This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json) Hash identifier: Trc1nmieZjeiEHpruNadncjfrSJhQK7wn/Vwd4txU4A= Subject key identifier: 5D:9D:6D:65:48:94:0E:2F:FE:D0:5E:06:EC:0C:52:A7:E6:4A:91:8F Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92 Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92 Certificate serial: 019AF23FFDDD99CA95E116A00EE44CDECEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft Manifest number: 0467 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: POB622L4wFqyGPI2yJaxiUv5slC2udinimx7ZDLGa4M=) 2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fd:dd:99:ca:95:e1:16:a0:0e:e4:4c:de:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92 Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=5d9d6d6548940e2ffed05e06ec0c52a7e64a918f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:e6:45:cc:d6:aa:c2:e7:a5:5c:3e:50:46: 58:af:92:82:da:9f:12:6b:11:3a:31:c2:24:7f:3d: cf:cd:cb:5e:33:55:b8:85:04:bf:78:17:a6:23:e9: ea:ab:ab:a8:77:40:9e:ce:22:c2:56:5b:e0:77:7b: ec:dc:0e:04:8a:c1:71:bc:d6:b7:52:a8:d9:16:72: 6c:54:96:dd:50:91:2e:18:5e:c3:e8:db:04:a5:ce: 89:89:11:0c:5c:dd:5b:c8:6f:a8:63:20:64:a7:dc: 2b:78:58:d4:c2:51:2f:b3:d3:8f:54:db:a4:a7:ef: f9:10:d6:02:32:7a:1b:cf:5e:14:3a:d1:40:20:8e: c5:38:bb:41:b7:bf:01:67:ef:02:af:d9:6d:08:39: 44:a6:5e:9f:f4:e0:5e:23:c5:a1:3e:51:8b:53:ef: d8:62:db:1c:31:4c:a9:76:aa:2b:8f:b5:55:5f:72: 0c:b5:b2:79:d8:71:4c:2c:ed:83:bb:f3:b9:01:12: 8a:47:e1:93:2a:25:8f:15:3f:cd:6a:b4:63:38:bf: 51:e9:16:52:4e:03:57:ed:0b:fe:20:a9:44:c7:84: ea:c9:43:0d:07:d4:5f:a2:8c:06:f6:43:57:68:d3: c6:90:6d:63:b4:c1:ac:3d:97:8c:ed:df:25:70:94: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9D:6D:65:48:94:0E:2F:FE:D0:5E:06:EC:0C:52:A7:E6:4A:91:8F X509v3 Authority Key Identifier: keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f7:cf:c6:51:07:6c:62:e4:10:19:2a:e0:85:b8:89:f2:29: a5:5e:47:fb:d1:7c:36:37:1f:0a:35:19:4c:6f:e5:08:d6:2c: 45:b1:0f:73:86:d5:a9:73:58:e4:3b:89:ca:58:e7:10:7e:5f: ea:16:bd:1d:2f:49:4a:1a:99:29:af:37:c7:a3:94:af:4e:b8: 8b:d6:eb:75:86:c8:5d:02:0c:a2:90:ab:5e:5a:01:2f:87:3f: 64:bd:27:dc:95:8a:eb:58:ae:0f:4d:17:7d:bb:5d:15:9d:4c: a9:67:f3:8f:0b:f7:87:95:01:15:41:a1:9d:f6:15:46:76:27: 2d:25:b8:05:01:9c:fd:e5:b2:ee:05:0d:e3:66:7d:5f:07:c8: 68:0b:db:f9:5b:f1:e4:9d:86:97:be:fe:7e:df:01:6d:e1:e5: 19:0e:46:f7:e0:37:93:11:24:24:05:e3:fd:20:e0:9c:bc:ab: d7:99:28:d4:74:13:38:38:32:69:a2:83:f9:a2:be:a3:51:91: f9:ae:11:53:88:34:20:97:13:dd:5b:87:bc:95:fb:61:7a:6c: b2:b6:e9:22:45:cf:75:8b:b0:f7:42:a6:99:f5:42:48:12:86: 17:f7:d2:ea:cd:15:4d:ca:38:bb:b9:71:95:85:01:dc:d0:03: 28:66:77:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/3dmcqV4RagDuRM3s7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGRlMjgxMzFjNzNiNWY1MzIwZjUxZGFlNmMxYmQ0N2Fi ODJmOTIwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD Eyg1ZDlkNmQ2NTQ4OTQwZTJmZmVkMDVlMDZlYzBjNTJhN2U2NGE5MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTbmRczWqsLnpVw+UEZYr5KC2p8S axE6McIkfz3PzcteM1W4hQS/eBemI+nqq6uod0CeziLCVlvgd3vs3A4EisFxvNa3 UqjZFnJsVJbdUJEuGF7D6NsEpc6JiREMXN1byG+oYyBkp9wreFjUwlEvs9OPVNuk p+/5ENYCMnobz14UOtFAII7FOLtBt78BZ+8Cr9ltCDlEpl6f9OBeI8WhPlGLU+/Y YtscMUypdqorj7VVX3IMtbJ52HFMLO2Du/O5ARKKR+GTKiWPFT/NarRjOL9R6RZS TgNX7Qv+IKlEx4TqyUMNB9RfoowG9kNXaNPGkG1jtMGsPZeM7d8lcJSqkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2dbWVIlA4v/tBeBuwMUqfmSpGPMB8GA1UdIwQY MBaAFEAN4oExxztfUyD1Ha5sG9R6uC+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUt YmM2YTFiMjFmZDVlLzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUtYmM2YTFiMjFmZDVl LzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANffPxlEH bGLkEBkq4IW4ifIppV5H+9F8NjcfCjUZTG/lCNYsRbEPc4bVqXNY5DuJyljnEH5f 6ha9HS9JShqZKa83x6OUr064i9brdYbIXQIMopCrXloBL4c/ZL0n3JWK61iuD00X fbtdFZ1MqWfzjwv3h5UBFUGhnfYVRnYnLSW4BQGc/eWy7gUN42Z9XwfIaAvb+Vvx 5J2Gl77+ft8BbeHlGQ5G9+A3kxEkJAXj/SDgnLyr15ko1HQTODgyaaKD+aK+o1GR +a4RU4g0IJcT3VuHvJX7YXpssrbpIkXPdYuw90KmmfVCSBKGF/fS6s0VTco4u7lx lYUB3NADKGZ38g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:28 2025 by rpki-client