This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json) Hash identifier: r2XjAwWCbz2E21oTZI1cgiWRaByfc2iOWn09ke9M4Ao= Subject key identifier: BC:C4:DA:2D:9E:B7:41:E6:65:02:A1:2D:47:3C:04:3B:07:DD:D3:30 Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14 Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214 Certificate serial: 019AF49C3444ADECE2EB888011EDF2F69178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft Manifest number: 1238 Signing time: Sat 06 Dec 2025 17:01:08 +0000 Manifest this update: Sat 06 Dec 2025 17:01:08 +0000 Manifest next update: Sun 07 Dec 2025 17:01:08 +0000 Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: ZCLuxfXElbtpFGqAirc2hhWT2pxNXmnjnJEE9dO8unI=) 2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:34:44:ad:ec:e2:eb:88:80:11:ed:f2:f6:91:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214 Validity Not Before: Dec 6 17:01:08 2025 GMT Not After : Dec 7 17:01:08 2025 GMT Subject: CN=bcc4da2d9eb741e66502a12d473c043b07ddd330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:86:53:73:ae:78:6b:8b:97:a1:bd:30:ee: 80:2f:d3:80:9f:fa:b1:a6:f7:65:91:77:f7:02:77: 98:7f:c6:23:fa:35:df:99:34:3c:d4:26:c9:34:a9: a9:00:28:2a:ba:33:e0:9c:85:d8:37:67:52:4b:2e: 6c:51:29:c2:90:dc:40:cd:07:88:a0:79:77:8f:99: 1e:ca:45:a2:12:8f:35:de:87:70:25:7e:04:35:d5: 01:a5:60:a5:68:ec:8a:f0:af:d1:5b:c8:89:7c:2a: 82:d7:ec:91:9e:d5:70:a6:2d:aa:13:77:23:f8:5e: 36:95:ec:40:22:1f:51:e7:5a:f1:64:2f:e8:58:f3: 87:4a:54:aa:af:6e:e3:bb:bb:4d:95:17:07:f8:d4: c4:e8:b1:e2:07:67:99:05:01:f2:a1:84:fe:ab:28: f5:dc:e8:9d:21:cf:2c:13:b6:16:df:57:35:17:dc: 2e:ca:e2:e8:01:30:11:82:41:fa:12:45:b4:a3:a9: 33:d7:c6:bf:34:37:e3:04:b1:97:5a:fa:99:5f:c9: b1:0f:97:85:8d:01:19:3b:45:5a:09:76:bd:7b:37: bb:f0:89:d6:32:29:25:67:98:86:44:50:ba:70:6a: 1c:ee:28:08:ca:4d:da:b6:d7:77:dc:41:5c:34:8e: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:DA:2D:9E:B7:41:E6:65:02:A1:2D:47:3C:04:3B:07:DD:D3:30 X509v3 Authority Key Identifier: keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f8:07:fa:1b:8d:17:0a:f3:78:53:52:a8:ce:c9:b1:24:18: 35:4b:c5:c0:93:81:6b:b6:ad:77:ba:8f:9a:ec:02:ff:69:25: 6e:67:95:01:59:91:40:80:16:03:a2:2d:39:15:6e:e6:16:29: 68:72:70:52:49:85:1e:a2:2b:92:9f:a3:14:cb:a3:0f:79:5b: 34:08:af:25:3e:a8:df:7c:c1:6c:80:68:16:2e:51:7f:a8:68: 0e:f4:51:98:2d:41:7d:c8:c2:22:23:e3:a5:9e:0b:d0:ce:9c: 29:fb:0f:bd:33:cc:26:4b:96:8e:e8:b0:87:40:a1:79:bb:04: ef:2c:94:27:5c:79:a3:07:9c:29:57:4a:d2:cb:79:34:d3:36: 30:12:09:6b:01:5a:28:40:1e:0e:5a:0f:24:e6:b7:1e:f0:4d: e8:96:e9:03:9a:48:bf:50:eb:20:b2:dc:0a:d1:4a:98:f7:d2: e3:cf:d3:53:7d:3a:71:d8:e4:30:72:1a:aa:68:55:ce:69:b4: 21:2f:42:fe:49:56:48:3d:8f:16:0a:89:25:ae:a1:88:71:b9: 5c:ff:7e:9e:80:42:9d:f7:06:bf:07:5b:6c:43:e6:b7:ee:f8: 55:cc:59:17:c9:3e:b3:96:a5:d0:b8:d4:94:08:3c:7d:5e:6e: 22:18:64:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDRErezi64iAEe3y9pF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNmU5MDZmODJiM2Q1MTU1NjU5ZGFlNGQwODY3NjllZjEy YTgyMTQwHhcNMjUxMjA2MTcwMTA4WhcNMjUxMjA3MTcwMTA4WjAzMTEwLwYDVQQD EyhiY2M0ZGEyZDllYjc0MWU2NjUwMmExMmQ0NzNjMDQzYjA3ZGRkMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZiGU3OueGuLl6G9MO6AL9OAn/qx pvdlkXf3AneYf8Yj+jXfmTQ81CbJNKmpACgqujPgnIXYN2dSSy5sUSnCkNxAzQeI oHl3j5keykWiEo813odwJX4ENdUBpWClaOyK8K/RW8iJfCqC1+yRntVwpi2qE3cj +F42lexAIh9R51rxZC/oWPOHSlSqr27ju7tNlRcH+NTE6LHiB2eZBQHyoYT+qyj1 3OidIc8sE7YW31c1F9wuyuLoATARgkH6EkW0o6kz18a/NDfjBLGXWvqZX8mxD5eF jQEZO0VaCXa9eze78InWMiklZ5iGRFC6cGoc7igIyk3attd33EFcNI4qGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzE2i2et0HmZQKhLUc8BDsH3dMwMB8GA1UdIwQY MBaAFEBukG+Cs9UVVlna5NCGdp7xKoIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgt YTE4YTA1MTI3NzZjLzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgtYTE4YTA1MTI3NzZj LzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvgH+huN FwrzeFNSqM7JsSQYNUvFwJOBa7atd7qPmuwC/2klbmeVAVmRQIAWA6ItORVu5hYp aHJwUkmFHqIrkp+jFMujD3lbNAivJT6o33zBbIBoFi5Rf6hoDvRRmC1BfcjCIiPj pZ4L0M6cKfsPvTPMJkuWjuiwh0ChebsE7yyUJ1x5owecKVdK0st5NNM2MBIJawFa KEAeDloPJOa3HvBN6JbpA5pIv1DrILLcCtFKmPfS48/TU306cdjkMHIaqmhVzmm0 IS9C/klWSD2PFgqJJa6hiHG5XP9+noBCnfcGvwdbbEPmt+74VcxZF8k+s5al0LjU lAg8fV5uIhhkAA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:33 2025 by rpki-client