This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json) Hash identifier: LvT+WM2TgVMAqT0thfL+8cRTqA2C8PDPPDciguMYjIY= Subject key identifier: 8F:2D:2E:7A:74:51:1D:37:42:60:35:1E:7E:7E:E0:B5:35:EE:C3:05 Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Certificate serial: 019B24ACAE2AD96A703B3E3A9F087C4A21F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft Manifest number: 0928 Signing time: Tue 16 Dec 2025 01:00:54 +0000 Manifest this update: Tue 16 Dec 2025 01:00:54 +0000 Manifest next update: Wed 17 Dec 2025 01:00:54 +0000 Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=) 2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: WJ4avg1IRRkOV+FmpK6rfMD6V9LKJ1x9dTDFrw7jK3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:ae:2a:d9:6a:70:3b:3e:3a:9f:08:7c:4a:21:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4 Validity Not Before: Dec 16 01:00:54 2025 GMT Not After : Dec 17 01:00:54 2025 GMT Subject: CN=8f2d2e7a74511d374260351e7e7ee0b535eec305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:72:7e:0d:0a:85:99:91:70:53:fa:de:de:98: 87:74:bd:05:ef:b1:e1:d7:77:1a:30:4b:1e:81:bd: 35:3f:05:41:7b:ae:b6:71:0c:93:57:26:d7:6a:fe: e2:36:7a:f6:28:ab:4f:27:ba:f2:2b:cf:ae:c3:ad: 15:8e:51:0c:8b:9b:3f:68:1d:88:47:80:d3:bd:99: 36:4d:73:0d:af:ca:f9:16:c6:85:9a:9b:e2:49:d2: cf:c3:c8:e2:86:9e:7b:f1:50:42:be:a7:7d:6b:dc: c2:3b:a0:af:6c:db:26:c9:ab:dd:0f:b8:2a:ac:30: e4:9c:03:13:0c:0e:d4:d3:9c:5f:16:1a:f3:5a:3e: c6:b5:0b:15:21:e2:9b:7c:a1:81:71:ac:6b:73:75: ff:49:aa:d2:0d:1e:9e:76:87:40:ea:e5:9c:82:6f: 32:52:56:aa:5e:14:8c:e6:4f:41:5e:69:49:2d:19: 09:ce:1e:99:cf:4c:4f:fc:e4:8f:23:1d:5e:6d:32: 1b:1e:64:1f:1b:42:4c:f3:94:90:b6:96:38:b2:3d: ab:28:ad:27:5f:23:95:68:d5:2f:cf:33:a8:ff:f9: 22:55:12:49:db:7e:26:df:60:e3:72:cf:4b:b0:07: e3:bf:53:c2:ec:79:80:61:11:d6:9a:5f:a7:68:d0: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:2E:7A:74:51:1D:37:42:60:35:1E:7E:7E:E0:B5:35:EE:C3:05 X509v3 Authority Key Identifier: keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:93:16:ba:96:41:92:a0:a1:bc:b6:3b:cb:6a:4a:be:7e:7b: 2e:1d:b8:22:b7:0e:cf:99:be:0d:50:27:b6:ef:6d:16:10:f5: 7c:bb:9f:60:5e:b0:24:36:04:2c:17:ab:3a:6b:67:97:cf:53: 0f:d5:34:ad:eb:61:f6:94:f1:ae:dc:62:a9:1a:91:a3:43:fe: 5d:62:4d:22:28:c9:83:9b:32:7b:23:f0:e1:40:70:82:25:37: 32:4c:23:96:56:ad:01:b7:63:59:9b:e0:3a:47:9f:64:ad:b7: c5:ef:84:71:0b:04:fb:dc:40:06:32:94:d9:0d:48:3c:e8:e0: f1:70:80:95:f5:e1:7b:5e:12:45:e4:9d:e9:75:77:76:e2:7d: b0:60:fe:23:24:a3:08:68:32:b0:1d:25:4c:58:c2:d4:c7:55: 0f:82:da:1f:fd:02:8e:36:36:f6:ca:98:64:8f:ed:e3:f4:f5: e2:b4:9e:bd:5c:cc:76:47:40:1a:3d:23:14:05:8c:f9:ad:e6: ca:c6:f7:f9:19:bb:f0:a3:72:dd:c9:46:c8:31:09:71:35:36: 9c:7d:c0:73:46:ef:ef:53:81:31:9a:c2:d9:a2:84:c3:0f:25: 39:ed:fc:62:1f:70:19:ad:c8:80:88:3e:6e:d2:78:57:9c:86: 89:5e:64:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrK4q2WpwOz46nwh8SiH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw Y2RkYjQwHhcNMjUxMjE2MDEwMDU0WhcNMjUxMjE3MDEwMDU0WjAzMTEwLwYDVQQD Eyg4ZjJkMmU3YTc0NTExZDM3NDI2MDM1MWU3ZTdlZTBiNTM1ZWVjMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXJ+DQqFmZFwU/re3piHdL0F77Hh 13caMEsegb01PwVBe662cQyTVybXav7iNnr2KKtPJ7ryK8+uw60VjlEMi5s/aB2I R4DTvZk2TXMNr8r5FsaFmpviSdLPw8jihp578VBCvqd9a9zCO6CvbNsmyavdD7gq rDDknAMTDA7U05xfFhrzWj7GtQsVIeKbfKGBcaxrc3X/SarSDR6edodA6uWcgm8y UlaqXhSM5k9BXmlJLRkJzh6Zz0xP/OSPIx1ebTIbHmQfG0JM85SQtpY4sj2rKK0n XyOVaNUvzzOo//kiVRJJ234m32Djcs9LsAfjv1PC7HmAYRHWml+naNCdgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8tLnp0UR03QmA1Hn5+4LU17sMFMB8GA1UdIwQY MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt ZjliZDY0Y2E2ZTRjLzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJMWupZB kqChvLY7y2pKvn57Lh24IrcOz5m+DVAntu9tFhD1fLufYF6wJDYELBerOmtnl89T D9U0reth9pTxrtxiqRqRo0P+XWJNIijJg5syeyPw4UBwgiU3MkwjllatAbdjWZvg OkefZK23xe+EcQsE+9xABjKU2Q1IPOjg8XCAlfXhe14SReSd6XV3duJ9sGD+IySj CGgysB0lTFjC1MdVD4LaH/0CjjY29sqYZI/t4/T14rSevVzMdkdAGj0jFAWM+a3m ysb3+Rm78KNy3clGyDEJcTU2nH3Ac0bv71OBMZrC2aKEww8lOe38Yh9wGa3IgIg+ btJ4V5yGiV5kTw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:12 2025 by rpki-client