This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json) Hash identifier: TlcDEGnB5jdwLCyOFDbF9fX65e1GkNxXVf+3uNGKw+k= Subject key identifier: 90:A1:42:21:F3:5A:F6:A8:5A:2A:EA:ED:D8:EB:6F:93:69:8E:F7:F5 Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Certificate serial: 019B59AD1FF3136CF25479A4B7B26192BCB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft Manifest number: 0C29 Signing time: Fri 26 Dec 2025 08:01:16 +0000 Manifest this update: Fri 26 Dec 2025 08:01:16 +0000 Manifest next update: Sat 27 Dec 2025 08:01:16 +0000 Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: dWAryDrGBIUMz5nJ5yQSmWvaC4DNPj9rqMAZkB5FqT8=) 2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:1f:f3:13:6c:f2:54:79:a4:b7:b2:61:92:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Validity Not Before: Dec 26 08:01:16 2025 GMT Not After : Dec 27 08:01:16 2025 GMT Subject: CN=90a14221f35af6a85a2aeaedd8eb6f93698ef7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:61:40:4d:e8:48:b0:54:c4:f2:2d:7f:ea: 15:e7:8d:4a:e2:b5:45:c5:8f:9a:37:62:2e:37:8e: 96:f8:f0:5a:f4:be:39:e3:20:4a:32:24:54:da:2f: 9d:e7:56:18:c0:4b:13:3f:de:ea:4e:56:18:2b:55: 97:fa:3e:e0:99:b9:e9:5a:5d:78:64:aa:00:c9:68: 71:a1:07:61:29:b8:8a:ac:e1:96:fc:55:0e:dc:ec: a9:62:07:76:f8:10:c9:70:fc:7a:cf:cf:74:5f:89: af:4a:ca:46:d6:10:ca:64:51:5c:7e:f7:38:49:4b: c3:53:fe:19:06:43:6e:e3:11:67:d1:7b:e8:10:a8: 17:0c:f7:38:5f:40:2f:d2:ac:46:b6:4d:bc:84:42: 74:44:fe:80:f7:69:a8:cd:de:0d:08:0d:df:f0:fa: bd:3d:0b:b9:80:af:ce:23:ac:96:62:9c:62:ea:cd: b6:04:e8:d0:a0:a4:5b:26:2e:a1:99:d8:33:54:30: 31:9f:6f:4a:6e:ff:b5:2f:36:f2:95:4e:7c:2c:6b: 08:91:a7:51:16:81:db:4c:34:13:4b:37:c5:10:9f: 54:02:1e:41:1b:5a:fa:5f:f5:b7:6d:5f:77:86:6f: fe:69:6b:1a:ac:fb:d8:f9:2d:d1:45:39:3f:2c:97: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:42:21:F3:5A:F6:A8:5A:2A:EA:ED:D8:EB:6F:93:69:8E:F7:F5 X509v3 Authority Key Identifier: keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ab:f6:1b:13:f4:b4:8d:f6:66:92:bc:84:89:13:95:e1:df: 51:37:02:6a:8c:90:ba:12:57:2f:b4:c3:f2:09:ec:a5:5f:56: 4e:85:bc:b3:08:f4:f6:54:f6:98:e7:aa:dc:c1:7f:75:96:8a: d1:8e:6a:80:47:e3:89:fd:17:40:4e:a9:ee:60:76:57:fe:fa: 05:2e:d5:0e:a1:7c:30:24:dd:1b:57:84:a5:1a:8a:50:92:72: 23:11:fe:4f:20:a5:e1:59:e3:c8:66:09:b6:7e:d8:95:c7:01: 7d:2c:70:02:36:4c:9a:32:9a:58:52:06:8b:99:73:27:c4:dc: f1:77:9a:c8:93:d8:ad:be:8d:ea:a4:28:0e:a8:55:fb:df:a3: 08:fa:e1:aa:e1:e5:36:29:70:db:89:eb:43:5b:e9:a8:de:e2: 51:54:a7:8c:80:09:64:34:e3:6b:20:d0:8d:e2:91:b2:d8:45: 1d:9c:8b:00:67:e5:5d:b1:d2:11:65:a6:dd:ee:61:e8:c7:7c: 37:7f:85:42:5e:a8:b4:32:3d:91:e3:dc:0a:d0:dd:0e:03:fc: 7d:4b:47:60:a1:51:5c:2f:08:a0:73:bc:25:86:e8:0c:23:4d: 6f:2f:06:7d:bb:14:d4:86:52:a8:9d:2f:0b:c4:10:80:33:e6: b6:b7:04:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrR/zE2zyVHmkt7JhkryzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi NzlmY2EwHhcNMjUxMjI2MDgwMTE2WhcNMjUxMjI3MDgwMTE2WjAzMTEwLwYDVQQD Eyg5MGExNDIyMWYzNWFmNmE4NWEyYWVhZWRkOGViNmY5MzY5OGVmN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKZhQE3oSLBUxPItf+oV541K4rVF xY+aN2IuN46W+PBa9L454yBKMiRU2i+d51YYwEsTP97qTlYYK1WX+j7gmbnpWl14 ZKoAyWhxoQdhKbiKrOGW/FUO3OypYgd2+BDJcPx6z890X4mvSspG1hDKZFFcfvc4 SUvDU/4ZBkNu4xFn0XvoEKgXDPc4X0Av0qxGtk28hEJ0RP6A92mozd4NCA3f8Pq9 PQu5gK/OI6yWYpxi6s22BOjQoKRbJi6hmdgzVDAxn29Kbv+1LzbylU58LGsIkadR FoHbTDQTSzfFEJ9UAh5BG1r6X/W3bV93hm/+aWsarPvY+S3RRTk/LJd8/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJChQiHzWvaoWirq7djrb5Npjvf1MB8GA1UdIwQY MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5 LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqv2GxP0 tI32ZpK8hIkTleHfUTcCaoyQuhJXL7TD8gnspV9WToW8swj09lT2mOeq3MF/dZaK 0Y5qgEfjif0XQE6p7mB2V/76BS7VDqF8MCTdG1eEpRqKUJJyIxH+TyCl4VnjyGYJ tn7YlccBfSxwAjZMmjKaWFIGi5lzJ8Tc8XeayJPYrb6N6qQoDqhV+9+jCPrhquHl Nilw24nrQ1vpqN7iUVSnjIAJZDTjayDQjeKRsthFHZyLAGflXbHSEWWm3e5h6Md8 N3+FQl6otDI9kePcCtDdDgP8fUtHYKFRXC8IoHO8JYboDCNNby8GfbsU1IZSqJ0v C8QQgDPmtrcE9w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:22 2025 by rpki-client