This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json) Hash identifier: 5KJ04juMtt20DqYlrOuIcYhwSH61+RC+M6It+4MqBMc= Subject key identifier: 3E:43:0C:7B:2F:96:A4:F9:C2:F0:E2:3D:04:FF:74:BB:B1:EE:D7:8D Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019AF389686C8564069E6E92AA07E9506B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft Manifest number: 0272 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=) 2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: ypBF3Dm/pSJG3WVv1DQpC3L6x+v/lkP8+2FZv5fTRd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:68:6c:85:64:06:9e:6e:92:aa:07:e9:50:6b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=3e430c7b2f96a4f9c2f0e23d04ff74bbb1eed78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:68:74:81:f9:4c:de:81:4d:1a:09:d4:9e: 6d:5b:68:c5:ca:bd:18:58:1f:84:1c:7e:19:f6:1c: cc:11:e0:ec:4c:87:8f:dd:19:07:24:fd:38:89:38: bf:be:fe:3f:5a:9e:7c:69:fd:1f:66:67:65:91:41: 3d:36:f9:88:65:bb:61:fb:2c:c4:b8:3d:d7:a0:0a: a5:73:92:56:ae:d3:6a:43:da:a2:77:1b:6a:1f:db: 18:c8:ec:67:f3:11:98:76:23:c4:3b:8b:71:01:14: 22:a2:29:7d:23:41:8c:b8:e4:d8:73:fe:c1:dc:e2: 70:01:e2:20:19:55:58:3c:0a:c1:02:4f:ca:59:a9: 35:37:a5:bb:e2:79:31:09:89:12:d5:8f:c7:f7:26: dd:d3:ab:1c:61:ca:0b:dc:66:c3:41:88:9e:5b:b8: 8e:78:e6:e7:31:bd:d2:ec:ca:bf:59:25:2a:c6:a9: 56:dd:86:4f:5b:dd:2f:aa:f5:7f:ea:cc:c2:f7:25: 91:6d:00:41:a6:27:bf:e1:aa:05:f1:3d:da:39:3d: 56:43:4e:5a:3e:37:a1:88:31:eb:0f:2a:e2:39:da: 3c:70:33:d8:b6:56:c9:3e:b8:a2:43:e5:48:c2:38: 5f:e4:bc:f6:47:af:81:14:9d:78:71:1e:18:37:5b: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:0C:7B:2F:96:A4:F9:C2:F0:E2:3D:04:FF:74:BB:B1:EE:D7:8D X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:50:34:34:73:d1:5f:0b:c5:ef:77:fd:c6:21:e0:39:8a:ef: 86:8d:66:9f:b1:83:56:b5:b5:35:91:74:31:56:47:73:b9:29: 90:32:17:66:61:5b:6b:b0:05:44:44:45:ba:22:0e:c7:2f:56: a8:af:f5:23:cd:f7:3d:90:80:32:e5:7f:c2:9e:fe:b0:ab:fd: 8b:1c:54:53:ed:4d:44:1c:d6:c6:ed:a5:8b:25:0b:82:9d:16: 60:1b:33:32:87:47:56:9d:0e:65:58:12:db:fd:c2:54:14:23: dd:45:62:f8:78:9f:00:e1:6e:96:02:84:9e:54:3d:a0:c6:9f: c5:88:78:85:8c:a6:7b:12:e5:90:2b:4c:d1:ba:0d:fb:80:b8: 54:b0:07:05:90:c2:a6:08:97:90:a5:48:bd:ca:f6:f7:6d:0d: 1c:b7:ff:00:d0:c3:52:c4:80:37:a9:72:98:66:30:b5:50:cd: 03:52:2a:ec:e0:70:15:56:b2:71:3a:04:9f:f9:7c:a6:5c:12: fb:4c:b4:da:1f:b5:ff:57:7a:91:9f:42:d3:89:55:b0:c4:32: 49:ed:05:53:d1:31:77:05:68:7f:45:df:40:4c:36:70:28:8e: fd:3d:9c:3b:9d:2f:f2:7e:6b:0a:4a:5a:56:41:60:f9:d0:f9: 2e:07:a1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWhshWQGnm6SqgfpUGsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD EygzZTQzMGM3YjJmOTZhNGY5YzJmMGUyM2QwNGZmNzRiYmIxZWVkNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwABodIH5TN6BTRoJ1J5tW2jFyr0Y WB+EHH4Z9hzMEeDsTIeP3RkHJP04iTi/vv4/Wp58af0fZmdlkUE9NvmIZbth+yzE uD3XoAqlc5JWrtNqQ9qidxtqH9sYyOxn8xGYdiPEO4txARQioil9I0GMuOTYc/7B 3OJwAeIgGVVYPArBAk/KWak1N6W74nkxCYkS1Y/H9ybd06scYcoL3GbDQYieW7iO eObnMb3S7Mq/WSUqxqlW3YZPW90vqvV/6szC9yWRbQBBpie/4aoF8T3aOT1WQ05a PjehiDHrDyriOdo8cDPYtlbJPriiQ+VIwjhf5Lz2R6+BFJ14cR4YN1tQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5DDHsvlqT5wvDiPQT/dLux7teNMB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlA0NHPR XwvF73f9xiHgOYrvho1mn7GDVrW1NZF0MVZHc7kpkDIXZmFba7AFRERFuiIOxy9W qK/1I833PZCAMuV/wp7+sKv9ixxUU+1NRBzWxu2liyULgp0WYBszModHVp0OZVgS 2/3CVBQj3UVi+HifAOFulgKEnlQ9oMafxYh4hYymexLlkCtM0boN+4C4VLAHBZDC pgiXkKVIvcr2920NHLf/ANDDUsSAN6lymGYwtVDNA1Iq7OBwFVaycToEn/l8plwS +0y02h+1/1d6kZ9C04lVsMQySe0FU9ExdwVof0XfQEw2cCiO/T2cO50v8n5rCkpa VkFg+dD5LgeheQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:47 2025 by rpki-client