This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json) Hash identifier: XwHV2SRcvhWqlV+JHfkeYKwXpB411EGUGp5REwffWqM= Subject key identifier: 9B:A5:45:61:95:81:44:A5:32:26:4C:C7:0F:6C:33:94:A9:B1:2B:02 Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Certificate serial: 019B1014E2466CC601CA36952C5608E0F9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft Manifest number: 04DC Signing time: Fri 12 Dec 2025 01:02:42 +0000 Manifest this update: Fri 12 Dec 2025 01:02:42 +0000 Manifest next update: Sat 13 Dec 2025 01:02:42 +0000 Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=) 2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: BdcxJBCphHWoL1N25YgSz9mYDajlNlic1BHaXusQXqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:e2:46:6c:c6:01:ca:36:95:2c:56:08:e0:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4 Validity Not Before: Dec 12 01:02:42 2025 GMT Not After : Dec 13 01:02:42 2025 GMT Subject: CN=9ba54561958144a532264cc70f6c3394a9b12b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:b1:82:d0:9e:b0:52:fb:46:5b:1e:76:24: bc:99:5d:4e:25:f6:c8:3d:6c:df:e7:a0:6c:7a:e1: 55:bf:b9:9c:23:de:bb:d2:ac:58:ef:7f:20:1b:36: b4:50:d4:de:9d:6e:74:c5:75:c6:7c:ad:d5:37:65: fb:69:cc:c7:28:5b:16:d2:be:4c:5b:92:61:6d:97: 2c:a3:af:b1:04:2a:d4:f0:43:4a:7e:29:fc:24:0c: 26:78:68:65:fb:64:c1:fe:9d:40:de:c6:4b:29:75: 2d:f7:7c:f9:cb:40:75:44:7d:99:c1:96:c9:00:9d: d8:1c:85:ae:6c:94:5a:54:a5:14:9a:55:cc:14:87: 65:0e:26:04:2e:dc:86:cb:c2:b0:6e:25:26:c8:e9: 14:42:e7:39:58:bc:9d:10:cc:b6:07:a7:57:bb:06: b1:75:b2:0b:fe:1a:ed:6f:15:9c:5d:69:60:94:29: f3:c8:c0:9d:b2:f4:e5:c6:16:72:1a:fe:c0:51:70: 1a:4d:16:b1:38:a8:3f:6f:c5:c4:b6:15:51:d8:8f: ce:e1:76:82:ce:91:14:50:59:c9:0e:27:2a:63:5d: cb:73:ef:09:27:08:66:25:ff:c0:35:b5:8a:f6:ed: 42:20:04:14:70:6f:78:31:df:87:fa:11:d2:a4:20: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:45:61:95:81:44:A5:32:26:4C:C7:0F:6C:33:94:A9:B1:2B:02 X509v3 Authority Key Identifier: keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:88:0f:c7:0e:e7:c7:d1:c1:9d:4a:d6:8a:4b:25:9a:3b: 11:ed:8e:06:b5:46:fe:f9:4b:51:2c:90:24:12:bf:f8:14:fa: 41:72:1f:00:48:f1:d9:1b:ea:ff:12:ea:0f:0f:f4:62:e0:a2: e8:ee:84:97:85:7a:ac:11:b8:46:00:a8:ac:a9:a3:39:59:b9: 79:22:26:e1:7f:95:83:c3:ac:2d:94:4f:d6:50:90:cc:6b:3b: dd:be:86:12:1a:dd:5e:d1:3d:50:79:f9:12:cb:1a:46:b3:33: 63:04:eb:2e:ea:51:97:a4:d3:b6:a0:d1:45:f7:f8:14:cb:f0: e0:98:3e:17:b8:9f:71:1a:8b:cb:fd:1f:48:27:45:f3:71:fa: f0:85:8f:45:3d:f5:01:ed:5b:80:21:45:b4:05:48:eb:9d:05: 44:ee:a5:b0:b9:0a:65:87:78:7a:e9:da:be:eb:45:5f:55:30: 83:f9:80:f9:50:8e:03:1d:99:ae:ec:23:b3:70:0e:f0:3d:56: 82:65:8b:2b:26:75:24:48:df:b4:fa:05:52:f7:a2:58:d5:70: b2:d7:16:eb:fc:6d:99:ee:99:4f:e7:8e:95:eb:01:5b:1c:5f: ff:23:05:a9:1b:5d:24:dd:8e:54:4e:30:21:f4:75:f1:c1:bf: d4:50:04:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFOJGbMYByjaVLFYI4PmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk NjRmZTQwHhcNMjUxMjEyMDEwMjQyWhcNMjUxMjEzMDEwMjQyWjAzMTEwLwYDVQQD Eyg5YmE1NDU2MTk1ODE0NGE1MzIyNjRjYzcwZjZjMzM5NGE5YjEyYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFCxgtCesFL7RlsediS8mV1OJfbI PWzf56BseuFVv7mcI9670qxY738gGza0UNTenW50xXXGfK3VN2X7aczHKFsW0r5M W5JhbZcso6+xBCrU8ENKfin8JAwmeGhl+2TB/p1A3sZLKXUt93z5y0B1RH2ZwZbJ AJ3YHIWubJRaVKUUmlXMFIdlDiYELtyGy8KwbiUmyOkUQuc5WLydEMy2B6dXuwax dbIL/hrtbxWcXWlglCnzyMCdsvTlxhZyGv7AUXAaTRaxOKg/b8XEthVR2I/O4XaC zpEUUFnJDicqY13Lc+8JJwhmJf/ANbWK9u1CIAQUcG94Md+H+hHSpCBoAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJulRWGVgUSlMiZMxw9sM5SpsSsCMB8GA1UdIwQY MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFyID8cO 58fRwZ1K1opLJZo7Ee2OBrVG/vlLUSyQJBK/+BT6QXIfAEjx2Rvq/xLqDw/0YuCi 6O6El4V6rBG4RgCorKmjOVm5eSIm4X+Vg8OsLZRP1lCQzGs73b6GEhrdXtE9UHn5 EssaRrMzYwTrLupRl6TTtqDRRff4FMvw4Jg+F7ifcRqLy/0fSCdF83H68IWPRT31 Ae1bgCFFtAVI650FRO6lsLkKZYd4eunavutFX1Uwg/mA+VCOAx2Zruwjs3AO8D1W gmWLKyZ1JEjftPoFUveiWNVwstcW6/xtme6ZT+eOlesBWxxf/yMFqRtdJN2OVE4w IfR18cG/1FAEdw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:10:37 2025 by rpki-client