This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json) Hash identifier: d3iwM0YMboH/UeHIR5bTje3uZif+aTqCkX6XivZ3418= Subject key identifier: 5A:69:BD:6E:8D:E8:1C:B6:37:78:A1:03:D8:37:45:12:39:BC:D8:54 Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3 Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3 Certificate serial: 019AF1D1D66D4A337C9E278C46B38D5524FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft Manifest number: 0A81 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: jkkoQMuvF4bFMNnrv2XbrfEhXW/bJpSHIDmGTO3yK5U=) 2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d6:6d:4a:33:7c:9e:27:8c:46:b3:8d:55:24:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=5a69bd6e8de81cb63778a103d837451239bcd854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:1c:a3:81:38:ed:3a:1f:40:ea:ac:a1:27: 08:ec:0a:f2:a0:e2:66:e9:c9:ff:d4:c1:38:9a:16: ea:3c:63:42:a6:64:37:b6:79:cd:4f:d4:aa:2b:bd: 91:e6:5b:95:4f:a4:e6:03:f5:3c:24:2b:1a:cc:ee: 09:29:0f:fd:92:7b:53:03:b6:f3:3b:b6:d2:9b:db: 42:ab:0c:3f:c8:94:71:7b:d9:b3:01:84:52:7b:c4: 95:79:1a:7e:0e:d0:41:96:04:e9:3d:5d:1a:5d:99: 5b:e8:a1:b8:d4:db:6e:ca:fc:59:cf:f0:98:cf:0d: 7e:30:ed:7c:82:1d:c9:fc:d3:7b:ee:6c:eb:a4:0c: e7:88:69:2e:bb:da:0c:12:1c:4d:68:df:c8:45:1d: 7a:eb:9a:84:9c:eb:d4:7d:7b:1b:30:bf:ab:5d:3e: d3:ed:54:b1:99:f4:bd:cd:ea:73:82:71:22:6a:e5: ef:f1:a1:91:21:97:3e:35:cc:d6:e3:5b:71:e3:dc: 46:27:79:be:a6:27:4b:bb:63:5b:de:7c:1d:24:03: 96:86:ed:cb:6b:d8:02:68:eb:ac:fb:0a:d8:34:b1: fd:e8:a9:da:8a:1a:87:7b:97:ad:cf:e7:11:7b:9a: 46:5f:70:2c:89:05:70:cc:01:b1:9d:e0:26:1d:9c: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:69:BD:6E:8D:E8:1C:B6:37:78:A1:03:D8:37:45:12:39:BC:D8:54 X509v3 Authority Key Identifier: keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7e:31:31:1e:03:f3:71:76:30:1b:9f:78:50:aa:5d:ec:1e: 8b:f5:4f:0f:0d:dc:3e:1c:ae:57:d2:00:0e:08:94:02:05:b9: 73:16:25:52:b3:8a:2f:4a:31:c1:ad:b0:0a:0e:4f:76:c9:13: 03:01:83:13:45:cf:d1:0f:7c:e9:48:c9:2a:d9:34:86:a7:41: 37:a3:5d:e0:57:f8:a7:69:db:70:e1:01:0c:aa:74:cc:12:6b: 76:ae:1d:8b:c0:f3:47:c5:86:dd:22:8f:cf:c2:52:85:15:f8: 7b:81:28:e0:00:52:68:e7:82:a3:91:ca:b2:58:61:8f:43:a1: ea:8a:e2:87:ea:43:18:e2:5e:ba:30:1b:ac:08:82:92:8a:2c: 0f:ce:0e:eb:c1:35:09:f6:8c:c9:86:f1:36:9f:ae:36:32:0e: c3:cc:c8:2e:2b:63:83:ae:64:f5:88:61:66:9b:48:08:f3:d3: 06:7b:d5:66:d0:ba:b3:ae:25:f5:4b:45:92:db:d1:aa:69:f5: 4e:0a:c4:c6:06:52:05:55:5d:c8:00:ae:ac:29:4a:20:58:09: 3e:e7:5d:65:a0:bf:4f:ea:88:4c:c0:eb:5d:6e:ab:c1:10:6a: c7:65:89:bb:a7:2e:df:61:b3:40:bb:8e:40:a7:64:63:ef:5e: b2:e1:0a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dZtSjN8nieMRrONVST/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5 M2U2ZTMwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD Eyg1YTY5YmQ2ZThkZTgxY2I2Mzc3OGExMDNkODM3NDUxMjM5YmNkODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM0co4E47TofQOqsoScI7AryoOJm 6cn/1ME4mhbqPGNCpmQ3tnnNT9SqK72R5luVT6TmA/U8JCsazO4JKQ/9kntTA7bz O7bSm9tCqww/yJRxe9mzAYRSe8SVeRp+DtBBlgTpPV0aXZlb6KG41NtuyvxZz/CY zw1+MO18gh3J/NN77mzrpAzniGkuu9oMEhxNaN/IRR1665qEnOvUfXsbML+rXT7T 7VSxmfS9zepzgnEiauXv8aGRIZc+NczW41tx49xGJ3m+pidLu2Nb3nwdJAOWhu3L a9gCaOus+wrYNLH96KnaihqHe5etz+cRe5pGX3AsiQVwzAGxneAmHZwZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFppvW6N6By2N3ihA9g3RRI5vNhUMB8GA1UdIwQY MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE34xMR4D 83F2MBufeFCqXewei/VPDw3cPhyuV9IADgiUAgW5cxYlUrOKL0oxwa2wCg5PdskT AwGDE0XP0Q986UjJKtk0hqdBN6Nd4Ff4p2nbcOEBDKp0zBJrdq4di8DzR8WG3SKP z8JShRX4e4Eo4ABSaOeCo5HKslhhj0Oh6orih+pDGOJeujAbrAiCkoosD84O68E1 CfaMyYbxNp+uNjIOw8zILitjg65k9YhhZptICPPTBnvVZtC6s64l9UtFktvRqmn1 TgrExgZSBVVdyACurClKIFgJPuddZaC/T+qITMDrXW6rwRBqx2WJu6cu32GzQLuO QKdkY+9esuEKYg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:02 2025 by rpki-client