This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json) Hash identifier: BLIGRMTFbBLVjqI0cJJByIcxbp9lyZGAs5kxRZhqfrw= Subject key identifier: 47:89:4E:C0:D3:C4:2B:B5:74:38:CD:B1:25:02:81:05:C0:A4:99:E4 Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Certificate serial: 019B12DD175523F1E89BCFCA7E68034E5166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft Manifest number: 1707 Signing time: Fri 12 Dec 2025 14:00:37 +0000 Manifest this update: Fri 12 Dec 2025 14:00:37 +0000 Manifest next update: Sat 13 Dec 2025 14:00:37 +0000 Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=) 2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: d8OtKFM/gVxPHA0llw8wJdLyJwbemTSHFHqRU5Qk3ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:17:55:23:f1:e8:9b:cf:ca:7e:68:03:4e:51:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Validity Not Before: Dec 12 14:00:37 2025 GMT Not After : Dec 13 14:00:37 2025 GMT Subject: CN=47894ec0d3c42bb57438cdb125028105c0a499e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:60:62:18:a1:e0:1f:48:bd:22:ef:38:9b: c9:f7:68:49:9e:dd:dd:90:f6:93:d3:2f:9a:d7:e4: 13:e7:90:c1:58:ea:73:b5:85:f8:90:e2:94:a5:8c: 06:8c:12:4e:2c:e7:7b:dd:8e:ae:ae:fd:24:b7:6f: 7c:04:ba:4a:a9:e1:df:01:bd:9a:e5:1a:65:1d:36: 52:de:a6:d3:e4:6b:70:77:54:84:b1:9d:5f:b8:02: e1:76:51:e2:eb:78:2c:29:c6:c8:d3:c8:c9:98:39: 3b:c5:6e:79:8b:22:1f:8e:70:31:8d:00:e8:fa:33: d4:f8:bb:73:16:9b:7e:26:1a:af:25:b7:36:c9:47: 01:84:10:60:62:87:55:98:d5:e0:3d:c7:fd:ff:19: e0:a7:0e:a6:20:c3:79:ac:d0:51:82:cc:64:26:b4: cb:3e:f8:20:e5:11:e3:59:d7:75:49:a6:56:85:ae: 0e:13:ee:15:c1:65:7f:1c:1e:61:aa:85:78:92:a3: b3:88:57:5b:eb:8a:78:d0:cf:ee:72:82:1d:4b:fe: f1:64:0f:55:b1:14:f4:57:86:9a:1e:a4:d1:25:3c: bb:cf:47:47:94:cb:a8:f8:17:6b:80:9f:42:bb:70: ec:69:31:8b:ce:fc:80:33:33:0c:d3:ef:bc:af:05: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:4E:C0:D3:C4:2B:B5:74:38:CD:B1:25:02:81:05:C0:A4:99:E4 X509v3 Authority Key Identifier: keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:22:50:1b:f5:41:dd:3f:a4:01:2f:9c:bc:93:74:89:01:15: bc:11:0b:63:cf:7d:2c:87:92:cc:c3:d3:86:22:2b:b9:33:73: a2:eb:88:82:c3:d7:f2:f6:a8:1a:e2:9f:67:7b:90:5e:dc:bb: 55:3e:28:3f:86:35:ff:5d:ed:59:af:76:aa:b6:5e:20:e6:32: f6:7d:81:00:ec:2c:8e:81:a5:1d:c5:9b:50:56:2a:a6:7e:87: 30:f3:64:8d:88:9f:d8:70:dd:ce:18:43:76:fe:61:ab:c2:c8: f9:ef:25:f7:84:89:af:a2:00:22:37:c1:b2:37:cb:5e:bd:42: c5:87:aa:d3:4f:73:75:75:ec:d4:ee:77:cc:d5:4f:ba:e6:05: a2:96:a2:45:fe:65:f9:fa:f3:13:4d:db:58:8d:17:98:b4:61: b8:14:5b:d5:20:a1:41:c7:06:25:4f:a7:d9:7b:a0:8b:7e:ef: af:b2:e4:e5:b1:ee:67:55:f1:3b:e4:aa:12:19:9e:05:ca:98: a7:99:e0:51:10:20:9d:07:27:93:50:70:37:c2:3e:d5:11:30: b6:ab:4a:b9:63:13:6b:23:e0:b0:28:18:31:64:bf:32:9e:fb: fe:bd:de:2f:cd:d0:14:b4:c3:66:2a:61:50:53:16:5c:36:e5: 95:8c:1c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3RdVI/Hom8/KfmgDTlFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi OWYzYjgwHhcNMjUxMjEyMTQwMDM3WhcNMjUxMjEzMTQwMDM3WjAzMTEwLwYDVQQD Eyg0Nzg5NGVjMGQzYzQyYmI1NzQzOGNkYjEyNTAyODEwNWMwYTQ5OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA329gYhih4B9IvSLvOJvJ92hJnt3d kPaT0y+a1+QT55DBWOpztYX4kOKUpYwGjBJOLOd73Y6urv0kt298BLpKqeHfAb2a 5RplHTZS3qbT5Gtwd1SEsZ1fuALhdlHi63gsKcbI08jJmDk7xW55iyIfjnAxjQDo +jPU+LtzFpt+JhqvJbc2yUcBhBBgYodVmNXgPcf9/xngpw6mIMN5rNBRgsxkJrTL Pvgg5RHjWdd1SaZWha4OE+4VwWV/HB5hqoV4kqOziFdb64p40M/ucoIdS/7xZA9V sRT0V4aaHqTRJTy7z0dHlMuo+BdrgJ9Cu3DsaTGLzvyAMzMM0++8rwXNHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeJTsDTxCu1dDjNsSUCgQXApJnkMB8GA1UdIwQY MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt MzlmNzUzNzU3ODQ4LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4 LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyJQG/VB 3T+kAS+cvJN0iQEVvBELY899LIeSzMPThiIruTNzouuIgsPX8vaoGuKfZ3uQXty7 VT4oP4Y1/13tWa92qrZeIOYy9n2BAOwsjoGlHcWbUFYqpn6HMPNkjYif2HDdzhhD dv5hq8LI+e8l94SJr6IAIjfBsjfLXr1CxYeq009zdXXs1O53zNVPuuYFopaiRf5l +frzE03bWI0XmLRhuBRb1SChQccGJU+n2Xugi37vr7Lk5bHuZ1XxO+SqEhmeBcqY p5ngURAgnQcnk1BwN8I+1REwtqtKuWMTayPgsCgYMWS/Mp77/r3eL83QFLTDZiph UFMWXDbllYwcgg== -----END CERTIFICATE-----Generated at Fri Dec 12 19:30:42 2025 by rpki-client