This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json) Hash identifier: eu1dsVb8C//Wux8TJlHOQiJfpg9Qiaa5klHV7tf0cIw= Subject key identifier: 65:15:16:77:4F:66:1C:CD:3E:38:0E:A1:5A:FB:9A:70:CF:5B:4E:57 Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Certificate serial: 019AF1D1CE64A6E8141AF2295EB1DCC4BF47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft Manifest number: 1456 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=) 2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=) 3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: z43XbFWe9i2wvh4+3h8w3SVTpOboM6lHfib4DIke2ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ce:64:a6:e8:14:1a:f2:29:5e:b1:dc:c4:bf:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=651516774f661ccd3e380ea15afb9a70cf5b4e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:c8:87:6f:2f:71:f4:e4:f2:88:1e:57:a7: 16:2d:fc:65:0a:fb:1e:31:33:28:a5:77:c9:82:9c: 33:f8:a2:4c:75:82:30:86:80:99:7c:16:0c:b2:28: ea:94:40:dd:01:ac:d7:e4:f1:b3:96:0b:c5:0d:43: 89:ea:9c:4a:78:7b:56:ce:8b:02:5a:c7:48:01:02: 07:3b:35:03:3a:4c:5d:96:2c:4f:67:78:9c:f3:15: 2f:c8:9e:06:5c:c6:26:22:6c:80:69:84:2f:e4:f7: f0:c4:9a:b8:25:0a:6b:6a:35:ac:e4:2f:f1:8d:41: 79:b8:9e:3a:29:2c:26:b9:e3:89:b2:6c:03:d4:3d: 33:f0:33:66:4c:04:93:d5:5a:35:92:6f:fd:1b:2b: dc:d4:69:7e:4f:52:9c:1b:22:71:ad:c4:e6:d1:3a: 55:fc:8d:37:ac:7b:32:77:a2:95:36:39:c6:6f:32: 7a:6a:ab:d3:3d:92:4a:bd:5a:a3:84:f1:9d:4c:0f: ff:f2:98:3b:77:8e:21:fa:4e:2b:a4:ab:b3:78:d4: 5b:c9:d6:93:f9:7c:0c:7a:c8:99:de:3a:36:6f:bf: f4:1b:0b:e8:02:c2:2e:7e:78:89:08:27:0d:4d:6f: c4:e0:a8:9e:cc:41:8c:7d:2b:c2:70:72:78:16:84: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:15:16:77:4F:66:1C:CD:3E:38:0E:A1:5A:FB:9A:70:CF:5B:4E:57 X509v3 Authority Key Identifier: keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0c:b0:35:36:3f:d7:47:56:ab:f2:22:8d:74:e4:26:24:bb: 4d:fe:fb:58:55:82:3d:18:92:48:db:36:94:97:a4:c1:b1:7a: 70:7a:89:b2:2c:18:23:d3:03:3a:03:0e:ef:7b:3c:44:0c:5a: 1a:87:be:de:39:39:c2:99:c1:6e:f1:5e:06:e8:df:c6:e7:e5: 2f:ec:6a:f3:5d:fe:b5:7b:d0:4f:0a:4a:78:c9:f0:07:8f:d3: fe:91:ab:09:36:b5:5a:23:1c:d5:86:3b:6d:3d:5e:22:a4:8b: e2:12:3e:71:50:1c:4b:6e:3f:37:f2:88:39:20:10:2d:5f:c7: ab:a0:50:bb:af:8a:66:73:b0:5a:0d:00:68:ba:52:32:9a:db: 92:c3:c9:6c:21:47:e9:41:0c:87:b8:8a:7b:d6:77:e9:12:c4: e7:46:ef:0c:53:45:56:3e:fb:d9:77:45:11:75:63:c0:b1:21: 0f:7a:0c:2e:ca:ff:aa:51:22:f0:2b:2a:a0:c3:a7:9d:f4:ab: 8e:dd:53:8a:fa:fe:e7:59:91:d6:44:08:ef:0b:28:61:e8:5e: bf:a2:a9:b2:a6:f3:9b:d9:c2:b3:78:1f:76:08:f2:38:d0:7b: bf:fd:75:73:25:ea:27:ef:84:08:19:24:e7:19:db:3f:1e:db: 7e:42:2b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c5kpugUGvIpXrHcxL9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh MmE1ZWQwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg2NTE1MTY3NzRmNjYxY2NkM2UzODBlYTE1YWZiOWE3MGNmNWI0ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mbIh28vcfTk8ogeV6cWLfxlCvse MTMopXfJgpwz+KJMdYIwhoCZfBYMsijqlEDdAazX5PGzlgvFDUOJ6pxKeHtWzosC WsdIAQIHOzUDOkxdlixPZ3ic8xUvyJ4GXMYmImyAaYQv5PfwxJq4JQprajWs5C/x jUF5uJ46KSwmueOJsmwD1D0z8DNmTAST1Vo1km/9Gyvc1Gl+T1KcGyJxrcTm0TpV /I03rHsyd6KVNjnGbzJ6aqvTPZJKvVqjhPGdTA//8pg7d44h+k4rpKuzeNRbydaT +XwMesiZ3jo2b7/0GwvoAsIufniJCCcNTW/E4KiezEGMfSvCcHJ4FoTOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUVFndPZhzNPjgOoVr7mnDPW05XMB8GA1UdIwQY MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQywNTY/ 10dWq/IijXTkJiS7Tf77WFWCPRiSSNs2lJekwbF6cHqJsiwYI9MDOgMO73s8RAxa Goe+3jk5wpnBbvFeBujfxuflL+xq813+tXvQTwpKeMnwB4/T/pGrCTa1WiMc1YY7 bT1eIqSL4hI+cVAcS24/N/KIOSAQLV/Hq6BQu6+KZnOwWg0AaLpSMprbksPJbCFH 6UEMh7iKe9Z36RLE50bvDFNFVj772XdFEXVjwLEhD3oMLsr/qlEi8CsqoMOnnfSr jt1Tivr+51mR1kQI7wsoYehev6Kpsqbzm9nCs3gfdgjyONB7v/11cyXqJ++ECBkk 5xnbPx7bfkIrQg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:29 2025 by rpki-client