This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json) Hash identifier: ck9GbcoW6C3k3igZXhN8gugZbRSkmbiltWQyHJvTSq4= Subject key identifier: 9F:18:68:87:CB:61:64:0A:DB:FB:07:80:C1:BC:F2:C0:FA:AB:18:1A Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC Certificate issuer: /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Certificate serial: 019B34C4FF74B1ABE6AB5C6110A131A0EC1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft Manifest number: 0AD0 Signing time: Fri 19 Dec 2025 04:01:24 +0000 Manifest this update: Fri 19 Dec 2025 04:01:24 +0000 Manifest next update: Sat 20 Dec 2025 04:01:24 +0000 Files and hashes: 1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=) 2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: uIilcC5Z9zo6fjRnn2ucbtzp6SDrU8GsgfrY3eW2bU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:ff:74:b1:ab:e6:ab:5c:61:10:a1:31:a0:ec:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Validity Not Before: Dec 19 04:01:24 2025 GMT Not After : Dec 20 04:01:24 2025 GMT Subject: CN=9f186887cb61640adbfb0780c1bcf2c0faab181a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:c2:c7:75:25:6d:44:4a:a7:89:5e:7a:c7: df:f5:a3:0a:61:ce:b5:1b:30:70:b2:0c:ad:f3:b8: 7e:bb:43:e0:f6:aa:fd:e7:97:b1:de:cb:48:68:c4: 30:a8:f9:b9:4d:6c:cd:ce:29:92:37:39:d2:ad:42: e8:04:a3:81:12:27:ca:c4:0a:48:5c:0d:43:c1:33: 03:89:1d:49:05:8e:f1:8d:e2:80:5b:be:27:92:7b: 73:8a:22:60:f0:9f:36:d3:73:8d:17:87:a6:f0:8c: 69:e8:2a:69:8f:9e:2a:2d:3f:a5:9d:97:ad:bb:c9: eb:25:a2:1b:1a:7f:d6:fb:f8:81:b2:5c:55:76:21: 3c:80:6b:48:66:de:b1:0c:e9:9c:6c:26:46:77:ed: 32:13:ae:66:31:f9:c3:cb:6e:89:ee:5d:fb:97:46: 5f:ca:5c:39:00:58:38:a0:97:bd:93:44:50:b5:1c: 34:e4:23:7e:78:38:af:ef:4d:6a:10:55:d8:64:99: e7:47:6f:ca:da:86:8f:64:90:81:ef:e1:3f:fb:14: 11:fa:3d:59:f6:2b:c5:04:60:f9:02:eb:3c:14:29: 9a:9e:40:88:e7:bc:80:7e:f0:45:bb:2a:13:cc:f7: b0:f6:06:a4:09:5d:a6:f4:8a:9f:78:ae:f9:bd:5c: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:68:87:CB:61:64:0A:DB:FB:07:80:C1:BC:F2:C0:FA:AB:18:1A X509v3 Authority Key Identifier: keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:07:e4:c2:82:4c:9f:ab:30:4f:ab:ff:ea:05:9a:42:51:40: 5d:14:44:41:58:b9:de:e1:c1:e8:68:f1:d6:64:ee:0d:4d:05: 54:d2:99:e6:7d:be:c7:5d:39:9d:9e:d6:94:bb:75:ee:33:2e: da:18:dd:05:64:42:a4:16:12:be:79:af:2b:f2:26:82:e9:b5: bf:74:d3:7d:29:25:aa:ea:dd:4d:f0:10:ce:bc:6a:5c:04:0c: c6:50:9a:56:48:b0:16:cc:e8:ac:e4:32:36:ad:85:fb:b2:92: 12:7b:e2:0d:d1:c0:99:7f:8e:13:b5:9a:6a:ef:7a:47:29:d6: 2d:a5:40:5e:21:cf:a4:c5:76:fa:a5:11:0a:c2:85:08:7e:fe: c4:c3:b6:fd:a7:10:2c:bb:12:6a:77:e5:ec:fa:b6:c3:ac:67: 91:8f:53:6c:d7:2c:b8:a9:0f:c1:53:1e:ec:56:63:64:af:5e: de:da:1e:9e:58:62:a0:e7:f8:98:e4:37:fd:21:52:ca:e8:2a: 6e:c5:11:39:f0:04:b3:a2:48:d3:32:2d:84:6b:f0:c4:01:4e: 37:f9:73:43:86:86:5d:b7:81:a6:bd:83:8f:6c:5d:f3:ae:a1: 87:3a:c9:29:29:d8:72:fe:b4:f7:6e:d1:b8:0f:5c:31:59:c9: a9:ad:27:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xP90savmq1xhEKExoOwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm YmIxYmMwHhcNMjUxMjE5MDQwMTI0WhcNMjUxMjIwMDQwMTI0WjAzMTEwLwYDVQQD Eyg5ZjE4Njg4N2NiNjE2NDBhZGJmYjA3ODBjMWJjZjJjMGZhYWIxODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K7Cx3UlbURKp4leesff9aMKYc61 GzBwsgyt87h+u0Pg9qr955ex3stIaMQwqPm5TWzNzimSNznSrULoBKOBEifKxApI XA1DwTMDiR1JBY7xjeKAW74nkntziiJg8J8203ONF4em8Ixp6Cppj54qLT+lnZet u8nrJaIbGn/W+/iBslxVdiE8gGtIZt6xDOmcbCZGd+0yE65mMfnDy26J7l37l0Zf ylw5AFg4oJe9k0RQtRw05CN+eDiv701qEFXYZJnnR2/K2oaPZJCB7+E/+xQR+j1Z 9ivFBGD5Aus8FCmankCI57yAfvBFuyoTzPew9gakCV2m9IqfeK75vVyAwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8YaIfLYWQK2/sHgMG88sD6qxgaMB8GA1UdIwQY MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3 LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAfkwoJM n6swT6v/6gWaQlFAXRREQVi53uHB6Gjx1mTuDU0FVNKZ5n2+x105nZ7WlLt17jMu 2hjdBWRCpBYSvnmvK/Imgum1v3TTfSklqurdTfAQzrxqXAQMxlCaVkiwFszorOQy Nq2F+7KSEnviDdHAmX+OE7Waau96RynWLaVAXiHPpMV2+qURCsKFCH7+xMO2/acQ LLsSanfl7Pq2w6xnkY9TbNcsuKkPwVMe7FZjZK9e3toenlhioOf4mOQ3/SFSyugq bsUROfAEs6JI0zIthGvwxAFON/lzQ4aGXbeBpr2Dj2xd866hhzrJKSnYcv60927R uA9cMVnJqa0n2g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:37:33 2025 by rpki-client