This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json) Hash identifier: ZEwn6E9SMf+8C6+q00vyWVMR8iun9g9bj8i4J+J8OOc= Subject key identifier: 99:9B:29:5C:7C:0D:89:91:26:31:1C:2B:DB:F8:2F:97:11:E8:98:D1 Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216 Certificate serial: 019AF3C06CAD3D5905577EA9B64105220E43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft Manifest number: 07A1 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: JLSkYt62WUBzVm0N4KH1aCnZaBbZi8uiouuWoPeJwf8=) 2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=) 3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6c:ad:3d:59:05:57:7e:a9:b6:41:05:22:0e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=999b295c7c0d899126311c2bdbf82f9711e898d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:48:a5:7d:5d:cd:90:7c:5b:9c:94:b5:60: 0a:33:eb:a1:79:b6:b3:28:52:b7:61:26:1b:cc:9c: 1c:4a:42:60:d0:90:55:4b:0f:36:ce:ab:17:5d:59: f3:8d:14:d1:00:ed:e3:3d:53:bf:1a:b3:8d:8e:5c: e1:82:50:ae:1e:d3:3f:27:53:f5:ff:45:6a:aa:84: 76:5e:7b:56:38:65:75:47:52:06:93:76:0f:bb:83: be:fc:11:1a:4f:45:03:0f:f8:aa:19:19:a8:2d:d1: b2:a5:07:75:2c:3f:0a:4e:b9:be:62:e1:3c:58:b2: 0f:ad:99:6f:16:fe:2b:8d:33:47:3f:d4:33:62:25: 1b:1c:ce:60:50:58:af:f6:00:0a:30:bb:9b:04:05: b1:85:12:d7:95:33:7f:e5:b3:92:d2:c2:51:be:2a: 8b:59:fc:98:bb:18:95:52:59:9e:4b:6e:31:b6:46: 69:ba:67:62:85:f1:89:9b:21:ee:06:a1:ee:1d:c2: 33:a7:aa:d0:bb:cc:65:1c:5d:1a:b1:e2:76:25:88: ee:8b:76:2e:bf:2c:b6:82:9f:41:da:68:54:26:ef: ed:be:6d:8d:74:e4:44:6a:91:55:65:17:5f:db:42: 8a:24:5d:7f:82:51:cb:ae:47:5f:d3:ff:9f:20:78: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9B:29:5C:7C:0D:89:91:26:31:1C:2B:DB:F8:2F:97:11:E8:98:D1 X509v3 Authority Key Identifier: keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:21:10:d7:a1:e6:a2:94:5a:8e:97:96:4e:36:0e:0d:ed:1b: 92:ed:f6:e4:cd:bd:cc:cd:c0:a5:c1:5f:2c:f2:e5:cf:e7:3b: e4:8a:2d:8d:a3:e6:d1:a0:ae:be:a8:c2:c2:92:f3:1a:c9:9a: 31:4b:b7:22:70:61:ba:40:f6:48:8c:80:45:d4:86:f4:bf:7a: 2b:ad:15:30:c0:a6:e5:1a:10:94:3a:19:8e:b3:17:cf:c5:45: f9:d0:21:87:04:35:cb:92:33:5c:2d:6d:cd:b4:52:2c:58:75: 5e:63:75:52:38:6b:a0:7a:67:60:d2:5e:fe:5c:1d:20:10:a1: 85:7a:77:b2:b5:f4:c3:ae:4e:16:c2:36:23:10:ff:fd:d9:2a: 66:5b:d1:f4:63:bc:8b:48:a2:8f:40:2e:f7:af:b7:51:3f:30: 97:86:c3:a6:15:a6:ae:58:f3:6a:d2:75:6e:c5:d5:7e:20:7c: ae:f2:8a:9f:6d:a6:07:65:5e:a0:51:f9:ff:58:b6:c0:08:16: 9a:8c:1f:4e:e2:af:cd:b1:3a:0a:1b:c1:5f:d8:69:ab:6a:a7: db:d7:2f:12:cd:dd:ac:71:ee:1c:7b:39:a6:32:b8:0c:2b:41: 2d:d2:b3:80:5d:45:d8:9a:81:7c:48:6e:6d:7b:c3:3d:a1:da: 8b:82:02:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGytPVkFV36ptkEFIg5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5 MjcyMTYwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD Eyg5OTliMjk1YzdjMGQ4OTkxMjYzMTFjMmJkYmY4MmY5NzExZTg5OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2lIpX1dzZB8W5yUtWAKM+uhebaz KFK3YSYbzJwcSkJg0JBVSw82zqsXXVnzjRTRAO3jPVO/GrONjlzhglCuHtM/J1P1 /0VqqoR2XntWOGV1R1IGk3YPu4O+/BEaT0UDD/iqGRmoLdGypQd1LD8KTrm+YuE8 WLIPrZlvFv4rjTNHP9QzYiUbHM5gUFiv9gAKMLubBAWxhRLXlTN/5bOS0sJRviqL WfyYuxiVUlmeS24xtkZpumdihfGJmyHuBqHuHcIzp6rQu8xlHF0aseJ2JYjui3Yu vyy2gp9B2mhUJu/tvm2NdOREapFVZRdf20KKJF1/glHLrkdf0/+fIHgqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmbKVx8DYmRJjEcK9v4L5cR6JjRMB8GA1UdIwQY MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0 LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSEQ16Hm opRajpeWTjYODe0bku325M29zM3ApcFfLPLlz+c75IotjaPm0aCuvqjCwpLzGsma MUu3InBhukD2SIyARdSG9L96K60VMMCm5RoQlDoZjrMXz8VF+dAhhwQ1y5IzXC1t zbRSLFh1XmN1UjhroHpnYNJe/lwdIBChhXp3srX0w65OFsI2IxD//dkqZlvR9GO8 i0iij0Au96+3UT8wl4bDphWmrljzatJ1bsXVfiB8rvKKn22mB2VeoFH5/1i2wAgW mowfTuKvzbE6ChvBX9hpq2qn29cvEs3drHHuHHs5pjK4DCtBLdKzgF1F2JqBfEhu bXvDPaHai4ICCw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:16 2025 by rpki-client