This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json) Hash identifier: u+B04l0eOFVVrS7Ymo4gcd++Hlhu9xVKXfC6+V8QNqA= Subject key identifier: 12:9E:7D:D3:6D:81:BA:DD:DB:EC:EB:B6:83:44:14:ED:6D:43:CB:3C Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35 Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35 Certificate serial: 019AF2AD4D596E86CB1821DD3E25209D7A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft Manifest number: 126A Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: vJEO+ceVQ4NoBxP9/Sy8dbmSibWeg7PH+vpMDCwl+sA=) 2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:59:6e:86:cb:18:21:dd:3e:25:20:9d:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=129e7dd36d81badddbecebb6834414ed6d43cb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:6c:2c:f2:c5:14:b0:9d:3f:d9:1a:d7:e3: 39:a7:f5:a6:e4:13:d9:0f:26:cd:e6:55:2e:f9:e7: 79:1f:2b:ec:98:5a:a2:da:38:34:ca:be:57:f6:2c: c1:aa:b8:b8:a5:e8:25:56:18:08:ae:8f:f9:f4:2f: d3:b9:1b:04:90:4a:30:3f:0e:35:0d:e9:84:4d:b1: c2:91:a4:25:64:49:5e:30:26:48:c7:ba:f4:ca:5f: 73:1c:b3:30:24:64:dc:15:bd:93:db:21:6f:da:fb: 65:66:e3:8b:c5:c2:75:80:7a:66:c8:19:16:60:77: 64:b0:24:10:e9:30:2b:78:ad:c4:b0:cd:7c:aa:a9: 7c:b6:2f:a7:2c:0d:19:7e:32:77:a7:e1:e1:1d:6e: f0:46:85:90:11:fc:d9:33:19:36:a7:9c:5c:76:af: 4c:a9:33:1a:32:00:60:f0:c0:fa:ce:44:f9:b3:86: 90:15:2d:01:9d:e2:1f:40:6a:a4:61:7d:36:cf:95: 4a:fa:5c:dd:52:c3:60:e9:6e:5c:af:40:69:b1:2c: ce:ba:a7:59:41:0a:7e:36:d2:e9:fc:24:0d:1f:75: e7:5c:cb:ad:d0:59:86:2e:6a:27:1b:7b:1d:de:0b: 20:b0:0d:5a:20:f4:58:bc:d3:00:fe:9d:d4:05:bb: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:7D:D3:6D:81:BA:DD:DB:EC:EB:B6:83:44:14:ED:6D:43:CB:3C X509v3 Authority Key Identifier: keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a9:72:53:a3:48:17:bb:a1:69:04:1a:98:b0:47:d0:90:39: 91:81:dc:d5:ad:ae:aa:31:b7:9a:83:88:61:0c:05:a8:47:57: 99:45:82:ab:95:e1:5a:7a:60:8c:89:21:65:fa:1b:2d:6c:10: 78:84:e8:25:33:56:81:43:2d:a7:de:3d:2b:dc:b3:db:8d:73: 6d:dd:b0:8b:7f:8e:f3:5d:04:bb:96:55:e5:42:1c:f7:a8:56: 50:6a:1c:f6:15:16:9e:d3:f1:75:0f:6a:1c:0e:3f:eb:f1:d8: b2:07:9c:e1:d1:98:c2:22:76:92:51:a0:8d:47:5b:cb:4c:9f: 85:c4:e2:8c:ca:45:a8:a7:20:be:c1:66:0d:40:58:9c:ca:2b: 3a:cb:c2:1d:0b:f8:41:a3:14:8f:fd:3c:80:9e:b1:21:aa:25: 41:1d:cb:25:61:ab:d6:a6:b8:0b:23:5e:f4:d0:7e:e9:1a:33: e9:85:0d:85:8a:0b:13:71:06:c4:32:a9:0f:51:9e:b1:43:41: fe:fb:bb:72:49:43:dd:a1:54:19:1c:38:ab:8e:08:64:9d:38: bf:60:71:c4:9c:86:13:01:7b:a5:50:4c:8e:95:72:a8:bb:b8: 2f:ff:29:41:cb:7e:4a:d4:9f:67:6d:2b:60:b4:22:09:30:6b: a1:12:f9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU1ZbobLGCHdPiUgnXqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjUzMjQyMGEyMWU0MmI4YWQzMGRhMjRlYmY0MzQ3ZGU5 NWVmMzUwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EygxMjllN2RkMzZkODFiYWRkZGJlY2ViYjY4MzQ0MTRlZDZkNDNjYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jRsLPLFFLCdP9ka1+M5p/Wm5BPZ DybN5lUu+ed5HyvsmFqi2jg0yr5X9izBqri4peglVhgIro/59C/TuRsEkEowPw41 DemETbHCkaQlZEleMCZIx7r0yl9zHLMwJGTcFb2T2yFv2vtlZuOLxcJ1gHpmyBkW YHdksCQQ6TAreK3EsM18qql8ti+nLA0ZfjJ3p+HhHW7wRoWQEfzZMxk2p5xcdq9M qTMaMgBg8MD6zkT5s4aQFS0BneIfQGqkYX02z5VK+lzdUsNg6W5cr0BpsSzOuqdZ QQp+NtLp/CQNH3XnXMut0FmGLmonG3sd3gsgsA1aIPRYvNMA/p3UBbuuawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKefdNtgbrd2+zrtoNEFO1tQ8s8MB8GA1UdIwQY MBaAFEFlMkIKIeQritMNok6/Q0fele81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt YjZkNjRhMDAzZDllLzEvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll LzEvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcalyU6NI F7uhaQQamLBH0JA5kYHc1a2uqjG3moOIYQwFqEdXmUWCq5XhWnpgjIkhZfobLWwQ eIToJTNWgUMtp949K9yz241zbd2wi3+O810Eu5ZV5UIc96hWUGoc9hUWntPxdQ9q HA4/6/HYsgec4dGYwiJ2klGgjUdby0yfhcTijMpFqKcgvsFmDUBYnMorOsvCHQv4 QaMUj/08gJ6xIaolQR3LJWGr1qa4CyNe9NB+6Roz6YUNhYoLE3EGxDKpD1GesUNB /vu7cklD3aFUGRw4q44IZJ04v2BxxJyGEwF7pVBMjpVyqLu4L/8pQct+StSfZ20r YLQiCTBroRL5IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:30 2025 by rpki-client