd:9d:d9: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:B0:C4:42:C4:65:20:5C:43:70:71:19:75:53:3C:31:7A:77:5D X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:0a:1d:78:56:0d:d6:3e:e2:9d:85:4f:79:eb:e7:87:dd: 27:fe:25:fb:38:aa:78:62:b0:64:00:bb:a8:92:06:8d:10:e3: 15:99:60:76:e0:9a:d6:6d:62:ed:42:9c:df:72:ff:21:ff:62: 1e:8d:fa:75:ac:af:8a:11:aa:b3:7d:9f:cc:b8:7a:ef:da:ca: a6:ff:cc:44:aa:49:42:e3:c2:d5:5f:43:e6:e4:e6:ee:9c:98: f0:80:e8:29:42:6b:b8:9a:bb:3e:5e:b1:5e:e3:7b:27:0e:cd: 98:0a:f1:55:85:4c:bb:5e:da:8b:0b:2a:82:cd:2d:da:53:ad: 23:50:cd:9e:c8:e4:a8:88:e7:e8:20:86:e9:ea:3b:7e:25:24: 46:55:b7:b0:af:44:8a:00:59:9e:8e:b2:41:c9:80:b8:69:f4: b3:5b:6a:bf:8e:ff:97:d1:95:58:00:fc:cb:d5:1f:9c:f9:6d: 96:6f:ed:40:ff:c5:68:22:d8:a4:15:4c:e1:8b:d0:e3:5a:d1: 66:21:18:fb:69:26:f5:78:ab:40:5a:b2:37:0b:36:bb:03:df: a3:5f:45:97:ba:cf:a2:ed:50:39:ef:c3:3c:22:dc:b2:6c:c2: d3:74:a7:f2:81:dc:74:a4:98:05:37:6a:4d:ef:01:fc:69:f0: e1:19:d4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+VeeVDe2D3M2EAzauqCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjUxMjE4MDEwMDUxWhcNMjUxMjE5MDEwMDUxWjAzMTEwLwYDVQQD EyhhMjRhYjBjNDQyYzQ2NTIwNWM0MzcwNzExOTc1NTMzYzMxN2E3NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TE3EmMuvJ+3P5iOSMTXFCG6jc0E MlkZrhyiQyVohtr7PkKW8/X44GVGuaBcr1rjFmqbBFfvSW6qA0FQBadJRbVL9pI7 FIYbLH3n97QgUSl6hUIll2N+codLsBmApXTPbIOQ3czmXxTWTiA2xAYcEendDXiR uAT1Cfq75vF5uH9euwIqzZeFRH2RASbtaKhN7xUIfSgkDyjmsRi1Myl1bm+Btf7V fOJel2G/v5KVnuwweaHbOIbRBUykb6PSGbYUGIuyOCNn3IiuExiH08LiIMEXiRd8 WnXemKaeNVMBjX17CkFX2PuAwcWT8R/zvuWPfFgUxBuA9btTxRK9ndlWPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJKsMRCxGUgXENwcRl1UzwxenddMB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhcKHXhW DdY+4p2FT3nr54fdJ/4l+ziqeGKwZAC7qJIGjRDjFZlgduCa1m1i7UKc33L/If9i Ho36dayvihGqs32fzLh679rKpv/MRKpJQuPC1V9D5uTm7pyY8IDoKUJruJq7Pl6x XuN7Jw7NmArxVYVMu17aiwsqgs0t2lOtI1DNnsjkqIjn6CCG6eo7fiUkRlW3sK9E igBZno6yQcmAuGn0s1tqv47/l9GVWAD8y9UfnPltlm/tQP/FaCLYpBVM4YvQ41rR ZiEY+2km9XirQFqyNws2uwPfo19Fl7rPou1QOe/DPCLcsmzC03Sn8oHcdKSYBTdq Te8B/Gnw4RnU6A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:54 2025 by rpki-client