This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json) Hash identifier: 5sVQfjZSunYnV79q/dlA7sUtMd8ff623LBV+TpPKJKY= Subject key identifier: 4A:7A:5B:11:4B:04:F4:F3:44:3D:98:55:08:4A:63:9D:2B:3C:E7:A9 Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c Certificate serial: 019AF578526422C7E96D5E11FA79937C3CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft Manifest number: 0B5D Signing time: Sat 06 Dec 2025 21:01:34 +0000 Manifest this update: Sat 06 Dec 2025 21:01:34 +0000 Manifest next update: Sun 07 Dec 2025 21:01:34 +0000 Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=) 2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: 5lrMJ6n5k6QP5zBhrvbaHK2/9HNGr5370VVLK9NKGoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:52:64:22:c7:e9:6d:5e:11:fa:79:93:7c:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c Validity Not Before: Dec 6 21:01:34 2025 GMT Not After : Dec 7 21:01:34 2025 GMT Subject: CN=4a7a5b114b04f4f3443d9855084a639d2b3ce7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:cf:fc:76:08:33:2d:9a:6e:dc:aa:65:f0: 9c:c4:6c:e2:13:df:0e:02:1d:2c:d2:61:a0:df:4a: bb:da:68:b7:60:5a:08:39:98:a6:24:bf:23:ca:e6: 1a:f1:65:34:7c:29:d8:06:7c:c1:20:c1:ad:61:38: ae:fb:95:b8:eb:8c:bc:6b:9f:0c:e7:4f:44:cd:7e: 35:62:b9:46:79:d5:e9:bd:ff:57:8f:bc:cb:16:ab: 49:b1:5e:7c:7b:49:d1:64:1d:99:89:11:79:7d:ed: 08:6c:b5:af:b3:1f:5d:eb:51:8a:3f:ce:88:fa:ec: 9f:85:66:d5:2f:85:5c:57:61:4d:5e:f7:c6:f9:1b: 78:f8:cf:55:3c:45:61:35:ad:9c:b2:cc:64:2c:d2: b6:c1:15:6e:e9:02:56:56:e8:2a:54:5e:9f:43:ba: 3c:be:10:d0:8d:9e:4e:ff:e5:ea:a3:96:6a:16:e3: c5:05:af:35:3a:22:53:17:7e:3a:92:2e:c8:3e:86: 18:dc:1e:4e:9c:af:7a:f7:67:b4:4c:fd:e2:2a:28: a0:13:b6:0d:6c:e1:37:da:62:76:bf:bb:9a:b1:e8: d3:61:e3:b1:1a:2f:62:6c:b7:41:d2:e1:36:b3:d4: ba:70:f8:a8:2c:79:58:d4:95:06:a9:29:32:73:76: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:5B:11:4B:04:F4:F3:44:3D:98:55:08:4A:63:9D:2B:3C:E7:A9 X509v3 Authority Key Identifier: keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c9:40:36:fe:8b:17:1e:d1:28:c4:ff:2d:92:f3:cb:a5:40: 79:6b:a9:21:17:ae:f4:1c:72:05:70:bb:82:d9:fb:ed:0d:d6: 12:61:34:1c:0d:94:33:bd:ba:9c:f5:ab:6b:2a:14:06:ba:6f: 80:7b:65:93:46:68:3f:f9:7f:e7:b9:32:d3:53:60:b8:36:c3: ed:32:2b:04:f0:9c:81:18:74:08:45:c4:5c:f2:06:45:d7:c9: 25:e8:a2:93:e5:b2:b9:26:73:24:22:7f:a2:38:b0:01:22:f6: b4:b5:c1:5b:1b:dc:fe:b5:5d:f5:ed:9b:81:b0:9f:cd:b2:aa: 9d:a9:d6:0e:b5:f5:2e:95:b8:1d:8c:d7:a1:78:4c:59:8a:4e: 6c:44:3d:67:c9:bf:46:33:5d:dd:cc:78:b3:85:29:c3:9d:26: 27:14:08:2e:f8:42:8e:c5:72:2c:67:45:46:59:a8:f6:f3:d7: e8:6f:ab:d8:00:5e:b2:43:9a:0a:a5:92:09:e8:13:a4:ec:c4: 9b:db:da:fd:fc:ea:86:51:6d:91:60:a3:27:39:a3:d2:db:c5: 85:e8:fb:33:ed:af:6e:72:ce:8f:27:f5:70:33:56:5a:64:18: a6:02:1e:fb:ae:b5:8d:29:47:1e:5f:6a:fb:92:b0:93:08:9f: 59:71:75:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFJkIsfpbV4R+nmTfDzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMjExMDRiNGY3NzIyMjRkMTE4NTZhMjRlZGY5NDY2YTg0 NGQyNmMwHhcNMjUxMjA2MjEwMTM0WhcNMjUxMjA3MjEwMTM0WjAzMTEwLwYDVQQD Eyg0YTdhNWIxMTRiMDRmNGYzNDQzZDk4NTUwODRhNjM5ZDJiM2NlN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+/P/HYIMy2abtyqZfCcxGziE98O Ah0s0mGg30q72mi3YFoIOZimJL8jyuYa8WU0fCnYBnzBIMGtYTiu+5W464y8a58M 509EzX41YrlGedXpvf9Xj7zLFqtJsV58e0nRZB2ZiRF5fe0IbLWvsx9d61GKP86I +uyfhWbVL4VcV2FNXvfG+Rt4+M9VPEVhNa2cssxkLNK2wRVu6QJWVugqVF6fQ7o8 vhDQjZ5O/+Xqo5ZqFuPFBa81OiJTF346ki7IPoYY3B5OnK9692e0TP3iKiigE7YN bOE32mJ2v7uasejTYeOxGi9ibLdB0uE2s9S6cPioLHlY1JUGqSkyc3aN7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp6WxFLBPTzRD2YVQhKY50rPOepMB8GA1UdIwQY MBaAFKohEEtPdyIk0RhWok7flGaoRNJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlFUVMwOTNJaVRSR0ZhaVR0LVVacWhFMG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kYWJhY2ItZTZmNS00MDY1LTg2YjYt OGUwZDgzYzVlZGZlLzEvcWlFUVMwOTNJaVRSR0ZhaVR0LVVacWhFMG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kYWJhY2ItZTZmNS00MDY1LTg2YjYtOGUwZDgzYzVlZGZl LzEvcWlFUVMwOTNJaVRSR0ZhaVR0LVVacWhFMG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMlANv6L Fx7RKMT/LZLzy6VAeWupIReu9BxyBXC7gtn77Q3WEmE0HA2UM726nPWrayoUBrpv gHtlk0ZoP/l/57ky01NguDbD7TIrBPCcgRh0CEXEXPIGRdfJJeiik+WyuSZzJCJ/ ojiwASL2tLXBWxvc/rVd9e2bgbCfzbKqnanWDrX1LpW4HYzXoXhMWYpObEQ9Z8m/ RjNd3cx4s4Upw50mJxQILvhCjsVyLGdFRlmo9vPX6G+r2ABeskOaCqWSCegTpOzE m9va/fzqhlFtkWCjJzmj0tvFhej7M+2vbnLOjyf1cDNWWmQYpgIe+661jSlHHl9q +5KwkwifWXF19Q== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:57 2025 by rpki-client