This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json) Hash identifier: kJwk6Hmwjh+4vKNyV2R+eVTDouMzhbal17J5mSlCFeA= Subject key identifier: FD:4D:58:C8:B9:6C:F4:A1:94:A0:3A:45:7B:F5:8A:31:5B:86:4D:90 Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2 Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2 Certificate serial: 019AF19B82566F70AE4A10E108FBE2980BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft Manifest number: 15C1 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=) 2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: Xmniqh/BXGxYTtR6lC9iOBHZ4OLKZYCL+EkmOmsNGJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:82:56:6f:70:ae:4a:10:e1:08:fb:e2:98:0b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=fd4d58c8b96cf4a194a03a457bf58a315b864d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:80:4b:7f:ba:36:5f:c7:24:5f:c5:11:b5: e4:67:f3:5f:fd:b1:ee:f4:b9:56:09:0e:fc:19:34: f6:e8:84:0d:9a:26:fe:27:ac:c2:43:ce:23:94:26: 55:ee:d4:c5:39:73:ae:7d:26:d4:21:13:85:89:d3: 2e:54:59:64:7f:d2:dd:04:5f:2d:3f:18:78:58:27: bb:0e:2f:9d:5c:06:7d:67:44:24:c9:f8:5c:d0:90: 08:0b:71:83:81:35:e1:92:fd:50:fe:36:00:ec:cb: 60:00:85:77:00:25:6a:41:9b:fb:fe:73:42:42:b2: d9:64:0a:70:5a:4c:50:0a:1e:73:10:a2:34:38:88: 34:18:f4:f3:36:92:c0:42:e9:99:6c:9e:d6:70:a5: cb:55:06:93:20:e0:4e:ed:a7:13:9e:f7:5f:e4:28: 7d:96:2a:ad:25:b4:38:26:e9:7d:5f:f2:2e:93:b3: d1:42:8f:5b:41:24:14:b1:4b:f5:2c:bd:b6:54:09: 30:c6:d1:d4:10:35:a3:85:78:9c:63:7b:07:c3:6c: 8e:fa:c2:6d:0b:34:3d:ca:3c:41:44:f4:ef:18:f0: d8:72:45:bf:47:75:dd:1e:ee:58:be:4c:d1:e2:30: 99:e7:60:18:2a:3d:6d:89:22:dd:5f:06:37:32:bc: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:58:C8:B9:6C:F4:A1:94:A0:3A:45:7B:F5:8A:31:5B:86:4D:90 X509v3 Authority Key Identifier: keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:20:b5:73:4a:c7:0c:f3:9e:15:46:be:e7:09:f7:fd:4d:72: 92:c2:fc:2d:98:30:c9:55:37:bc:19:a9:c4:ec:fd:b0:c2:5f: 36:9c:3a:fa:34:4d:cb:ac:10:94:2b:43:27:f3:97:99:c6:e4: 94:d1:32:6e:97:7c:f8:3c:63:53:c7:81:0a:63:0b:3d:12:dc: f5:75:5b:bb:79:fb:15:66:db:c4:3d:cb:3c:51:f8:d0:fa:fb: 78:f8:a8:ab:a0:7a:e3:33:0d:f4:4c:02:3c:81:45:9a:e1:24: d4:79:d1:ae:bb:5e:05:d7:60:0b:b2:c2:61:42:97:b0:8b:4c: 46:bf:95:fe:fd:6c:f8:86:aa:5c:1b:dd:c6:3c:53:fa:90:c5: 68:23:00:91:13:3c:6a:75:fc:6f:0b:78:fc:de:34:4d:5e:f8: 48:95:95:9c:52:4f:63:f7:e7:d4:4c:54:3e:16:51:8d:84:62: c4:14:d5:25:06:74:91:79:f6:cb:17:f1:bf:cd:1d:c4:f3:68: 22:11:81:c8:b6:36:eb:f3:c0:ea:ae:92:86:19:75:15:e7:c6: d1:cf:15:f9:0a:4a:dc:0d:7d:cb:44:e5:47:aa:64:d3:f9:e1: a9:35:11:71:b0:89:c1:8e:f8:8e:4b:18:e3:62:d6:fc:f1:4c: 96:48:1d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4JWb3CuShDhCPvimAvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDI5ZjcwM2I4ZWM4ZTkzY2E0ODQwNWRlZTQ3MzBlZWQ5 M2M2YjIwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhmZDRkNThjOGI5NmNmNGExOTRhMDNhNDU3YmY1OGEzMTViODY0ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sOAS3+6Nl/HJF/FEbXkZ/Nf/bHu 9LlWCQ78GTT26IQNmib+J6zCQ84jlCZV7tTFOXOufSbUIROFidMuVFlkf9LdBF8t Pxh4WCe7Di+dXAZ9Z0Qkyfhc0JAIC3GDgTXhkv1Q/jYA7MtgAIV3ACVqQZv7/nNC QrLZZApwWkxQCh5zEKI0OIg0GPTzNpLAQumZbJ7WcKXLVQaTIOBO7acTnvdf5Ch9 liqtJbQ4Jul9X/Iuk7PRQo9bQSQUsUv1LL22VAkwxtHUEDWjhXicY3sHw2yO+sJt CzQ9yjxBRPTvGPDYckW/R3XdHu5YvkzR4jCZ52AYKj1tiSLdXwY3Mrz+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1NWMi5bPShlKA6RXv1ijFbhk2QMB8GA1UdIwQY MBaAFKnSn3A7jsjpPKSEBd7kcw7tk8ayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWIt NTJlMTUxZjQyYzIzLzEvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWItNTJlMTUxZjQyYzIz LzEvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSC1c0rH DPOeFUa+5wn3/U1yksL8LZgwyVU3vBmpxOz9sMJfNpw6+jRNy6wQlCtDJ/OXmcbk lNEybpd8+DxjU8eBCmMLPRLc9XVbu3n7FWbbxD3LPFH40Pr7ePioq6B64zMN9EwC PIFFmuEk1HnRrrteBddgC7LCYUKXsItMRr+V/v1s+IaqXBvdxjxT+pDFaCMAkRM8 anX8bwt4/N40TV74SJWVnFJPY/fn1ExUPhZRjYRixBTVJQZ0kXn2yxfxv80dxPNo IhGByLY26/PA6q6Shhl1FefG0c8V+QpK3A19y0TlR6pk0/nhqTURcbCJwY74jksY 42LW/PFMlkgdjA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:57 2025 by rpki-client