This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json) Hash identifier: bU+PK+KRF9MD5JYkX1a0szGUblQtET9G6e0jTR5wbUE= Subject key identifier: 46:C8:EE:F2:4D:7E:74:D6:A3:E2:1F:21:FE:C1:41:0E:8A:8A:02:54 Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712 Certificate serial: 019B337B14E463C3BFED1BB01479C11C1F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft Manifest number: 1674 Signing time: Thu 18 Dec 2025 22:01:02 +0000 Manifest this update: Thu 18 Dec 2025 22:01:02 +0000 Manifest next update: Fri 19 Dec 2025 22:01:02 +0000 Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: rX/UsQ4xuFlR6x5iPUMSQmjW557+jTdi9jYaaqQA9hw=) 2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:14:e4:63:c3:bf:ed:1b:b0:14:79:c1:1c:1f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712 Validity Not Before: Dec 18 22:01:02 2025 GMT Not After : Dec 19 22:01:02 2025 GMT Subject: CN=46c8eef24d7e74d6a3e21f21fec1410e8a8a0254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:bf:af:e7:ed:75:06:6c:e1:dd:e4:b1:7e: d3:be:53:a6:46:c8:22:82:d1:f8:09:c5:93:64:a6: ab:1f:07:29:b7:a1:e3:19:9e:9a:1f:ee:b6:94:e6: 69:c0:45:35:da:80:ca:aa:09:f4:58:2c:05:58:79: c4:9f:77:f7:a0:74:af:ed:c5:19:71:8d:51:3c:fc: ce:1c:a5:71:75:ef:d6:00:29:d6:25:a2:e7:b9:3a: 2d:87:e7:6f:cc:43:a8:fa:8f:e2:7a:8b:fe:66:59: fa:1c:e4:ce:3e:c6:f2:7e:50:4b:fd:b7:6e:33:55: e8:07:65:29:75:74:dd:a4:25:9b:25:90:24:27:b1: 1a:7d:ba:11:96:24:5d:3f:b5:19:f7:a1:09:3a:53: 2e:3e:b7:ff:94:06:57:0d:e7:cc:60:cc:b6:2b:08: ba:70:f3:b6:1b:83:ed:5e:b8:e1:da:eb:24:89:31: 6c:b7:86:14:8c:07:d4:1e:35:04:7e:e5:cd:95:bf: d4:e1:d9:bc:e4:19:0b:63:e0:75:c5:f9:d3:82:2a: 63:af:66:9d:27:3f:8f:fa:59:b1:de:9e:fa:10:ea: 16:7f:72:ed:3c:11:63:31:d9:6b:63:d7:df:14:53: 2d:ed:fd:91:81:25:f4:86:87:d0:6c:18:33:60:5a: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C8:EE:F2:4D:7E:74:D6:A3:E2:1F:21:FE:C1:41:0E:8A:8A:02:54 X509v3 Authority Key Identifier: keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:e9:e3:ec:ac:42:44:8d:c3:46:e1:8a:7e:0a:87:5f:28: b0:d3:20:16:d5:b9:de:03:4e:e3:17:ab:8b:ff:7d:cf:c6:e5: 5c:ec:e7:ed:b8:5b:37:e2:57:5a:d0:27:ff:ba:ab:99:f3:a0: 91:e5:75:ba:b2:56:3a:c2:68:6c:83:56:56:b5:ad:08:4f:12: 77:ea:2e:8d:23:80:01:48:d1:74:00:0c:8c:dc:46:d4:75:9e: fd:a2:91:e4:fc:01:8b:8d:d1:97:06:21:2b:8a:18:25:be:67: ef:f7:04:b5:d5:5f:af:9a:4a:71:15:14:3c:72:03:ab:5a:78: 62:8a:4f:d9:d6:c7:92:10:a3:4c:12:88:39:17:e2:72:db:a9: 30:d4:d3:42:e2:41:99:4d:89:ce:59:cf:28:2c:63:d7:20:2c: 3d:80:40:02:11:b1:c9:43:71:3d:c1:a0:b1:f0:4e:0f:08:38: d3:68:cb:45:9e:2b:ee:9e:63:94:96:d7:f0:7e:62:f6:07:2e: f3:33:bc:bf:61:48:80:fa:25:b5:ca:ef:8f:0c:25:0d:f3:a0: ba:37:74:7d:c6:8a:15:9f:36:27:40:8f:ec:1c:94:81:4e:e3: 24:47:f9:27:62:9b:77:10:e9:f5:31:f7:72:b9:ad:63:f1:64: 98:61:51:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexTkY8O/7RuwFHnBHB9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzMwMzcxOTg2ZGY1ZDU2NGVlNjcwNzQ3MTdiNjZhMDJm ZjU3MTIwHhcNMjUxMjE4MjIwMTAyWhcNMjUxMjE5MjIwMTAyWjAzMTEwLwYDVQQD Eyg0NmM4ZWVmMjRkN2U3NGQ2YTNlMjFmMjFmZWMxNDEwZThhOGEwMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAa/r+ftdQZs4d3ksX7TvlOmRsgi gtH4CcWTZKarHwcpt6HjGZ6aH+62lOZpwEU12oDKqgn0WCwFWHnEn3f3oHSv7cUZ cY1RPPzOHKVxde/WACnWJaLnuToth+dvzEOo+o/ieov+Zln6HOTOPsbyflBL/bdu M1XoB2UpdXTdpCWbJZAkJ7EafboRliRdP7UZ96EJOlMuPrf/lAZXDefMYMy2Kwi6 cPO2G4PtXrjh2uskiTFst4YUjAfUHjUEfuXNlb/U4dm85BkLY+B1xfnTgipjr2ad Jz+P+lmx3p76EOoWf3LtPBFjMdlrY9ffFFMt7f2RgSX0hofQbBgzYFrMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbI7vJNfnTWo+IfIf7BQQ6KigJUMB8GA1UdIwQY MBaAFELDA3GYbfXVZO5nB0cXtmoC/1cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzct YzI0NTRjZTI4ZDQ4LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzctYzI0NTRjZTI4ZDQ4 LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNHp4+ys QkSNw0bhin4Kh18osNMgFtW53gNO4xeri/99z8blXOzn7bhbN+JXWtAn/7qrmfOg keV1urJWOsJobINWVrWtCE8Sd+oujSOAAUjRdAAMjNxG1HWe/aKR5PwBi43RlwYh K4oYJb5n7/cEtdVfr5pKcRUUPHIDq1p4YopP2dbHkhCjTBKIORfictupMNTTQuJB mU2JzlnPKCxj1yAsPYBAAhGxyUNxPcGgsfBODwg402jLRZ4r7p5jlJbX8H5i9gcu 8zO8v2FIgPoltcrvjwwlDfOgujd0fcaKFZ82J0CP7ByUgU7jJEf5J2KbdxDp9TH3 crmtY/FkmGFRug== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:56 2025 by rpki-client