This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json) Hash identifier: j/BOEYezfdWEl4zKbVjkJfRM4b1GPvCpC9mHdVebRaI= Subject key identifier: 7C:1E:58:E2:3F:1C:8C:33:DC:37:08:CA:DB:A9:39:7B:EC:B3:0F:39 Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c Certificate serial: 019AF12CD25E48D09E8BAA74F8CD52EBB082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=) 2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: 3XSku8fNXpqRaB+hPl3Bj595LtSxfH9NX6wpAU/G0uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d2:5e:48:d0:9e:8b:aa:74:f8:cd:52:eb:b0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=7c1e58e23f1c8c33dc3708cadba9397becb30f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:5f:bf:65:46:e3:72:4c:ef:ff:b3:98:8d: a8:de:3b:a7:2e:62:ce:fe:9f:1b:35:62:a8:88:cb: f3:3e:6b:eb:14:d0:ab:1b:07:d5:2f:1e:ca:10:01: 8d:d9:52:67:48:91:4c:a5:0b:76:a1:ed:08:0b:86: 97:64:5b:32:2d:d3:49:1d:ba:86:7b:47:c5:dd:10: c9:80:83:60:59:5c:62:50:ea:dc:1a:40:e8:08:c8: 06:ec:ea:6a:89:3c:7b:05:f9:cd:8e:31:8c:fb:eb: 81:61:8b:0e:03:00:e0:1a:f3:8f:d1:d6:95:d4:2a: fc:07:2a:bf:ea:c8:c2:c1:3d:cd:73:5f:de:5e:1f: d9:13:78:fe:c1:47:e6:46:2a:bc:c4:61:30:bb:a6: 17:21:b7:45:8f:da:d5:48:d3:6b:a9:32:5d:89:9d: 63:e8:f6:74:0c:59:e0:3c:76:a1:cd:ff:4d:b1:a3: 2b:20:ec:72:ad:db:24:0e:f0:76:29:06:a2:1a:33: 73:69:7c:84:ad:b0:01:c8:3c:63:bc:4d:c8:6d:52: 4e:e4:ee:fe:a0:15:cf:60:9a:ed:85:15:ce:25:34: 82:8e:3a:95:0d:3a:3d:c5:60:0f:e3:30:4c:75:b1: 95:cb:99:51:e5:36:12:a4:0b:21:70:a2:39:fa:36: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:58:E2:3F:1C:8C:33:DC:37:08:CA:DB:A9:39:7B:EC:B3:0F:39 X509v3 Authority Key Identifier: keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:b6:c8:18:0a:55:f2:aa:ee:56:06:7c:ef:43:1f:09:4f: 31:b5:87:f0:5a:d1:f8:bd:13:84:1c:af:b1:9d:ac:5d:73:b9: 37:59:d2:35:d6:60:5c:3f:44:4e:4f:a7:89:79:40:26:78:55: 30:0b:33:f7:ab:6c:a1:31:bd:58:f1:8d:f6:a6:1d:d8:fb:f9: cf:c9:cd:76:4e:43:6e:11:71:13:54:7d:7b:71:f1:a1:db:ad: 0f:74:e9:fd:36:9e:64:82:8c:c7:31:74:5a:08:7e:46:85:96: d1:5a:57:5e:3b:5b:be:f9:01:59:59:0c:72:65:d7:0e:fa:42: c8:fb:e5:8a:93:08:1f:10:20:7b:76:02:e8:27:4c:87:30:6f: 3f:0b:76:61:b5:14:e2:81:9c:aa:f1:09:c9:28:a2:1a:da:37: a0:5a:20:6d:91:f0:2f:88:ed:03:d2:c8:5e:7a:22:87:7b:09: 4f:c3:2b:81:61:8e:40:02:33:b4:db:07:07:26:b9:86:a5:6e: 5e:66:a0:3d:b6:44:9a:cb:d6:4b:ef:56:86:25:2c:05:e3:9c: db:55:70:5c:6d:26:11:59:a4:f7:29:9b:c0:ae:07:6e:95:45: 75:df:cc:5b:fc:ba:ac:b8:70:28:16:c5:d2:ec:eb:37:1a:42: 0d:35:e9:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNJeSNCei6p0+M1S67CCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NmUyNTdjMzJkOWRiYjgxOWQ1MTdkNTUwNTRmNzY3ZDcx NjFkMmMwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD Eyg3YzFlNThlMjNmMWM4YzMzZGMzNzA4Y2FkYmE5Mzk3YmVjYjMwZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGxfv2VG43JM7/+zmI2o3junLmLO /p8bNWKoiMvzPmvrFNCrGwfVLx7KEAGN2VJnSJFMpQt2oe0IC4aXZFsyLdNJHbqG e0fF3RDJgINgWVxiUOrcGkDoCMgG7OpqiTx7BfnNjjGM++uBYYsOAwDgGvOP0daV 1Cr8Byq/6sjCwT3Nc1/eXh/ZE3j+wUfmRiq8xGEwu6YXIbdFj9rVSNNrqTJdiZ1j 6PZ0DFngPHahzf9NsaMrIOxyrdskDvB2KQaiGjNzaXyErbAByDxjvE3IbVJO5O7+ oBXPYJrthRXOJTSCjjqVDTo9xWAP4zBMdbGVy5lR5TYSpAshcKI5+jZN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHweWOI/HIwz3DcIytupOXvssw85MB8GA1UdIwQY MBaAFKhuJXwy2du4GdUX1VBU92fXFh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzIt NDg3ZjAzNGM0NzI3LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzItNDg3ZjAzNGM0NzI3 LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn22yBgK VfKq7lYGfO9DHwlPMbWH8FrR+L0ThByvsZ2sXXO5N1nSNdZgXD9ETk+niXlAJnhV MAsz96tsoTG9WPGN9qYd2Pv5z8nNdk5DbhFxE1R9e3HxodutD3Tp/TaeZIKMxzF0 Wgh+RoWW0VpXXjtbvvkBWVkMcmXXDvpCyPvlipMIHxAge3YC6CdMhzBvPwt2YbUU 4oGcqvEJySiiGto3oFogbZHwL4jtA9LIXnoih3sJT8MrgWGOQAIztNsHBya5hqVu XmagPbZEmsvWS+9WhiUsBeOc21VwXG0mEVmk9ymbwK4HbpVFdd/MW/y6rLhwKBbF 0uzrNxpCDTXpyw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:14 2025 by rpki-client