This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json) Hash identifier: 9LMU/W0cHgT5hSHOt6xA6cBI3yYYHgBMT2xTc8MyPdo= Subject key identifier: D1:99:40:75:F0:B5:47:A1:77:89:13:6F:C5:23:9E:6A:FA:0F:2A:BB Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Certificate serial: 019B36B35FAF48F764518B0325E5CC3FE609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft Manifest number: 0958 Signing time: Fri 19 Dec 2025 13:01:23 +0000 Manifest this update: Fri 19 Dec 2025 13:01:23 +0000 Manifest next update: Sat 20 Dec 2025 13:01:23 +0000 Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: HnLoKL+fHFOF/x+GgIVcQUaw+A2TNv3XXpKhIo1mZnA=) 2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:5f:af:48:f7:64:51:8b:03:25:e5:cc:3f:e6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Validity Not Before: Dec 19 13:01:23 2025 GMT Not After : Dec 20 13:01:23 2025 GMT Subject: CN=d1994075f0b547a17789136fc5239e6afa0f2abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:4c:3a:8a:94:fb:09:d8:27:e5:04:bc:28: 00:37:76:88:74:1e:f6:c9:12:c7:55:e1:92:5a:97: c5:93:03:0b:2e:d6:f1:e5:09:74:c5:f9:75:0c:09: ce:a2:35:79:e6:a2:87:ae:f6:4a:a9:64:1e:5f:bf: f0:13:34:5a:4a:b7:88:82:27:13:94:69:70:40:94: b4:dd:a9:66:0c:78:7b:00:e6:06:02:e5:39:1f:99: 8c:6e:0f:a5:66:f9:6e:fa:7c:b1:fd:9c:23:9a:52: 5d:fb:a1:12:d6:46:d3:a6:a4:2f:64:0e:76:c1:75: cf:a1:bd:02:01:cc:51:88:c4:c8:e1:c3:a8:a5:2a: f7:4d:1e:3e:b9:4e:17:05:ec:0d:62:3d:eb:de:31: 63:21:cc:a9:bd:c1:3e:ba:fc:d1:4d:18:52:b7:20: 44:bb:b8:94:5d:a3:e1:87:34:07:75:0d:16:f7:a4: ad:97:e1:1b:89:67:4f:a3:11:a2:ab:3d:67:6e:3b: 41:e6:26:b0:c4:94:11:d4:2f:9a:02:81:b5:9e:41: f2:48:15:1d:5f:cb:f4:86:03:38:cb:b2:f9:5b:36: 73:e6:1e:50:33:d8:09:68:bf:aa:4a:d5:46:e4:48: 2a:5e:bd:fe:6e:9a:f2:71:d8:b9:36:06:43:8b:fa: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:40:75:F0:B5:47:A1:77:89:13:6F:C5:23:9E:6A:FA:0F:2A:BB X509v3 Authority Key Identifier: keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:be:54:66:40:4e:ca:bd:d4:ad:41:74:62:f6:e2:74:5b: 7a:d3:28:64:d7:dc:35:0b:2f:3a:10:18:ad:ee:d6:4f:58:5d: 7b:00:e7:f3:77:38:a2:b5:24:ae:a3:05:a2:40:35:d5:f9:32: 6b:e9:2b:2a:15:31:bd:c6:b6:4e:1f:77:38:57:00:58:f8:ee: 34:2d:87:2c:ae:90:c2:8c:83:95:34:70:04:92:70:11:b6:12: d9:ec:1d:3f:df:f9:d3:e0:0e:a8:3e:d4:68:78:a8:60:99:53: 72:44:f7:4b:17:29:2b:fe:84:63:4a:b2:86:68:2a:04:d8:6e: dd:b3:5c:c0:07:49:53:cf:f6:07:47:e0:29:1f:ba:5c:a2:b3: 35:c8:ba:e6:c7:9e:91:03:b4:33:a0:45:72:d3:03:4c:f8:cc: e2:76:4c:9a:51:9e:fe:b7:91:0b:e8:00:92:17:97:5e:0a:05: d1:22:f0:ac:1f:66:3e:ed:d0:14:67:25:78:da:b4:60:2d:d8: 13:f8:c7:98:bd:e9:57:66:31:d5:46:15:b2:56:49:d2:11:c3: d7:b8:0f:04:eb:bc:c6:e7:07:cb:99:8b:44:6e:b2:39:bf:19: 6d:56:03:2e:36:ad:10:f2:c9:09:8d:82:c9:12:e3:64:5e:55: a8:c7:87:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s1+vSPdkUYsDJeXMP+YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw ZDlkNDUwHhcNMjUxMjE5MTMwMTIzWhcNMjUxMjIwMTMwMTIzWjAzMTEwLwYDVQQD EyhkMTk5NDA3NWYwYjU0N2ExNzc4OTEzNmZjNTIzOWU2YWZhMGYyYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvENMOoqU+wnYJ+UEvCgAN3aIdB72 yRLHVeGSWpfFkwMLLtbx5Ql0xfl1DAnOojV55qKHrvZKqWQeX7/wEzRaSreIgicT lGlwQJS03almDHh7AOYGAuU5H5mMbg+lZvlu+nyx/ZwjmlJd+6ES1kbTpqQvZA52 wXXPob0CAcxRiMTI4cOopSr3TR4+uU4XBewNYj3r3jFjIcypvcE+uvzRTRhStyBE u7iUXaPhhzQHdQ0W96Stl+EbiWdPoxGiqz1nbjtB5iawxJQR1C+aAoG1nkHySBUd X8v0hgM4y7L5WzZz5h5QM9gJaL+qStVG5EgqXr3+bprycdi5NgZDi/rLwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGZQHXwtUehd4kTb8Ujnmr6Dyq7MB8GA1UdIwQY MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAG+VGZA Tsq91K1BdGL24nRbetMoZNfcNQsvOhAYre7WT1hdewDn83c4orUkrqMFokA11fky a+krKhUxvca2Th93OFcAWPjuNC2HLK6QwoyDlTRwBJJwEbYS2ewdP9/50+AOqD7U aHioYJlTckT3SxcpK/6EY0qyhmgqBNhu3bNcwAdJU8/2B0fgKR+6XKKzNci65see kQO0M6BFctMDTPjM4nZMmlGe/reRC+gAkheXXgoF0SLwrB9mPu3QFGcleNq0YC3Y E/jHmL3pV2Yx1UYVslZJ0hHD17gPBOu8xucHy5mLRG6yOb8ZbVYDLjatEPLJCY2C yRLjZF5VqMeHYw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:53:12 2025 by rpki-client