This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json) Hash identifier: d0xnWAXFCdfi2sXtv2Oi4aUS//rDxYq/fZEt2YDv0xU= Subject key identifier: E4:09:0E:D4:CF:CE:B0:18:73:52:05:4D:B1:83:14:56:90:58:CE:A2 Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c Certificate serial: 019AF1D2676A2DCB576A7152B888828F4B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft Manifest number: 10 Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: FqM_4ho7rDPE7pDj9ai4ZCxjf0Y.roa (hash: sB6SR2FfNoPpo3As5YllIxl1OQtiH7GgdCRzbnjbe40=) 2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: VSMYNpyLdciLlzJXILcJ1QYl+qXOLVEtgjCxh3/hsJg=) 3: WaBQatp7bxnpNTXTPfC8eRzxQ-E.roa (hash: kMmmhH+gENIlBcbPRiM9Rm2om/0TywtTPFc2kMZZ7xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:67:6a:2d:cb:57:6a:71:52:b8:88:82:8f:4b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=e4090ed4cfceb0187352054db18314569058cea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:b3:08:e6:25:52:84:3d:72:c7:39:e7:03: 0c:3a:dc:6b:4d:ff:1c:3e:82:c0:98:a6:51:3d:e2: 0f:70:41:03:eb:44:be:2b:bb:a9:83:98:58:bd:1e: 66:b9:d1:27:88:41:f3:c3:27:32:83:d6:a9:de:d5: 8d:90:2a:a2:59:7a:7d:95:05:42:2f:15:6f:e2:b3: ff:94:97:eb:f2:f4:1d:53:0c:18:ce:b7:12:72:2c: 1b:f6:d0:29:4f:d2:6e:86:ec:7b:1c:3a:a7:e3:56: 7f:bc:27:eb:b3:b3:13:0e:bf:7e:eb:69:43:e4:70: 1b:57:25:a0:00:d0:0e:33:d9:f3:14:f0:b0:e9:be: 7b:6e:ba:9c:50:9c:ba:33:0e:4a:79:00:5d:6a:5e: 36:e7:c6:5b:3b:ab:eb:1c:75:02:9c:f5:59:81:f4: 48:26:4c:1b:a0:dd:46:fd:76:c7:9c:45:d7:20:f4: e1:93:04:02:7a:fc:1d:5b:c3:02:4b:e4:43:32:38: 60:36:7d:ba:e4:c4:06:62:81:33:33:61:1d:f0:81: 97:47:a5:e0:f3:b0:dc:ef:c3:80:58:56:a4:82:eb: 26:00:19:7f:8b:0b:d4:41:f7:68:78:75:7e:1a:ea: 4c:2f:53:b0:fe:40:09:00:7f:8b:04:2f:65:00:31: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:09:0E:D4:CF:CE:B0:18:73:52:05:4D:B1:83:14:56:90:58:CE:A2 X509v3 Authority Key Identifier: keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:cf:a1:5e:ee:9e:1d:92:c1:49:b9:4c:80:f6:b5:91:f0:33: 8f:5c:28:30:bf:ce:27:38:d4:c2:c0:00:4a:42:f0:b0:7b:7a: 30:25:2f:40:ca:14:77:fc:fd:f8:3b:e3:ce:3f:93:2e:6a:c4: df:47:b3:f7:49:9f:ff:50:f1:4b:ac:44:f3:37:a8:e9:8e:59: e9:33:8f:fd:2b:51:19:b0:3e:ec:c1:ab:49:28:4d:76:0e:76: 08:1d:b9:90:c2:a4:d4:e0:a6:19:85:27:b9:83:b9:32:43:78: 18:a9:62:df:0e:89:1b:5b:72:aa:a1:36:96:fd:d5:df:68:c1: c3:e9:89:0b:a1:80:a2:cd:f6:de:68:4d:6d:16:b9:e5:4d:ba: 0a:f9:78:ae:4b:91:3f:04:2e:23:5d:34:a6:89:27:dd:d2:20: a7:b8:94:8e:f1:72:30:28:12:9c:53:31:a8:d1:28:6e:30:a2: b5:55:9a:37:42:20:e1:45:9c:1c:75:da:b3:db:4a:ba:1e:5c: 0b:34:83:e7:52:ca:a6:89:b8:b1:a8:99:a8:27:5f:83:f6:1d: 14:b7:6e:b9:af:5f:39:ad:c0:bc:7c:99:c5:f9:2b:3c:e7:a1: ff:5a:ba:9e:61:8c:e8:92:f1:0e:d7:a4:ed:74:74:24:cc:9d: 31:87:b4:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mdqLctXanFSuIiCj0tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh MWZiMmMwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD EyhlNDA5MGVkNGNmY2ViMDE4NzM1MjA1NGRiMTgzMTQ1NjkwNThjZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqquzCOYlUoQ9csc55wMMOtxrTf8c PoLAmKZRPeIPcEED60S+K7upg5hYvR5mudEniEHzwycyg9ap3tWNkCqiWXp9lQVC LxVv4rP/lJfr8vQdUwwYzrcSciwb9tApT9Juhux7HDqn41Z/vCfrs7MTDr9+62lD 5HAbVyWgANAOM9nzFPCw6b57brqcUJy6Mw5KeQBdal4258ZbO6vrHHUCnPVZgfRI JkwboN1G/XbHnEXXIPThkwQCevwdW8MCS+RDMjhgNn265MQGYoEzM2Ed8IGXR6Xg 87Dc78OAWFakgusmABl/iwvUQfdoeHV+GupML1Ow/kAJAH+LBC9lADHwjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQJDtTPzrAYc1IFTbGDFFaQWM6iMB8GA1UdIwQY MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8+hXu6e HZLBSblMgPa1kfAzj1woML/OJzjUwsAASkLwsHt6MCUvQMoUd/z9+Dvjzj+TLmrE 30ez90mf/1DxS6xE8zeo6Y5Z6TOP/StRGbA+7MGrSShNdg52CB25kMKk1OCmGYUn uYO5MkN4GKli3w6JG1tyqqE2lv3V32jBw+mJC6GAos323mhNbRa55U26Cvl4rkuR PwQuI100pokn3dIgp7iUjvFyMCgSnFMxqNEobjCitVWaN0Ig4UWcHHXas9tKuh5c CzSD51LKpom4saiZqCdfg/YdFLduua9fOa3AvHyZxfkrPOeh/1q6nmGM6JLxDtek 7XR0JMydMYe0lw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:14 2025 by rpki-client