This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json) Hash identifier: m1NxEdOXBhO4syFCvhSO90vV03U/jF3vYHkpJt6s2JU= Subject key identifier: D0:59:87:22:B3:3F:F2:14:79:A5:0F:D6:A8:A1:9B:4F:DE:6C:D6:3D Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09 Certificate serial: 019B5A1B0EC8A96B60ABA58FF4ED814F4BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft Manifest number: 21 Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: NnZuswOPwOyv5PJYsdYEgFZh--Q.roa (hash: KmnhZxUDqI+Szjx8oy0l5GC3BvO/tVPZ6HRdpD2ICac=) 2: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: j6mtlZWrRilwNMG+OMANRn9VA/EK4Vv4IV6hrDm6e38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:0e:c8:a9:6b:60:ab:a5:8f:f4:ed:81:4f:4b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09 Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=d0598722b33ff21479a50fd6a8a19b4fde6cd63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:7c:5e:04:28:5a:cf:64:2e:55:f9:52:4c: f1:1b:38:37:f6:9c:ce:1d:1d:ff:4d:ba:be:cf:4a: b8:cc:d7:3a:6d:50:55:f2:90:be:a5:96:08:a9:4e: 1d:c2:dc:bd:03:02:bf:8c:9d:84:d5:7f:25:24:fa: b2:bf:45:a7:1b:2b:00:ec:0d:43:d6:16:23:7c:0e: f2:9f:2e:53:9d:c9:b7:52:48:a3:3b:a4:f5:a7:d8: 17:1b:b6:2c:f9:09:12:9e:5f:f1:0a:0b:e4:a3:c6: 4e:18:cb:a3:57:4a:44:13:19:ac:f1:9f:39:3f:ff: 67:20:66:e2:d3:c6:ab:bd:ff:5c:46:b6:90:18:ad: d2:0e:7d:7d:b9:97:65:19:88:b0:e4:13:bc:98:8b: e2:6c:3a:8a:9c:58:2a:57:a3:0e:23:b8:dd:d5:d8: c9:01:12:88:00:a5:99:b5:96:f6:63:07:ca:77:24: 0c:8e:4f:01:18:43:2f:fd:b7:06:88:8f:a0:70:f6: 6f:35:f7:c8:90:66:c7:ff:87:bb:8a:ee:4e:61:0f: 35:a1:0a:ce:93:ec:a0:b6:47:d1:93:18:01:c2:fc: 14:96:7d:4d:07:be:e4:55:22:71:7c:c9:b8:53:a1: b5:51:1c:8c:5a:ca:a2:55:b2:bf:27:28:7f:9b:97: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:59:87:22:B3:3F:F2:14:79:A5:0F:D6:A8:A1:9B:4F:DE:6C:D6:3D X509v3 Authority Key Identifier: keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:45:22:54:0a:bd:fd:4f:c5:c3:30:c0:17:42:7e:96:ef:75: 3a:b5:5e:43:52:31:c8:0e:ea:cb:db:11:d5:3a:73:29:70:96: 51:2e:c5:a0:9e:6d:fe:9d:7d:be:48:ce:ab:ba:81:06:9d:3e: a9:a9:68:d9:cb:6b:4c:b9:a8:e1:03:87:36:e6:3a:57:88:a1: 5a:3e:91:30:c0:d3:a3:fd:f4:eb:32:97:34:94:18:c4:cb:60: f4:aa:ad:84:43:35:ce:c6:48:e0:24:d3:b0:43:0f:6b:d7:3f: 4d:32:c2:6a:36:1d:5a:ea:4d:fc:0f:50:f8:e0:9c:c5:92:69: c6:35:79:b1:c7:36:11:9d:7f:55:dd:2e:5e:49:c9:c6:b9:24: d0:42:43:17:23:fe:1c:69:42:84:fe:d2:9a:f2:92:78:1f:2e: c5:66:11:cb:dd:a6:ff:af:67:58:2f:0b:82:ac:93:7d:eb:ee: 66:cb:97:5f:3d:b6:ed:19:c5:88:bb:24:df:42:82:18:25:56: 7d:8a:c8:59:31:16:45:2f:d1:e8:00:b8:c0:d3:d6:23:90:a3: 81:ec:3e:6c:3f:ed:94:6f:cd:bb:f6:3f:e2:47:e1:58:d9:e2: 71:6b:7d:00:dd:9e:46:85:68:2a:20:7b:af:39:94:d1:81:32: e7:b3:5c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGw7IqWtgq6WP9O2BT0vUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDllYzVlMjI4YjRhZjdmMDNjMzQ1YmMzOTY3ZjUxZDZm ZjhhMDkwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD EyhkMDU5ODcyMmIzM2ZmMjE0NzlhNTBmZDZhOGExOWI0ZmRlNmNkNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYd8XgQoWs9kLlX5UkzxGzg39pzO HR3/Tbq+z0q4zNc6bVBV8pC+pZYIqU4dwty9AwK/jJ2E1X8lJPqyv0WnGysA7A1D 1hYjfA7yny5Tncm3UkijO6T1p9gXG7Ys+QkSnl/xCgvko8ZOGMujV0pEExms8Z85 P/9nIGbi08arvf9cRraQGK3SDn19uZdlGYiw5BO8mIvibDqKnFgqV6MOI7jd1djJ ARKIAKWZtZb2YwfKdyQMjk8BGEMv/bcGiI+gcPZvNffIkGbH/4e7iu5OYQ81oQrO k+ygtkfRkxgBwvwUln1NB77kVSJxfMm4U6G1URyMWsqiVbK/Jyh/m5dBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBZhyKzP/IUeaUP1qihm0/ebNY9MB8GA1UdIwQY MBaAFELZ7F4ii0r38Dw0W8OWf1HW/4oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjkt NmM5YjQ4YmRiZmU1LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjktNmM5YjQ4YmRiZmU1 LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUUiVAq9 /U/FwzDAF0J+lu91OrVeQ1IxyA7qy9sR1TpzKXCWUS7FoJ5t/p19vkjOq7qBBp0+ qalo2ctrTLmo4QOHNuY6V4ihWj6RMMDTo/306zKXNJQYxMtg9KqthEM1zsZI4CTT sEMPa9c/TTLCajYdWupN/A9Q+OCcxZJpxjV5scc2EZ1/Vd0uXknJxrkk0EJDFyP+ HGlChP7SmvKSeB8uxWYRy92m/69nWC8LgqyTfevuZsuXXz227RnFiLsk30KCGCVW fYrIWTEWRS/R6AC4wNPWI5Cjgew+bD/tlG/Nu/Y/4kfhWNnicWt9AN2eRoVoKiB7 rzmU0YEy57NcXA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:21 2025 by rpki-client