This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json) Hash identifier: VRzwmj7Tlgif0wX6GWEPm9kFdQD586rEtZebc8NqGqY= Subject key identifier: 3E:10:79:7A:2B:1C:46:89:03:EA:59:EE:80:E4:DB:54:C3:9C:CA:96 Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e Certificate serial: 019B0F6E1FA2F8E0386465DBC1C21414A58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft Manifest number: 0501 Signing time: Thu 11 Dec 2025 22:00:33 +0000 Manifest this update: Thu 11 Dec 2025 22:00:33 +0000 Manifest next update: Fri 12 Dec 2025 22:00:33 +0000 Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=) 2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: oEqSAQELVKjXzX2HwWIJZMNkPvMVww99sk5UtkhyqZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:1f:a2:f8:e0:38:64:65:db:c1:c2:14:14:a5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e Validity Not Before: Dec 11 22:00:33 2025 GMT Not After : Dec 12 22:00:33 2025 GMT Subject: CN=3e10797a2b1c468903ea59ee80e4db54c39cca96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:fa:30:af:23:ff:11:6f:4b:80:12:74:a4: b6:9c:1c:e1:eb:ca:f8:30:09:e8:5f:17:fb:dd:29: e3:e7:88:93:4d:1d:d3:d7:b5:9f:f4:58:5e:11:be: 1e:4b:4e:a1:30:8d:61:51:96:c8:42:7f:dd:fa:8a: 1c:74:e2:77:fa:86:44:f4:0a:fe:a5:60:20:4b:18: 65:2d:b0:70:40:62:6d:a1:47:a4:8d:bc:02:d3:de: b7:78:c7:3e:de:96:48:29:46:7e:5e:b6:ea:54:24: 54:6a:00:03:55:f5:47:22:bb:77:33:26:e8:5c:ce: 07:94:eb:c3:9c:5b:fa:fc:9a:29:77:d6:86:73:a8: 82:af:8c:e7:e4:b7:f8:b5:28:ed:65:1c:98:96:4e: c1:d9:66:cc:8c:2f:8a:4b:0f:bf:7d:fc:bb:48:68: 31:4c:d9:09:16:94:69:d0:94:22:9e:b3:67:9d:8d: 01:49:2e:51:26:00:51:82:0b:91:b3:17:9e:52:d7: c3:60:42:b5:83:0b:49:0a:d2:9e:f5:cc:cc:c9:c7: c2:b2:58:38:59:80:8d:f5:06:c0:b8:25:a1:e5:41: a0:5e:6f:89:6d:19:26:e3:07:18:cd:20:b6:b7:1f: 51:2b:0d:e3:68:3d:94:b3:22:03:07:6a:40:04:dc: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:79:7A:2B:1C:46:89:03:EA:59:EE:80:E4:DB:54:C3:9C:CA:96 X509v3 Authority Key Identifier: keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a4:a2:2a:25:12:41:38:88:67:6c:8a:60:8e:e6:7c:2d:1e: 2b:0f:79:11:ef:7f:d4:57:77:c3:7a:7a:dd:9a:cc:70:cc:46: f3:a0:ae:bd:86:b3:d2:17:04:ff:8a:38:8a:51:6e:40:c5:64: 32:11:ce:b1:1a:cb:4b:d1:0f:c2:89:9d:a7:0c:1a:35:35:f7: 49:c9:70:98:fa:0c:ad:b7:fb:07:cf:d1:18:2d:59:0f:a4:04: a9:04:b6:76:84:2b:c2:b7:6b:31:0f:4b:0a:fd:af:1a:58:6a: 25:bc:6f:01:ae:2a:40:0b:34:15:28:fc:60:76:1b:1a:5b:b0: a8:1b:81:cd:8d:47:8d:d5:60:23:3a:6c:12:cb:e3:57:8b:8a: 64:02:30:04:ad:63:31:aa:98:1b:f2:0c:25:37:95:a4:39:81: 9e:5e:4d:53:2a:3d:f3:a9:b8:6b:f6:be:1a:5c:94:68:cf:87: 14:9f:cd:38:f8:ee:db:1a:e8:3a:e1:eb:6d:7e:17:eb:6a:78: de:c6:85:ec:5b:f1:28:77:0d:c6:15:bb:55:c9:29:3c:8d:9c: 0f:7d:b5:75:35:93:e3:69:06:0f:06:3a:e6:88:89:31:0a:cc: 0f:1e:3b:bd:9f:20:31:fb:0d:bc:c4:fd:d6:65:b5:ae:db:98: bb:4c:62:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbh+i+OA4ZGXbwcIUFKWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzYwOWM4OGYzOGRiYjU0OGExZjAyZjg5ZmYyOWJiNmQx ODg2NGUwHhcNMjUxMjExMjIwMDMzWhcNMjUxMjEyMjIwMDMzWjAzMTEwLwYDVQQD EygzZTEwNzk3YTJiMWM0Njg5MDNlYTU5ZWU4MGU0ZGI1NGMzOWNjYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwb6MK8j/xFvS4ASdKS2nBzh68r4 MAnoXxf73Snj54iTTR3T17Wf9FheEb4eS06hMI1hUZbIQn/d+oocdOJ3+oZE9Ar+ pWAgSxhlLbBwQGJtoUekjbwC0963eMc+3pZIKUZ+XrbqVCRUagADVfVHIrt3Mybo XM4HlOvDnFv6/Jopd9aGc6iCr4zn5Lf4tSjtZRyYlk7B2WbMjC+KSw+/ffy7SGgx TNkJFpRp0JQinrNnnY0BSS5RJgBRgguRsxeeUtfDYEK1gwtJCtKe9czMycfCslg4 WYCN9QbAuCWh5UGgXm+JbRkm4wcYzSC2tx9RKw3jaD2UsyIDB2pABNzp+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4QeXorHEaJA+pZ7oDk21TDnMqWMB8GA1UdIwQY MBaAFKg2CciPONu1SKHwL4n/KbttGIZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2Ut ZTQwZmUwYjA5NGIwLzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2UtZTQwZmUwYjA5NGIw LzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKSiKiUS QTiIZ2yKYI7mfC0eKw95Ee9/1Fd3w3p63ZrMcMxG86CuvYaz0hcE/4o4ilFuQMVk MhHOsRrLS9EPwomdpwwaNTX3SclwmPoMrbf7B8/RGC1ZD6QEqQS2doQrwrdrMQ9L Cv2vGlhqJbxvAa4qQAs0FSj8YHYbGluwqBuBzY1HjdVgIzpsEsvjV4uKZAIwBK1j MaqYG/IMJTeVpDmBnl5NUyo986m4a/a+GlyUaM+HFJ/NOPju2xroOuHrbX4X62p4 3saF7FvxKHcNxhW7VckpPI2cD321dTWT42kGDwY65oiJMQrMDx47vZ8gMfsNvMT9 1mW1rtuYu0xiKA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:07 2025 by rpki-client