This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json) Hash identifier: NgcingECg7Nj0x3rriYSfYwtPbQ2CT6MkbcxP6TQbss= Subject key identifier: CD:89:50:C9:6B:B4:5F:94:23:28:E2:8D:C0:CA:77:AB:54:0E:22:11 Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c Certificate serial: 019AF389D5ABED93E7D2F286E693AAFFF6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft Manifest number: 0490 Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: 21zXl1VT2wOLl9fEbNkRa053DOE.roa (hash: 5emuQVjcm3y58xrRXNGECOspFNylmBXZoEALIIh48B4=) 2: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: YFJjBxmnxxZNQX8Ux0cWmkNgFv+JXuW8/aRjkfnlr00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d5:ab:ed:93:e7:d2:f2:86:e6:93:aa:ff:f6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=cd8950c96bb45f942328e28dc0ca77ab540e2211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:a8:3b:3b:0f:a5:2d:e4:7a:2e:f2:d0:d4: 5b:4e:94:ce:55:74:64:42:17:7a:ea:c4:36:8b:ac: 8d:1a:97:26:62:33:e7:0a:52:a5:4b:91:5c:7f:fb: f4:89:ec:06:27:e7:f7:d2:c9:39:2b:18:03:34:0d: 53:a1:ba:58:6d:1f:1f:9b:c8:52:04:5e:b9:bb:48: 8f:e4:4c:f4:f9:61:78:7f:38:d3:ca:67:35:22:a5: 0f:0c:7c:8a:c3:a4:57:a7:21:4b:61:e3:d6:69:b0: f8:1b:f0:d0:e5:81:af:4c:2e:31:26:54:b3:3f:75: b2:e7:4d:b3:6b:65:b3:86:82:14:4b:91:e4:ce:fa: 55:0a:55:bc:66:c9:9a:20:44:cc:23:35:dc:a1:d0: 69:42:50:44:1b:af:98:59:e1:24:3e:f0:dd:24:0b: 0b:e6:cc:43:4f:14:c0:22:e1:df:48:a1:10:24:ba: b9:79:7f:2e:89:87:82:fa:d2:0a:66:aa:85:74:23: ef:ce:b2:6d:41:2e:ca:c6:3b:74:89:c1:ce:84:a4: 97:bd:03:cd:5a:6d:09:76:7a:c6:fb:5e:45:63:f9: 14:0e:77:43:a4:d6:b9:59:6a:2c:70:49:9f:94:23: a0:6e:1b:19:c7:78:5e:bb:3a:9a:b4:b8:50:46:e9: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:50:C9:6B:B4:5F:94:23:28:E2:8D:C0:CA:77:AB:54:0E:22:11 X509v3 Authority Key Identifier: keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:33:2d:0b:17:8e:9f:7d:c4:91:aa:7c:3f:a3:91:e5:fe:5b: d8:d9:ce:60:9e:5b:cf:0e:bb:5c:ad:df:a3:e5:1d:fc:19:a5: a9:23:a8:b1:9b:1d:f6:a4:3c:72:eb:b4:e8:0f:94:05:37:86: 13:38:dd:bb:91:61:42:41:c8:9e:44:a2:4e:e0:49:1c:04:dc: ea:ba:0b:bd:3c:ee:d5:3f:f2:bf:bb:7e:b5:d5:95:03:6f:23: 47:7f:bf:4a:be:57:15:e5:27:2b:e3:9a:85:a1:a4:37:61:bb: 4f:ae:a1:0e:09:60:44:39:43:9e:1d:98:a2:eb:06:bf:49:2f: 14:06:6f:82:99:d5:98:fa:38:a4:de:3a:5a:4f:3d:fa:dc:fb: 9e:d6:3a:ca:64:66:89:6e:a6:49:09:2f:ce:39:9e:ba:16:28: a6:27:f4:22:29:93:b2:55:12:dd:82:7b:f8:7f:d2:cb:53:49: 26:2c:16:7f:a1:23:7b:cb:01:8c:87:b9:5c:ee:99:f7:e2:9a: 66:c0:3a:87:e0:4e:83:20:ba:ea:8d:b6:a0:8e:c2:3e:bf:bf: 27:c5:9e:09:0a:d5:b2:ca:37:17:1f:87:32:82:16:1b:79:b1: 37:23:0b:d1:00:e6:0e:ad:58:85:6f:4d:70:9a:5d:f6:2c:47: af:91:a6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidWr7ZPn0vKG5pOq//a0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGNkNGQxYmQzZGYyOWFkZDQwNzViNjhmMjlhZjkwNzA0 NzQ0M2MwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EyhjZDg5NTBjOTZiYjQ1Zjk0MjMyOGUyOGRjMGNhNzdhYjU0MGUyMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDaoOzsPpS3kei7y0NRbTpTOVXRk Qhd66sQ2i6yNGpcmYjPnClKlS5Fcf/v0iewGJ+f30sk5KxgDNA1TobpYbR8fm8hS BF65u0iP5Ez0+WF4fzjTymc1IqUPDHyKw6RXpyFLYePWabD4G/DQ5YGvTC4xJlSz P3Wy502za2WzhoIUS5HkzvpVClW8ZsmaIETMIzXcodBpQlBEG6+YWeEkPvDdJAsL 5sxDTxTAIuHfSKEQJLq5eX8uiYeC+tIKZqqFdCPvzrJtQS7Kxjt0icHOhKSXvQPN Wm0JdnrG+15FY/kUDndDpNa5WWoscEmflCOgbhsZx3heuzqatLhQRunvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2JUMlrtF+UIyjijcDKd6tUDiIRMB8GA1UdIwQY MBaAFELc1NG9PfKa3UB1to8pr5BwR0Q8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2Yt ZmI5OGZlM2RiYzE0LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2YtZmI5OGZlM2RiYzE0 LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETMtCxeO n33Ekap8P6OR5f5b2NnOYJ5bzw67XK3fo+Ud/BmlqSOosZsd9qQ8cuu06A+UBTeG Ezjdu5FhQkHInkSiTuBJHATc6roLvTzu1T/yv7t+tdWVA28jR3+/Sr5XFeUnK+Oa haGkN2G7T66hDglgRDlDnh2YousGv0kvFAZvgpnVmPo4pN46Wk89+tz7ntY6ymRm iW6mSQkvzjmeuhYopif0IimTslUS3YJ7+H/Sy1NJJiwWf6Eje8sBjIe5XO6Z9+Ka ZsA6h+BOgyC66o22oI7CPr+/J8WeCQrVsso3Fx+HMoIWG3mxNyML0QDmDq1YhW9N cJpd9ixHr5Gmsg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:12 2025 by rpki-client