This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json) Hash identifier: B9zIP6BqIKdB5Yvv/BQ8KwfbRkwuBSD5lsAQPjBMWdA= Subject key identifier: 2A:E9:87:7A:64:88:6C:74:E4:F0:60:70:B4:5A:2D:FA:31:4E:E6:60 Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702 Certificate serial: 019AF19AF573F04A12FE263AE4453C505172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=) 2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: 83V3pw95qFS/kuokgnIVadj0Fy29Md8in3fX3/XUFGg=) 3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f5:73:f0:4a:12:fe:26:3a:e4:45:3c:50:51:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=2ae9877a64886c74e4f06070b45a2dfa314ee660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:ed:b8:cc:fd:4a:6c:61:1c:a7:3d:91:3d: b4:c3:83:2b:1d:ef:4f:ca:a3:e1:78:7d:3e:5c:1a: 19:0c:e3:a0:74:11:cb:3a:39:b6:48:fa:87:63:53: af:83:ee:54:6f:79:c6:b1:3e:da:4d:70:92:81:21: a6:d9:6c:3f:4b:d3:74:1b:0f:24:9b:6c:11:a3:b0: a6:77:9d:33:d6:31:c2:cd:f2:c8:bc:50:26:1c:be: 6d:eb:bb:77:f0:5a:53:03:98:4e:11:4e:62:3a:22: 57:b6:dd:66:5e:5b:88:47:4d:4a:7f:72:0a:6f:aa: 07:d4:16:e0:8e:ae:bf:cf:7e:84:c1:cc:ed:99:38: 94:a6:49:52:2f:e6:a8:44:50:90:3f:fa:0a:9f:23: c7:dc:08:94:7b:e1:40:c1:de:a3:27:48:19:3b:dc: 3c:55:e6:f4:05:9f:31:83:c1:6f:b0:d5:7c:a3:ad: 5e:f8:a2:1a:3b:94:62:87:a5:79:f3:b1:c8:7a:44: 80:4d:2d:0b:fe:c9:9f:38:2f:51:58:25:ab:b6:8f: c8:a3:d5:ad:0a:ba:82:49:84:e3:68:25:02:f3:13: 9e:58:86:ef:8c:1e:f6:e5:ec:3a:dc:e3:8b:5e:ec: 11:3e:d7:de:15:af:d2:37:12:f6:cd:88:21:0e:fa: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E9:87:7A:64:88:6C:74:E4:F0:60:70:B4:5A:2D:FA:31:4E:E6:60 X509v3 Authority Key Identifier: keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9a:c6:14:39:9b:71:53:d6:b6:71:ee:3b:97:a8:14:f0:f8: 52:b9:7e:83:ff:14:d6:45:07:88:1e:c0:0a:06:c1:67:41:dd: 85:45:24:c2:7d:f1:d1:c1:f7:99:68:73:ed:df:2b:f8:e9:18: ff:0a:4a:16:b4:f8:05:6f:f0:bb:05:be:64:fd:ac:70:41:87: e9:63:ba:c7:a2:58:ad:fc:bb:4a:6f:dc:aa:40:a3:41:d4:47: 01:a2:1a:d7:66:64:23:19:1c:7d:66:df:8e:db:14:0f:34:46: 84:be:8b:b2:0c:56:b7:b6:97:8d:4f:9e:44:f0:94:d4:77:49: 9b:43:f9:0e:2b:78:ad:31:c9:e5:4e:4a:7c:cd:db:11:3f:29: 6f:a8:43:f7:70:84:4a:ad:a0:3f:0c:f5:25:33:be:af:00:10: 97:9d:15:94:41:ea:cb:72:6a:8d:b2:9f:f3:df:fd:fc:0e:4a: 93:83:ed:05:fa:f6:48:a1:12:9e:9c:f8:22:3f:a7:8c:24:6f: 40:88:84:5c:fb:c1:75:42:86:e3:03:d6:a3:48:99:a9:1d:70: 15:63:d4:ce:31:d9:c0:af:3c:2a:54:aa:1a:36:c9:20:c4:25: a6:37:df:75:c1:bb:24:bd:35:51:41:60:7d:0d:71:db:7b:de: bb:46:5a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvVz8EoS/iY65EU8UFFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl YTU3MDIwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygyYWU5ODc3YTY0ODg2Yzc0ZTRmMDYwNzBiNDVhMmRmYTMxNGVlNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgftuMz9SmxhHKc9kT20w4MrHe9P yqPheH0+XBoZDOOgdBHLOjm2SPqHY1Ovg+5Ub3nGsT7aTXCSgSGm2Ww/S9N0Gw8k m2wRo7Cmd50z1jHCzfLIvFAmHL5t67t38FpTA5hOEU5iOiJXtt1mXluIR01Kf3IK b6oH1Bbgjq6/z36EwcztmTiUpklSL+aoRFCQP/oKnyPH3AiUe+FAwd6jJ0gZO9w8 Veb0BZ8xg8FvsNV8o61e+KIaO5Rih6V587HIekSATS0L/smfOC9RWCWrto/Io9Wt CrqCSYTjaCUC8xOeWIbvjB725ew63OOLXuwRPtfeFa/SNxL2zYghDvoMpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrph3pkiGx05PBgcLRaLfoxTuZgMB8GA1UdIwQY MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1 LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJrGFDmb cVPWtnHuO5eoFPD4Url+g/8U1kUHiB7ACgbBZ0HdhUUkwn3x0cH3mWhz7d8r+OkY /wpKFrT4BW/wuwW+ZP2scEGH6WO6x6JYrfy7Sm/cqkCjQdRHAaIa12ZkIxkcfWbf jtsUDzRGhL6LsgxWt7aXjU+eRPCU1HdJm0P5Dit4rTHJ5U5KfM3bET8pb6hD93CE Sq2gPwz1JTO+rwAQl50VlEHqy3JqjbKf89/9/A5Kk4PtBfr2SKESnpz4Ij+njCRv QIiEXPvBdUKG4wPWo0iZqR1wFWPUzjHZwK88KlSqGjbJIMQlpjffdcG7JL01UUFg fQ1x23veu0ZarQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:51 2025 by rpki-client