This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json) Hash identifier: K1dBM73mmHCeYoAhNOrsoRB0LMfzvBqlHubhpPMPhDU= Subject key identifier: 7D:2D:CC:14:58:E6:22:61:78:E8:65:27:2A:F8:1E:4F:01:50:37:66 Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Certificate serial: 019B0F00DCF9315E6AEF1B14026E90EFE9A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft Manifest number: 124A Signing time: Thu 11 Dec 2025 20:01:13 +0000 Manifest this update: Thu 11 Dec 2025 20:01:13 +0000 Manifest next update: Fri 12 Dec 2025 20:01:13 +0000 Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: E485IYJkM9TMuOuAcn8zELbLYLhHZSdFbUW2uDe5pIE=) 2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:dc:f9:31:5e:6a:ef:1b:14:02:6e:90:ef:e9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Validity Not Before: Dec 11 20:01:13 2025 GMT Not After : Dec 12 20:01:13 2025 GMT Subject: CN=7d2dcc1458e6226178e865272af81e4f01503766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:95:77:1c:2e:a2:80:c6:6d:65:d0:23:35: 04:de:5d:69:48:72:24:a2:44:fe:01:b4:99:ad:be: 70:d9:9a:26:50:0a:a1:42:cb:0e:75:60:e2:45:3f: 53:54:c6:e5:67:13:21:34:64:b7:c2:db:bd:91:d1: e9:a8:d0:4e:fd:57:85:33:d5:fb:6a:8e:78:f2:50: 3a:a7:c2:d8:d0:7f:26:9e:32:7f:8a:ac:95:cf:86: 60:28:ae:9f:3f:d1:0c:e6:fc:09:bb:5a:b4:30:ac: 4b:f5:77:4c:eb:93:1b:0b:6a:99:23:05:23:e6:58: 9c:45:a4:4f:25:91:a1:89:96:a8:58:6c:05:5a:28: f4:e6:d6:f9:c5:87:2d:d9:b6:5e:b4:8c:62:c9:29: f0:f0:72:af:9f:2b:64:e8:01:6b:61:ba:2d:59:36: 05:b9:c5:f0:6e:45:7f:f5:bf:1c:b8:a2:7f:73:38: a2:0a:55:5a:9b:f0:d2:62:d5:7a:69:7e:01:99:1f: 97:a0:48:c8:a6:5b:4a:07:60:c2:53:c4:97:88:ae: 30:47:97:e1:af:19:64:f0:a8:75:d2:67:be:64:e2: 6f:cb:2c:ff:ac:75:f7:5f:73:69:b3:03:ef:61:92: 5c:e0:95:95:48:b3:2d:1e:00:11:de:30:92:17:c4: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2D:CC:14:58:E6:22:61:78:E8:65:27:2A:F8:1E:4F:01:50:37:66 X509v3 Authority Key Identifier: keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:7f:41:5b:5e:36:e7:e0:f2:45:47:db:2c:50:1c:dd:a3: b6:ae:c6:29:eb:3b:59:5f:5f:ed:e6:10:10:7c:a5:e9:9a:50: f4:6e:c8:ef:b7:40:f3:ba:fd:b5:28:5f:ee:73:a3:bc:de:be: 5d:bf:cc:fd:ac:2e:ab:dc:7d:7c:e4:ec:e0:36:0b:ce:14:d2: 92:f3:5c:84:9e:b7:99:35:d7:89:94:45:9d:86:cf:15:de:5f: 7f:7b:bc:f5:83:7a:5b:18:57:b6:45:ad:9e:d8:c4:9c:7a:4c: 43:65:84:c7:bb:7b:0b:12:3a:ea:4c:8b:02:14:a3:ea:f6:bc: 84:11:6d:13:3d:d7:40:cd:ca:6b:35:21:0b:db:e0:bf:c2:88: 09:dd:e1:ce:87:59:4a:be:67:26:f9:29:35:8f:60:80:ec:c3: a6:87:6e:1b:f3:f0:ee:6b:07:6e:a5:73:58:2a:30:cf:26:b0: f6:4a:80:e0:76:5b:1c:1e:dd:76:33:d5:f2:33:5e:9b:14:d1: 71:73:1e:8c:68:7e:00:e2:8a:37:a5:c5:51:b1:23:7b:f7:b6: c7:42:d3:ee:d0:3e:59:51:6f:7f:7d:7d:cd:9a:03:e8:7c:14: 56:d3:71:e8:90:77:7e:47:0b:0d:c0:f7:0a:01:f1:19:d9:92: b1:68:9f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPANz5MV5q7xsUAm6Q7+moMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi MjRhYmQwHhcNMjUxMjExMjAwMTEzWhcNMjUxMjEyMjAwMTEzWjAzMTEwLwYDVQQD Eyg3ZDJkY2MxNDU4ZTYyMjYxNzhlODY1MjcyYWY4MWU0ZjAxNTAzNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHeVdxwuooDGbWXQIzUE3l1pSHIk okT+AbSZrb5w2ZomUAqhQssOdWDiRT9TVMblZxMhNGS3wtu9kdHpqNBO/VeFM9X7 ao548lA6p8LY0H8mnjJ/iqyVz4ZgKK6fP9EM5vwJu1q0MKxL9XdM65MbC2qZIwUj 5licRaRPJZGhiZaoWGwFWij05tb5xYct2bZetIxiySnw8HKvnytk6AFrYbotWTYF ucXwbkV/9b8cuKJ/cziiClVam/DSYtV6aX4BmR+XoEjIpltKB2DCU8SXiK4wR5fh rxlk8Kh10me+ZOJvyyz/rHX3X3NpswPvYZJc4JWVSLMtHgAR3jCSF8TXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0tzBRY5iJheOhlJyr4Hk8BUDdmMB8GA1UdIwQY MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV1/QVte Nufg8kVH2yxQHN2jtq7GKes7WV9f7eYQEHyl6ZpQ9G7I77dA87r9tShf7nOjvN6+ Xb/M/awuq9x9fOTs4DYLzhTSkvNchJ63mTXXiZRFnYbPFd5ff3u89YN6WxhXtkWt ntjEnHpMQ2WEx7t7CxI66kyLAhSj6va8hBFtEz3XQM3KazUhC9vgv8KICd3hzodZ Sr5nJvkpNY9ggOzDpoduG/Pw7msHbqVzWCowzyaw9kqA4HZbHB7ddjPV8jNemxTR cXMejGh+AOKKN6XFUbEje/e2x0LT7tA+WVFvf319zZoD6HwUVtNx6JB3fkcLDcD3 CgHxGdmSsWifuw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:28 2025 by rpki-client