This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft File: QaHs1T08kyiV6pxQmSxxGHKO1rk.mft (raw, json) Hash identifier: AJGzpFIxsDpIh9MF/Gw9qYk4/AipoSl1IEb1sO+k3Fk= Subject key identifier: FC:28:9C:C4:C1:18:16:50:F2:76:1B:53:74:6E:0B:C5:60:8F:DD:5C Authority key identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 Certificate issuer: /CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9 Certificate serial: 019B59AC85B4F104344088CCB6115FB14214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft Manifest number: 45 Signing time: Fri 26 Dec 2025 08:00:37 +0000 Manifest this update: Fri 26 Dec 2025 08:00:37 +0000 Manifest next update: Sat 27 Dec 2025 08:00:37 +0000 Files and hashes: 1: Q4K0kYlvp3FTFyzEK2YLlGZGooA.roa (hash: qXM2UgIvJrR1VpY5u74Vrkmv8RUC4/qdzLxzxWzLlLU=) 2: QaHs1T08kyiV6pxQmSxxGHKO1rk.crl (hash: gLz9qDeGRwUSNofghbAPL1fyBkFe8R68tSxbltEP0xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:85:b4:f1:04:34:40:88:cc:b6:11:5f:b1:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9 Validity Not Before: Dec 26 08:00:37 2025 GMT Not After : Dec 27 08:00:37 2025 GMT Subject: CN=fc289cc4c1181650f2761b53746e0bc5608fdd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:4d:d6:80:79:61:0a:d0:4d:23:c9:fe:a9: 4f:15:d9:56:bc:78:fe:63:c5:4c:35:f8:7e:10:7c: 9c:99:20:0b:af:e8:60:0e:40:b1:ba:9a:f7:3d:49: 26:7b:06:7b:d3:68:ed:3b:d4:25:36:fa:17:a8:7b: bc:36:fa:c0:13:06:90:0b:83:28:62:22:93:d0:52: c7:70:ff:de:8d:5a:e3:8b:0f:a3:60:91:c3:22:37: af:5b:a2:3a:35:ed:6f:a9:d7:01:73:23:29:9a:82: 4d:cc:ad:c6:e3:fc:cc:b3:86:b5:76:a2:bc:53:b1: d8:8c:54:da:ac:f1:1b:32:7f:6a:67:b9:7f:bd:82: 0c:03:eb:7f:1e:48:96:4e:e1:db:dd:b7:f6:a9:a2: 0a:53:a8:c1:3c:9b:06:98:da:b6:84:7e:0b:a9:9e: a8:ff:6d:28:3b:fc:c8:cc:ff:da:20:8f:f4:84:76: 24:18:b2:81:c8:d0:85:53:20:9d:ee:b5:cb:d3:99: 6d:11:c9:75:3e:e3:30:2f:8e:6e:75:a3:f7:35:ca: 11:03:67:b7:fe:da:a5:4e:0d:19:85:16:88:d8:73: 65:a6:99:b8:83:b8:81:3b:52:17:e6:1c:15:dd:0c: 4a:20:30:4d:0c:db:83:af:5d:42:29:28:88:f6:41: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:9C:C4:C1:18:16:50:F2:76:1B:53:74:6E:0B:C5:60:8F:DD:5C X509v3 Authority Key Identifier: keyid:41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:38:38:46:bd:0d:43:82:50:63:48:d1:58:f2:4f:84:60:7c: d5:6f:51:e8:39:f6:9e:72:e9:06:ee:95:09:7b:07:c9:1c:f4: 