This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json) Hash identifier: LXJxNoNOerzFsJ1B4hGxvRcleE4GpjEtz9uufxXtGuQ= Subject key identifier: 80:A6:0D:DC:6C:8B:2C:78:B0:55:5F:AF:6D:D4:71:17:88:A6:10:B2 Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019B36E9E28CAF20C83EFB9AE57D7FD1B2BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft Manifest number: 14B4 Signing time: Fri 19 Dec 2025 14:00:56 +0000 Manifest this update: Fri 19 Dec 2025 14:00:56 +0000 Manifest next update: Sat 20 Dec 2025 14:00:56 +0000 Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: RYL+fEpDPxJg0+Flm7mSXzYX7scR0/Da0b4yDSxuEZw=) 2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=) 3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=) 4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:e2:8c:af:20:c8:3e:fb:9a:e5:7d:7f:d1:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Dec 19 14:00:56 2025 GMT Not After : Dec 20 14:00:56 2025 GMT Subject: CN=80a60ddc6c8b2c78b0555faf6dd4711788a610b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:aa:cb:4a:2b:17:08:11:99:ec:e5:66:b7: b4:7c:87:5d:c0:19:98:0b:48:be:9f:fd:de:7a:d5: 37:aa:2d:b9:d2:18:66:4f:c7:70:fe:34:22:d8:c8: 82:4b:47:f8:d7:36:74:68:71:73:89:17:9f:8c:05: 1d:fc:4d:4b:1d:65:a1:86:45:28:21:99:1b:7f:47: 2e:64:ba:c5:b3:63:78:08:b0:65:90:d3:c7:75:17: f9:44:30:f7:b0:fb:78:db:89:62:61:03:e5:93:a0: b2:1f:ec:46:96:e8:14:4b:84:dd:70:b2:0a:ef:e3: c0:8d:8f:c7:4a:f4:4d:f2:9d:fb:43:59:79:c7:b4: 36:28:1b:77:49:33:fc:2e:08:30:9c:8d:ca:13:d7: 29:ee:99:c7:70:b2:49:43:b7:cb:76:01:3a:57:4c: da:99:b1:8d:d9:20:be:55:13:e4:c3:34:25:d6:76: 61:1d:41:09:6d:d6:16:a3:41:8b:e9:88:20:4c:2f: e8:39:0a:f5:fd:65:db:b7:bc:20:3d:10:1c:89:0a: 28:53:51:05:b3:4f:43:2a:c9:3d:46:c8:0b:c4:48: 31:d8:4c:f6:e7:ab:c1:27:b3:69:d7:4f:0f:32:98: 3a:72:88:bd:34:26:a3:7a:34:ec:28:2a:64:b6:d2: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A6:0D:DC:6C:8B:2C:78:B0:55:5F:AF:6D:D4:71:17:88:A6:10:B2 X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3c:9e:4f:b9:9e:da:fb:0c:92:57:5f:74:35:44:c6:5d:7d: 35:7e:00:94:dc:ea:ca:dc:1c:6f:d6:03:4d:3d:a0:b9:b3:8e: 67:1a:67:ae:b6:8b:05:ff:c1:ab:90:16:1f:f0:d7:0f:7c:45: 7b:f5:16:e8:79:25:80:f0:b2:11:82:8a:49:7d:d2:5e:01:28: fc:9f:0e:f1:b9:8e:e3:83:c1:f4:20:eb:3f:32:9c:3c:b1:5a: f3:31:68:93:7b:e4:9f:83:02:05:30:8e:bf:fd:da:2b:d2:cf: ef:c3:bc:b5:3d:26:5d:d8:7a:fe:dd:23:eb:54:f5:0c:f0:05: 21:f7:f6:0f:aa:5b:a2:36:f2:50:63:b1:22:09:a2:9b:ef:e5: 36:f0:6b:1d:f1:8a:24:c0:f8:59:b5:5a:f4:8c:43:8b:3a:ed: d6:34:40:14:ea:0c:09:a5:1c:fa:5b:3b:c5:65:bf:5a:bb:0d: d2:c0:b0:7f:5b:06:63:1b:17:24:fc:c1:cf:83:19:07:8c:73: b6:b5:d6:f5:42:02:e8:34:8d:20:c3:6e:10:4c:52:c6:b7:a3: 03:c1:89:db:03:d6:69:67:a2:25:d0:e9:e8:45:52:54:43:de: 81:f2:3c:62:a5:d5:8b:16:db:27:69:cc:27:2b:23:37:fa:b0: 78:85:c5:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs26eKMryDIPvua5X1/0bK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjUxMjE5MTQwMDU2WhcNMjUxMjIwMTQwMDU2WjAzMTEwLwYDVQQD Eyg4MGE2MGRkYzZjOGIyYzc4YjA1NTVmYWY2ZGQ0NzExNzg4YTYxMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkESqy0orFwgRmezlZre0fIddwBmY C0i+n/3eetU3qi250hhmT8dw/jQi2MiCS0f41zZ0aHFziRefjAUd/E1LHWWhhkUo IZkbf0cuZLrFs2N4CLBlkNPHdRf5RDD3sPt424liYQPlk6CyH+xGlugUS4TdcLIK 7+PAjY/HSvRN8p37Q1l5x7Q2KBt3STP8LggwnI3KE9cp7pnHcLJJQ7fLdgE6V0za mbGN2SC+VRPkwzQl1nZhHUEJbdYWo0GL6YggTC/oOQr1/WXbt7wgPRAciQooU1EF s09DKsk9RsgLxEgx2Ez256vBJ7Np108PMpg6coi9NCajejTsKCpkttKu9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFICmDdxsiyx4sFVfr23UcReIphCyMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0 YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjye T7me2vsMkldfdDVExl19NX4AlNzqytwcb9YDTT2gubOOZxpnrraLBf/Bq5AWH/DX D3xFe/UW6HklgPCyEYKKSX3SXgEo/J8O8bmO44PB9CDrPzKcPLFa8zFok3vkn4MC BTCOv/3aK9LP78O8tT0mXdh6/t0j61T1DPAFIff2D6pbojbyUGOxIgmim+/lNvBr HfGKJMD4WbVa9IxDizrt1jRAFOoMCaUc+ls7xWW/WrsN0sCwf1sGYxsXJPzBz4MZ B4xztrXW9UIC6DSNIMNuEExSxrejA8GJ2wPWaWeiJdDp6EVSVEPegfI8YqXVixbb J2nMJysjN/qweIXFog== -----END CERTIFICATE-----Generated at Fri Dec 19 16:53:45 2025 by rpki-client