This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json) Hash identifier: gfVlSjJrDT6S61pWNqrC+qwLiAMxCIq8TSjedDZD83s= Subject key identifier: B7:F7:39:80:44:B1:4C:AB:9C:40:23:C4:CD:FF:CC:6D:35:EF:46:A8 Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Certificate serial: 019B20992395A144F4DC03D55E084BD51156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft Manifest number: 13D6 Signing time: Mon 15 Dec 2025 06:01:05 +0000 Manifest this update: Mon 15 Dec 2025 06:01:05 +0000 Manifest next update: Tue 16 Dec 2025 06:01:05 +0000 Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=) 2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=) 3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=) 4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: 36TM6/+D8rbZ0r08mm4BYHWDETxNl73A6qm6PIHT1tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:23:95:a1:44:f4:dc:03:d5:5e:08:4b:d5:11:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Validity Not Before: Dec 15 06:01:05 2025 GMT Not After : Dec 16 06:01:05 2025 GMT Subject: CN=b7f7398044b14cab9c4023c4cdffcc6d35ef46a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:06:9b:96:f0:6e:32:35:9c:2b:d7:20:fb: 5d:77:40:f5:03:75:a8:d9:8c:45:b5:b0:4f:a3:74: 52:29:82:1f:4b:81:92:38:14:11:e1:8d:82:dc:9c: b1:f2:9c:39:0f:8e:f5:ec:ef:c4:c3:18:9f:87:b0: 10:dc:09:85:e6:13:70:bb:40:ac:fc:02:b6:11:63: af:35:33:f3:de:fa:bd:b4:69:33:10:66:bf:24:a2: 5f:03:cc:c7:30:50:14:7b:1a:64:c6:c5:f1:8e:f4: 78:3b:b0:da:67:42:9a:46:04:cb:89:54:2c:11:5b: b6:d0:45:b4:1e:54:e6:5c:d9:6b:e1:1d:73:27:4f: 95:5d:3f:6b:26:64:98:e3:04:1d:6f:ea:e7:8c:a7: 83:f1:c8:56:bb:c6:1b:57:6e:0b:a1:57:59:2b:b2: 59:d4:b3:07:94:a2:8e:81:58:db:e1:c5:06:5d:03: 07:8e:d5:25:34:0d:4b:28:0d:98:b7:2b:20:bf:ff: fe:8f:72:78:c1:d6:60:ba:04:6e:e7:ea:e0:3d:87: 37:58:50:43:cc:b1:56:91:12:8d:77:69:97:90:60: a1:35:1b:b5:b5:83:02:aa:ea:03:64:a2:d8:1b:fe: 08:10:cf:88:f2:ec:d8:3d:56:98:ab:88:b0:a3:2b: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:39:80:44:B1:4C:AB:9C:40:23:C4:CD:FF:CC:6D:35:EF:46:A8 X509v3 Authority Key Identifier: keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3b:d7:0d:6d:c0:ce:9f:cb:4e:f0:d5:10:9a:fa:64:9b:9b: 46:c4:bd:83:c7:45:46:cf:42:38:89:d7:98:40:86:47:8b:48: 3b:fe:23:a5:7d:08:fa:0b:d2:03:e3:3e:20:55:ba:6e:d9:9a: bf:8d:56:fa:e2:db:c2:1b:c2:6b:f8:eb:fd:5f:ce:c4:31:06: 39:6d:ff:4a:80:27:ef:25:21:bf:85:62:50:cb:96:ae:3d:db: 7f:5e:65:6b:00:b0:ee:e9:c9:f7:ce:3c:82:94:01:5f:e2:d6: 39:33:da:16:3e:3d:84:2e:e7:57:7e:aa:bd:9b:16:57:82:dc: ec:fb:25:a7:ce:1d:12:64:55:98:3d:a0:01:b0:3a:84:71:e2: 28:e8:3c:c0:a3:67:7a:68:b0:4f:dc:4e:56:ab:09:47:da:8a: ee:8d:c5:7f:e6:71:da:97:19:bb:eb:ae:7c:40:5f:2d:36:f6: 2d:99:fb:eb:f6:d3:cb:ad:2b:d0:a5:dc:dc:7c:61:2d:d2:53: 34:69:3f:40:70:e1:3a:80:0e:6e:56:09:89:2b:3a:d3:6f:c2: 0d:24:38:e1:41:c2:c7:03:43:09:f5:8c:9a:c6:b8:9d:99:78: cf:dd:bc:b2:1b:f3:46:47:a2:a2:ba:4a:e1:9f:21:e2:57:54: 82:6a:e3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmSOVoUT03APVXghL1RFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh NjVjYTMwHhcNMjUxMjE1MDYwMTA1WhcNMjUxMjE2MDYwMTA1WjAzMTEwLwYDVQQD EyhiN2Y3Mzk4MDQ0YjE0Y2FiOWM0MDIzYzRjZGZmY2M2ZDM1ZWY0NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFIGm5bwbjI1nCvXIPtdd0D1A3Wo 2YxFtbBPo3RSKYIfS4GSOBQR4Y2C3Jyx8pw5D4717O/Ewxifh7AQ3AmF5hNwu0Cs /AK2EWOvNTPz3vq9tGkzEGa/JKJfA8zHMFAUexpkxsXxjvR4O7DaZ0KaRgTLiVQs EVu20EW0HlTmXNlr4R1zJ0+VXT9rJmSY4wQdb+rnjKeD8chWu8YbV24LoVdZK7JZ 1LMHlKKOgVjb4cUGXQMHjtUlNA1LKA2Ytysgv//+j3J4wdZgugRu5+rgPYc3WFBD zLFWkRKNd2mXkGChNRu1tYMCquoDZKLYG/4IEM+I8uzYPVaYq4iwoys58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf3OYBEsUyrnEAjxM3/zG0170aoMB8GA1UdIwQY MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2 LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDvXDW3A zp/LTvDVEJr6ZJubRsS9g8dFRs9COInXmECGR4tIO/4jpX0I+gvSA+M+IFW6btma v41W+uLbwhvCa/jr/V/OxDEGOW3/SoAn7yUhv4ViUMuWrj3bf15lawCw7unJ9848 gpQBX+LWOTPaFj49hC7nV36qvZsWV4Lc7Pslp84dEmRVmD2gAbA6hHHiKOg8wKNn emiwT9xOVqsJR9qK7o3Ff+Zx2pcZu+uufEBfLTb2LZn76/bTy60r0KXc3HxhLdJT NGk/QHDhOoAOblYJiSs602/CDSQ44UHCxwNDCfWMmsa4nZl4z928shvzRkeiorpK 4Z8h4ldUgmrjog== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:33 2025 by rpki-client