This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json) Hash identifier: 1Ks8Qfto01tzq4OHDFB0GzyPdUcvufE49kgj/aYj3BA= Subject key identifier: 68:28:1C:46:B1:0F:85:E5:FD:0D:C6:C0:73:8F:98:43:76:C8:19:DF Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216 Certificate serial: 019B10B85DE0B0C4F93F98E07863D1B56074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft Manifest number: 07B0 Signing time: Fri 12 Dec 2025 04:01:16 +0000 Manifest this update: Fri 12 Dec 2025 04:01:16 +0000 Manifest next update: Sat 13 Dec 2025 04:01:16 +0000 Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: DaGU7rV2adMeXwNd21Cdwkbt0IMs0zJYdJt3iDqFqtw=) 2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=) 3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:5d:e0:b0:c4:f9:3f:98:e0:78:63:d1:b5:60:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216 Validity Not Before: Dec 12 04:01:16 2025 GMT Not After : Dec 13 04:01:16 2025 GMT Subject: CN=68281c46b10f85e5fd0dc6c0738f984376c819df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:97:59:e9:69:47:8e:19:38:11:a1:ad:79: 42:12:ff:8c:ef:b7:de:77:a6:96:b1:e9:39:14:b4: 97:73:9e:69:9f:83:02:25:b9:ac:47:40:5f:ce:49: ee:66:58:06:f4:dc:3a:aa:1b:d6:be:c8:de:e9:21: 71:40:d9:d4:cd:44:6e:96:56:93:ac:a4:06:0f:83: a2:ca:d0:9b:b0:a2:52:8d:d8:53:0f:7b:28:a4:c2: c9:2c:23:cf:80:ce:1c:a8:f8:be:97:e7:bb:e6:5a: 96:d7:65:53:61:1c:60:00:03:42:c3:9d:37:08:df: 0d:ae:c1:69:da:2b:8e:36:e2:98:52:64:29:b3:87: a2:5e:e4:9f:83:32:c9:1d:c9:39:69:be:98:ee:0b: 3a:d0:22:ae:93:0f:a0:32:f6:b7:fe:5d:fe:9f:b9: 0e:7e:6f:bd:45:db:d7:1b:29:3d:f9:76:c5:e0:52: 07:49:f9:94:9a:6e:1a:f3:a6:d9:18:6e:1e:b7:30: 53:a2:79:a1:04:e4:db:8e:18:79:4c:e3:ef:3a:37: 8e:f3:29:34:ba:9d:32:36:84:37:fc:7f:8b:5c:da: 65:a9:54:f8:f9:15:d2:bb:38:12:10:8c:9a:3e:65: 2f:4b:04:73:9c:2d:a8:d2:21:58:a2:a7:a8:ad:e9: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:1C:46:B1:0F:85:E5:FD:0D:C6:C0:73:8F:98:43:76:C8:19:DF X509v3 Authority Key Identifier: keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:71:6f:cb:0f:ce:48:70:4f:ec:85:d6:a9:66:92:67:d1: 86:04:19:15:23:a8:a0:e0:85:38:7a:2f:01:87:09:82:84:e6: d1:b6:37:75:1f:35:bf:0c:3e:d5:ad:73:ec:7f:8c:c0:f5:b1: 71:cc:7e:89:28:cb:03:4d:24:4b:96:8a:4a:d3:40:77:d6:db: 53:5a:8e:52:af:6d:db:06:9b:a8:70:c0:4c:47:b4:c3:b1:72: 24:25:f2:89:6e:06:6a:ee:a9:0e:42:40:4c:f8:43:57:53:cb: ed:df:51:07:d9:84:a7:aa:e0:56:5b:28:21:ca:c6:c9:07:a7: 8f:5d:5c:e4:6c:4b:43:c5:88:95:0b:53:81:a9:0b:1c:1e:c8: ae:3b:ae:4d:24:75:27:de:0e:f7:08:d7:c0:4a:8f:56:ec:b8: 00:d3:33:49:fb:41:85:bb:4e:2a:6b:bf:fe:bb:13:4b:69:30: 56:e2:00:d6:8d:75:f1:87:10:3b:f2:1b:27:78:1b:e9:80:99: 71:08:49:80:76:25:3c:08:ab:65:01:b5:1d:31:65:4d:77:bd: 40:62:d8:3d:8c:4c:5a:f7:40:0e:91:fa:c6:8a:3d:3e:89:a1: b2:f8:d8:00:19:61:fe:4f:a7:77:a3:f9:c4:9c:82:22:c5:d3: b6:17:85:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuF3gsMT5P5jgeGPRtWB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5 MjcyMTYwHhcNMjUxMjEyMDQwMTE2WhcNMjUxMjEzMDQwMTE2WjAzMTEwLwYDVQQD Eyg2ODI4MWM0NmIxMGY4NWU1ZmQwZGM2YzA3MzhmOTg0Mzc2YzgxOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyWXWelpR44ZOBGhrXlCEv+M77fe d6aWsek5FLSXc55pn4MCJbmsR0BfzknuZlgG9Nw6qhvWvsje6SFxQNnUzURullaT rKQGD4OiytCbsKJSjdhTD3sopMLJLCPPgM4cqPi+l+e75lqW12VTYRxgAANCw503 CN8NrsFp2iuONuKYUmQps4eiXuSfgzLJHck5ab6Y7gs60CKukw+gMva3/l3+n7kO fm+9RdvXGyk9+XbF4FIHSfmUmm4a86bZGG4etzBTonmhBOTbjhh5TOPvOjeO8yk0 up0yNoQ3/H+LXNplqVT4+RXSuzgSEIyaPmUvSwRznC2o0iFYoqeoreme8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgoHEaxD4Xl/Q3GwHOPmEN2yBnfMB8GA1UdIwQY MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0 LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLBxb8sP zkhwT+yF1qlmkmfRhgQZFSOooOCFOHovAYcJgoTm0bY3dR81vww+1a1z7H+MwPWx ccx+iSjLA00kS5aKStNAd9bbU1qOUq9t2wabqHDATEe0w7FyJCXyiW4Gau6pDkJA TPhDV1PL7d9RB9mEp6rgVlsoIcrGyQenj11c5GxLQ8WIlQtTgakLHB7IrjuuTSR1 J94O9wjXwEqPVuy4ANMzSftBhbtOKmu//rsTS2kwVuIA1o118YcQO/IbJ3gb6YCZ cQhJgHYlPAirZQG1HTFlTXe9QGLYPYxMWvdADpH6xoo9PomhsvjYABlh/k+nd6P5 xJyCIsXTtheFnA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:46:14 2025 by rpki-client