This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json) Hash identifier: 1pkO1MBcUyqScayFHjzQeL90sowbCizvDavkfUP+4mk= Subject key identifier: 55:F5:6A:79:D7:44:D7:07:31:8A:BC:3F:A2:1A:DA:A0:89:07:79:B0 Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Certificate serial: 019AF3C0C0752AFEF890A4DBC850A9F0CA2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft Manifest number: 12A6 Signing time: Sat 06 Dec 2025 13:01:26 +0000 Manifest this update: Sat 06 Dec 2025 13:01:26 +0000 Manifest next update: Sun 07 Dec 2025 13:01:26 +0000 Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=) 2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: 1jRdykQlYxP7co9G+AcuEeTOUyQLdYiIbVcLGTxKQAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:c0:75:2a:fe:f8:90:a4:db:c8:50:a9:f0:ca:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Validity Not Before: Dec 6 13:01:26 2025 GMT Not After : Dec 7 13:01:26 2025 GMT Subject: CN=55f56a79d744d707318abc3fa21adaa0890779b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:78:eb:f8:d5:67:78:b8:53:a3:6a:2f:17: ae:4a:47:69:1b:72:84:29:ec:9d:10:00:a0:af:0f: 61:fb:54:dc:1d:34:97:94:00:96:b7:22:19:6c:9a: 06:ee:c9:78:33:94:10:f3:82:ea:1a:be:80:49:71: 59:8a:6a:0f:8f:02:b2:b2:78:18:b8:e8:cf:47:8a: 06:ff:e7:7d:7b:33:43:8c:18:bc:3f:c6:4f:0b:1d: 29:b8:4b:a3:53:4a:90:d8:35:ca:e4:1b:59:41:19: dd:56:b0:c0:10:38:d0:22:9a:99:ed:7d:ae:48:ba: cc:b3:be:50:49:78:33:dc:45:45:0c:67:bd:4e:06: c6:37:24:f2:76:52:25:b8:25:be:74:4c:86:89:1b: 20:00:d1:c8:c0:3c:61:70:76:e3:40:10:3c:6e:b1: 91:ac:7c:55:84:82:00:ab:8c:d4:b3:ac:1f:78:64: 3a:f2:18:6e:7b:08:fa:88:bc:9e:64:58:74:4d:ef: 3b:3e:72:a9:1d:69:43:2c:2b:a3:c0:d4:f9:7a:03: 6f:32:fe:27:5d:85:d9:53:41:3f:c3:02:d7:d0:84: f6:56:98:44:65:96:9e:cf:6d:f8:d4:28:42:26:6a: be:cd:b9:18:4d:66:e1:60:40:d5:86:01:26:33:40: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:6A:79:D7:44:D7:07:31:8A:BC:3F:A2:1A:DA:A0:89:07:79:B0 X509v3 Authority Key Identifier: keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c1:d8:2d:3d:b8:3d:bf:7b:86:27:45:13:d8:88:97:ba:f3: cc:45:19:1a:19:ff:69:90:f2:fc:29:22:4c:2a:6f:2e:0f:dd: bd:54:8e:7e:27:a0:d5:21:c9:e1:b7:6c:31:ed:9d:20:91:a0: f1:b7:2f:28:52:c5:cc:08:ed:44:3e:24:b9:6b:18:0c:d2:8b: bd:f2:9d:b4:f9:72:04:31:3d:b2:54:6f:d5:41:03:59:7f:ad: 92:36:11:73:11:f6:a5:16:94:dd:c3:0a:3c:02:b1:02:e4:28: d0:ce:1e:94:b1:f6:75:82:91:0b:8d:e0:11:14:81:3d:02:9c: ff:47:1d:02:af:20:b5:8b:f6:cc:02:c7:2c:09:f9:3f:a8:c1: cf:7b:a9:28:83:f3:af:b1:43:be:25:ca:e3:92:02:ea:9f:cd: 9f:98:93:dd:db:ed:6a:26:96:ad:0e:58:38:39:d0:83:fe:be: a3:ef:5c:a2:37:22:db:12:e1:31:a0:2a:66:ed:b9:72:d7:ec: ab:92:e4:b4:99:d2:5b:b8:e0:44:24:1e:73:1d:25:f5:57:bd: 34:cc:f5:00:33:86:b6:45:f0:8a:19:b5:1b:a9:d5:33:7a:53: 89:19:e9:42:41:03:f0:eb:cc:93:03:a5:4b:82:81:55:62:7d: 2e:66:c0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMB1Kv74kKTbyFCp8MouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDBkMDZlMmE2OWEzNjY0YjZhYmNmZTIyYmQyZDA2YjUz MzY1NjQwHhcNMjUxMjA2MTMwMTI2WhcNMjUxMjA3MTMwMTI2WjAzMTEwLwYDVQQD Eyg1NWY1NmE3OWQ3NDRkNzA3MzE4YWJjM2ZhMjFhZGFhMDg5MDc3OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqid46/jVZ3i4U6NqLxeuSkdpG3KE KeydEACgrw9h+1TcHTSXlACWtyIZbJoG7sl4M5QQ84LqGr6ASXFZimoPjwKysngY uOjPR4oG/+d9ezNDjBi8P8ZPCx0puEujU0qQ2DXK5BtZQRndVrDAEDjQIpqZ7X2u SLrMs75QSXgz3EVFDGe9TgbGNyTydlIluCW+dEyGiRsgANHIwDxhcHbjQBA8brGR rHxVhIIAq4zUs6wfeGQ68hhuewj6iLyeZFh0Te87PnKpHWlDLCujwNT5egNvMv4n XYXZU0E/wwLX0IT2VphEZZaez2341ChCJmq+zbkYTWbhYEDVhgEmM0Ba6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX1annXRNcHMYq8P6Ia2qCJB3mwMB8GA1UdIwQY MBaAFEMA0G4qaaNmS2q8/iK9LQa1M2VkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYt MjkwYTNmYzRiYjYwLzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYtMjkwYTNmYzRiYjYw LzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcHYLT24 Pb97hidFE9iIl7rzzEUZGhn/aZDy/CkiTCpvLg/dvVSOfieg1SHJ4bdsMe2dIJGg 8bcvKFLFzAjtRD4kuWsYDNKLvfKdtPlyBDE9slRv1UEDWX+tkjYRcxH2pRaU3cMK PAKxAuQo0M4elLH2dYKRC43gERSBPQKc/0cdAq8gtYv2zALHLAn5P6jBz3upKIPz r7FDviXK45IC6p/Nn5iT3dvtaiaWrQ5YODnQg/6+o+9cojci2xLhMaAqZu25ctfs q5LktJnSW7jgRCQecx0l9Ve9NMz1ADOGtkXwihm1G6nVM3pTiRnpQkED8OvMkwOl S4KBVWJ9LmbA4w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:11:46 2025 by rpki-client