This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json) Hash identifier: xXth0L9DpHP+GM+FK/R/+R0KUkILK2ReP2anOEAz1Sc= Subject key identifier: FF:C2:1D:79:78:9F:11:AA:16:EF:18:A4:9E:B0:38:0E:89:DD:8E:47 Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91 Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791 Certificate serial: 019AF12EBE2CDAD5667A2CDCFBEA2B1999EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=) 2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: bMKlBZpNWblTfFWbwPE7gBhrgA9fnrHq3GObEokai9c=) 3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:be:2c:da:d5:66:7a:2c:dc:fb:ea:2b:19:99:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791 Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=ffc21d79789f11aa16ef18a49eb0380e89dd8e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:bd:bb:bc:c2:d0:37:8f:0e:ec:a4:fa:2f: d0:49:38:a5:93:75:d7:ca:06:0f:90:f3:8a:36:04: c3:1e:92:64:80:9c:9e:7c:00:de:ad:51:86:5a:0a: c8:5a:45:d5:0f:3a:b9:da:d9:bd:b5:99:25:b3:48: fd:3f:c9:bc:3d:3c:fa:34:a1:c6:c2:58:5d:00:c5: 65:9e:df:8a:27:82:c4:11:1f:67:a2:0a:3a:f9:5a: 89:a5:0a:25:ca:1d:0b:71:14:db:73:cf:99:13:99: f7:56:23:f3:1c:ad:93:fb:b6:e4:17:29:b3:02:d8: b2:c6:4d:ea:d9:22:6d:62:7e:5e:0d:f0:d2:96:e8: e4:9f:15:fa:97:d8:0b:d6:e3:fb:51:cb:76:64:b9: 64:86:9f:ff:1c:c1:0c:b8:61:66:0f:48:ca:c1:6e: 97:e5:fb:9a:9f:08:2d:f7:bc:f2:f2:38:5d:17:b9: a3:58:b1:3b:29:bb:8a:05:ee:f1:40:31:b8:38:c8: 63:20:40:81:2d:44:15:77:7d:be:a6:9f:85:e0:2f: e6:24:3a:79:b8:f3:76:97:7d:7b:51:dd:37:1f:b8: d5:08:2b:be:2a:09:3f:36:f3:16:23:9f:61:ee:dd: 3b:9a:f2:6f:98:78:48:f5:ef:35:d7:c3:f3:02:b6: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:1D:79:78:9F:11:AA:16:EF:18:A4:9E:B0:38:0E:89:DD:8E:47 X509v3 Authority Key Identifier: keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ef:62:05:7d:b5:cb:53:fd:29:37:4c:03:05:5c:7c:c1:ee: 20:c1:c5:81:51:d8:d9:63:64:dd:3e:4e:1d:99:a9:2d:d0:9c: 79:d9:3d:2a:99:8d:63:3a:3f:74:6b:91:dd:0b:82:35:9b:55: c7:45:2b:1f:5f:bd:3a:59:fb:ab:41:f8:c7:d8:a8:3f:84:2c: bc:34:51:97:b6:83:2b:9c:58:df:8c:e0:e9:1e:55:1e:33:de: 1b:93:a4:64:de:61:95:35:ec:60:c6:79:ac:f3:ad:94:81:00: 01:f5:e6:0e:60:fc:af:dd:ea:79:2a:d6:6b:c9:62:07:23:ec: 50:f5:88:be:61:f8:ab:f4:be:8d:9b:d6:18:53:dd:6f:ab:af: 25:75:ed:64:bb:cf:c5:7a:7c:8d:9a:52:47:a7:cb:9f:f3:59: d6:f7:af:b2:65:2a:16:dc:b6:e7:ab:c0:fe:81:97:2c:02:af: 4b:4d:f9:2d:da:be:4d:0b:b2:96:54:27:71:13:6d:9a:91:65: 37:21:eb:c4:0a:b6:57:d1:2f:68:31:63:19:52:36:cf:1a:e4: 4b:e3:ce:51:4d:04:6d:58:48:61:35:47:50:4a:44:c0:ab:59: c1:32:6e:74:95:8e:74:8f:af:36:fd:d1:b0:fa:10:7a:42:5f: 7b:a7:2f:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr4s2tVmeizc++orGZnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTFhMmM5ZmM4ZGU5Njc5YmIxNTg1ODFiMTBjZWFlZTkx ZmY3OTEwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD EyhmZmMyMWQ3OTc4OWYxMWFhMTZlZjE4YTQ5ZWIwMzgwZTg5ZGQ4ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgK9u7zC0DePDuyk+i/QSTilk3XX ygYPkPOKNgTDHpJkgJyefADerVGGWgrIWkXVDzq52tm9tZkls0j9P8m8PTz6NKHG wlhdAMVlnt+KJ4LEER9nogo6+VqJpQolyh0LcRTbc8+ZE5n3ViPzHK2T+7bkFymz Atiyxk3q2SJtYn5eDfDSlujknxX6l9gL1uP7Uct2ZLlkhp//HMEMuGFmD0jKwW6X 5fuanwgt97zy8jhdF7mjWLE7KbuKBe7xQDG4OMhjIECBLUQVd32+pp+F4C/mJDp5 uPN2l317Ud03H7jVCCu+Kgk/NvMWI59h7t07mvJvmHhI9e8118PzAraYwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/CHXl4nxGqFu8YpJ6wOA6J3Y5HMB8GA1UdIwQY MBaAFKgRosn8jelnm7FYWBsQzq7pH/eRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYt MGNjNGMwMDAwODU4LzEvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8xZGVjYjMtMTU5My00NWRiLWFmNTYtMGNjNGMwMDAwODU4 LzEvcUJHaXlmeU42V2Vic1ZoWUd4RE9ydWtmOTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApO9iBX21 y1P9KTdMAwVcfMHuIMHFgVHY2WNk3T5OHZmpLdCcedk9KpmNYzo/dGuR3QuCNZtV x0UrH1+9Oln7q0H4x9ioP4QsvDRRl7aDK5xY34zg6R5VHjPeG5OkZN5hlTXsYMZ5 rPOtlIEAAfXmDmD8r93qeSrWa8liByPsUPWIvmH4q/S+jZvWGFPdb6uvJXXtZLvP xXp8jZpSR6fLn/NZ1vevsmUqFty256vA/oGXLAKvS035Ldq+TQuyllQncRNtmpFl NyHrxAq2V9EvaDFjGVI2zxrkS+POUU0EbVhIYTVHUEpEwKtZwTJudJWOdI+vNv3R sPoQekJfe6cv6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:50 2025 by rpki-client