00:21:b7:e3:c2:93:ba:bc:28:9d:fe:9b:3c:48:ba:7d:21:0e: 68:35:3e:8f:03:1c:e6:de:c0:c0:7b:48:d7:43:a9:24:cc:9a: 7b:67:c7:6c:ba:8d:15:92:62:46:e8:7d:f4:3e:75:0b:ea:52: bc:00:2b:23:8f:3d:c3:f7:c3:d4:78:7e:0c:bf:43:ad:68:88: d8:24:36:46:4a:5c:ae:a0:34:5e:40:a7:8c:64:c7:21:54:5a: 58:b2:a2:f5:f2:cb:3e:d2:aa:b9:3a:f8:67:0a:41:3e:96:2c: 0d:21:c8:c5:d1:14:b5:7e:b4:61:79:36:e3:7c:a2:cb:f6:02: 5d:0f:13:5a:1e:77:b5:12:75:68:d1:9d:37:15:e1:c6:5a:5f: 98:b8:10:c1:6a:e1:e8:6d:b8:23:d5:c7:b1:8b:7d:d0:df:ed: 3e:b8:44:8f:56:6f:90:78:26:9e:9e:a0:e3:17:46:e0:81:f7: 13:73:1d:fc:10:66:4b:3e:e5:ef:7b:3b:09:57:c2:37:0e:9e: 16:46:8c:40:30:7c:80:76:0f:f2:12:0b:00:9a:47:cb:57:7c: cd:1e:88:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIW08QQ0QIjMthFfsUIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYTFlY2Q1M2QzYzkzMjg5NWVhOWM1MDk5MmM3MTE4NzI4 ZWQ2YjkwHhcNMjUxMjI2MDgwMDM3WhcNMjUxMjI3MDgwMDM3WjAzMTEwLwYDVQQD EyhmYzI4OWNjNGMxMTgxNjUwZjI3NjFiNTM3NDZlMGJjNTYwOGZkZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy91N1oB5YQrQTSPJ/qlPFdlWvHj+ Y8VMNfh+EHycmSALr+hgDkCxupr3PUkmewZ702jtO9QlNvoXqHu8NvrAEwaQC4Mo YiKT0FLHcP/ejVrjiw+jYJHDIjevW6I6Ne1vqdcBcyMpmoJNzK3G4/zMs4a1dqK8 U7HYjFTarPEbMn9qZ7l/vYIMA+t/HkiWTuHb3bf2qaIKU6jBPJsGmNq2hH4LqZ6o /20oO/zIzP/aII/0hHYkGLKByNCFUyCd7rXL05ltEcl1PuMwL45udaP3NcoRA2e3 /tqlTg0ZhRaI2HNlppm4g7iBO1IX5hwV3QxKIDBNDNuDr11CKSiI9kHXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwonMTBGBZQ8nYbU3RuC8Vgj91cMB8GA1UdIwQY MBaAFEGh7NU9PJMoleqcUJkscRhyjta5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFIczFUMDhreWlWNnB4UW1TeHhHSEtPMXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAt NDljODljZTI4ODgyLzEvUWFIczFUMDhreWlWNnB4UW1TeHhHSEtPMXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81OTU0ZTctM2UwYy00YzNhLTkyZDAtNDljODljZTI4ODgy LzEvUWFIczFUMDhreWlWNnB4UW1TeHhHSEtPMXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDg4Rr0N Q4JQY0jRWPJPhGB81W9R6Dn2nnLpBu6VCXsHyRz0ACG348KTurwonf6bPEi6fSEO aDU+jwMc5t7AwHtI10OpJMyae2fHbLqNFZJiRuh99D51C+pSvAArI489w/fD1Hh+ DL9DrWiI2CQ2RkpcrqA0XkCnjGTHIVRaWLKi9fLLPtKquTr4ZwpBPpYsDSHIxdEU tX60YXk243yiy/YCXQ8TWh53tRJ1aNGdNxXhxlpfmLgQwWrh6G24I9XHsYt90N/t PrhEj1ZvkHgmnp6g4xdG4IH3E3Md/BBmSz7l73s7CVfCNw6eFkaMQDB8gHYP8hIL AJpHy1d8zR6Ikw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:32 2025 by rpki-client