This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json) Hash identifier: DnemyG4wPL/MAYCzdnhR0zAI4jRpFmN0YbdsGCaFVlM= Subject key identifier: D9:3E:14:D5:DA:3E:05:0B:56:2D:CC:57:80:18:B4:58:AA:EC:34:11 Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019AE6E015CE512503D82351EDD9174A44E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft Manifest number: 08 Signing time: Thu 04 Dec 2025 01:00:36 +0000 Manifest this update: Thu 04 Dec 2025 01:00:36 +0000 Manifest next update: Fri 05 Dec 2025 01:00:36 +0000 Files and hashes: 1: pnnodEIfZquOWuX0y07TWspln6c.asa (hash: C3Hpu+scL5kOpXPlMI5stoiSoiNUyScLSjYeEYySHr0=) 2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: 6ZXFzCCo8X6pKEDQp4NhHr7FZGVRTM1yPmmQenG/ezc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:e0:15:ce:51:25:03:d8:23:51:ed:d9:17:4a:44:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 4 01:00:36 2025 GMT Not After : Dec 5 01:00:36 2025 GMT Subject: CN=d93e14d5da3e050b562dcc578018b458aaec3411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:db:36:68:43:1f:09:f1:13:9d:d9:f4:75: 08:01:b0:7f:f3:5c:91:bc:80:a1:d1:b5:92:ab:84: 6a:14:ef:8f:c3:b4:70:62:13:66:03:35:96:4e:08: fc:70:db:60:54:04:fa:5e:43:ae:38:6e:5a:0f:9f: cb:57:fd:06:85:ae:16:fd:d7:1d:82:fb:61:7d:8d: 76:ac:40:c9:6f:7a:3a:ef:c6:58:91:21:f6:d1:92: 51:16:af:4c:47:8d:0a:fd:14:44:88:ee:e2:7e:59: 9f:66:43:c4:2d:d5:a1:2f:d6:74:c9:5b:2f:42:be: b3:c3:c5:c8:ea:04:4f:2c:41:cd:49:4e:39:d7:b4: 11:cc:1c:97:e6:f5:f8:11:45:a9:b7:91:53:13:45: 00:fd:0f:b0:c9:34:dc:8a:28:8b:16:6f:8a:ba:a0: 02:77:a3:22:da:3a:25:7f:2a:43:bb:e6:cd:22:ee: 48:24:87:e6:a0:83:f7:9b:08:d0:f9:ef:83:b5:e0: 2f:19:03:06:ba:53:e1:ff:73:ad:d8:5c:af:8c:b2: be:8e:0f:d9:8f:51:bb:c8:c4:5f:ca:6c:e0:32:ca: e4:92:69:91:7a:9e:aa:9f:70:d9:2d:b5:e1:ba:05: 4f:63:a7:19:d5:4e:b9:40:02:b9:dc:21:01:8d:ea: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:14:D5:DA:3E:05:0B:56:2D:CC:57:80:18:B4:58:AA:EC:34:11 X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:7c:7b:77:8e:88:2b:fb:7f:5c:df:9d:16:b8:2d:9e:3b: 19:91:fe:1f:20:6a:ff:c2:e4:94:31:bd:56:a1:b1:d6:ff:e4: 11:28:30:56:75:61:21:24:63:87:b3:ea:a0:7d:0a:27:03:28: 8d:32:34:0a:87:a0:b0:f1:9c:eb:b4:7d:4f:6a:42:3b:69:49: 25:4b:d2:43:22:6e:63:81:21:84:16:9e:d9:e5:f7:aa:19:87: 81:65:95:25:e6:21:74:6b:d0:9a:b0:5e:50:8c:38:69:99:99: 13:af:f5:25:25:53:26:79:e7:9b:5d:28:14:65:d1:f8:d3:96: c0:b2:66:7e:41:db:45:77:91:52:ab:fc:05:57:3e:94:80:9c: 5b:f2:a9:df:90:ff:1c:64:52:4b:72:0a:2d:c9:ed:b3:a0:21: 3d:52:71:e3:fc:c1:dd:d6:4f:59:65:88:1f:1e:eb:a8:a9:8f: 44:71:ca:bf:47:ba:8c:49:1e:2a:6a:a2:98:d0:4d:fb:83:f3: 40:f3:44:9b:5c:6a:fb:f7:b1:38:04:e5:fb:ae:20:27:ee:3b: cf:9c:22:c3:b1:49:81:40:46:fc:1c:8d:a1:ea:60:1c:56:1b: 49:d9:0c:ec:6c:16:46:a0:ab:88:e4:e1:fd:91:18:28:47:66: c2:b0:1b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrm4BXOUSUD2CNR7dkXSkTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjA0MDEwMDM2WhcNMjUxMjA1MDEwMDM2WjAzMTEwLwYDVQQD EyhkOTNlMTRkNWRhM2UwNTBiNTYyZGNjNTc4MDE4YjQ1OGFhZWMzNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d7bNmhDHwnxE53Z9HUIAbB/81yR vICh0bWSq4RqFO+Pw7RwYhNmAzWWTgj8cNtgVAT6XkOuOG5aD5/LV/0Gha4W/dcd gvthfY12rEDJb3o678ZYkSH20ZJRFq9MR40K/RREiO7iflmfZkPELdWhL9Z0yVsv Qr6zw8XI6gRPLEHNSU4517QRzByX5vX4EUWpt5FTE0UA/Q+wyTTciiiLFm+KuqAC d6Mi2jolfypDu+bNIu5IJIfmoIP3mwjQ+e+DteAvGQMGulPh/3Ot2FyvjLK+jg/Z j1G7yMRfymzgMsrkkmmRep6qn3DZLbXhugVPY6cZ1U65QAK53CEBjeqDIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk+FNXaPgULVi3MV4AYtFiq7DQRMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4t8e3eO iCv7f1zfnRa4LZ47GZH+HyBq/8LklDG9VqGx1v/kESgwVnVhISRjh7PqoH0KJwMo jTI0CoegsPGc67R9T2pCO2lJJUvSQyJuY4EhhBae2eX3qhmHgWWVJeYhdGvQmrBe UIw4aZmZE6/1JSVTJnnnm10oFGXR+NOWwLJmfkHbRXeRUqv8BVc+lICcW/Kp35D/ HGRSS3IKLcnts6AhPVJx4/zB3dZPWWWIHx7rqKmPRHHKv0e6jEkeKmqimNBN+4Pz QPNEm1xq+/exOATl+64gJ+47z5wiw7FJgUBG/ByNoepgHFYbSdkM7GwWRqCriOTh /ZEYKEdmwrAbVA== -----END CERTIFICATE-----Generated at Thu Dec 4 08:28:37 2025 by rpki-client