This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json) Hash identifier: TQPbcCUjOEgePInoC25SKsqjDRSYCSpT22jwWkKBD98= Subject key identifier: CE:A0:C4:FD:CE:17:DE:B0:78:CB:9B:A6:D0:EA:AF:5B:13:4F:20:A6 Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Certificate serial: 019B3532D342AE07B789361F6A93C5DC2426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft Manifest number: 0E19 Signing time: Fri 19 Dec 2025 06:01:21 +0000 Manifest this update: Fri 19 Dec 2025 06:01:21 +0000 Manifest next update: Sat 20 Dec 2025 06:01:21 +0000 Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=) 2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=) 3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: DHIqy/qge0WjpscMMsNOtjoxGIGnxvaRVePYREB5AWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:d3:42:ae:07:b7:89:36:1f:6a:93:c5:dc:24:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Validity Not Before: Dec 19 06:01:21 2025 GMT Not After : Dec 20 06:01:21 2025 GMT Subject: CN=cea0c4fdce17deb078cb9ba6d0eaaf5b134f20a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:f7:e0:04:5c:99:fe:cc:42:20:35:9b:f6: 87:3f:f9:37:56:cd:b5:17:61:b7:3b:d7:f0:5a:fc: 4d:08:39:fd:65:5a:71:a6:b9:c7:0a:d4:14:18:4a: 87:26:d9:e3:29:5a:df:cc:7e:67:5b:d4:7a:66:7d: c5:9c:69:d8:04:71:5c:43:6e:3b:c6:4b:7b:42:23: 2a:fb:c3:a9:31:78:bb:e4:3a:aa:fb:33:46:29:12: 15:a5:72:16:34:0b:6d:0d:f8:92:9a:a0:ec:44:10: 0d:f1:2a:48:e0:8f:85:1b:3d:19:b1:7a:c2:dd:46: b7:14:33:63:2a:3a:aa:21:1c:9d:28:2b:ab:b1:24: 39:a1:81:50:be:95:42:2a:75:b2:09:44:6d:97:2f: 61:28:9e:32:21:d9:b0:58:f1:9f:21:2e:36:cd:70: 95:24:c7:87:fd:ee:62:27:97:ee:0e:75:bf:d7:7a: 95:3d:06:80:e7:19:63:13:47:b2:ba:27:69:a0:cc: ac:53:7c:f2:91:5e:c2:e1:4a:ed:ab:b7:f7:31:e8: e1:9a:4c:ba:f8:4b:35:e8:d4:21:11:da:51:28:a2: 3f:cd:e3:00:a4:90:4d:cb:7c:83:c3:f9:e0:47:8b: 0a:f4:7a:f2:06:1c:11:80:d8:90:14:75:8c:60:fe: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:C4:FD:CE:17:DE:B0:78:CB:9B:A6:D0:EA:AF:5B:13:4F:20:A6 X509v3 Authority Key Identifier: keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:17:b9:c1:83:cf:34:2f:55:91:c7:3f:15:75:db:0b:de:39: 97:c0:50:32:fb:0f:9e:7c:57:00:8a:da:59:26:0a:db:54:0e: 83:6f:dc:da:0d:65:3a:37:d3:83:00:f8:62:e5:e7:05:24:a4: d9:0f:f8:90:46:a0:80:92:90:f3:44:9e:a2:21:d6:a3:85:c8: b6:0f:7c:2f:3f:a0:82:f5:fa:8d:74:f0:89:23:63:92:59:e9: ee:98:29:e3:95:7a:fc:d4:c9:20:79:6d:8a:01:60:df:21:30: 2e:2b:ed:c6:6d:5e:b6:7b:11:ad:31:a1:2a:cc:80:d1:8a:60: 13:02:c9:e2:9c:5c:2e:45:5e:4a:5d:62:bf:eb:19:e5:0a:97: 1c:b9:a5:91:c8:08:ac:d8:fa:9a:53:49:26:02:89:67:34:5a: 35:ff:9c:39:0d:9f:d2:e9:34:ec:96:6b:3e:75:c2:76:94:5b: bf:7e:62:0a:e5:e7:cf:74:9a:fc:3e:af:1d:b9:2e:7e:34:8d: 0e:26:fc:9d:52:72:9d:86:af:49:9e:cc:72:96:00:d1:3e:8d: 41:88:bd:a5:64:d8:c2:03:61:a9:ad:d1:99:27:04:e4:d6:dc: 2b:68:1c:b2:67:f4:67:46:63:6c:5f:72:b6:dc:2b:8a:d5:1e: 49:11:a6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtNCrge3iTYfapPF3CQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2 MTljY2QwHhcNMjUxMjE5MDYwMTIxWhcNMjUxMjIwMDYwMTIxWjAzMTEwLwYDVQQD EyhjZWEwYzRmZGNlMTdkZWIwNzhjYjliYTZkMGVhYWY1YjEzNGYyMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzz34ARcmf7MQiA1m/aHP/k3Vs21 F2G3O9fwWvxNCDn9ZVpxprnHCtQUGEqHJtnjKVrfzH5nW9R6Zn3FnGnYBHFcQ247 xkt7QiMq+8OpMXi75Dqq+zNGKRIVpXIWNAttDfiSmqDsRBAN8SpI4I+FGz0ZsXrC 3Ua3FDNjKjqqIRydKCursSQ5oYFQvpVCKnWyCURtly9hKJ4yIdmwWPGfIS42zXCV JMeH/e5iJ5fuDnW/13qVPQaA5xljE0eyuidpoMysU3zykV7C4Urtq7f3Mejhmky6 +Es16NQhEdpRKKI/zeMApJBNy3yDw/ngR4sK9HryBhwRgNiQFHWMYP7K6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6gxP3OF96weMubptDqr1sTTyCmMB8GA1UdIwQY MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRe5wYPP NC9Vkcc/FXXbC945l8BQMvsPnnxXAIraWSYK21QOg2/c2g1lOjfTgwD4YuXnBSSk 2Q/4kEaggJKQ80SeoiHWo4XItg98Lz+ggvX6jXTwiSNjklnp7pgp45V6/NTJIHlt igFg3yEwLivtxm1etnsRrTGhKsyA0YpgEwLJ4pxcLkVeSl1iv+sZ5QqXHLmlkcgI rNj6mlNJJgKJZzRaNf+cOQ2f0uk07JZrPnXCdpRbv35iCuXnz3Sa/D6vHbkufjSN Dib8nVJynYavSZ7McpYA0T6NQYi9pWTYwgNhqa3RmScE5NbcK2gcsmf0Z0ZjbF9y ttwritUeSRGmNw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:17:51 2025 by rpki-client