This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json) Hash identifier: N+L5rmc2Wm+RTgcEFiRBuxczK0KNNKwHGbm+Aa+nQrk= Subject key identifier: FC:8A:C3:99:0D:3D:E6:AC:8A:64:7A:FB:FE:E3:A5:FD:43:09:9D:86 Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Certificate serial: 019AF31C05FB124FD26E30A414FFA4215D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 10:01:31 +0000 Manifest this update: Sat 06 Dec 2025 10:01:31 +0000 Manifest next update: Sun 07 Dec 2025 10:01:31 +0000 Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=) 2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: IiC6itN6NYVf+rrk8KNcIeApUnOC893eiDp+Iu11jtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:05:fb:12:4f:d2:6e:30:a4:14:ff:a4:21:5d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Validity Not Before: Dec 6 10:01:31 2025 GMT Not After : Dec 7 10:01:31 2025 GMT Subject: CN=fc8ac3990d3de6ac8a647afbfee3a5fd43099d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:88:74:99:fd:4a:19:d5:dd:5f:db:b7:e2: 6e:06:15:51:43:d8:86:0c:af:60:7d:39:6f:de:02: b2:de:72:30:b9:4b:2a:5d:ba:d8:58:f5:be:2f:20: 41:9d:a4:dc:7e:f5:c8:40:76:1a:b2:f8:88:24:e3: cc:40:a0:63:02:36:0b:7e:e1:57:d4:b0:35:99:98: 5a:33:8a:60:ed:1b:3f:34:23:1f:28:84:9f:31:91: bc:b7:0d:13:e2:37:a4:0c:9f:2d:2c:62:d1:91:b3: b9:5f:5c:73:c8:2b:7b:48:68:de:60:95:92:9f:14: fc:88:61:d6:9f:67:80:b8:75:90:99:73:e3:ba:1f: 58:30:79:6f:98:8b:0b:3d:ff:a7:4f:75:44:9c:7e: 88:fa:90:76:ec:90:32:d6:0e:6c:82:41:ab:24:d0: 27:29:e8:cd:ed:fa:48:23:c7:35:d0:79:02:ee:e1: 56:3a:5f:93:3e:b6:98:bb:e6:f1:f9:01:2a:ed:68: 6f:b6:68:52:3a:d7:9b:1a:15:36:43:b6:43:70:4a: 36:26:ac:55:c1:0a:cf:44:6c:c1:f2:e1:f3:d3:0b: 36:fa:f6:f8:74:d5:e6:ba:15:48:07:6b:8f:9e:12: 6e:f4:18:d5:a1:12:3b:f6:cb:14:35:d6:aa:24:4c: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8A:C3:99:0D:3D:E6:AC:8A:64:7A:FB:FE:E3:A5:FD:43:09:9D:86 X509v3 Authority Key Identifier: keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:da:59:12:74:08:ae:f9:2f:35:91:0d:cc:9c:b2:75:2c: ee:f0:f0:45:c7:b8:21:ce:b9:46:1c:74:59:18:b0:f1:90:f5: 54:44:e0:bb:98:bb:87:46:77:d6:cb:c6:8d:56:b9:d1:27:26: f9:8a:ec:b2:c5:f6:29:a4:02:d2:a5:9c:23:fb:41:73:8f:78: 53:1e:03:85:eb:84:c6:73:a6:6b:dd:a5:ea:72:7b:da:bd:2f: 35:2b:01:c7:d5:dd:92:4f:6d:3d:ad:62:90:4f:1f:4e:93:67: 90:f3:0a:f1:e0:24:02:dc:6f:e3:e8:26:09:53:cb:60:a5:08: ea:98:c1:62:ec:70:54:d7:16:74:a3:75:a4:30:a9:c4:2a:5a: d7:7e:88:66:7c:b9:ac:a7:7d:19:28:5a:e2:28:9f:88:41:ea: 5f:72:e4:ae:1c:60:2f:9f:85:90:f6:6d:4f:07:8c:70:6f:f1: d2:47:8e:a0:8f:1c:ca:5e:f1:3b:a2:75:93:2e:fb:d6:8e:c2: d6:e0:85:52:1b:eb:f5:62:90:61:a9:b4:3e:fb:d8:27:39:64: 92:e0:a1:9c:69:db:29:dc:d2:2f:e2:f7:52:54:03:ba:79:37: a6:0a:a6:15:43:47:30:c1:5b:27:e1:b7:22:06:4b:1a:1d:4b: fb:35:d7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAX7Ek/SbjCkFP+kIV1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk NjRmZTQwHhcNMjUxMjA2MTAwMTMxWhcNMjUxMjA3MTAwMTMxWjAzMTEwLwYDVQQD EyhmYzhhYzM5OTBkM2RlNmFjOGE2NDdhZmJmZWUzYTVmZDQzMDk5ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdiIdJn9ShnV3V/bt+JuBhVRQ9iG DK9gfTlv3gKy3nIwuUsqXbrYWPW+LyBBnaTcfvXIQHYasviIJOPMQKBjAjYLfuFX 1LA1mZhaM4pg7Rs/NCMfKISfMZG8tw0T4jekDJ8tLGLRkbO5X1xzyCt7SGjeYJWS nxT8iGHWn2eAuHWQmXPjuh9YMHlvmIsLPf+nT3VEnH6I+pB27JAy1g5sgkGrJNAn KejN7fpII8c10HkC7uFWOl+TPraYu+bx+QEq7WhvtmhSOtebGhU2Q7ZDcEo2JqxV wQrPRGzB8uHz0ws2+vb4dNXmuhVIB2uPnhJu9BjVoRI79ssUNdaqJEyIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyKw5kNPeasimR6+/7jpf1DCZ2GMB8GA1UdIwQY MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqLaWRJ0 CK75LzWRDcycsnUs7vDwRce4Ic65Rhx0WRiw8ZD1VETgu5i7h0Z31svGjVa50Scm +YrsssX2KaQC0qWcI/tBc494Ux4DheuExnOma92l6nJ72r0vNSsBx9Xdkk9tPa1i kE8fTpNnkPMK8eAkAtxv4+gmCVPLYKUI6pjBYuxwVNcWdKN1pDCpxCpa136IZny5 rKd9GSha4iifiEHqX3LkrhxgL5+FkPZtTweMcG/x0keOoI8cyl7xO6J1ky771o7C 1uCFUhvr9WKQYam0PvvYJzlkkuChnGnbKdzSL+L3UlQDunk3pgqmFUNHMMFbJ+G3 IgZLGh1L+zXXGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:07 2025 by rpki-client