This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json) Hash identifier: CXjX7pssU/sY852R8/Q06anuXKlCcx29yN+q3G6ZoWI= Subject key identifier: 85:6F:A4:0B:56:81:20:7D:36:E4:31:3D:A2:20:28:DF:31:72:CB:E3 Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3 Certificate serial: 019B593ED53FC676887E671029665DC8C2C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft Manifest number: 3D Signing time: Fri 26 Dec 2025 06:00:48 +0000 Manifest this update: Fri 26 Dec 2025 06:00:48 +0000 Manifest next update: Sat 27 Dec 2025 06:00:48 +0000 Files and hashes: 1: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: 9azYBMqGpQYAGWo4uQLLTGt5HKyAVRz4EnrKHHB3dFg=) 2: xGT7f1yz0oOuqABfbGti4wD4D3s.roa (hash: J+lIBSZRZBhEjrU06xcunhlHb1vFZR3PRfSda8JyHCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d5:3f:c6:76:88:7e:67:10:29:66:5d:c8:c2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3 Validity Not Before: Dec 26 06:00:48 2025 GMT Not After : Dec 27 06:00:48 2025 GMT Subject: CN=856fa40b5681207d36e4313da22028df3172cbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:ff:31:e1:cd:83:2f:f8:ec:a2:7a:81:87: 5f:ec:02:2f:f8:16:c4:89:63:d7:df:94:58:3f:69: bc:15:75:f4:8d:84:8d:f7:2d:c9:4b:5f:db:34:51: 10:e5:32:2b:5a:4f:0a:dc:4b:ff:08:30:5e:01:6d: 0c:14:94:77:88:3e:a7:c2:51:b4:a7:9f:3b:a1:d9: 53:a8:da:5b:6f:01:ec:9a:61:00:5b:3e:df:5e:71: ce:68:71:c5:9f:0a:d0:67:93:db:c5:e8:d2:62:c1: ba:33:ec:9d:4b:ed:9a:20:b6:f9:c9:f9:2b:84:22: 7b:f3:42:e0:9e:46:55:ae:2b:21:63:64:af:81:57: 9a:fd:36:b7:0d:01:e6:79:53:e9:8e:cf:a8:f1:ba: c8:89:9d:7e:c9:22:9d:02:2f:19:ae:95:63:8d:36: 0a:ff:a8:a1:70:4b:34:1d:80:e0:5c:87:8e:35:1d: 83:51:d6:39:07:d5:d4:9c:01:84:b6:42:d7:a9:1a: 0c:4b:d0:99:ed:42:30:1b:9d:c3:f4:ab:e1:a0:98: 3d:6d:8b:79:9e:a6:da:99:b8:be:4e:86:9c:0b:42: cd:93:42:de:63:39:cb:88:f8:c8:26:76:51:43:ea: e7:19:90:db:ba:27:f8:21:72:0f:26:2a:2c:a0:b0: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:A4:0B:56:81:20:7D:36:E4:31:3D:A2:20:28:DF:31:72:CB:E3 X509v3 Authority Key Identifier: keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d2:76:50:65:a4:a4:95:54:36:b8:c1:03:5e:23:b9:78:65: fc:57:61:6c:ef:bd:15:db:fa:97:7b:d3:67:34:34:2e:9a:07: 08:42:ad:78:f0:4b:cf:2d:fc:89:a6:e3:e1:ea:3b:cf:99:dd: a4:1c:8b:44:63:21:f0:31:df:54:36:38:4d:dd:53:6c:f8:dd: 10:bd:97:31:26:db:d0:91:47:95:59:f7:26:4c:a6:04:ad:3a: cb:78:40:26:5a:67:da:55:90:b8:f0:6a:2f:85:2b:64:54:7e: 6a:67:0f:fa:63:73:6a:36:47:7d:9e:83:6f:78:1b:83:64:8d: 44:74:21:a6:d0:60:5a:ac:b9:ec:59:f3:81:83:1a:ae:a3:6f: 52:48:01:46:f3:0e:c4:23:a6:f4:17:c8:77:78:90:d8:3c:0e: b0:cb:84:c5:2a:1d:fd:8b:ef:ec:d3:36:da:92:25:c2:9e:91: 1e:40:93:49:6b:f5:63:bd:01:89:d9:8f:0e:99:de:05:e3:db: c6:4a:b4:f1:c2:a5:a6:29:1f:4a:db:1a:1c:11:ff:6b:7e:fd: f3:2f:88:e0:ed:e3:27:45:93:6f:d7:7c:6a:bd:22:33:74:92: 78:da:a7:47:0a:8e:3b:97:b2:3a:08:46:ae:d1:7c:d1:4c:4d: a9:cf:b7:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtU/xnaIfmcQKWZdyMLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzU4Y2MwNjFlMzZiZTAzYTRlZDkyYWQ2NzE3ODBmMDY1 ODliZTMwHhcNMjUxMjI2MDYwMDQ4WhcNMjUxMjI3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg4NTZmYTQwYjU2ODEyMDdkMzZlNDMxM2RhMjIwMjhkZjMxNzJjYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGv/MeHNgy/47KJ6gYdf7AIv+BbE iWPX35RYP2m8FXX0jYSN9y3JS1/bNFEQ5TIrWk8K3Ev/CDBeAW0MFJR3iD6nwlG0 p587odlTqNpbbwHsmmEAWz7fXnHOaHHFnwrQZ5PbxejSYsG6M+ydS+2aILb5yfkr hCJ780LgnkZVrishY2SvgVea/Ta3DQHmeVPpjs+o8brIiZ1+ySKdAi8ZrpVjjTYK /6ihcEs0HYDgXIeONR2DUdY5B9XUnAGEtkLXqRoMS9CZ7UIwG53D9KvhoJg9bYt5 nqbambi+ToacC0LNk0LeYznLiPjIJnZRQ+rnGZDbuif4IXIPJiosoLDkpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVvpAtWgSB9NuQxPaIgKN8xcsvjMB8GA1UdIwQY MBaAFKo1jMBh42vgOk7ZKtZxeA8GWJvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt YWJkYWEyYmEyYzdmLzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm LzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdJ2UGWk pJVUNrjBA14juXhl/FdhbO+9Fdv6l3vTZzQ0LpoHCEKtePBLzy38iabj4eo7z5nd pByLRGMh8DHfVDY4Td1TbPjdEL2XMSbb0JFHlVn3JkymBK06y3hAJlpn2lWQuPBq L4UrZFR+amcP+mNzajZHfZ6Db3gbg2SNRHQhptBgWqy57FnzgYMarqNvUkgBRvMO xCOm9BfId3iQ2DwOsMuExSod/Yvv7NM22pIlwp6RHkCTSWv1Y70BidmPDpneBePb xkq08cKlpikfStsaHBH/a3798y+I4O3jJ0WTb9d8ar0iM3SSeNqnRwqOO5eyOghG rtF80UxNqc+32Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:26 2025 by rpki-client