This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json) Hash identifier: QwLOBw+gPKDjllchJyF8hOyfTFg0PB2CwD6UuTgQFBw= Subject key identifier: 29:0D:B9:A8:70:1C:2E:76:4C:C6:CB:AA:22:03:E9:9D:5C:5F:0E:70 Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b Certificate serial: 019B1EE1F79CA7F46CE1D32C275B48350E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft Manifest number: 0353 Signing time: Sun 14 Dec 2025 22:01:24 +0000 Manifest this update: Sun 14 Dec 2025 22:01:24 +0000 Manifest next update: Mon 15 Dec 2025 22:01:24 +0000 Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: EPGtbUQCirWbV9D3ZeX6MWuT2ocjs+AI73lEcmmeW00=) 2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:f7:9c:a7:f4:6c:e1:d3:2c:27:5b:48:35:0e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b Validity Not Before: Dec 14 22:01:24 2025 GMT Not After : Dec 15 22:01:24 2025 GMT Subject: CN=290db9a8701c2e764cc6cbaa2203e99d5c5f0e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:15:88:98:75:14:ba:82:15:2b:80:bf:02: b1:17:59:e0:e7:d5:38:1a:f5:5c:32:d0:ba:8b:a8: e3:5e:f2:e9:6c:90:17:1f:bc:3f:f4:b1:19:b3:37: 93:c1:de:b2:b9:2e:b3:14:44:3f:5c:90:d9:03:b7: 75:3a:1d:61:d0:bd:2b:8a:13:35:94:c9:2f:3f:ff: 7b:18:fd:f8:c6:06:4f:88:09:50:c0:d2:6a:0a:08: 72:14:41:37:97:d2:31:cf:79:ca:7e:c4:bd:5f:e1: 75:b7:a3:a4:4b:cb:89:57:42:e2:33:55:a8:d5:f0: 19:d7:85:46:63:df:86:14:38:8e:cb:a7:61:56:72: b6:04:af:7e:87:16:c1:e2:d1:cb:e9:8a:63:f4:53: 8a:66:c8:67:98:4d:af:9d:b5:32:fa:21:78:a0:b9: b3:02:5f:8b:25:f6:6c:b6:87:06:f1:cd:3e:6f:93: 75:cf:1c:cd:51:89:91:65:17:12:bf:7f:5e:4e:47: 3d:32:b8:a9:18:d6:bd:5a:5f:d9:b8:95:75:13:92: bb:4c:d0:08:62:06:b6:f8:dc:f4:2f:d7:38:02:3b: ee:1c:b3:21:73:11:cd:5f:16:8e:25:a8:bc:2e:98: 48:80:21:64:a4:61:7c:96:7c:88:82:44:11:d7:4a: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0D:B9:A8:70:1C:2E:76:4C:C6:CB:AA:22:03:E9:9D:5C:5F:0E:70 X509v3 Authority Key Identifier: keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fa:09:d8:2d:7f:de:ff:63:4c:a6:f7:62:d4:48:17:74:16: 3c:2b:be:df:91:17:53:e1:bd:73:4a:4c:c2:c4:d6:85:d3:b4: cb:47:25:2f:0f:8f:f8:76:8e:da:5b:cd:29:1f:aa:00:6f:93: f1:22:31:38:ad:2d:d2:56:07:a7:39:f8:f6:8d:b5:03:2e:3f: 86:e1:37:b6:71:ec:e7:e6:38:ec:9e:2f:20:05:9f:15:af:5f: 19:9e:38:e7:b3:73:8a:eb:22:4f:08:0f:89:04:2e:d7:4b:5c: 57:a7:6e:a4:10:5f:06:59:76:53:95:b1:3c:aa:11:d9:e9:92: 7b:4f:da:36:e0:c4:79:03:89:bd:53:c5:17:28:32:cc:8c:e2: 56:de:f0:2c:5d:04:1c:b8:32:ca:a3:05:36:7b:f6:7b:65:80: b7:4c:7b:88:34:d2:7d:8f:f4:9e:dc:bf:75:7a:fb:3c:20:89: 0d:b5:ed:81:65:12:59:5a:74:26:f4:e3:7c:4e:73:a3:54:84: 22:56:c8:7b:8c:9d:47:45:37:14:4f:6e:84:20:c9:02:ff:d6: 97:77:54:c8:d7:ce:b5:e1:83:d9:a6:3d:a1:3f:b3:13:1a:bd: c9:7a:b5:98:1c:fa:e1:d6:77:96:38:d6:06:9e:b4:10:0b:56: 35:6f:f4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4fecp/Rs4dMsJ1tINQ5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl ZDEzOWIwHhcNMjUxMjE0MjIwMTI0WhcNMjUxMjE1MjIwMTI0WjAzMTEwLwYDVQQD EygyOTBkYjlhODcwMWMyZTc2NGNjNmNiYWEyMjAzZTk5ZDVjNWYwZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleoViJh1FLqCFSuAvwKxF1ng59U4 GvVcMtC6i6jjXvLpbJAXH7w/9LEZszeTwd6yuS6zFEQ/XJDZA7d1Oh1h0L0rihM1 lMkvP/97GP34xgZPiAlQwNJqCghyFEE3l9Ixz3nKfsS9X+F1t6OkS8uJV0LiM1Wo 1fAZ14VGY9+GFDiOy6dhVnK2BK9+hxbB4tHL6Ypj9FOKZshnmE2vnbUy+iF4oLmz Al+LJfZstocG8c0+b5N1zxzNUYmRZRcSv39eTkc9MripGNa9Wl/ZuJV1E5K7TNAI Yga2+Nz0L9c4AjvuHLMhcxHNXxaOJai8LphIgCFkpGF8lnyIgkQR10plSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkNuahwHC52TMbLqiID6Z1cXw5wMB8GA1UdIwQY MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPoJ2C1/ 3v9jTKb3YtRIF3QWPCu+35EXU+G9c0pMwsTWhdO0y0clLw+P+HaO2lvNKR+qAG+T 8SIxOK0t0lYHpzn49o21Ay4/huE3tnHs5+Y47J4vIAWfFa9fGZ4457NziusiTwgP iQQu10tcV6dupBBfBll2U5WxPKoR2emSe0/aNuDEeQOJvVPFFygyzIziVt7wLF0E HLgyyqMFNnv2e2WAt0x7iDTSfY/0nty/dXr7PCCJDbXtgWUSWVp0JvTjfE5zo1SE IlbIe4ydR0U3FE9uhCDJAv/Wl3dUyNfOteGD2aY9oT+zExq9yXq1mBz64dZ3ljjW Bp60EAtWNW/0Bw== -----END CERTIFICATE-----Generated at Mon Dec 15 06:41:57 2025 by rpki-client