This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json) Hash identifier: X1de820GhDB+iC32cIE4+YU9rlQB86ijLc6yACXuDUE= Subject key identifier: FA:4E:4C:6F:79:1A:AB:BC:D9:28:D7:F1:DA:0F:9E:83:BA:01:91:FA Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Certificate serial: 019B19BBD85E12EB0FC4F7E6D3FBB55687E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft Manifest number: 0B83 Signing time: Sat 13 Dec 2025 22:01:39 +0000 Manifest this update: Sat 13 Dec 2025 22:01:39 +0000 Manifest next update: Sun 14 Dec 2025 22:01:39 +0000 Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: cMhbBYlN1IZtNv19K95qcdY8JFAbSd7pN8GGC+FnxFQ=) 2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:d8:5e:12:eb:0f:c4:f7:e6:d3:fb:b5:56:87:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Validity Not Before: Dec 13 22:01:39 2025 GMT Not After : Dec 14 22:01:39 2025 GMT Subject: CN=fa4e4c6f791aabbcd928d7f1da0f9e83ba0191fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:c8:a9:d5:c1:00:34:55:9c:37:ed:90:6b: 96:ab:47:9e:88:08:da:02:33:aa:73:4b:50:7f:cd: f2:ed:ad:94:36:4a:5a:64:f8:3d:78:d8:59:4f:40: 8f:fe:f6:4c:b4:0e:f8:9e:d1:ba:b6:9a:42:b4:94: 8d:b5:b7:85:9a:d3:b7:c5:21:36:e3:82:02:d5:5a: c4:92:50:86:a0:ae:a1:82:b9:68:ee:7e:df:22:fe: 3a:dc:d3:58:4c:70:02:70:cb:48:48:a6:9a:48:f3: ed:aa:1d:17:7f:cc:05:63:fc:22:4d:d8:c3:b6:bc: ac:97:9c:da:28:ce:31:81:14:98:03:15:e3:1d:8b: 82:c8:3f:a9:bc:cc:da:bb:a0:c5:0a:21:41:34:f2: 99:f4:30:fc:60:55:37:15:d8:e1:39:4b:55:40:c2: cd:d8:13:68:44:48:be:5e:8c:98:7f:7d:8f:d3:00: aa:25:01:64:06:83:af:02:b6:0c:dd:1c:a1:c0:9c: 23:8a:70:a9:98:2c:cd:ca:10:43:6a:b5:f6:fb:79: 18:97:c3:74:b0:e5:65:66:74:b5:3c:ca:60:47:fa: a9:1b:46:7f:02:1a:d3:6c:8d:dc:f0:55:cb:80:25: 3d:0d:b2:54:61:eb:d2:b8:b6:31:eb:22:15:70:a5: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4E:4C:6F:79:1A:AB:BC:D9:28:D7:F1:DA:0F:9E:83:BA:01:91:FA X509v3 Authority Key Identifier: keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5e:27:44:72:6f:fb:ca:38:f5:12:a0:3e:bc:96:c5:95:6f: f0:ed:7b:da:fb:00:fb:c9:06:61:61:72:d4:6a:bd:d1:a9:b3: a4:8c:4c:d8:6d:42:94:0f:aa:55:5a:07:e2:3a:73:f6:29:1a: df:c7:82:9e:54:0e:0c:4c:31:24:25:95:5f:33:00:94:12:d0: 3a:77:43:c7:df:51:97:55:b4:64:c9:91:6a:4d:e6:a3:e8:ce: 3b:8d:bf:7b:07:06:d9:ba:ea:d5:85:e0:31:1a:ca:db:b8:82: 55:fc:2d:e6:38:09:d5:10:39:65:6c:10:dd:54:67:4a:e9:b2: ef:83:71:af:58:14:aa:f2:84:4d:07:0f:be:38:2e:17:ca:9b: b1:e1:d2:a1:0c:56:92:c8:ca:91:28:f5:19:25:d6:fe:6a:56: 36:f3:d5:61:5c:58:6f:0b:7d:28:28:8e:8a:df:59:46:51:22: 01:fe:c6:a1:ce:e9:06:3d:8f:c0:45:3c:17:42:ad:1d:fe:2f: 79:89:7e:e9:8b:c6:56:49:3b:cc:f4:4f:d5:3e:c9:5b:30:91: a3:be:5c:58:f9:e5:14:9c:af:fb:a5:b6:e9:96:9f:19:a8:d1: 6e:bc:d7:b8:fa:bd:2f:cc:0d:dd:06:55:bd:57:9f:e5:ae:9c: 33:c7:4f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu9heEusPxPfm0/u1VofkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0 MTJjODAwHhcNMjUxMjEzMjIwMTM5WhcNMjUxMjE0MjIwMTM5WjAzMTEwLwYDVQQD EyhmYTRlNGM2Zjc5MWFhYmJjZDkyOGQ3ZjFkYTBmOWU4M2JhMDE5MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf/IqdXBADRVnDftkGuWq0eeiAja AjOqc0tQf83y7a2UNkpaZPg9eNhZT0CP/vZMtA74ntG6tppCtJSNtbeFmtO3xSE2 44IC1VrEklCGoK6hgrlo7n7fIv463NNYTHACcMtISKaaSPPtqh0Xf8wFY/wiTdjD trysl5zaKM4xgRSYAxXjHYuCyD+pvMzau6DFCiFBNPKZ9DD8YFU3FdjhOUtVQMLN 2BNoREi+XoyYf32P0wCqJQFkBoOvArYM3RyhwJwjinCpmCzNyhBDarX2+3kYl8N0 sOVlZnS1PMpgR/qpG0Z/AhrTbI3c8FXLgCU9DbJUYevSuLYx6yIVcKXEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpOTG95Gqu82SjX8doPnoO6AZH6MB8GA1UdIwQY MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF4nRHJv +8o49RKgPryWxZVv8O172vsA+8kGYWFy1Gq90amzpIxM2G1ClA+qVVoH4jpz9ika 38eCnlQODEwxJCWVXzMAlBLQOndDx99Rl1W0ZMmRak3mo+jOO42/ewcG2brq1YXg MRrK27iCVfwt5jgJ1RA5ZWwQ3VRnSumy74Nxr1gUqvKETQcPvjguF8qbseHSoQxW ksjKkSj1GSXW/mpWNvPVYVxYbwt9KCiOit9ZRlEiAf7Goc7pBj2PwEU8F0KtHf4v eYl+6YvGVkk7zPRP1T7JWzCRo75cWPnlFJyv+6W26ZafGajRbrzXuPq9L8wN3QZV vVef5a6cM8dP6A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:46 2025 by rpki-client