This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft File: qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json) Hash identifier: lFTq2pPisQ5cWhmGgUwo3Ru2V1/kiaNpehphT8EH4Tc= Subject key identifier: 52:EF:10:FA:DB:E6:53:63:20:30:5A:23:B8:E5:0F:1E:81:CF:17:07 Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Certificate serial: 019B0E5C3ADB44BF3C7885DF936C7889A9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 17:01:23 +0000 Manifest this update: Thu 11 Dec 2025 17:01:23 +0000 Manifest next update: Fri 12 Dec 2025 17:01:23 +0000 Files and hashes: 1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=) 2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=) 3: 9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa (hash: HTr5ZfIPZkqpqy/GK7yq56zlAtqGayEHGuKpS3IdPQI=) 4: DaFgw0iNa5nSkbNJv-PnmACTGEE.roa (hash: 8633rdskCHMREKXJdJgcLU/YxRAFrByGjKiInCfQwbs=) 5: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=) 6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: ioLxBbusYDJpMw10LF0d2Uu0hn6lRz/3zgRjyJz/GRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:3a:db:44:bf:3c:78:85:df:93:6c:78:89:a9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Validity Not Before: Dec 11 17:01:23 2025 GMT Not After : Dec 12 17:01:23 2025 GMT Subject: CN=52ef10fadbe6536320305a23b8e50f1e81cf1707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:f7:b8:45:c1:33:9b:89:86:fd:80:d4:c8: 0a:d7:e3:7b:f7:84:2f:e0:1f:31:35:a1:4c:a8:1f: 9e:81:e2:ec:d0:14:9b:ed:e7:f7:9c:7b:5b:c5:dc: dd:16:3e:b9:47:54:09:eb:be:59:3f:e9:54:3e:e7: f9:03:c5:6f:3d:c3:de:80:26:ea:f6:e5:c7:8c:c5: 11:fc:54:fd:ea:72:d3:b1:2a:52:30:6a:44:f3:8a: d0:52:13:0b:17:d4:95:c7:93:6f:1a:34:74:0a:39: e3:14:cd:89:f0:79:3b:ec:79:a7:55:9b:42:ce:97: 0a:5b:4b:a8:43:d3:5e:48:ae:65:b5:b4:ea:ad:60: ed:66:e9:fc:05:e8:49:3d:2e:74:5b:fe:56:2f:95: 82:7d:a8:bf:5e:2f:72:df:7c:5e:a5:a4:5d:2a:b9: ac:69:8f:6e:16:be:db:19:a2:76:0a:f9:61:95:89: 53:8e:e2:ed:4c:a1:f9:25:4b:db:c7:1c:b8:7e:5a: 1c:7b:4f:2e:6d:05:25:02:bb:2e:f8:d5:18:25:08: 48:84:95:39:62:50:65:4c:03:6a:b0:80:60:09:f0: e1:43:28:b3:ba:09:19:a9:0b:41:00:f9:3b:00:c3: 36:55:ee:97:97:c4:7c:d9:79:f0:4d:87:80:72:7f: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:10:FA:DB:E6:53:63:20:30:5A:23:B8:E5:0F:1E:81:CF:17:07 X509v3 Authority Key Identifier: keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ec:4e:d9:df:bb:c5:08:4a:47:78:36:c9:45:41:22:22:38: 71:f5:d4:61:6b:8a:8b:cb:9f:e9:64:d3:53:4d:2a:68:a8:74: 2d:a3:a6:ae:86:c8:80:38:83:f1:57:68:5e:20:6e:5e:99:f7: cc:64:a8:3a:56:03:76:dc:68:0b:31:66:1f:8e:88:6c:07:49: 67:88:2c:2a:cb:46:65:24:42:83:3f:92:79:c9:3b:fe:ee:63: cb:f1:8f:cd:2e:a3:09:19:5e:e2:39:21:de:18:b5:76:6e:02: 07:a1:0f:77:b6:77:66:40:41:b4:dd:5b:26:00:bd:68:a6:03: 04:65:4b:42:69:a9:6b:09:36:b4:90:dc:92:9a:25:e9:6c:5c: e0:ad:e2:68:70:5f:38:5b:74:a7:ed:34:17:93:2b:52:38:6e: 83:2b:ea:7b:79:fb:7c:d5:2a:e6:84:8c:d6:ca:1e:a6:3f:e0: 06:26:b3:64:60:dc:ca:61:5c:64:b5:49:42:d0:07:f2:6d:2b: 95:db:13:f4:31:c5:b7:be:b4:3e:0c:b0:8f:80:be:45:5b:ed: c2:0b:2b:0d:57:40:dc:cd:7c:59:aa:b4:ec:ee:95:80:06:ac: c2:f2:22:ca:a9:a6:f7:b8:37:91:2a:51:e2:a4:c6:8f:42:97: 93:c1:67:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXDrbRL88eIXfk2x4ian+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3 OWE1NjcwHhcNMjUxMjExMTcwMTIzWhcNMjUxMjEyMTcwMTIzWjAzMTEwLwYDVQQD Eyg1MmVmMTBmYWRiZTY1MzYzMjAzMDVhMjNiOGU1MGYxZTgxY2YxNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFj3uEXBM5uJhv2A1MgK1+N794Qv 4B8xNaFMqB+egeLs0BSb7ef3nHtbxdzdFj65R1QJ675ZP+lUPuf5A8VvPcPegCbq 9uXHjMUR/FT96nLTsSpSMGpE84rQUhMLF9SVx5NvGjR0CjnjFM2J8Hk77HmnVZtC zpcKW0uoQ9NeSK5ltbTqrWDtZun8BehJPS50W/5WL5WCfai/Xi9y33xepaRdKrms aY9uFr7bGaJ2CvlhlYlTjuLtTKH5JUvbxxy4floce08ubQUlArsu+NUYJQhIhJU5 YlBlTANqsIBgCfDhQyizugkZqQtBAPk7AMM2Ve6Xl8R82XnwTYeAcn9t2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLvEPrb5lNjIDBaI7jlDx6BzxcHMB8GA1UdIwQY MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt NTVjMTQwYzlmNTRmLzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+xO2d+7 xQhKR3g2yUVBIiI4cfXUYWuKi8uf6WTTU00qaKh0LaOmrobIgDiD8VdoXiBuXpn3 zGSoOlYDdtxoCzFmH46IbAdJZ4gsKstGZSRCgz+Seck7/u5jy/GPzS6jCRle4jkh 3hi1dm4CB6EPd7Z3ZkBBtN1bJgC9aKYDBGVLQmmpawk2tJDckpol6Wxc4K3iaHBf OFt0p+00F5MrUjhugyvqe3n7fNUq5oSM1soepj/gBiazZGDcymFcZLVJQtAH8m0r ldsT9DHFt760Pgywj4C+RVvtwgsrDVdA3M18Waq07O6VgAaswvIiyqmm97g3kSpR 4qTGj0KXk8Fn1Q== -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:56 2025 by rpki-client