This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json) Hash identifier: k5g5u0tEdCkbdqTm++einKmW+SOqaDoAUl6G8vASsU4= Subject key identifier: DA:5C:D9:60:27:41:4E:82:E5:EC:30:48:DD:98:35:70:CF:C7:4D:28 Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Certificate serial: 019B0C37084904948B356178F0C40C08778A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft Manifest number: 0286 Signing time: Thu 11 Dec 2025 07:01:31 +0000 Manifest this update: Thu 11 Dec 2025 07:01:31 +0000 Manifest next update: Fri 12 Dec 2025 07:01:31 +0000 Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: VP2p3Cko2+XNKw0EV+eedkb7vRHooob9/+UnXn0bmj8=) 2: oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa (hash: WK3mI+xQLWOaMQETqVHTLaWD294DJFp3ywMhpFK66mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:08:49:04:94:8b:35:61:78:f0:c4:0c:08:77:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Validity Not Before: Dec 11 07:01:31 2025 GMT Not After : Dec 12 07:01:31 2025 GMT Subject: CN=da5cd96027414e82e5ec3048dd983570cfc74d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:73:eb:48:96:17:f7:05:d5:ba:2b:13:c1: 94:65:9a:44:ce:1b:37:81:1d:48:81:c0:cc:19:70: 5c:ee:10:66:99:fe:37:05:4a:2d:7b:ac:60:44:aa: 27:81:65:43:7f:8d:a6:1a:2e:f7:6c:ad:49:a4:40: ab:ea:cb:b4:3e:2a:60:34:00:21:ec:2b:04:b0:ff: a3:cc:5f:df:de:54:ab:0b:a1:ca:11:f3:bb:7f:d1: 71:08:3c:72:61:b6:76:82:55:41:ff:7f:21:1b:e6: 46:fa:1c:fd:18:fd:36:81:27:43:bd:46:a3:ce:ff: 9c:1a:64:0d:74:09:30:6e:5f:de:48:e8:67:ba:94: 20:0a:60:0e:32:b2:b5:4d:25:2b:16:b8:9c:ef:f4: 64:db:a3:67:a3:54:95:15:6b:fa:4c:33:01:e6:65: 77:4a:92:88:16:df:25:f5:8a:2b:3c:be:c6:80:a7: 3c:fd:76:0b:1b:be:cb:3f:f8:42:93:52:9b:ae:e8: 04:52:39:b7:af:c0:a8:92:fc:ee:95:9b:87:de:1f: 15:82:84:a3:e9:e5:e7:07:3f:3f:62:b1:c5:ce:ba: 34:7c:ae:61:be:0d:77:6d:bf:9f:36:c9:38:4a:a9: 00:76:68:79:58:2f:7d:78:a4:4a:16:6d:60:3b:aa: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:D9:60:27:41:4E:82:E5:EC:30:48:DD:98:35:70:CF:C7:4D:28 X509v3 Authority Key Identifier: keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:83:d9:6b:a2:36:d7:51:a3:45:55:67:13:48:8e:2a:c7:0f: 81:ce:c3:9e:63:11:fe:88:20:41:ad:49:b9:f7:54:2b:b7:20: 25:47:25:c1:16:89:91:07:3c:b1:32:1e:81:d0:cf:0a:b4:8b: 9f:de:8f:21:25:0b:f1:b8:f3:8f:46:16:c6:dd:b2:ed:7c:e2: 7d:1e:09:85:55:11:67:97:cc:75:91:03:c5:97:68:c1:cc:87: e1:89:e7:6d:03:99:69:47:f8:33:3a:11:cb:bf:69:d7:34:5d: 5c:20:fd:89:7d:72:14:57:f3:65:25:48:b5:4e:78:07:5c:6f: 46:29:f9:a9:e4:b9:ea:4c:ab:db:2c:6f:7b:6b:61:95:e9:72: c4:ce:b3:c8:da:c5:15:46:98:d0:cd:c1:cc:d1:2c:36:c0:cf: ff:ac:e0:bb:de:90:c9:76:33:9a:e0:e2:6e:ca:91:ff:51:8e: 0a:c8:d6:24:42:04:fa:dc:9b:01:f2:79:b1:43:21:eb:77:cc: 9b:15:61:ee:26:0b:ed:28:ba:d2:d5:71:63:f0:ce:26:d5:d2: 50:17:80:71:92:00:14:29:72:5e:21:8c:3c:6e:22:e3:a9:40: b5:bb:c7:88:dc:21:72:43:04:cd:a8:ff:26:d3:8a:0f:40:03: 4d:65:b8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNwhJBJSLNWF48MQMCHeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj N2RjZjQwHhcNMjUxMjExMDcwMTMxWhcNMjUxMjEyMDcwMTMxWjAzMTEwLwYDVQQD EyhkYTVjZDk2MDI3NDE0ZTgyZTVlYzMwNDhkZDk4MzU3MGNmYzc0ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgRz60iWF/cF1borE8GUZZpEzhs3 gR1IgcDMGXBc7hBmmf43BUote6xgRKongWVDf42mGi73bK1JpECr6su0PipgNAAh 7CsEsP+jzF/f3lSrC6HKEfO7f9FxCDxyYbZ2glVB/38hG+ZG+hz9GP02gSdDvUaj zv+cGmQNdAkwbl/eSOhnupQgCmAOMrK1TSUrFric7/Rk26Nno1SVFWv6TDMB5mV3 SpKIFt8l9YorPL7GgKc8/XYLG77LP/hCk1KbrugEUjm3r8CokvzulZuH3h8VgoSj 6eXnBz8/YrHFzro0fK5hvg13bb+fNsk4SqkAdmh5WC99eKRKFm1gO6raGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpc2WAnQU6C5ewwSN2YNXDPx00oMB8GA1UdIwQY MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0 LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYPZa6I2 11GjRVVnE0iOKscPgc7DnmMR/oggQa1JufdUK7cgJUclwRaJkQc8sTIegdDPCrSL n96PISUL8bjzj0YWxt2y7XzifR4JhVURZ5fMdZEDxZdowcyH4YnnbQOZaUf4MzoR y79p1zRdXCD9iX1yFFfzZSVItU54B1xvRin5qeS56kyr2yxve2thlelyxM6zyNrF FUaY0M3BzNEsNsDP/6zgu96QyXYzmuDibsqR/1GOCsjWJEIE+tybAfJ5sUMh63fM mxVh7iYL7Si60tVxY/DOJtXSUBeAcZIAFClyXiGMPG4i46lAtbvHiNwhckMEzaj/ JtOKD0ADTWW4nQ== -----END CERTIFICATE-----Generated at Thu Dec 11 15:11:35 2025 by rpki-client