This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json) Hash identifier: p1Fy1WNDF1b7UCODLJpeREzqoK1FF337XMzPb0RGqG4= Subject key identifier: 48:FA:7A:D0:7A:C0:00:4D:8C:65:F4:A3:B6:F0:6A:79:E8:97:28:E0 Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1 Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1 Certificate serial: 019B38336098AFF0F9EB7E6020D80011B674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft Manifest number: 0B0F Signing time: Fri 19 Dec 2025 20:00:49 +0000 Manifest this update: Fri 19 Dec 2025 20:00:49 +0000 Manifest next update: Sat 20 Dec 2025 20:00:49 +0000 Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=) 2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: TSW+rO9E+VY12bdqhwxBRyl9G9zRHT3CBka6FHj+hHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:60:98:af:f0:f9:eb:7e:60:20:d8:00:11:b6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1 Validity Not Before: Dec 19 20:00:49 2025 GMT Not After : Dec 20 20:00:49 2025 GMT Subject: CN=48fa7ad07ac0004d8c65f4a3b6f06a79e89728e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:ab:f8:24:cb:ef:99:48:f7:25:a3:36:b9: 09:c7:56:3b:3a:79:eb:7f:96:0f:9f:43:b9:ab:0f: 6b:9a:64:4a:b4:56:20:cb:fa:31:3c:37:ac:6a:46: b1:c8:85:6a:f5:54:bf:8c:20:7a:c1:d9:ab:d5:fc: 6d:d8:90:2d:92:0b:75:f9:09:ab:30:cd:5b:16:8b: dd:a2:62:f1:5f:78:9d:08:99:dc:05:b7:03:5d:2f: d4:a1:c0:a2:6a:9d:db:6e:b5:6b:a1:25:73:63:b5: 0d:5d:39:ac:4a:30:c0:13:f7:98:3c:77:31:5f:9f: 0a:52:d8:a4:5a:08:c4:57:de:1b:e0:1a:66:46:61: f8:69:e6:b3:4c:7d:20:f2:97:ec:07:b7:8d:69:38: 88:8c:8b:2c:58:56:54:f2:bc:84:30:21:e8:1c:68: ef:4f:51:c7:df:c8:f1:be:0e:be:b5:bf:18:69:71: 50:53:5d:0f:38:11:e5:bd:4c:ff:98:81:e9:bd:6a: fe:01:13:4a:36:1c:95:75:85:03:aa:1b:9f:95:8d: 7a:8f:90:aa:af:90:c6:e7:6e:de:85:10:ad:9e:83: a0:48:51:ee:8b:eb:ca:d6:bf:5b:3b:01:bf:21:9f: 65:72:64:2f:51:1f:0d:9a:53:d2:85:6e:50:83:1f: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FA:7A:D0:7A:C0:00:4D:8C:65:F4:A3:B6:F0:6A:79:E8:97:28:E0 X509v3 Authority Key Identifier: keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:62:9d:1a:50:0f:48:c4:d9:a7:2a:cf:64:10:ad:1e:33:11: 87:ad:62:a7:78:6a:fb:22:ab:d8:f6:16:64:0b:ff:6f:0e:08: cb:15:b7:0a:98:95:d7:5f:54:a8:60:0a:97:81:06:4a:2b:e6: dd:bb:c7:73:7c:59:5b:08:17:a8:fd:62:fc:d9:bd:f2:52:d3: 19:af:8b:7f:8b:3c:52:b4:02:27:08:89:4b:38:2f:ac:9e:a2: 07:3f:8f:91:9c:1d:3a:9a:64:d1:b1:5f:53:bd:29:9b:9a:2d: c3:d0:6b:55:ac:30:c2:48:e4:fd:1f:aa:c5:dd:3b:68:5c:8f: 77:5a:e9:22:0f:e6:0f:1e:31:2a:68:2d:cf:f5:75:51:c0:cf: ce:98:7c:99:d1:a9:fa:08:28:8d:94:5f:78:aa:cc:8b:37:9f: b3:dd:bc:d9:8e:15:a9:4e:af:c8:d8:40:3d:ea:6c:3b:08:46: 48:0e:fd:fc:65:e1:8b:f7:c2:7e:ee:ed:cf:c8:f7:43:84:2e: e6:99:7b:d6:24:5c:11:bc:cb:08:06:9f:a1:60:ec:7a:10:71: a1:64:d1:32:fa:a3:b1:cb:52:c6:d3:d0:c5:6d:86:a6:38:a8: b2:f8:67:3d:f9:c8:ef:87:7f:b0:6b:ad:dc:62:cc:5d:d3:17: 42:fe:3c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M2CYr/D5635gINgAEbZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4 YmQ4YzEwHhcNMjUxMjE5MjAwMDQ5WhcNMjUxMjIwMjAwMDQ5WjAzMTEwLwYDVQQD Eyg0OGZhN2FkMDdhYzAwMDRkOGM2NWY0YTNiNmYwNmE3OWU4OTcyOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNur+CTL75lI9yWjNrkJx1Y7Onnr f5YPn0O5qw9rmmRKtFYgy/oxPDesakaxyIVq9VS/jCB6wdmr1fxt2JAtkgt1+Qmr MM1bFovdomLxX3idCJncBbcDXS/UocCiap3bbrVroSVzY7UNXTmsSjDAE/eYPHcx X58KUtikWgjEV94b4BpmRmH4aeazTH0g8pfsB7eNaTiIjIssWFZU8ryEMCHoHGjv T1HH38jxvg6+tb8YaXFQU10POBHlvUz/mIHpvWr+ARNKNhyVdYUDqhuflY16j5Cq r5DG527ehRCtnoOgSFHui+vK1r9bOwG/IZ9lcmQvUR8NmlPShW5Qgx9sfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj6etB6wABNjGX0o7bwannolyjgMB8GA1UdIwQY MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2 LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2KdGlAP SMTZpyrPZBCtHjMRh61ip3hq+yKr2PYWZAv/bw4IyxW3CpiV119UqGAKl4EGSivm 3bvHc3xZWwgXqP1i/Nm98lLTGa+Lf4s8UrQCJwiJSzgvrJ6iBz+PkZwdOppk0bFf U70pm5otw9BrVawwwkjk/R+qxd07aFyPd1rpIg/mDx4xKmgtz/V1UcDPzph8mdGp +ggojZRfeKrMizefs9282Y4VqU6vyNhAPepsOwhGSA79/GXhi/fCfu7tz8j3Q4Qu 5pl71iRcEbzLCAafoWDsehBxoWTRMvqjsctSxtPQxW2GpjiosvhnPfnI74d/sGut 3GLMXdMXQv48Cw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:28 2025 by rpki-client