This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: VWkxmTGT+MsMbGkwk8lKORRTO0YzlaIkYpAmZk6CVII= Subject key identifier: A9:92:1A:2D:9D:21:A1:BF:F6:F6:58:3C:55:A3:4C:F8:E4:C2:A4:0C Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019AF163DB76C6916D4E6E8116D9A6A9E084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1340 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: i9KDqLb0b5lvk00PvcX7jKWwoaBK0ecMrALeVdv/60U=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:db:76:c6:91:6d:4e:6e:81:16:d9:a6:a9:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=a9921a2d9d21a1bff6f6583c55a34cf8e4c2a40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:a3:3a:2d:91:fc:ea:e6:67:df:ed:23:50: e8:47:79:5a:23:4d:04:6b:b3:a9:f8:5a:ad:40:9e: 3f:39:19:47:98:ff:58:d4:c7:ac:89:fa:6e:8b:12: e7:79:5a:d3:a4:73:61:52:af:57:7e:4a:fa:80:4a: dc:ac:f6:b6:3b:ba:88:0e:7a:64:40:a5:d1:57:d8: ce:8f:f3:a3:de:59:58:d9:c8:4a:b0:8b:d6:62:c8: 37:07:73:51:ee:df:96:ae:ed:69:ec:82:48:bc:00: b4:b0:0e:83:0a:dc:14:d8:e6:08:6e:65:ce:59:61: 39:64:fe:94:9e:2a:da:78:fe:8b:d8:a6:61:9b:b0: b1:7b:ad:1e:cc:ee:f9:77:df:0b:91:ae:11:15:93: a9:60:ed:27:2e:8b:55:5d:a6:c0:2b:df:1d:3c:76: c6:79:2b:53:9a:03:fa:44:1d:1f:79:37:42:3f:b4: 1c:a4:9f:02:36:30:46:34:8d:7c:a2:66:b7:94:5b: cc:ac:8e:c7:bd:53:99:40:de:d2:da:c6:4a:d9:6b: 4d:25:77:83:6d:12:86:27:d0:d0:80:19:06:77:24: ea:ef:3a:0e:36:1f:f8:c6:e6:56:c7:09:5e:ca:6b: 04:1a:cf:8b:17:b4:fb:dd:32:02:e0:4c:ee:92:d3: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:92:1A:2D:9D:21:A1:BF:F6:F6:58:3C:55:A3:4C:F8:E4:C2:A4:0C X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7e:e5:48:92:dd:84:d0:38:b1:57:5f:6e:52:d4:2d:94:98: 05:ce:f7:59:e1:88:0f:51:14:34:cb:2c:0b:df:66:6e:b2:4b: be:72:34:32:c9:43:26:4e:87:5c:c8:ee:cc:ea:96:e5:9c:a6: 3e:cb:d2:e8:8e:d6:4a:66:5e:0b:e6:41:1c:eb:98:e2:c4:fa: 19:2f:d0:fd:6c:f8:a2:80:bb:f8:37:db:eb:9f:ec:35:3d:8c: d7:c0:35:22:64:47:32:31:46:ee:4f:cf:2e:80:55:b8:64:9e: 42:31:45:6f:a7:c8:28:7c:65:42:41:8e:34:e8:7d:30:85:e8: b7:69:58:ae:6d:fa:c0:f2:11:8b:9e:33:39:be:f5:d8:ef:51: fb:3e:b2:f4:fc:72:60:e1:5e:e6:ae:7e:25:5f:1a:81:61:16: b9:08:af:44:1d:17:a8:05:62:ab:aa:2d:ff:87:99:e8:d1:98: 78:e6:48:e8:86:ff:da:72:94:44:62:f5:43:1a:fb:1c:e7:85: 76:e6:c3:02:57:62:39:3c:86:50:b4:79:18:f7:67:ab:e6:ac: 48:9d:2c:51:9e:7e:ce:16:55:7b:e7:34:7a:c4:c0:ff:b8:b9: e6:6d:e7:ae:3e:f8:cb:54:4f:96:ba:b8:c7:32:56:1b:e3:36: 72:11:57:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9t2xpFtTm6BFtmmqeCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhhOTkyMWEyZDlkMjFhMWJmZjZmNjU4M2M1NWEzNGNmOGU0YzJhNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt2jOi2R/OrmZ9/tI1DoR3laI00E a7Op+FqtQJ4/ORlHmP9Y1MesifpuixLneVrTpHNhUq9Xfkr6gErcrPa2O7qIDnpk QKXRV9jOj/Oj3llY2chKsIvWYsg3B3NR7t+Wru1p7IJIvAC0sA6DCtwU2OYIbmXO WWE5ZP6UniraeP6L2KZhm7Cxe60ezO75d98Lka4RFZOpYO0nLotVXabAK98dPHbG eStTmgP6RB0feTdCP7QcpJ8CNjBGNI18oma3lFvMrI7HvVOZQN7S2sZK2WtNJXeD bRKGJ9DQgBkGdyTq7zoONh/4xuZWxwleymsEGs+LF7T73TIC4EzuktOA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmSGi2dIaG/9vZYPFWjTPjkwqQMMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn7lSJLd hNA4sVdfblLULZSYBc73WeGID1EUNMssC99mbrJLvnI0MslDJk6HXMjuzOqW5Zym PsvS6I7WSmZeC+ZBHOuY4sT6GS/Q/Wz4ooC7+Dfb65/sNT2M18A1ImRHMjFG7k/P LoBVuGSeQjFFb6fIKHxlQkGONOh9MIXot2lYrm36wPIRi54zOb712O9R+z6y9Pxy YOFe5q5+JV8agWEWuQivRB0XqAViq6ot/4eZ6NGYeOZI6Ib/2nKURGL1Qxr7HOeF dubDAldiOTyGULR5GPdnq+asSJ0sUZ5+zhZVe+c0esTA/7i55m3nrj74y1RPlrq4 xzJWG+M2chFXxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:37 2025 by rpki-client