This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json) Hash identifier: Rf7mHQ8aLYAnQXFdwBbqo4MRwE9gjnd4gqEa+6iFIx8= Subject key identifier: EC:0F:71:45:C1:72:7D:A4:68:E0:4C:A9:91:C2:CD:E9:A2:C9:63:BF Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d Certificate serial: 019AF3C0290822B861F61FA07452314B41F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft Manifest number: 1657 Signing time: Sat 06 Dec 2025 13:00:48 +0000 Manifest this update: Sat 06 Dec 2025 13:00:48 +0000 Manifest next update: Sun 07 Dec 2025 13:00:48 +0000 Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=) 2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: vOdowfBLSR/Qz3GSV7pnSbM2FRoMGqgPXaNvFEwSuCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:29:08:22:b8:61:f6:1f:a0:74:52:31:4b:41:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d Validity Not Before: Dec 6 13:00:48 2025 GMT Not After : Dec 7 13:00:48 2025 GMT Subject: CN=ec0f7145c1727da468e04ca991c2cde9a2c963bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:1b:39:11:1f:fd:ab:49:17:cf:d6:c5:dd: 3b:3a:69:b1:cd:ac:1a:27:af:e2:92:24:79:88:39: 20:d4:a5:e3:ae:9d:33:02:99:29:7e:4e:d0:5d:65: e3:2a:6d:79:13:77:e1:c1:82:db:69:68:38:07:a1: 10:4c:6b:9f:5e:56:8d:f3:ef:82:fa:36:af:49:73: 9b:c1:05:d9:86:25:c4:d9:e1:02:6b:34:d9:27:b4: 7c:94:7a:88:cf:8f:3c:ae:21:1e:bc:65:5d:62:ea: 69:ac:38:24:b8:45:8c:15:bd:6f:50:c4:44:05:fb: 31:b5:8a:10:67:e2:16:78:c4:e9:52:f6:6d:95:d5: 59:17:36:91:47:f8:a2:f7:ed:62:02:bb:a0:8a:19: 10:56:5b:d5:d9:9c:d5:33:59:f7:26:fa:97:41:d6: 9b:21:2a:b5:39:00:26:06:1b:65:4d:44:35:5a:12: 71:2c:f6:a7:0f:97:6e:b6:ed:ac:d7:ed:c8:34:2d: 42:bf:88:ca:7e:9f:ac:32:31:9f:ce:8a:68:4c:98: 47:09:d3:b8:32:9f:f2:43:4a:dd:64:3a:99:d1:49: a0:a5:22:ad:fa:61:31:b5:81:40:64:79:d9:0d:1a: 74:d1:12:a4:8d:a6:a8:e7:84:04:56:f9:df:19:4f: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:71:45:C1:72:7D:A4:68:E0:4C:A9:91:C2:CD:E9:A2:C9:63:BF X509v3 Authority Key Identifier: keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ea:6d:72:cf:1f:25:ee:a3:aa:27:b8:e0:f0:ab:2a:7f:8f: be:a0:91:39:0e:a1:f9:28:71:79:ed:e2:19:3b:ba:e8:f1:16: 8a:2d:0d:a7:03:8c:1b:26:0b:7f:9e:c8:12:61:e1:05:d2:63: fe:ab:4a:ec:89:ef:0e:a7:9c:05:e9:36:9b:7a:c2:1e:8c:d2: 53:a7:4c:75:e7:b9:62:c4:ab:56:da:d9:37:6c:88:bc:ae:43: 74:3a:14:19:b5:b0:a6:e9:e7:8d:00:f5:98:29:f8:83:77:15: a0:de:a6:aa:67:69:7a:92:d0:bb:99:a7:f2:07:b9:4e:40:73: b7:67:52:73:05:44:11:72:30:35:eb:6e:b5:2f:35:38:57:55: 3c:c6:90:1d:cb:05:a7:e6:89:47:17:a2:4e:bd:2a:7b:73:d7: d3:d6:60:d7:82:a2:92:1b:07:e1:5c:4a:a1:c2:80:32:83:d5: e4:35:d0:0b:2a:be:49:d7:d4:44:90:f6:08:80:d0:43:b7:0c: 88:3f:ff:06:04:4a:1c:74:db:5c:60:91:7b:60:ba:ec:c7:11: dc:b9:b0:7c:2c:f0:da:59:1b:d3:7f:5b:ef:ee:5e:8f:d3:59: 20:e6:44:ec:5b:ec:b4:f5:78:7f:29:7e:b7:bf:2d:86:03:6a: dc:53:7a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCkIIrhh9h+gdFIxS0H3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj ZDJiMGQwHhcNMjUxMjA2MTMwMDQ4WhcNMjUxMjA3MTMwMDQ4WjAzMTEwLwYDVQQD EyhlYzBmNzE0NWMxNzI3ZGE0NjhlMDRjYTk5MWMyY2RlOWEyYzk2M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23kbOREf/atJF8/Wxd07Ommxzawa J6/ikiR5iDkg1KXjrp0zApkpfk7QXWXjKm15E3fhwYLbaWg4B6EQTGufXlaN8++C +javSXObwQXZhiXE2eECazTZJ7R8lHqIz488riEevGVdYupprDgkuEWMFb1vUMRE BfsxtYoQZ+IWeMTpUvZtldVZFzaRR/ii9+1iArugihkQVlvV2ZzVM1n3JvqXQdab ISq1OQAmBhtlTUQ1WhJxLPanD5dutu2s1+3INC1Cv4jKfp+sMjGfzopoTJhHCdO4 Mp/yQ0rdZDqZ0UmgpSKt+mExtYFAZHnZDRp00RKkjaao54QEVvnfGU9C+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwPcUXBcn2kaOBMqZHCzemiyWO/MB8GA1UdIwQY MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+ptcs8f Je6jqie44PCrKn+PvqCROQ6h+Shxee3iGTu66PEWii0NpwOMGyYLf57IEmHhBdJj /qtK7InvDqecBek2m3rCHozSU6dMdee5YsSrVtrZN2yIvK5DdDoUGbWwpunnjQD1 mCn4g3cVoN6mqmdpepLQu5mn8ge5TkBzt2dScwVEEXIwNetutS81OFdVPMaQHcsF p+aJRxeiTr0qe3PX09Zg14KikhsH4VxKocKAMoPV5DXQCyq+SdfURJD2CIDQQ7cM iD//BgRKHHTbXGCRe2C67McR3LmwfCzw2lkb039b7+5ej9NZIOZE7FvstPV4fyl+ t78thgNq3FN6kA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:11:17 2025 by rpki-client