This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json) Hash identifier: cNA1Y2hBOkAdYyFrX+7jRfZBnJk7iSC5LJHiZDZYfec= Subject key identifier: 46:84:DC:3E:2F:3D:49:F6:C7:95:71:03:71:29:F2:41:A0:0C:A5:D7 Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256 Certificate serial: 019AF19BB4CDEB71B0246FEC53E7C8FFF79D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft Manifest number: 0A2F Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=) 2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: wrPLOnV3iGP/wrUF8oMusVyzH71QOSpPpNpLti9/KIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b4:cd:eb:71:b0:24:6f:ec:53:e7:c8:ff:f7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=4684dc3e2f3d49f6c79571037129f241a00ca5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:a1:3b:fc:6d:90:5d:8f:7a:59:76:d9:40: f6:0a:b2:a8:72:62:7f:bd:cd:95:37:06:ce:91:56: 91:6a:aa:21:37:34:8c:8c:b0:08:27:11:96:99:00: 9e:44:88:15:1b:6c:f3:56:d3:46:52:fb:96:e9:f3: 03:89:ad:4c:4b:3f:1d:55:f4:da:76:3f:cf:42:95: 02:c1:4f:a7:28:dd:8e:19:2e:3c:38:9b:8f:33:48: 62:8f:ef:10:03:74:71:55:33:42:c1:ce:f3:68:fd: 8e:b5:90:b6:75:d5:55:d2:a5:cf:3a:3e:47:75:ff: 3f:3c:c4:f6:62:08:38:70:ce:61:8c:2b:5a:11:fb: c3:e3:e8:00:7c:27:bd:6b:df:bc:e1:38:b3:0b:45: d3:d9:3d:bc:8b:df:dc:ff:6b:89:49:a3:f7:28:2a: 54:a5:f3:00:37:6f:c2:35:7b:dd:cc:8e:59:a4:50: 60:70:e4:f8:03:14:63:ac:f2:47:ba:d6:a4:74:20: 12:d8:09:a3:42:d6:38:81:bb:32:51:6b:40:11:c5: 45:e4:84:72:21:1f:67:e0:36:61:b4:a2:6f:cf:55: 26:5a:f1:7f:e0:36:9a:38:a8:f3:e4:df:e0:e6:5a: da:f7:06:56:89:59:c6:7b:40:e1:54:30:09:ce:ac: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:DC:3E:2F:3D:49:F6:C7:95:71:03:71:29:F2:41:A0:0C:A5:D7 X509v3 Authority Key Identifier: keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:cb:35:87:92:ee:a4:7f:a4:05:ca:95:61:c0:68:ad:27: 38:61:66:67:77:c1:ed:ba:0f:2b:52:03:53:0d:4d:e3:0d:08: 15:8d:77:0c:6e:a9:5c:b8:88:53:2d:ae:22:fb:d5:02:ff:09: 8a:a2:f3:9b:6b:6e:2d:3e:cc:f7:01:eb:13:a0:97:d4:29:fd: a1:9a:06:9d:eb:fd:75:7b:a0:93:65:cf:f1:de:63:cc:56:58: 13:8a:cb:60:aa:18:5c:5c:b6:ba:56:dd:90:4d:ab:c3:f3:28: 0a:fe:53:06:1c:fa:5a:89:9d:db:32:16:ef:2e:45:f9:d5:28: 8c:12:16:08:2b:b5:87:ab:18:15:f5:6c:9e:3a:45:a7:3b:0f: 79:0a:88:56:d9:40:c4:6d:5e:da:bd:c9:25:9c:09:ba:36:2f: 00:07:8d:2a:db:8c:fa:45:ba:59:af:92:f4:93:da:c4:7b:73: b2:58:db:67:88:0c:60:5c:0f:da:4e:c9:ea:c8:e8:c4:ad:ef: 4b:6a:24:32:39:e0:47:a6:46:56:43:66:76:81:bf:54:1c:8c: ec:7b:7e:09:f8:4c:b4:4d:a1:da:59:10:99:43:91:dc:b8:23: db:06:15:24:1c:3f:f7:cb:de:da:e5:f5:ec:ba:72:4e:9f:b5: 5d:26:0e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7TN63GwJG/sU+fI//edMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOTA3YWUxOTc3YzIzNTI3YWFkNjY1NmExNDhjNzAzNzJl OWIyNTYwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg0Njg0ZGMzZTJmM2Q0OWY2Yzc5NTcxMDM3MTI5ZjI0MWEwMGNhNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT2hO/xtkF2Pell22UD2CrKocmJ/ vc2VNwbOkVaRaqohNzSMjLAIJxGWmQCeRIgVG2zzVtNGUvuW6fMDia1MSz8dVfTa dj/PQpUCwU+nKN2OGS48OJuPM0hij+8QA3RxVTNCwc7zaP2OtZC2ddVV0qXPOj5H df8/PMT2Ygg4cM5hjCtaEfvD4+gAfCe9a9+84TizC0XT2T28i9/c/2uJSaP3KCpU pfMAN2/CNXvdzI5ZpFBgcOT4AxRjrPJHutakdCAS2AmjQtY4gbsyUWtAEcVF5IRy IR9n4DZhtKJvz1UmWvF/4DaaOKjz5N/g5lra9wZWiVnGe0DhVDAJzqzlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaE3D4vPUn2x5VxA3Ep8kGgDKXXMB8GA1UdIwQY MBaAFKqQeuGXfCNSeq1mVqFIxwNy6bJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2It OGY1ZjcxM2IzN2FhLzEvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2ItOGY1ZjcxM2IzN2Fh LzEvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqzLNYeS 7qR/pAXKlWHAaK0nOGFmZ3fB7boPK1IDUw1N4w0IFY13DG6pXLiIUy2uIvvVAv8J iqLzm2tuLT7M9wHrE6CX1Cn9oZoGnev9dXugk2XP8d5jzFZYE4rLYKoYXFy2ulbd kE2rw/MoCv5TBhz6Womd2zIW7y5F+dUojBIWCCu1h6sYFfVsnjpFpzsPeQqIVtlA xG1e2r3JJZwJujYvAAeNKtuM+kW6Wa+S9JPaxHtzsljbZ4gMYFwP2k7J6sjoxK3v S2okMjngR6ZGVkNmdoG/VByM7Ht+CfhMtE2h2lkQmUOR3Lgj2wYVJBw/98ve2uX1 7LpyTp+1XSYOgg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:18 2025 by rpki-client