This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json) Hash identifier: h3f8WmAUK6juyBL7XfkssDGc4+MoWJCRFq49fuyYg7g= Subject key identifier: 28:1B:1B:08:CB:4D:31:24:F4:38:C9:0F:CE:48:D5:01:5B:6F:F2:10 Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Certificate serial: 019B1CF39B6056338F3C5489A40F70076C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft Manifest number: 1255 Signing time: Sun 14 Dec 2025 13:01:25 +0000 Manifest this update: Sun 14 Dec 2025 13:01:25 +0000 Manifest next update: Mon 15 Dec 2025 13:01:25 +0000 Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=) 2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: R9l7HIZH2WsnDW3i100XGBi0Iy3gtfPU7Il+M2Ifg0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:9b:60:56:33:8f:3c:54:89:a4:0f:70:07:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74 Validity Not Before: Dec 14 13:01:25 2025 GMT Not After : Dec 15 13:01:25 2025 GMT Subject: CN=281b1b08cb4d3124f438c90fce48d5015b6ff210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:1f:bb:7a:84:22:2e:ec:7c:c9:60:85:3a: 24:1e:03:cf:81:bd:6d:aa:e7:17:81:7d:c4:5b:71: 51:bb:9c:dd:34:ec:68:98:7b:a2:0e:b3:10:7b:80: 96:1d:73:a7:51:92:74:a8:5d:af:7f:91:01:a5:6c: 5a:64:5e:45:4f:08:77:89:b3:1f:b8:33:19:59:f8: 42:22:5a:cc:98:23:ec:7f:46:32:61:af:8f:6f:e2: f3:1a:29:3c:b5:84:9f:db:5c:ea:95:41:78:81:d0: 92:c5:bb:b7:56:69:99:ee:13:11:8b:d3:88:cb:55: 25:de:82:df:42:29:21:7f:02:b3:63:24:82:52:36: d8:5e:ba:5b:58:a7:13:c5:6f:22:ce:8c:91:a4:b2: c3:57:e0:7e:87:29:0a:24:80:c7:74:d0:ef:55:fc: 40:fd:d0:0d:60:ae:ec:0c:eb:cb:71:e5:d1:2c:71: 15:e6:8b:a0:df:a5:ce:01:21:f7:ef:b2:84:2e:1d: d8:a9:58:b6:5e:1d:3e:0a:fb:cc:e1:2c:56:4b:60: 6c:05:39:64:41:54:e6:b4:4e:38:a0:61:43:58:58: 93:b5:d8:c3:34:e4:85:40:43:9b:96:64:13:40:b0: a1:c1:8d:bd:d8:9b:fd:3f:ab:d2:cb:a1:4d:af:70: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:1B:08:CB:4D:31:24:F4:38:C9:0F:CE:48:D5:01:5B:6F:F2:10 X509v3 Authority Key Identifier: keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:ee:ac:12:6e:6a:0d:f3:eb:a1:aa:ce:e2:cb:81:c3:49: 97:c6:fd:f0:1e:98:45:71:70:38:42:aa:23:9a:db:fa:b8:e7: 03:65:ff:21:eb:1d:2e:09:09:bf:29:1a:c0:c8:93:cf:22:9e: f9:11:e5:86:e0:d5:84:51:e4:57:3a:fd:fa:18:8b:5e:ae:2f: 00:ba:c1:cb:02:72:84:1b:95:4d:73:6f:ac:3d:e8:11:84:48: ca:0b:06:f2:60:9c:62:53:ae:02:83:00:32:c7:7f:e1:2b:7a: da:66:fd:f0:5e:93:5a:35:b9:08:89:fe:f8:9b:2a:ba:4f:d3: b2:17:4a:33:5b:62:5f:81:bb:da:0a:28:9b:16:f1:37:be:92: 6c:93:a8:c8:95:e9:0e:22:78:cc:6f:26:6a:81:01:bc:a0:e6: 06:37:90:cd:12:34:83:b1:ea:0c:45:13:e7:52:02:2c:08:4d: 09:31:ec:e1:cf:2c:17:8a:c4:60:e2:9d:99:cd:35:ed:41:0b: 55:cb:4a:b1:5e:46:98:04:7c:5d:60:0d:33:28:e2:79:5f:d1: e1:e5:48:50:86:ec:9c:ac:ee:16:d7:68:75:33:36:8f:5f:02: a0:c6:35:8f:a4:51:48:0a:21:fa:20:22:db:17:c0:94:e3:8e: 24:25:d3:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc85tgVjOPPFSJpA9wB2yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh MmZkNzQwHhcNMjUxMjE0MTMwMTI1WhcNMjUxMjE1MTMwMTI1WjAzMTEwLwYDVQQD EygyODFiMWIwOGNiNGQzMTI0ZjQzOGM5MGZjZTQ4ZDUwMTViNmZmMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVcfu3qEIi7sfMlghTokHgPPgb1t qucXgX3EW3FRu5zdNOxomHuiDrMQe4CWHXOnUZJ0qF2vf5EBpWxaZF5FTwh3ibMf uDMZWfhCIlrMmCPsf0YyYa+Pb+LzGik8tYSf21zqlUF4gdCSxbu3VmmZ7hMRi9OI y1Ul3oLfQikhfwKzYySCUjbYXrpbWKcTxW8izoyRpLLDV+B+hykKJIDHdNDvVfxA /dANYK7sDOvLceXRLHEV5oug36XOASH377KELh3YqVi2Xh0+CvvM4SxWS2BsBTlk QVTmtE44oGFDWFiTtdjDNOSFQEOblmQTQLChwY292Jv9P6vSy6FNr3C/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgbGwjLTTEk9DjJD85I1QFbb/IQMB8GA1UdIwQY MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt MDkxMjk4NzJlMTQzLzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzfurBJu ag3z66GqzuLLgcNJl8b98B6YRXFwOEKqI5rb+rjnA2X/IesdLgkJvykawMiTzyKe +RHlhuDVhFHkVzr9+hiLXq4vALrBywJyhBuVTXNvrD3oEYRIygsG8mCcYlOuAoMA Msd/4St62mb98F6TWjW5CIn++Jsquk/TshdKM1tiX4G72goomxbxN76SbJOoyJXp DiJ4zG8maoEBvKDmBjeQzRI0g7HqDEUT51ICLAhNCTHs4c8sF4rEYOKdmc017UEL VctKsV5GmAR8XWANMyjieV/R4eVIUIbsnKzuFtdodTM2j18CoMY1j6RRSAoh+iAi 2xfAlOOOJCXTDQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:15:15 2025 by rpki-client