This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json) Hash identifier: Qu6HCS7jfU03ZCLxtKg+ajIxrQjjP1pcbF5MO6z1a8E= Subject key identifier: BA:3C:F9:9D:4A:04:AD:D2:44:11:3E:65:B3:8F:C6:08:1E:44:A4:9C Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Certificate serial: 019AF12D7F0BC0B931E01FCA3CDA2F14928F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft Manifest number: 05BB Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=) 2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: PoHFqoUkHXB1Kwzb2x1efk8dQCEesK1dgAZMsC/KTwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7f:0b:c0:b9:31:e0:1f:ca:3c:da:2f:14:92:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=ba3cf99d4a04add244113e65b38fc6081e44a49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8e:f4:22:d3:c8:39:f6:10:ec:e6:df:86:b0: 49:6c:14:5b:2c:eb:7b:ea:98:de:e0:37:47:4f:51: c7:b2:7d:42:18:79:f4:67:cf:41:54:d0:3d:29:54: 78:6c:a2:44:2c:f3:03:0f:3d:27:9b:57:d9:97:ac: c4:ef:f4:7d:78:3a:8d:aa:cb:e9:19:82:77:b4:9d: 87:bf:f3:b0:33:ed:8a:da:52:95:4f:06:dd:5c:54: 69:63:7a:d7:55:27:fa:a0:92:bf:22:e5:0b:02:a4: 91:d6:89:ff:03:76:7b:0c:73:2f:1c:ba:e3:fa:16: da:c4:61:cc:df:ac:72:3c:9a:d1:36:01:5e:08:d6: 0f:30:f0:6c:e4:e8:f9:4c:61:6e:e3:9d:29:3c:19: 78:b6:52:b0:fb:cb:84:2b:e7:4a:a7:2c:f4:38:87: 40:7d:4b:b3:96:84:db:d3:fd:0f:81:39:8e:c8:13: d5:5f:4e:3a:0f:30:34:2f:ec:81:64:09:80:28:7b: 50:bd:ce:a2:26:a9:99:63:99:86:3c:f0:a2:ec:53: f1:49:1f:4a:e0:96:89:37:02:0f:03:d4:8b:e8:5c: 54:5d:af:55:00:cb:80:f0:38:11:e4:52:09:ef:bd: 2f:fc:06:a7:47:d3:21:27:c4:cd:03:ea:17:8e:00: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3C:F9:9D:4A:04:AD:D2:44:11:3E:65:B3:8F:C6:08:1E:44:A4:9C X509v3 Authority Key Identifier: keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3d:98:54:0f:80:8d:fa:3f:ae:7c:61:4d:4a:2d:a6:ed:09: f0:fd:07:df:dd:70:f2:4b:c5:d2:76:9a:a6:65:cd:eb:01:27: a2:c5:c2:db:4f:67:af:ad:cd:93:8f:6f:e1:26:97:69:4d:91: 22:bd:1f:c2:05:52:61:c4:82:b1:02:23:80:c7:89:b0:35:d6: 7c:57:66:c9:c1:c8:e7:4b:01:d3:df:45:8f:e2:39:31:d4:14: cc:13:ac:b0:e2:d7:1b:8b:85:69:d1:31:69:4a:46:6d:21:f5: 92:c2:d0:60:3b:b0:7f:a5:48:98:83:4d:2b:b4:c2:26:30:02: eb:4d:12:79:00:82:6a:09:ec:87:af:65:e5:c7:f0:d0:0a:e3: 79:12:44:bc:60:27:82:7a:84:94:86:df:ef:af:61:04:a2:7e: b1:73:18:c1:8c:60:1d:c0:3c:ba:c1:30:93:43:7c:4f:10:dd: 2c:cd:3d:72:73:33:7e:00:e9:8a:b4:4e:90:69:f0:9f:1b:eb: da:7c:a1:f2:d0:af:9b:43:4d:7d:39:ef:d7:54:c6:cc:19:ed: 0e:8f:e9:d1:eb:db:a3:bf:c6:ab:9f:8a:2a:d1:66:5e:f2:cd: d0:72:dc:74:d8:9b:44:c9:18:18:74:d1:47:b0:29:b3:df:2b: 96:a2:ef:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX8LwLkx4B/KPNovFJKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm ZDgzY2QwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EyhiYTNjZjk5ZDRhMDRhZGQyNDQxMTNlNjViMzhmYzYwODFlNDRhNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y70ItPIOfYQ7ObfhrBJbBRbLOt7 6pje4DdHT1HHsn1CGHn0Z89BVNA9KVR4bKJELPMDDz0nm1fZl6zE7/R9eDqNqsvp GYJ3tJ2Hv/OwM+2K2lKVTwbdXFRpY3rXVSf6oJK/IuULAqSR1on/A3Z7DHMvHLrj +hbaxGHM36xyPJrRNgFeCNYPMPBs5Oj5TGFu450pPBl4tlKw+8uEK+dKpyz0OIdA fUuzloTb0/0PgTmOyBPVX046DzA0L+yBZAmAKHtQvc6iJqmZY5mGPPCi7FPxSR9K 4JaJNwIPA9SL6FxUXa9VAMuA8DgR5FIJ770v/AanR9MhJ8TNA+oXjgAx2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo8+Z1KBK3SRBE+ZbOPxggeRKScMB8GA1UdIwQY MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj2YVA+A jfo/rnxhTUotpu0J8P0H391w8kvF0naapmXN6wEnosXC209nr63Nk49v4SaXaU2R Ir0fwgVSYcSCsQIjgMeJsDXWfFdmycHI50sB099Fj+I5MdQUzBOssOLXG4uFadEx aUpGbSH1ksLQYDuwf6VImINNK7TCJjAC600SeQCCagnsh69l5cfw0ArjeRJEvGAn gnqElIbf769hBKJ+sXMYwYxgHcA8usEwk0N8TxDdLM09cnMzfgDpirROkGnwnxvr 2nyh8tCvm0NNfTnv11TGzBntDo/p0evbo7/Gq5+KKtFmXvLN0HLcdNibRMkYGHTR R7Aps98rlqLvWg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:50 2025 by rpki-client