This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json) Hash identifier: OYMpwgLCu284dN6rE2AIn7+Vn9gsxoeQLxRjO4rPMZs= Subject key identifier: 33:70:F0:3F:97:74:AF:DC:87:4D:ED:55:F7:48:11:FF:7A:7E:95:CA Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Certificate serial: 019B21E2D7EA8643C358FADF6D4F9AAD54BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft Manifest number: 11F3 Signing time: Mon 15 Dec 2025 12:01:13 +0000 Manifest this update: Mon 15 Dec 2025 12:01:13 +0000 Manifest next update: Tue 16 Dec 2025 12:01:13 +0000 Files and hashes: 1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=) 2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=) 3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=) 4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: bzRlIyrHYmgKawW9YfeNuZUh//6Ofs3wLcNAALo28js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:d7:ea:86:43:c3:58:fa:df:6d:4f:9a:ad:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Validity Not Before: Dec 15 12:01:13 2025 GMT Not After : Dec 16 12:01:13 2025 GMT Subject: CN=3370f03f9774afdc874ded55f74811ff7a7e95ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:30:9d:2a:e6:e5:c4:20:c8:b4:0a:77:dc: d3:49:c8:45:d7:f6:6b:77:59:ec:34:c2:13:0a:82: 8f:a7:bd:a4:db:65:e8:27:8b:fe:51:59:1a:90:28: 2d:87:63:17:b2:d5:7d:bd:52:b4:a1:40:cd:f2:8f: 80:d9:66:b0:fe:3a:70:15:3d:ab:94:ab:14:40:40: f9:a4:2a:62:a7:e5:48:df:29:01:f2:c5:54:af:7a: 9c:28:a0:8f:10:8e:a5:33:ed:dc:f0:fc:b6:82:21: 12:43:46:e5:b2:e8:8a:1a:6a:2a:17:e7:eb:4a:42: 69:7c:a3:54:23:14:65:69:fc:61:be:76:0e:d4:b4: 76:db:f0:3c:84:0f:6f:d8:a9:06:5d:7f:7e:d7:08: fa:62:3b:06:9e:f4:a5:62:7f:09:7f:7d:2c:75:1f: 09:5e:e2:9c:06:3c:44:86:e9:dc:de:eb:be:03:18: 59:2d:f6:ef:60:f7:a9:6b:a9:f5:ac:9f:79:6a:73: 7c:15:55:73:53:46:3e:7b:4c:04:11:53:16:33:df: 82:ae:c7:c8:51:3e:d4:84:36:60:c9:24:78:1c:bb: 5c:92:b2:a3:40:7a:8d:10:0f:d1:3d:cb:c7:13:7e: 79:7d:3c:3c:89:c6:58:ea:a6:fb:5d:19:96:6d:5d: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:70:F0:3F:97:74:AF:DC:87:4D:ED:55:F7:48:11:FF:7A:7E:95:CA X509v3 Authority Key Identifier: keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a2:92:9b:db:3b:27:8d:67:bd:68:5e:35:fb:60:54:ca:4f: d8:ce:fd:05:01:94:34:45:c5:1c:8e:f0:74:37:8b:5c:17:8a: 18:b7:28:55:42:cd:97:6e:01:22:ad:87:af:06:df:18:9b:15: ef:91:a6:9b:dd:cd:48:07:c0:3d:41:ce:56:9a:08:d7:93:a2: 69:de:4c:b5:c5:df:5e:4d:bd:7f:f3:a5:bd:98:c6:1e:b0:9f: 87:14:3a:40:49:ae:6c:f1:40:9d:79:7e:48:80:13:fc:19:b9: e6:8c:2c:60:3b:64:e0:88:d5:18:ab:72:33:fc:4a:33:d5:47: f5:6c:b0:e8:bc:53:a7:c0:59:14:e2:1f:f8:28:0d:21:54:fa: 61:38:7b:36:43:05:a9:eb:0b:6d:e4:02:38:f5:11:3e:c1:d6: 0e:14:2e:60:f4:fc:1d:8f:00:04:bb:08:a9:f7:42:8c:e6:74: ef:56:36:76:f5:3f:1e:35:4e:39:62:6b:0c:56:44:3b:77:f5: ea:dd:d9:da:f5:0c:6d:07:c3:e2:10:bd:f3:9f:36:f7:bd:e8: 75:33:e3:ad:92:9f:f0:0b:1c:1d:92:47:c9:99:25:e5:1c:4c: 43:6d:63:d7:8d:f0:aa:6f:11:5c:de:4f:35:01:e6:d0:bf:1a: 81:b0:95:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4tfqhkPDWPrfbU+arVS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm YmFhMDAwHhcNMjUxMjE1MTIwMTEzWhcNMjUxMjE2MTIwMTEzWjAzMTEwLwYDVQQD EygzMzcwZjAzZjk3NzRhZmRjODc0ZGVkNTVmNzQ4MTFmZjdhN2U5NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0gwnSrm5cQgyLQKd9zTSchF1/Zr d1nsNMITCoKPp72k22XoJ4v+UVkakCgth2MXstV9vVK0oUDN8o+A2Waw/jpwFT2r lKsUQED5pCpip+VI3ykB8sVUr3qcKKCPEI6lM+3c8Py2giESQ0blsuiKGmoqF+fr SkJpfKNUIxRlafxhvnYO1LR22/A8hA9v2KkGXX9+1wj6YjsGnvSlYn8Jf30sdR8J XuKcBjxEhunc3uu+AxhZLfbvYPepa6n1rJ95anN8FVVzU0Y+e0wEEVMWM9+CrsfI UT7UhDZgySR4HLtckrKjQHqNEA/RPcvHE355fTw8icZY6qb7XRmWbV1JXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNw8D+XdK/ch03tVfdIEf96fpXKMB8GA1UdIwQY MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt NzcwMGUyNWZmNzY5LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5 LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6KSm9s7 J41nvWheNftgVMpP2M79BQGUNEXFHI7wdDeLXBeKGLcoVULNl24BIq2HrwbfGJsV 75Gmm93NSAfAPUHOVpoI15Oiad5MtcXfXk29f/OlvZjGHrCfhxQ6QEmubPFAnXl+ SIAT/Bm55owsYDtk4IjVGKtyM/xKM9VH9Wyw6LxTp8BZFOIf+CgNIVT6YTh7NkMF qesLbeQCOPURPsHWDhQuYPT8HY8ABLsIqfdCjOZ071Y2dvU/HjVOOWJrDFZEO3f1 6t3Z2vUMbQfD4hC98582973odTPjrZKf8AscHZJHyZkl5RxMQ21j143wqm8RXN5P NQHm0L8agbCVBw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:55 2025 by rpki-client