This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json) Hash identifier: 1w/r0Jb7/i6/StR4zurg0Hwr34uXuzsucltTfe1rp4s= Subject key identifier: FC:54:A0:3F:2B:C8:47:02:7D:EE:F3:3A:BD:92:83:2F:A2:C7:E7:10 Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8 Certificate serial: 019B5ABFF557E497A31440453F084744C86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft Manifest number: 0B93 Signing time: Fri 26 Dec 2025 13:01:28 +0000 Manifest this update: Fri 26 Dec 2025 13:01:28 +0000 Manifest next update: Sat 27 Dec 2025 13:01:28 +0000 Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=) 2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: tAhozu3y24m7VP4ab0j1YK8xzwC3xbN5bqvoGx4t1J8=) 3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:f5:57:e4:97:a3:14:40:45:3f:08:47:44:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8 Validity Not Before: Dec 26 13:01:28 2025 GMT Not After : Dec 27 13:01:28 2025 GMT Subject: CN=fc54a03f2bc847027deef33abd92832fa2c7e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:4e:49:b6:89:c2:80:c6:b8:de:01:7a:52: 93:29:0e:67:1d:cb:36:25:9a:a4:4e:1c:80:3d:9f: 1a:fd:58:e0:d9:9e:11:40:51:28:aa:ef:22:d0:f9: 41:1e:37:8f:82:57:9d:2d:75:4f:eb:bd:b0:48:be: 5f:57:db:94:99:0c:cc:c3:3a:93:a3:01:97:cb:4d: 43:12:07:4c:bf:e4:dc:00:fd:7c:57:c5:7e:86:3c: 9b:89:4a:ab:60:f4:66:a2:8f:b9:1e:a5:eb:04:da: 39:a4:40:4a:30:59:b6:04:22:4d:1c:00:17:32:75: 0a:53:75:9a:fe:b5:a9:b4:66:34:55:42:5a:55:92: 02:e2:ac:88:08:36:14:2a:a2:99:10:ff:7b:02:64: 12:82:10:5d:10:54:17:1f:26:4e:bc:bb:08:9c:c2: e1:eb:1b:32:34:3e:9f:31:2a:91:28:9a:18:48:75: f2:99:dc:ef:d2:be:9c:a8:ec:46:fe:32:b1:bf:5b: 94:0e:d4:e2:b0:dc:91:af:04:c5:db:f5:56:0e:eb: c4:21:04:99:2a:c2:8b:b5:41:8a:a7:aa:a2:d7:43: 4a:03:53:67:07:4f:be:ba:e5:42:7c:d0:52:00:bb: 9c:3c:0d:d7:64:ea:e2:ff:73:5f:72:14:76:d7:e4: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:A0:3F:2B:C8:47:02:7D:EE:F3:3A:BD:92:83:2F:A2:C7:E7:10 X509v3 Authority Key Identifier: keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:c1:6e:50:37:30:6a:5e:f6:bc:e1:ed:26:ea:b1:c8:2b: 70:8e:e6:4f:f5:5b:8d:8c:8c:52:42:54:41:c1:7b:70:6b:b3: cc:83:2c:da:16:ae:d0:a6:02:57:48:fc:96:22:e4:e1:00:69: 9b:8f:cf:ff:8f:47:ca:ca:b6:22:1b:26:57:85:b4:25:d7:f8: 0c:57:39:87:c5:e7:92:d2:7d:a7:7b:ce:af:8f:20:96:53:25: 3e:be:e7:f9:e9:9c:ba:de:84:62:90:2b:26:60:e5:dc:af:62: 57:6a:d7:54:c8:7b:ff:24:5e:a6:48:48:07:0d:5e:72:4b:63: c2:70:da:19:86:18:b3:60:7f:0f:93:f6:4a:30:cd:47:05:b4: ed:fb:97:2a:b2:a3:b9:88:0a:89:ee:40:78:f9:b7:51:f2:6c: d2:48:45:a2:8d:8d:bc:53:a6:21:fe:3b:7a:af:c6:b9:bf:1b: b2:a7:cb:d6:96:25:ba:25:1e:bf:21:51:db:b9:5c:25:58:95: e6:b8:90:e3:cb:e5:6f:ed:78:63:9b:99:e9:d4:15:59:f2:38: ef:67:49:00:57:8e:a7:54:19:db:2c:32:c1:d6:ba:31:48:d7: 81:84:5e:9a:e1:c0:a7:e9:a9:b3:9b:34:8d:f3:5f:f5:01:c9: 5c:7a:e6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav/VX5JejFEBFPwhHRMhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk ODg0ZDgwHhcNMjUxMjI2MTMwMTI4WhcNMjUxMjI3MTMwMTI4WjAzMTEwLwYDVQQD EyhmYzU0YTAzZjJiYzg0NzAyN2RlZWYzM2FiZDkyODMyZmEyYzdlNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy9OSbaJwoDGuN4BelKTKQ5nHcs2 JZqkThyAPZ8a/Vjg2Z4RQFEoqu8i0PlBHjePgledLXVP672wSL5fV9uUmQzMwzqT owGXy01DEgdMv+TcAP18V8V+hjybiUqrYPRmoo+5HqXrBNo5pEBKMFm2BCJNHAAX MnUKU3Wa/rWptGY0VUJaVZIC4qyICDYUKqKZEP97AmQSghBdEFQXHyZOvLsInMLh 6xsyND6fMSqRKJoYSHXymdzv0r6cqOxG/jKxv1uUDtTisNyRrwTF2/VWDuvEIQSZ KsKLtUGKp6qi10NKA1NnB0++uuVCfNBSALucPA3XZOri/3NfchR21+TRQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxUoD8ryEcCfe7zOr2Sgy+ix+cQMB8GA1UdIwQY MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2 LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs/BblA3 MGpe9rzh7SbqscgrcI7mT/VbjYyMUkJUQcF7cGuzzIMs2hau0KYCV0j8liLk4QBp m4/P/49Hysq2IhsmV4W0Jdf4DFc5h8XnktJ9p3vOr48gllMlPr7n+emcut6EYpAr JmDl3K9iV2rXVMh7/yRepkhIBw1ecktjwnDaGYYYs2B/D5P2SjDNRwW07fuXKrKj uYgKie5AePm3UfJs0khFoo2NvFOmIf47eq/Gub8bsqfL1pYluiUevyFR27lcJViV 5riQ48vlb+14Y5uZ6dQVWfI472dJAFeOp1QZ2ywywda6MUjXgYRemuHAp+mps5s0 jfNf9QHJXHrmkg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:43 2025 by rpki-client