This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json) Hash identifier: ks5lR4Wvd3Iwob+h0DiFiUhUtDj7XxSfy5njOQOpWNw= Subject key identifier: 76:0F:38:4A:5D:08:36:A9:10:21:90:58:4C:D5:3F:70:B3:01:31:E5 Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9 Certificate serial: 019AF540D86512BCAEB59CFEFAEE1AF4AB7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 20:00:58 +0000 Manifest this update: Sat 06 Dec 2025 20:00:58 +0000 Manifest next update: Sun 07 Dec 2025 20:00:58 +0000 Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: KaYg21zzlV1xx9xSK3bzOgdNSKPv8RwYEWtZahjg1L4=) 2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d8:65:12:bc:ae:b5:9c:fe:fa:ee:1a:f4:ab:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9 Validity Not Before: Dec 6 20:00:58 2025 GMT Not After : Dec 7 20:00:58 2025 GMT Subject: CN=760f384a5d0836a9102190584cd53f70b30131e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:48:6b:6d:b5:5d:1f:09:4f:19:23:32:82: d7:67:a0:21:39:b9:ec:93:f2:5f:11:55:9a:15:9d: 73:2c:54:33:4e:17:cd:dc:0a:6a:d0:6e:e1:d2:67: 78:cd:f8:79:dd:d0:07:ee:74:6b:c1:17:fd:e1:2d: 81:22:1a:e1:b9:81:3e:b9:b4:2c:8f:ef:37:6c:4f: c6:f3:f1:f5:a5:62:44:e1:3e:05:b9:13:97:2b:b0: 81:ce:e8:65:ee:e3:ec:92:a1:2e:9a:5b:a0:ec:5e: e1:b3:03:5e:ec:47:2a:36:37:51:e0:1b:7f:ca:6c: b0:df:be:56:98:06:8f:38:02:95:ff:7d:93:66:ea: 07:a5:36:87:86:f6:39:bf:0e:7f:74:88:46:70:48: 8b:5b:9b:2e:99:de:ae:e8:e5:ac:ff:59:58:f7:d4: ec:6b:77:2d:a8:69:c2:f9:58:c4:e7:8c:0a:5d:01: 8c:a2:75:4b:83:14:ca:cb:12:de:2d:56:45:c0:0b: cd:bd:98:7c:89:65:01:db:d6:7f:4d:e5:b4:41:d6: 2b:e7:76:dd:7e:53:26:9f:c9:18:8f:a8:6d:67:0e: 2e:26:93:19:93:c9:20:51:4f:84:30:25:8d:07:04: 1c:3c:d5:f5:83:6d:58:7a:83:dd:b4:ea:e0:68:ae: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:38:4A:5D:08:36:A9:10:21:90:58:4C:D5:3F:70:B3:01:31:E5 X509v3 Authority Key Identifier: keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:54:27:da:90:a9:7f:d1:c6:1a:f0:cc:14:e9:70:1a:35:21: 8a:bd:c6:af:2d:3c:73:e6:5e:01:e4:11:b4:eb:95:2f:4f:32: ca:55:f7:0c:9c:99:13:76:86:7e:5a:31:5a:0f:18:46:43:1c: 7d:3c:58:d7:93:c6:0e:02:ce:29:0c:77:2c:fb:48:be:93:68: d7:bf:dc:76:7d:39:5f:e5:9f:23:f3:c6:e2:ce:d3:49:ca:66: b9:76:24:8f:87:e1:25:65:51:27:c9:ce:8a:d4:d8:e4:d5:1b: 7a:2a:f7:a4:f1:21:04:08:b3:41:a4:59:a1:b8:20:68:ad:82: 03:c2:08:26:06:f6:d4:46:6b:9d:77:9d:eb:a7:41:5f:47:cd: f6:8a:12:b5:38:5a:69:56:c8:bf:74:71:44:61:da:91:b5:75: 67:9b:40:05:4d:fe:7b:d8:43:18:8b:47:9a:72:04:26:7f:d1: 19:d5:56:2d:6b:17:1c:a2:74:d2:7b:ce:f1:10:28:0b:61:ea: 6a:b1:41:40:62:74:90:b5:df:9d:10:c4:97:7f:3a:1d:ad:62: 4b:8d:31:0e:34:72:1b:8c:94:3e:19:00:e4:e1:f5:fd:d9:ed: e7:f1:cf:a3:e1:87:c8:97:0a:d2:3b:73:a3:3f:63:d9:73:05: 27:77:db:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNhlEryutZz++u4a9Kt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0 ZDVmYzkwHhcNMjUxMjA2MjAwMDU4WhcNMjUxMjA3MjAwMDU4WjAzMTEwLwYDVQQD Eyg3NjBmMzg0YTVkMDgzNmE5MTAyMTkwNTg0Y2Q1M2Y3MGIzMDEzMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXRIa221XR8JTxkjMoLXZ6AhObns k/JfEVWaFZ1zLFQzThfN3Apq0G7h0md4zfh53dAH7nRrwRf94S2BIhrhuYE+ubQs j+83bE/G8/H1pWJE4T4FuROXK7CBzuhl7uPskqEumlug7F7hswNe7EcqNjdR4Bt/ ymyw375WmAaPOAKV/32TZuoHpTaHhvY5vw5/dIhGcEiLW5sumd6u6OWs/1lY99Ts a3ctqGnC+VjE54wKXQGMonVLgxTKyxLeLVZFwAvNvZh8iWUB29Z/TeW0QdYr53bd flMmn8kYj6htZw4uJpMZk8kgUU+EMCWNBwQcPNX1g21YeoPdtOrgaK6A/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYPOEpdCDapECGQWEzVP3CzATHlMB8GA1UdIwQY MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt Y2QzYzE2MGE2ZjQ2LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2 LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1Qn2pCp f9HGGvDMFOlwGjUhir3Gry08c+ZeAeQRtOuVL08yylX3DJyZE3aGfloxWg8YRkMc fTxY15PGDgLOKQx3LPtIvpNo17/cdn05X+WfI/PG4s7TScpmuXYkj4fhJWVRJ8nO itTY5NUbeir3pPEhBAizQaRZobggaK2CA8IIJgb21EZrnXed66dBX0fN9ooStTha aVbIv3RxRGHakbV1Z5tABU3+e9hDGItHmnIEJn/RGdVWLWsXHKJ00nvO8RAoC2Hq arFBQGJ0kLXfnRDEl386Ha1iS40xDjRyG4yUPhkA5OH1/dnt5/HPo+GHyJcK0jtz oz9j2XMFJ3fbTA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:38 2025 by rpki-client