This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft File: qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json) Hash identifier: EEGMnChCG8p4yBoaCk62XctzQLutdcDgXwpyxWJ0sx0= Subject key identifier: 1C:7B:44:F7:E5:ED:DD:89:03:93:97:46:75:EF:25:FD:E3:43:BA:AF Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5 Certificate issuer: /CN=a8707679223c883fed7f7c79ff2f293bff8730b5 Certificate serial: 019AF49BB1B70743630F3E45E6251B2C64CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft Manifest number: 08F6 Signing time: Sat 06 Dec 2025 17:00:35 +0000 Manifest this update: Sat 06 Dec 2025 17:00:35 +0000 Manifest next update: Sun 07 Dec 2025 17:00:35 +0000 Files and hashes: 1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: 1oHjpDzylK6xV2KjhoYqw+FPKmaFtSg+GN3wA6qpPSI=) 2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b1:b7:07:43:63:0f:3e:45:e6:25:1b:2c:64:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5 Validity Not Before: Dec 6 17:00:35 2025 GMT Not After : Dec 7 17:00:35 2025 GMT Subject: CN=1c7b44f7e5eddd890393974675ef25fde343baaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:d1:ae:e5:7e:b4:9b:86:a9:3e:43:75:84: 0c:81:6a:0e:e8:33:55:1f:4a:6c:b4:e9:50:db:d5: 0a:9b:b5:10:49:b8:24:b8:b3:2e:fe:5f:35:c9:a7: fe:01:5f:da:c7:ae:f5:13:3a:f6:27:44:69:d8:14: 71:0e:73:bb:79:33:79:a2:a2:a7:4d:26:3f:bf:70: c0:f0:11:c1:c6:a4:41:a5:b9:6b:ab:28:ed:80:6d: 2c:12:e7:90:af:9c:82:95:51:de:40:cd:2f:5c:43: 6b:47:5d:0d:6e:69:a5:af:14:d3:e0:2b:ce:b6:c7: dc:09:27:06:83:cc:98:ac:2f:04:a3:93:fd:89:df: 8e:d3:1f:48:07:95:e3:d0:16:06:7e:3c:b4:74:5e: f8:db:ef:1b:c1:4c:03:a6:17:ee:62:a7:21:08:89: fe:8b:e7:5f:e5:b5:21:02:17:21:e5:2a:1a:7a:94: 95:a8:3e:26:27:ee:7c:d8:3f:89:17:b7:1c:e5:7d: a6:19:1a:e2:aa:d2:0f:9a:76:8d:6f:45:b7:ff:2e: a4:c9:ca:13:03:c9:e0:9a:cc:01:04:4e:30:1f:2d: 3b:f4:85:d5:8d:b5:15:d8:2e:aa:26:86:76:cb:6b: 9c:ec:73:47:a4:cd:43:a4:33:66:72:c4:6e:9d:5d: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:44:F7:E5:ED:DD:89:03:93:97:46:75:EF:25:FD:E3:43:BA:AF X509v3 Authority Key Identifier: keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ba:d0:4a:53:63:46:f7:ed:0b:20:84:2b:b6:c7:c2:9f:d9: c5:9b:59:36:d2:91:0a:48:8a:4c:e8:b3:5f:b2:51:42:d2:38: 92:cf:04:0b:23:a7:61:0f:26:1e:64:ee:ab:e5:bc:81:06:34: fe:ef:c2:d7:94:0c:2c:54:e2:a1:b2:6f:54:57:db:6c:3e:5e: 5f:db:be:97:4c:73:3b:33:84:fc:48:b2:79:6b:77:f2:b0:c4: c6:51:b7:e9:0c:e0:a0:80:91:cd:a6:cf:00:77:0d:0c:1c:dd: ab:a1:9c:79:6f:22:d9:71:ae:5a:83:9f:c5:c8:70:62:f3:a4: 4c:95:8d:3c:4d:08:e1:67:67:02:6a:9e:70:39:73:a4:49:74: 71:60:24:06:7a:b7:54:18:90:1e:19:f3:9f:d6:dd:e1:5a:5d: bb:bf:ed:87:1e:eb:34:c1:21:19:71:19:f6:2a:df:3d:2c:5a: 01:76:87:c0:06:66:85:23:bd:3a:20:aa:67:e5:38:a7:a4:01: 9f:2c:97:56:e0:6e:14:99:25:31:b8:b2:ba:a4:c2:48:62:ca: 89:c5:10:87:ca:fb:49:24:f4:e3:9f:9c:2d:9e:01:8f:2c:aa: a0:aa:c0:ad:89:b9:92:3c:98:62:03:88:29:a8:6d:42:87:92: 76:7a:bd:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7G3B0NjDz5F5iUbLGTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA3Njc5MjIzYzg4M2ZlZDdmN2M3OWZmMmYyOTNiZmY4 NzMwYjUwHhcNMjUxMjA2MTcwMDM1WhcNMjUxMjA3MTcwMDM1WjAzMTEwLwYDVQQD EygxYzdiNDRmN2U1ZWRkZDg5MDM5Mzk3NDY3NWVmMjVmZGUzNDNiYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF/RruV+tJuGqT5DdYQMgWoO6DNV H0pstOlQ29UKm7UQSbgkuLMu/l81yaf+AV/ax671Ezr2J0Rp2BRxDnO7eTN5oqKn TSY/v3DA8BHBxqRBpblrqyjtgG0sEueQr5yClVHeQM0vXENrR10NbmmlrxTT4CvO tsfcCScGg8yYrC8Eo5P9id+O0x9IB5Xj0BYGfjy0dF742+8bwUwDphfuYqchCIn+ i+df5bUhAhch5SoaepSVqD4mJ+582D+JF7cc5X2mGRriqtIPmnaNb0W3/y6kycoT A8ngmswBBE4wHy079IXVjbUV2C6qJoZ2y2uc7HNHpM1DpDNmcsRunV2ytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx7RPfl7d2JA5OXRnXvJf3jQ7qvMB8GA1UdIwQY MBaAFKhwdnkiPIg/7X98ef8vKTv/hzC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhCMmVTSThpRF90ZjN4NV95OHBPXy1ITUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjk4NjYtZGJmNi00Mjk0LTk0Yjkt NDA3ZmVmNjljZmI4LzEvcUhCMmVTSThpRF90ZjN4NV95OHBPXy1ITUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kYjk4NjYtZGJmNi00Mjk0LTk0YjktNDA3ZmVmNjljZmI4 LzEvcUhCMmVTSThpRF90ZjN4NV95OHBPXy1ITUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7rQSlNj RvftCyCEK7bHwp/ZxZtZNtKRCkiKTOizX7JRQtI4ks8ECyOnYQ8mHmTuq+W8gQY0 /u/C15QMLFTiobJvVFfbbD5eX9u+l0xzOzOE/EiyeWt38rDExlG36QzgoICRzabP AHcNDBzdq6GceW8i2XGuWoOfxchwYvOkTJWNPE0I4WdnAmqecDlzpEl0cWAkBnq3 VBiQHhnzn9bd4Vpdu7/thx7rNMEhGXEZ9irfPSxaAXaHwAZmhSO9OiCqZ+U4p6QB nyyXVuBuFJklMbiyuqTCSGLKicUQh8r7SST045+cLZ4BjyyqoKrArYm5kjyYYgOI KahtQoeSdnq9Og== -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:20 2025 by rpki-client