This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json) Hash identifier: MZKRDlIotIUafsMi9tOCPde2+qebIXPjyOVS/vW++Kc= Subject key identifier: E3:2D:39:A3:77:3B:8E:11:D3:69:F1:ED:1B:3B:B0:0C:3D:91:6E:4E Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Certificate serial: 019B206222E4785FF316DF7E96E8F058E6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft Manifest number: 1253 Signing time: Mon 15 Dec 2025 05:01:00 +0000 Manifest this update: Mon 15 Dec 2025 05:01:00 +0000 Manifest next update: Tue 16 Dec 2025 05:01:00 +0000 Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: gJqhFBn9FlT8jYOf3unGquwOh+6L2RE1SpcBxsE6sKM=) 2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:22:e4:78:5f:f3:16:df:7e:96:e8:f0:58:e6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd Validity Not Before: Dec 15 05:01:00 2025 GMT Not After : Dec 16 05:01:00 2025 GMT Subject: CN=e32d39a3773b8e11d369f1ed1b3bb00c3d916e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:e9:37:dd:54:f8:ad:d3:20:85:fb:17:b3: 54:88:56:90:fa:47:c3:39:7b:2a:94:eb:48:24:00: 91:6c:46:2c:42:65:1f:43:4b:17:8d:89:25:b3:b1: cc:71:32:ca:3f:ee:bb:8f:c5:a4:b6:0e:41:aa:65: 0f:53:8e:41:76:5a:21:fc:af:89:d0:24:92:bf:d9: b2:03:c7:14:91:6a:e1:1c:a4:da:53:2f:bc:c5:eb: 24:98:14:a6:05:d9:f1:6a:da:ca:9e:8d:fe:cf:9c: fc:bd:8b:2d:3f:16:4c:89:1a:f0:e2:55:cc:87:e1: bd:65:e5:8b:a9:65:23:c6:2e:10:93:cc:54:d8:7b: ef:6d:55:84:5d:89:64:db:24:df:a6:54:06:4e:82: 3b:fc:ac:9c:89:cd:6e:24:77:fc:b8:73:76:5c:10: 39:97:04:43:45:f9:83:00:72:95:6b:9a:0e:3a:ab: 5e:0b:10:69:b5:75:65:04:d9:0d:28:5d:36:1a:f9: 3b:bc:e8:5b:60:ab:07:84:f4:9b:ea:3e:b9:5a:c2: 26:0c:21:f7:f1:c7:27:08:66:ac:a3:d6:05:ea:54: b1:6e:ff:68:91:73:c5:0e:ee:d4:15:e1:c7:70:19: 78:cd:68:67:1f:de:5d:92:cd:1c:85:ab:2d:14:41: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:39:A3:77:3B:8E:11:D3:69:F1:ED:1B:3B:B0:0C:3D:91:6E:4E X509v3 Authority Key Identifier: keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:13:19:d3:32:b6:9c:05:93:92:cb:8e:8b:44:fd:df:10:7c: 15:a0:62:9b:e1:cc:7b:56:e9:38:db:50:8b:7b:a6:ff:c4:a9: 1f:75:4c:ed:f1:a0:7d:99:c6:36:bb:e7:a7:43:02:c6:78:fb: 76:be:5d:98:3a:b3:c0:8f:9b:b4:a4:58:6d:44:6b:76:51:35: 34:05:b3:eb:a5:38:e3:6f:5e:18:d2:d1:41:46:b1:25:fc:5c: 60:42:a4:cd:8a:a3:a5:1e:50:83:f3:28:a1:44:76:ed:f5:b2: 2a:31:69:b5:94:0c:18:0c:56:40:6c:d3:62:bd:c9:55:e4:2d: fd:c0:41:a2:0d:8d:48:80:e4:64:23:9e:c8:5f:d8:66:83:a0: 85:a9:31:af:77:0e:98:13:6d:0d:95:32:3b:3d:50:9e:84:fc: 90:c6:4e:a5:bb:20:5d:4e:17:39:09:62:9a:d3:a2:8a:c7:2a: 9e:dd:a0:f6:a5:3c:35:08:97:10:ab:52:7f:dc:8a:9a:c0:79: c4:d5:72:bc:7c:6a:c5:a6:31:17:3e:e8:a8:f1:b2:29:b8:a2: e0:a9:a3:b3:3b:3a:98:70:54:e8:f1:63:c2:b2:c6:77:08:d4: 5b:c0:0b:53:42:c8:24:20:25:7e:0f:3c:7f:b4:8f:6f:bf:11: 81:53:f8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYiLkeF/zFt9+lujwWOakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi MjRhYmQwHhcNMjUxMjE1MDUwMTAwWhcNMjUxMjE2MDUwMTAwWjAzMTEwLwYDVQQD EyhlMzJkMzlhMzc3M2I4ZTExZDM2OWYxZWQxYjNiYjAwYzNkOTE2ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK7pN91U+K3TIIX7F7NUiFaQ+kfD OXsqlOtIJACRbEYsQmUfQ0sXjYkls7HMcTLKP+67j8Wktg5BqmUPU45Bdloh/K+J 0CSSv9myA8cUkWrhHKTaUy+8xeskmBSmBdnxatrKno3+z5z8vYstPxZMiRrw4lXM h+G9ZeWLqWUjxi4Qk8xU2HvvbVWEXYlk2yTfplQGToI7/Kycic1uJHf8uHN2XBA5 lwRDRfmDAHKVa5oOOqteCxBptXVlBNkNKF02Gvk7vOhbYKsHhPSb6j65WsImDCH3 8ccnCGaso9YF6lSxbv9okXPFDu7UFeHHcBl4zWhnH95dks0chastFEGcUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMtOaN3O44R02nx7Rs7sAw9kW5OMB8GA1UdIwQY MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhMZ0zK2 nAWTksuOi0T93xB8FaBim+HMe1bpONtQi3um/8SpH3VM7fGgfZnGNrvnp0MCxnj7 dr5dmDqzwI+btKRYbURrdlE1NAWz66U4429eGNLRQUaxJfxcYEKkzYqjpR5Qg/Mo oUR27fWyKjFptZQMGAxWQGzTYr3JVeQt/cBBog2NSIDkZCOeyF/YZoOghakxr3cO mBNtDZUyOz1QnoT8kMZOpbsgXU4XOQlimtOiiscqnt2g9qU8NQiXEKtSf9yKmsB5 xNVyvHxqxaYxFz7oqPGyKbii4Kmjszs6mHBU6PFjwrLGdwjUW8ALU0LIJCAlfg88 f7SPb78RgVP4rQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:33 2025 by rpki-client