This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json) Hash identifier: Ka7mmniTPik29Ql8VKiN/Q+GBrmn3+Qjd6cdR7DAlCE= Subject key identifier: 28:88:FD:57:9D:75:ED:A3:4C:C6:AA:66:AD:23:E7:52:DB:71:50:ED Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Certificate serial: 019AF3898335647CCAF423A36B1466C58765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft Manifest number: 0DF7 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=) 2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=) 3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: Uqls+dm4CUp71SKdC6Q+/o9SpYof1kvylus8My3Y7Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:83:35:64:7c:ca:f4:23:a3:6b:14:66:c5:87:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=2888fd579d75eda34cc6aa66ad23e752db7150ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:26:2a:1b:67:4f:21:c6:56:14:89:b3:30: f5:7c:33:b1:e9:50:44:48:6e:40:30:da:9e:3e:52: 06:1e:e7:cf:df:3e:ad:7e:aa:2a:92:77:ae:57:92: f2:5d:78:fb:d4:06:a8:a4:db:7e:b1:24:ee:22:a6: ec:37:52:22:89:5d:a6:f2:b9:21:19:e0:1e:ec:06: 0a:51:2a:85:47:df:30:5d:41:c4:54:ea:bc:02:5e: 4a:e8:e1:16:68:6c:0d:9a:f8:37:ae:c4:f6:90:38: 15:6f:0c:e7:53:cc:55:38:ec:e1:bc:f1:c4:d6:fa: 60:20:ef:f6:fa:1f:bd:1c:22:8c:76:d9:b9:f0:d9: 3b:a4:f2:bf:26:30:ac:f9:ef:02:1a:3c:86:87:33: 7d:75:ef:8a:89:31:ae:1d:5f:10:dd:26:1c:ba:71: 4f:37:9a:69:27:2d:24:98:d3:3a:57:9c:08:e5:e1: 29:40:1a:4c:ca:54:f4:b2:0b:92:8e:c2:00:27:6b: 21:c0:39:a7:b0:c2:1b:7b:93:21:ad:75:e7:2f:88: 07:91:2d:ab:84:e8:4a:68:98:f7:38:a7:19:08:0a: 8a:22:06:4a:8e:fa:74:7e:21:ca:06:15:c0:f2:41: 16:12:d6:e6:b1:fd:04:73:71:96:17:0a:d8:4a:1d: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:88:FD:57:9D:75:ED:A3:4C:C6:AA:66:AD:23:E7:52:DB:71:50:ED X509v3 Authority Key Identifier: keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:53:be:cf:19:fd:2c:7d:44:a4:57:a5:59:34:5c:e9:2c: 31:8d:e2:bd:64:54:4a:88:f7:8c:94:4a:c8:94:7e:69:8b:b3: cd:dc:5a:f0:36:c0:e4:1a:ad:5e:13:d7:de:14:34:89:f4:fe: 99:ed:fb:3e:59:a4:c1:b0:4d:37:35:23:cf:a3:76:8b:4e:96: 24:9e:ff:aa:ad:f7:50:40:b7:e1:d9:53:50:fe:0c:b7:06:a8: a9:66:b1:36:9c:85:d6:37:14:80:ac:1d:fb:a8:87:08:c9:7e: b8:9c:05:0e:bc:8d:41:8f:df:ec:bf:e3:65:3c:8a:1d:48:04: 14:48:cf:38:52:b7:10:6e:c2:85:53:16:c2:eb:7f:b2:a7:11: 31:ab:d5:2e:fa:79:88:e6:07:1d:5b:6b:49:cf:dc:1b:d5:dc: 4a:52:a6:3f:2a:5f:79:2d:31:31:a0:50:94:e0:56:d7:fb:b3: 6e:7f:c1:87:3b:65:fc:d9:d1:8c:60:74:c1:71:72:9a:4e:da: 5e:2e:0e:48:39:12:b9:c1:ce:83:1f:de:e1:df:ba:6d:7c:05: e8:5a:6a:3b:e8:53:85:03:6e:75:d4:7a:f6:2a:8c:16:a0:64: 7e:b1:fb:36:35:de:30:5d:2a:19:49:22:ee:d4:3b:ef:42:45: ed:9c:97:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYM1ZHzK9COjaxRmxYdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2 MTljY2QwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EygyODg4ZmQ1NzlkNzVlZGEzNGNjNmFhNjZhZDIzZTc1MmRiNzE1MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VgmKhtnTyHGVhSJszD1fDOx6VBE SG5AMNqePlIGHufP3z6tfqoqkneuV5LyXXj71AaopNt+sSTuIqbsN1IiiV2m8rkh GeAe7AYKUSqFR98wXUHEVOq8Al5K6OEWaGwNmvg3rsT2kDgVbwznU8xVOOzhvPHE 1vpgIO/2+h+9HCKMdtm58Nk7pPK/JjCs+e8CGjyGhzN9de+KiTGuHV8Q3SYcunFP N5ppJy0kmNM6V5wI5eEpQBpMylT0sguSjsIAJ2shwDmnsMIbe5MhrXXnL4gHkS2r hOhKaJj3OKcZCAqKIgZKjvp0fiHKBhXA8kEWEtbmsf0Ec3GWFwrYSh19HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiI/Vedde2jTMaqZq0j51LbcVDtMB8GA1UdIwQY MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAdTvs8Z /Sx9RKRXpVk0XOksMY3ivWRUSoj3jJRKyJR+aYuzzdxa8DbA5BqtXhPX3hQ0ifT+ me37PlmkwbBNNzUjz6N2i06WJJ7/qq33UEC34dlTUP4MtwaoqWaxNpyF1jcUgKwd +6iHCMl+uJwFDryNQY/f7L/jZTyKHUgEFEjPOFK3EG7ChVMWwut/sqcRMavVLvp5 iOYHHVtrSc/cG9XcSlKmPypfeS0xMaBQlOBW1/uzbn/Bhztl/NnRjGB0wXFymk7a Xi4OSDkSucHOgx/e4d+6bXwF6FpqO+hThQNuddR69iqMFqBkfrH7NjXeMF0qGUki 7tQ770JF7ZyXOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:03 2025 by rpki-client