This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json) Hash identifier: FVlzhCiPIi6Hld+6SouK3TVFB3dTmuZvoz8J1kZ9gkU= Subject key identifier: 8B:7E:CC:2C:22:7E:80:AE:D6:AB:5A:D2:19:83:86:19:88:88:01:52 Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249 Certificate serial: 019AF12DA2757F567F3BA6B47BDE7B404DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft Manifest number: 14AC Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=) 2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: R2tYurxHAZS61Gb4Fdneushm9ObBoOCo5mrPlXAYNPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a2:75:7f:56:7f:3b:a6:b4:7b:de:7b:40:4d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=8b7ecc2c227e80aed6ab5ad21983861988880152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:09:ef:f2:ce:47:93:df:7b:fb:f9:fc:b8: 87:0f:53:e4:71:01:7d:a1:a9:56:4c:66:b0:d2:52: 06:78:72:62:21:ac:47:47:6a:ab:ac:0c:4e:16:19: 11:72:b1:55:17:a7:04:32:26:d3:4b:65:7d:c2:4b: c3:ca:6b:36:ed:89:9f:43:68:3a:3e:09:f9:48:18: 25:6b:54:2d:89:a5:0c:3c:99:dd:30:e4:08:ce:03: 84:61:00:9b:bf:62:d4:8e:b4:2b:a4:a2:fe:98:21: 94:2d:e7:7c:08:f0:cf:3b:3b:93:6c:1e:a2:97:fa: 14:99:3b:d5:f7:09:dc:95:30:92:4e:45:8a:e9:c0: ac:fb:ba:e8:4c:30:da:69:5d:a6:76:f1:b2:5d:0a: bf:05:5b:ba:bb:78:c5:cd:61:19:d7:b2:26:d7:05: ce:61:0e:71:6c:ad:b9:77:fa:cf:1f:a2:e1:be:40: f1:7c:ae:eb:cb:23:50:34:d0:cf:29:9f:da:8f:8b: b6:21:1d:31:cb:62:f8:39:4d:db:57:31:3c:ae:3e: a8:65:ac:b4:3a:87:6c:55:17:37:52:65:41:61:f8: 23:07:ac:17:b0:9b:ba:3e:67:1a:d7:22:e4:cc:ea: 00:53:29:ea:37:64:ff:c6:30:75:24:8d:55:ff:0b: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:CC:2C:22:7E:80:AE:D6:AB:5A:D2:19:83:86:19:88:88:01:52 X509v3 Authority Key Identifier: keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e8:41:8c:ae:09:d6:a0:75:13:f9:9f:76:42:04:f1:f4:08: 65:3b:cb:f5:66:f3:c3:06:cc:2e:48:c6:c8:fe:36:87:4a:ae: e3:41:85:8c:90:06:af:63:96:bd:82:5b:83:82:fe:9b:91:e6: f9:ab:05:8c:9b:d2:12:86:29:60:75:29:9b:ba:fa:7e:89:23: 6c:d2:40:58:bd:d2:7b:6e:13:cc:55:c1:45:66:0e:98:81:9a: cc:89:4e:ce:51:83:b8:fb:61:bc:03:41:5b:59:f0:ac:f3:7a: 15:9b:18:9f:02:a1:6e:13:19:21:5c:91:d8:a0:37:42:61:4f: a1:2f:6a:b7:97:dc:98:f0:10:4f:74:56:87:ac:b6:7e:49:9e: 45:2b:a0:50:79:82:f1:47:ae:c1:56:00:30:25:2d:b9:48:2a: c0:f4:94:14:c0:c2:c3:df:7a:bd:94:b7:42:5f:93:c7:cf:64: 4a:65:8d:bd:09:3a:bf:4f:9a:29:b4:60:2c:39:9f:69:b4:29: 11:2d:80:f0:e9:75:b0:af:65:37:9e:03:04:fb:b6:e7:9b:67: 25:de:f1:ce:09:ed:81:6c:3e:e8:30:d0:0d:d3:e5:17:c3:6d: 05:3e:47:00:59:79:1c:37:1a:78:69:db:06:ef:68:ed:bc:a1: 6c:63:dc:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaJ1f1Z/O6a0e957QE3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1 YmQyNDkwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD Eyg4YjdlY2MyYzIyN2U4MGFlZDZhYjVhZDIxOTgzODYxOTg4ODgwMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseYJ7/LOR5Pfe/v5/LiHD1PkcQF9 oalWTGaw0lIGeHJiIaxHR2qrrAxOFhkRcrFVF6cEMibTS2V9wkvDyms27YmfQ2g6 Pgn5SBgla1QtiaUMPJndMOQIzgOEYQCbv2LUjrQrpKL+mCGULed8CPDPOzuTbB6i l/oUmTvV9wnclTCSTkWK6cCs+7roTDDaaV2mdvGyXQq/BVu6u3jFzWEZ17Im1wXO YQ5xbK25d/rPH6LhvkDxfK7ryyNQNNDPKZ/aj4u2IR0xy2L4OU3bVzE8rj6oZay0 OodsVRc3UmVBYfgjB6wXsJu6Pmca1yLkzOoAUynqN2T/xjB1JI1V/wsdzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt+zCwifoCu1qta0hmDhhmIiAFSMB8GA1UdIwQY MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOhBjK4J 1qB1E/mfdkIE8fQIZTvL9WbzwwbMLkjGyP42h0qu40GFjJAGr2OWvYJbg4L+m5Hm +asFjJvSEoYpYHUpm7r6fokjbNJAWL3Se24TzFXBRWYOmIGazIlOzlGDuPthvANB W1nwrPN6FZsYnwKhbhMZIVyR2KA3QmFPoS9qt5fcmPAQT3RWh6y2fkmeRSugUHmC 8UeuwVYAMCUtuUgqwPSUFMDCw996vZS3Ql+Tx89kSmWNvQk6v0+aKbRgLDmfabQp ES2A8Ol1sK9lN54DBPu255tnJd7xzgntgWw+6DDQDdPlF8NtBT5HAFl5HDcaeGnb Bu9o7byhbGPc6g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:31 2025 by rpki-client