This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json) Hash identifier: HDDvzyLuyK0AIfUqpT0Fu5b6dU1KTvl2fgPVnpkr33M= Subject key identifier: 13:98:E1:65:FD:08:F0:AB:BA:36:5B:1C:56:3D:97:B5:AA:D9:BC:43 Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa Certificate serial: 019B4694BA416FB9EB10BC6018006F599111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 15:01:50 +0000 Manifest this update: Mon 22 Dec 2025 15:01:50 +0000 Manifest next update: Tue 23 Dec 2025 15:01:50 +0000 Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: P86IT2oKbBZCIDK1m/yJEpoSSImJyscY0aHu2tsbgWg=) 2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:ba:41:6f:b9:eb:10:bc:60:18:00:6f:59:91:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa Validity Not Before: Dec 22 15:01:50 2025 GMT Not After : Dec 23 15:01:50 2025 GMT Subject: CN=1398e165fd08f0abba365b1c563d97b5aad9bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:a4:83:ed:b7:d3:2a:b5:00:a3:f2:e7:aa: fb:c6:29:38:4c:4b:ea:53:41:6f:96:af:c6:dc:7a: f3:98:f0:19:40:c9:eb:00:d7:77:0a:f0:05:14:2e: a6:27:f6:7d:1b:41:2a:5e:0b:0e:8b:bc:cf:93:65: c1:15:39:35:04:b7:ac:d0:9f:bd:88:10:9a:d9:69: c2:ba:ea:d7:c8:2d:56:04:1f:e8:27:23:43:d4:11: bf:8f:fb:49:4f:52:f7:1c:be:a0:05:dc:8c:64:51: 02:a3:a4:18:8c:f2:c1:a2:f9:3b:80:2a:4f:ab:7b: 44:3b:9c:02:a2:82:7f:6b:cb:c7:2d:30:48:f8:a1: 89:94:ba:9a:1e:d2:ab:06:1f:7f:22:f4:6b:3c:1a: 91:17:2c:c9:78:db:b2:50:82:cd:d8:fa:b5:bb:7b: df:ce:cc:cc:8f:d4:f7:0c:0c:65:a2:45:4e:fa:ce: ae:b2:d8:9d:41:57:bb:4c:0e:7f:bf:f8:c1:9e:e2: b6:f2:54:7f:7a:c5:b9:78:5c:e3:74:cb:95:50:9a: 7c:ae:10:81:0b:cd:b4:ca:9e:82:25:77:7a:0c:9f: 99:26:50:ab:4c:92:64:0a:f0:10:c3:32:b9:4b:cb: 72:2b:81:f3:64:12:a1:79:68:4c:37:b6:91:41:81: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:E1:65:FD:08:F0:AB:BA:36:5B:1C:56:3D:97:B5:AA:D9:BC:43 X509v3 Authority Key Identifier: keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:08:aa:81:a0:38:a7:fc:f0:b5:13:a0:31:1e:c3:77:76:62: ae:41:ae:dc:67:97:03:78:2f:c5:d7:32:bf:a2:ce:37:23:01: 78:59:90:ca:43:18:8b:16:16:7c:32:5c:b9:d7:6f:9b:a6:1d: 8b:66:d8:eb:03:ae:03:3c:cc:d8:97:fe:11:39:cb:26:94:5d: e8:c8:97:5e:d4:e8:dc:fd:2f:13:34:41:a4:58:ad:e1:05:57: 32:5f:db:d4:6c:b8:27:b9:f4:3c:0c:c2:2e:a9:9f:d1:bd:b1: 25:a8:f6:5c:6a:fe:75:6b:ea:fd:6e:80:d2:45:34:51:68:cf: a9:f5:c2:4c:5a:59:0a:7f:d1:24:51:b5:e9:2b:ca:f6:98:e1: e9:3f:67:93:24:48:66:a3:48:4d:d3:4b:5d:d2:e6:f1:e8:78: b7:c1:1d:ba:09:dd:f1:c5:30:6b:aa:40:4f:72:c5:64:6c:28: 8b:06:90:b1:01:22:39:55:92:21:9a:6d:43:9a:60:ae:54:3c: 09:0f:fd:bd:17:90:cf:99:dd:4d:00:58:cd:53:3e:8f:3b:b9: cf:7a:78:a6:bc:97:2c:f9:42:89:12:ed:4c:b3:7e:f0:b0:f7: 47:00:ff:cf:7e:93:e2:fd:19:b0:6f:87:95:5b:44:85:be:9f: 80:fe:44:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlLpBb7nrELxgGABvWZERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMjA3NTU5NjU0NTA5M2MwNmE2ZmNmOGZhYjU3YjE5MmU3 NzkwYWEwHhcNMjUxMjIyMTUwMTUwWhcNMjUxMjIzMTUwMTUwWjAzMTEwLwYDVQQD EygxMzk4ZTE2NWZkMDhmMGFiYmEzNjViMWM1NjNkOTdiNWFhZDliYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzmkg+230yq1AKPy56r7xik4TEvq U0Fvlq/G3HrzmPAZQMnrANd3CvAFFC6mJ/Z9G0EqXgsOi7zPk2XBFTk1BLes0J+9 iBCa2WnCuurXyC1WBB/oJyND1BG/j/tJT1L3HL6gBdyMZFECo6QYjPLBovk7gCpP q3tEO5wCooJ/a8vHLTBI+KGJlLqaHtKrBh9/IvRrPBqRFyzJeNuyUILN2Pq1u3vf zszMj9T3DAxlokVO+s6ustidQVe7TA5/v/jBnuK28lR/esW5eFzjdMuVUJp8rhCB C820yp6CJXd6DJ+ZJlCrTJJkCvAQwzK5S8tyK4HzZBKheWhMN7aRQYEqnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOY4WX9CPCrujZbHFY9l7Wq2bxDMB8GA1UdIwQY MBaAFEMgdVllRQk8Bqb8+Pq1exkud5CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUt OTI3OThkYWNhZjc1LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUtOTI3OThkYWNhZjc1 LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgiqgaA4 p/zwtROgMR7Dd3ZirkGu3GeXA3gvxdcyv6LONyMBeFmQykMYixYWfDJcuddvm6Yd i2bY6wOuAzzM2Jf+ETnLJpRd6MiXXtTo3P0vEzRBpFit4QVXMl/b1Gy4J7n0PAzC Lqmf0b2xJaj2XGr+dWvq/W6A0kU0UWjPqfXCTFpZCn/RJFG16SvK9pjh6T9nkyRI ZqNITdNLXdLm8eh4t8Edugnd8cUwa6pAT3LFZGwoiwaQsQEiOVWSIZptQ5pgrlQ8 CQ/9vReQz5ndTQBYzVM+jzu5z3p4pryXLPlCiRLtTLN+8LD3RwD/z36T4v0ZsG+H lVtEhb6fgP5EtQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:23:09 2025 by rpki-client