This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json) Hash identifier: jI316q+r1WRYyYivoS5+yhREt94lXHVBL4XJD4D+al4= Subject key identifier: 34:0E:08:D5:9A:8D:B2:20:CE:22:08:9C:AD:CA:1F:62:76:63:06:DE Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39 Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39 Certificate serial: 019AF209CA2B5A369970F4C739E3AC646D0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft Manifest number: 0AFA Signing time: Sat 06 Dec 2025 05:01:59 +0000 Manifest this update: Sat 06 Dec 2025 05:01:59 +0000 Manifest next update: Sun 07 Dec 2025 05:01:59 +0000 Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=) 2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: X9g1yUgdsJxoLhIMQgUccNWb++edaGYquStp9UJHlcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ca:2b:5a:36:99:70:f4:c7:39:e3:ac:64:6d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39 Validity Not Before: Dec 6 05:01:59 2025 GMT Not After : Dec 7 05:01:59 2025 GMT Subject: CN=340e08d59a8db220ce22089cadca1f62766306de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:0e:85:16:7f:bd:eb:71:b9:09:4d:14:79: 3f:2e:8d:59:88:d7:84:1b:61:dd:19:8d:d0:44:fa: 9c:59:c8:89:09:22:30:f7:6f:f7:6b:eb:35:56:8b: bb:2d:a1:dc:45:a8:af:1f:11:82:f3:36:3c:79:19: 72:b4:a2:17:46:ab:33:9d:67:90:58:7f:c9:7b:22: cf:bb:57:08:3f:70:b6:fe:52:69:f4:e2:dd:82:fb: de:05:dd:b2:67:d6:4d:44:4b:bd:81:c2:51:0d:de: 7a:44:95:6d:9b:9d:18:93:0a:8b:a8:c1:23:05:34: e6:39:86:2e:df:1d:97:56:86:6f:48:dc:1c:6e:74: 9a:dc:b8:3d:63:0b:56:99:66:32:a1:eb:e8:13:b5: 97:bd:73:40:d3:3c:ba:1d:b6:47:0f:27:8a:81:66: 56:0e:7c:05:d5:f6:1b:44:fb:d0:d5:8a:20:9f:ea: e4:62:d7:52:a2:13:26:28:92:e4:86:e4:33:4e:09: b5:e4:d7:9f:bf:0b:5a:20:85:87:fd:f2:4c:5c:63: 26:06:c8:7b:5b:a6:48:27:ea:14:21:c4:08:ea:59: 86:4c:20:00:65:a6:5a:8c:af:db:2c:6a:e1:f3:7a: 4a:61:94:d0:bf:44:9a:0a:6e:18:03:75:f1:05:3d: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0E:08:D5:9A:8D:B2:20:CE:22:08:9C:AD:CA:1F:62:76:63:06:DE X509v3 Authority Key Identifier: keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c9:65:f8:3e:e5:3b:b0:96:7e:f8:62:cc:c4:09:ff:12:fa: e3:d8:91:3e:65:49:bf:bb:f8:8b:86:84:33:95:66:12:af:2d: 1d:5f:c3:93:e2:ff:f0:f8:61:7b:16:a2:90:6a:76:bc:bc:ce: 95:0f:72:d6:3c:e4:86:ab:36:33:43:bd:e4:6a:b7:c1:9e:5f: de:7f:b1:ab:2b:2d:5c:db:3c:0e:c2:e3:eb:db:44:33:09:23: 6a:9f:f9:61:8f:45:e3:e1:64:89:a9:78:f7:ec:d3:eb:07:c8: 15:d1:fb:30:44:a2:20:ef:c3:f1:33:26:0a:57:c1:c4:04:aa: 9f:e0:44:0e:69:1f:c7:31:2d:a2:d3:12:5c:e9:27:64:7b:81: 82:b4:db:e6:bc:73:53:cd:20:21:66:94:ab:97:98:1a:ad:c8: 18:70:87:94:3b:a1:56:1b:45:d8:71:75:b2:36:de:f2:95:1c: 89:c7:ea:51:fa:2b:e7:bd:09:ee:ce:f0:f2:0a:55:a3:bc:93: 9f:e7:3b:92:71:16:5a:2d:a6:b9:80:3d:f6:60:20:33:4d:e3: 31:c1:17:a4:b4:c8:13:eb:8d:0a:b6:6e:46:a8:5f:ce:b2:42: 9e:89:b7:8f:6c:43:75:26:be:c5:cf:41:75:01:3f:92:73:a1: 38:5a:b2:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcorWjaZcPTHOeOsZG0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3 ZDliMzkwHhcNMjUxMjA2MDUwMTU5WhcNMjUxMjA3MDUwMTU5WjAzMTEwLwYDVQQD EygzNDBlMDhkNTlhOGRiMjIwY2UyMjA4OWNhZGNhMWY2Mjc2NjMwNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpIOhRZ/vetxuQlNFHk/Lo1ZiNeE G2HdGY3QRPqcWciJCSIw92/3a+s1Vou7LaHcRaivHxGC8zY8eRlytKIXRqsznWeQ WH/JeyLPu1cIP3C2/lJp9OLdgvveBd2yZ9ZNREu9gcJRDd56RJVtm50YkwqLqMEj BTTmOYYu3x2XVoZvSNwcbnSa3Lg9YwtWmWYyoevoE7WXvXNA0zy6HbZHDyeKgWZW DnwF1fYbRPvQ1Yogn+rkYtdSohMmKJLkhuQzTgm15NefvwtaIIWH/fJMXGMmBsh7 W6ZIJ+oUIcQI6lmGTCAAZaZajK/bLGrh83pKYZTQv0SaCm4YA3XxBT3peQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQOCNWajbIgziIInK3KH2J2YwbeMB8GA1UdIwQY MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcll+D7l O7CWfvhizMQJ/xL649iRPmVJv7v4i4aEM5VmEq8tHV/Dk+L/8PhhexaikGp2vLzO lQ9y1jzkhqs2M0O95Gq3wZ5f3n+xqystXNs8DsLj69tEMwkjap/5YY9F4+Fkial4 9+zT6wfIFdH7MESiIO/D8TMmClfBxASqn+BEDmkfxzEtotMSXOknZHuBgrTb5rxz U80gIWaUq5eYGq3IGHCHlDuhVhtF2HF1sjbe8pUcicfqUfor570J7s7w8gpVo7yT n+c7knEWWi2muYA99mAgM03jMcEXpLTIE+uNCrZuRqhfzrJCnom3j2xDdSa+xc9B dQE/knOhOFqyPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:36 2025 by rpki-client