This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json) Hash identifier: XXHSXXebYTo2zPjJNdrwGPC1ApaQQhFD8UlN05ivpec= Subject key identifier: 36:75:24:59:95:FC:7A:7B:47:96:E5:90:F6:4A:0C:75:16:89:D7:D0 Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342 Certificate serial: 019AF31C283637313B62DFD8072CB2B4377D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft Manifest number: 156C Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=) 2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=) 3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: Zrek3aCVQWYFgc+iuqpEsmQcDKvvHCVm6MTVqjNBX7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:28:36:37:31:3b:62:df:d8:07:2c:b2:b4:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=3675245995fc7a7b4796e590f64a0c751689d7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:d0:e5:e0:ca:4f:90:aa:67:2c:de:1d:98: 46:4b:63:ab:47:0e:50:1a:60:0a:e9:f3:59:1c:d3: 9e:46:7c:e8:f6:2a:dd:da:03:2c:e5:27:13:58:58: 0e:38:a5:76:bc:25:d5:33:5c:2c:5f:3e:4a:df:8f: 22:4a:d6:d4:2f:8c:a3:91:fe:93:df:cc:08:9a:07: c5:f2:1e:da:38:32:7f:bd:a9:93:d5:97:21:17:aa: 59:99:be:c6:84:e0:c1:0a:4d:16:7e:39:8e:2c:e3: 90:3a:84:1e:f5:3d:10:a8:de:41:57:cc:e1:e2:8e: 3d:12:36:ee:0c:c0:ee:ce:c5:58:e7:9d:52:72:9e: 2c:0d:e9:22:62:1e:57:65:64:f2:8d:a3:a3:c0:ee: 0b:70:9e:d5:58:74:7c:f2:a9:21:4d:1b:cd:d1:a5: 0c:50:cd:a2:5a:33:ff:07:d9:f7:da:5b:40:d2:5c: 0e:93:a2:aa:ef:59:9c:d4:89:d7:75:8d:6a:02:8d: dc:7e:91:8a:89:7b:a3:dc:8b:61:67:e4:e5:8a:e6: 24:0c:d7:47:4d:4a:57:73:3d:7b:9b:89:65:05:4d: 70:1c:fe:5b:88:42:91:c6:bf:f0:5d:85:5d:e1:e4: c4:2f:ca:ed:4f:46:c7:bb:e7:9b:95:ca:f4:5f:0c: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:75:24:59:95:FC:7A:7B:47:96:E5:90:F6:4A:0C:75:16:89:D7:D0 X509v3 Authority Key Identifier: keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a9:a0:66:f9:1f:e4:35:90:59:ea:d7:9e:0b:cd:0e:b5:2f: d7:66:c6:66:c6:50:60:97:54:ab:5f:77:25:fb:9b:b0:35:90: 07:aa:dd:f7:ec:40:1b:63:66:26:41:f1:46:21:b7:03:5e:6c: a7:a8:3b:cf:b3:6d:94:36:7e:ea:a6:c7:6b:df:92:30:11:41: 24:f2:98:af:b5:60:98:0d:c9:50:51:92:19:c4:b9:02:94:48: 0e:92:42:7f:33:c5:df:b7:0f:f5:cf:dd:42:64:b1:ed:f7:20: 56:e4:1f:02:e5:b1:49:e4:24:1f:4a:e3:93:38:64:02:d3:2d: 76:bc:61:73:e6:b1:00:86:27:99:5c:78:0e:a3:ee:7c:0a:84: 81:79:a9:f9:79:ef:0f:17:ff:11:27:d5:bc:98:f0:80:85:e9: 3e:34:72:e2:1d:e4:af:30:d5:ca:fb:0f:db:7e:b1:96:6f:e7: 0e:c5:2e:58:c1:31:fa:a4:da:00:bb:79:1a:42:91:a3:1e:85: cd:0c:df:e2:0f:7b:56:6f:58:9d:cc:54:05:7e:3b:b3:62:cc: 11:49:f7:c9:aa:f8:7f:57:ef:67:b4:e6:b0:68:71:07:38:c0: ea:6a:9e:29:93:86:ed:d5:ad:8e:4a:24:ee:2b:62:ee:51:30: af:19:bc:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCg2NzE7Yt/YByyytDd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh ZDQzNDIwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EygzNjc1MjQ1OTk1ZmM3YTdiNDc5NmU1OTBmNjRhMGM3NTE2ODlkN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45/Q5eDKT5CqZyzeHZhGS2OrRw5Q GmAK6fNZHNOeRnzo9ird2gMs5ScTWFgOOKV2vCXVM1wsXz5K348iStbUL4yjkf6T 38wImgfF8h7aODJ/vamT1ZchF6pZmb7GhODBCk0WfjmOLOOQOoQe9T0QqN5BV8zh 4o49EjbuDMDuzsVY551Scp4sDekiYh5XZWTyjaOjwO4LcJ7VWHR88qkhTRvN0aUM UM2iWjP/B9n32ltA0lwOk6Kq71mc1InXdY1qAo3cfpGKiXuj3IthZ+TliuYkDNdH TUpXcz17m4llBU1wHP5biEKRxr/wXYVd4eTEL8rtT0bHu+eblcr0XwzE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ1JFmV/Hp7R5blkPZKDHUWidfQMB8GA1UdIwQY MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3 LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKmgZvkf 5DWQWerXngvNDrUv12bGZsZQYJdUq193JfubsDWQB6rd9+xAG2NmJkHxRiG3A15s p6g7z7NtlDZ+6qbHa9+SMBFBJPKYr7VgmA3JUFGSGcS5ApRIDpJCfzPF37cP9c/d QmSx7fcgVuQfAuWxSeQkH0rjkzhkAtMtdrxhc+axAIYnmVx4DqPufAqEgXmp+Xnv Dxf/ESfVvJjwgIXpPjRy4h3krzDVyvsP236xlm/nDsUuWMEx+qTaALt5GkKRox6F zQzf4g97Vm9YncxUBX47s2LMEUn3yar4f1fvZ7TmsGhxBzjA6mqeKZOG7dWtjkok 7iti7lEwrxm86Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:40 2025 by rpki-client