This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json) Hash identifier: DO8jeDaf1SBXrvc4m+2Xg8WUfUPtW5MkBM8POsyN87k= Subject key identifier: 00:7C:60:0E:07:2C:5E:99:60:D7:5D:1A:4B:FE:08:15:90:C5:D3:E4 Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc Certificate serial: 019B2E54D5C7E0F1E4A411E736F5C60F3985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft Manifest number: 1713 Signing time: Wed 17 Dec 2025 22:01:10 +0000 Manifest this update: Wed 17 Dec 2025 22:01:10 +0000 Manifest next update: Thu 18 Dec 2025 22:01:10 +0000 Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=) 2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: cJIAQM/dsbFM1l5IcSO46Pq8ZQkBsihL61tva0Hul1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:d5:c7:e0:f1:e4:a4:11:e7:36:f5:c6:0f:39:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc Validity Not Before: Dec 17 22:01:10 2025 GMT Not After : Dec 18 22:01:10 2025 GMT Subject: CN=007c600e072c5e9960d75d1a4bfe081590c5d3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:02:17:80:d9:b3:65:3a:44:e8:00:31:7d: 2b:22:63:21:64:1b:16:a4:0d:d6:16:f1:b3:64:82: 40:7f:52:61:a4:00:99:a2:10:0a:5d:64:f1:ee:c8: 47:95:ce:c8:9a:36:97:cb:b6:45:9b:57:6b:e1:12: be:d2:a4:5b:c6:c6:c0:f4:57:19:4c:6c:80:1f:28: 46:44:08:3e:08:68:13:ee:9a:aa:6c:4e:5c:ca:85: 31:16:b0:9f:09:9c:32:9d:ae:af:de:e6:5c:eb:91: d1:fb:2b:79:9d:b0:6e:db:ef:27:06:73:5d:16:76: 37:fd:65:75:2a:79:c3:54:be:67:ea:1c:18:c5:72: 14:f0:5a:b8:62:ce:9a:b6:02:9e:8f:60:9f:62:72: 35:88:b6:58:bf:07:67:e7:a5:f0:59:1f:0f:5d:ac: 36:22:dd:cc:66:5c:1e:ce:2e:81:18:92:fe:e8:75: 47:bf:e0:3c:ba:b4:fd:91:d9:7d:f4:25:77:15:6d: ec:62:f0:b2:48:4e:81:88:6f:fc:0c:80:c2:0c:60: be:8b:05:1d:b3:11:fe:22:a8:38:1f:88:42:2b:06: 1a:bc:f6:4f:f7:f8:93:e0:45:91:a0:04:da:8e:6c: ef:11:c9:1b:b7:cc:52:77:54:ec:62:a5:9c:ca:8f: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:60:0E:07:2C:5E:99:60:D7:5D:1A:4B:FE:08:15:90:C5:D3:E4 X509v3 Authority Key Identifier: keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ed:dc:f6:bf:36:05:9e:e3:b4:0d:8d:57:b5:01:93:af:62: 27:0a:42:38:30:9f:aa:54:84:d9:43:b1:95:63:b2:27:6d:64: 98:8f:c2:4e:e0:32:3d:5d:5a:cb:95:03:cb:af:72:78:28:af: 62:61:88:87:a0:51:73:81:e0:48:f2:32:98:3f:de:07:33:01: 59:d0:ba:ab:26:3c:be:a9:2e:f9:17:36:5c:1c:74:64:90:ac: f5:f4:5e:da:0c:1e:63:0f:67:ad:e0:6d:5f:7e:bd:47:7f:2a: 0d:fe:f7:f5:92:fd:5a:69:8f:db:28:b4:03:e7:ca:8c:13:8e: b1:76:f5:c3:b7:c0:23:49:d2:bb:a7:61:2e:5c:d8:66:bb:57: 3c:48:17:b2:f4:3e:5f:2f:13:47:24:c8:a0:03:ed:25:33:49: 38:b4:93:a3:7f:ad:aa:37:9a:3e:9c:b2:28:59:df:08:8b:a2: 4c:95:85:19:09:cb:87:ba:85:5e:9d:45:fd:5f:36:aa:87:78: 05:f8:42:a8:da:e0:92:71:66:9a:2d:84:0b:91:b4:7c:0b:15: 04:f8:b5:7f:35:5b:3c:5a:69:c9:f1:3f:69:53:78:53:84:38: 29:f8:80:89:96:1e:15:81:37:1d:07:d3:62:54:7c:d8:31:87: 3a:3b:8a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVNXH4PHkpBHnNvXGDzmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDU3MDg1NGZlODg2Yjk0YWU2MjUzNjNjNjI1ZGRhNjBi YjNlZmMwHhcNMjUxMjE3MjIwMTEwWhcNMjUxMjE4MjIwMTEwWjAzMTEwLwYDVQQD EygwMDdjNjAwZTA3MmM1ZTk5NjBkNzVkMWE0YmZlMDgxNTkwYzVkM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5oCF4DZs2U6ROgAMX0rImMhZBsW pA3WFvGzZIJAf1JhpACZohAKXWTx7shHlc7ImjaXy7ZFm1dr4RK+0qRbxsbA9FcZ TGyAHyhGRAg+CGgT7pqqbE5cyoUxFrCfCZwyna6v3uZc65HR+yt5nbBu2+8nBnNd FnY3/WV1KnnDVL5n6hwYxXIU8Fq4Ys6atgKej2CfYnI1iLZYvwdn56XwWR8PXaw2 It3MZlwezi6BGJL+6HVHv+A8urT9kdl99CV3FW3sYvCySE6BiG/8DIDCDGC+iwUd sxH+Iqg4H4hCKwYavPZP9/iT4EWRoATajmzvEckbt8xSd1TsYqWcyo/4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB8YA4HLF6ZYNddGkv+CBWQxdPkMB8GA1UdIwQY MBaAFKhFcIVP6Ia5SuYlNjxiXdpguz78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUt NWJjODc5NWMyY2JhLzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUtNWJjODc5NWMyY2Jh LzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu3c9r82 BZ7jtA2NV7UBk69iJwpCODCfqlSE2UOxlWOyJ21kmI/CTuAyPV1ay5UDy69yeCiv YmGIh6BRc4HgSPIymD/eBzMBWdC6qyY8vqku+Rc2XBx0ZJCs9fRe2gweYw9nreBt X369R38qDf739ZL9WmmP2yi0A+fKjBOOsXb1w7fAI0nSu6dhLlzYZrtXPEgXsvQ+ Xy8TRyTIoAPtJTNJOLSTo3+tqjeaPpyyKFnfCIuiTJWFGQnLh7qFXp1F/V82qod4 BfhCqNrgknFmmi2EC5G0fAsVBPi1fzVbPFppyfE/aVN4U4Q4KfiAiZYeFYE3HQfT YlR82DGHOjuKoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:16:28 2025 by rpki-client