This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json) Hash identifier: 9SoVRA1TD8BXLFc7LIpN/usl35N8pON8VAmILWGJvMI= Subject key identifier: 74:E4:13:3A:D5:DE:13:64:55:BD:1B:72:AF:15:89:01:D5:86:0D:4B Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374 Certificate serial: 019B41DB54BF0AB336B919C97779A2FCCE9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 17:00:51 +0000 Manifest this update: Sun 21 Dec 2025 17:00:51 +0000 Manifest next update: Mon 22 Dec 2025 17:00:51 +0000 Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=) 2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=) 3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: K0oYYyaiMEUo+hGC27wWG4/o4LqqSyXeYSfDkvgM0iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:54:bf:0a:b3:36:b9:19:c9:77:79:a2:fc:ce:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374 Validity Not Before: Dec 21 17:00:51 2025 GMT Not After : Dec 22 17:00:51 2025 GMT Subject: CN=74e4133ad5de136455bd1b72af158901d5860d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:6f:27:89:4c:d0:71:b8:ed:1e:23:4b:c6: 3b:95:85:06:60:97:a6:2c:25:21:2d:1c:8b:b0:79: f9:b7:f1:69:d0:0f:8d:ad:5d:51:a8:24:fc:57:fa: d0:f7:5d:99:79:f7:82:98:03:3b:62:9c:f6:b2:22: d5:3d:a5:cd:56:7b:46:5a:c4:14:43:3e:ed:3d:8b: cc:86:6a:e7:76:d7:f8:81:96:c1:85:eb:01:f9:2f: e2:db:d6:a5:34:39:98:49:b8:3f:25:a8:16:d3:c1: 75:e7:73:52:4a:8a:cc:d6:e8:02:27:bb:bc:0d:53: d9:23:35:5b:bf:9b:42:2d:82:4b:78:fc:a8:02:0e: fb:ab:fa:18:5c:f9:2b:ee:92:67:1f:03:35:e0:bb: 8a:21:e0:30:09:33:1d:17:9f:43:d4:03:61:4d:09: 8f:eb:95:e0:df:62:5b:2d:78:24:87:c2:e0:d8:5d: 65:59:5c:36:01:65:e8:f9:62:4b:14:1c:88:bc:d1: b5:f3:a6:ec:68:1c:48:00:a0:68:97:25:f4:65:fc: e7:fb:c3:91:c0:12:aa:66:12:f2:75:3f:51:c6:41: ad:69:bc:d2:1d:8c:5f:e0:89:e8:40:f5:5d:f3:24: 7a:61:56:77:12:d1:e4:5e:9c:17:1b:5b:5f:74:e3: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E4:13:3A:D5:DE:13:64:55:BD:1B:72:AF:15:89:01:D5:86:0D:4B X509v3 Authority Key Identifier: keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:18:98:36:ec:78:67:f0:8c:13:17:e8:9a:f8:de:96:c3:aa: 9a:7f:8d:7a:92:64:90:c5:32:d3:83:da:f3:06:64:ba:c1:86: d6:77:69:71:2e:92:e5:a1:fb:50:00:0a:30:33:e1:d6:f1:2f: 38:17:06:f5:5a:00:d0:76:38:9f:5b:d7:c7:ca:50:89:ad:86: 49:a4:54:3e:47:2b:28:99:76:02:34:52:e8:c1:6b:13:c4:61: 4c:26:ba:b7:be:6e:23:36:90:98:8c:cf:0f:9e:54:55:ed:f1: 55:9a:9e:a3:31:78:69:89:8b:02:31:a3:c9:a3:29:ff:d3:0b: 2f:8d:c7:95:37:13:5a:62:ea:10:d7:dc:1a:c2:69:1a:16:52: 32:b4:ce:c3:ee:08:30:ae:8e:3a:a1:e6:f0:21:c5:04:cd:57: ed:a5:53:d1:3c:04:4a:a7:15:6f:08:c9:b3:29:65:28:37:38: 1a:be:7e:ac:e5:be:04:a4:92:dc:3b:45:75:bd:fd:fe:a0:21: bb:1c:67:22:37:70:73:83:65:15:bd:62:e0:da:17:8e:7a:86: e4:26:55:4a:83:f8:b4:cf:55:20:64:fe:80:23:91:29:cb:2f: a4:72:a3:52:fa:7c:ba:d5:d7:d6:d6:f3:6c:b2:e0:a0:47:e4: 60:df:e2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21S/CrM2uRnJd3mi/M6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk ZWUzNzQwHhcNMjUxMjIxMTcwMDUxWhcNMjUxMjIyMTcwMDUxWjAzMTEwLwYDVQQD Eyg3NGU0MTMzYWQ1ZGUxMzY0NTViZDFiNzJhZjE1ODkwMWQ1ODYwZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYJvJ4lM0HG47R4jS8Y7lYUGYJem LCUhLRyLsHn5t/Fp0A+NrV1RqCT8V/rQ912ZefeCmAM7Ypz2siLVPaXNVntGWsQU Qz7tPYvMhmrndtf4gZbBhesB+S/i29alNDmYSbg/JagW08F153NSSorM1ugCJ7u8 DVPZIzVbv5tCLYJLePyoAg77q/oYXPkr7pJnHwM14LuKIeAwCTMdF59D1ANhTQmP 65Xg32JbLXgkh8Lg2F1lWVw2AWXo+WJLFByIvNG186bsaBxIAKBolyX0Zfzn+8OR wBKqZhLydT9RxkGtabzSHYxf4InoQPVd8yR6YVZ3EtHkXpwXG1tfdONBDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTkEzrV3hNkVb0bcq8ViQHVhg1LMB8GA1UdIwQY MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4 LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRiYNux4 Z/CMExfomvjelsOqmn+NepJkkMUy04Pa8wZkusGG1ndpcS6S5aH7UAAKMDPh1vEv OBcG9VoA0HY4n1vXx8pQia2GSaRUPkcrKJl2AjRS6MFrE8RhTCa6t75uIzaQmIzP D55UVe3xVZqeozF4aYmLAjGjyaMp/9MLL43HlTcTWmLqENfcGsJpGhZSMrTOw+4I MK6OOqHm8CHFBM1X7aVT0TwESqcVbwjJsyllKDc4Gr5+rOW+BKSS3DtFdb39/qAh uxxnIjdwc4NlFb1i4NoXjnqG5CZVSoP4tM9VIGT+gCORKcsvpHKjUvp8utXX1tbz bLLgoEfkYN/iKw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:31:01 2025 by rpki-client