This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json) Hash identifier: bKhF9aTOaOtevbjvxXbRQ7Wa47PwdwPZRxgugZll7oE= Subject key identifier: 6E:1A:4D:96:3C:DB:FF:B9:C2:47:1B:E6:52:39:F6:61:9D:B0:2C:B5 Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf Certificate serial: 019B34C52E9D4802EA3C3E0064D6587F75E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft Manifest number: 01B4 Signing time: Fri 19 Dec 2025 04:01:36 +0000 Manifest this update: Fri 19 Dec 2025 04:01:36 +0000 Manifest next update: Sat 20 Dec 2025 04:01:36 +0000 Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=) 2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: 061OGFMWoPKRhGp3+2t62s99fecwf/z6dOQbZTaVfgY=) 3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:2e:9d:48:02:ea:3c:3e:00:64:d6:58:7f:75:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf Validity Not Before: Dec 19 04:01:36 2025 GMT Not After : Dec 20 04:01:36 2025 GMT Subject: CN=6e1a4d963cdbffb9c2471be65239f6619db02cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:37:b8:64:5d:d4:c5:f2:89:56:d7:12:05: 1f:dd:05:ce:cd:da:d5:b6:d5:69:ca:f9:5f:c0:a7: 9e:86:cf:b6:9c:94:44:72:2d:42:99:53:65:74:f1: f4:91:15:de:7e:e1:da:96:fa:01:28:d7:81:c5:f0: 82:e0:39:09:5a:10:c9:8a:69:5d:7d:40:c1:72:33: 74:5a:26:e0:0b:5e:ee:87:6d:07:4c:85:3a:d0:00: 00:af:33:ca:52:21:2d:f2:b2:07:1a:27:45:7d:46: b4:34:30:ca:bd:01:88:e8:2d:42:eb:6b:9d:5b:b1: 29:57:91:45:f8:da:47:bd:75:af:01:e5:67:19:34: 5e:c3:1d:8a:c0:eb:99:9e:23:50:ce:ae:a6:cf:e6: 0c:74:52:7d:65:3e:eb:85:67:ba:a1:c3:a0:44:63: c0:f6:7d:57:65:39:29:8b:fc:71:bc:3e:84:a8:dc: 91:81:cb:de:bb:f5:db:44:56:79:f7:43:e0:a2:93: 71:a7:73:3c:aa:7e:87:73:77:23:35:5a:a9:de:f1: 8f:b3:6d:ad:88:d9:94:0e:5c:11:ef:6f:df:b7:69: 4b:c3:14:97:d8:47:c4:50:8c:c1:c0:ca:a7:01:b6: 00:5b:2a:0e:51:a1:a9:1d:90:4a:f3:14:ca:c5:a4: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1A:4D:96:3C:DB:FF:B9:C2:47:1B:E6:52:39:F6:61:9D:B0:2C:B5 X509v3 Authority Key Identifier: keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ca:4c:4b:4d:7e:bf:60:1c:02:84:49:48:a1:84:cc:c3:60: a4:98:4c:dc:a6:a3:58:8f:12:57:fa:b3:9c:63:03:02:17:23: a2:34:9c:f0:3a:69:1b:50:cb:f2:29:23:88:b1:e6:a9:db:24: 2a:69:1b:df:77:8b:c7:ca:7a:99:91:08:92:ad:43:1b:15:7d: 16:bc:fb:2e:2a:cb:d8:9e:be:95:ca:c5:a9:76:f9:cc:b9:b5: 7a:00:df:f0:e9:b6:fe:35:cc:c8:31:66:83:1b:c0:44:76:62: 14:87:c4:57:cf:b8:6b:21:70:b7:9b:0c:11:8b:c8:b0:d9:43: 4d:fe:67:1a:88:93:d8:9b:2e:01:4e:20:f4:80:b7:ba:c8:83: 5d:c4:5a:14:53:5d:92:2d:be:bb:4d:10:5e:2d:a0:92:f0:b4: 6c:fc:62:45:53:a3:54:cf:76:b5:c8:c9:71:e7:29:b4:ce:7c: c7:aa:3d:8d:b4:9b:9c:10:8c:56:47:d8:23:91:ac:ec:df:09: 75:b4:6e:2f:60:83:cb:34:56:85:ad:93:f8:1f:3e:e6:9a:5e: 25:26:72:81:75:87:f6:32:51:5e:bc:0d:b3:0d:92:e4:67:c3: f1:64:e7:0e:98:6d:c3:76:a1:d7:86:f6:bb:3b:74:3c:fc:e8: 75:2f:46:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xS6dSALqPD4AZNZYf3XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw YTE4Y2YwHhcNMjUxMjE5MDQwMTM2WhcNMjUxMjIwMDQwMTM2WjAzMTEwLwYDVQQD Eyg2ZTFhNGQ5NjNjZGJmZmI5YzI0NzFiZTY1MjM5ZjY2MTlkYjAyY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG43uGRd1MXyiVbXEgUf3QXOzdrV ttVpyvlfwKeehs+2nJREci1CmVNldPH0kRXefuHalvoBKNeBxfCC4DkJWhDJimld fUDBcjN0WibgC17uh20HTIU60AAArzPKUiEt8rIHGidFfUa0NDDKvQGI6C1C62ud W7EpV5FF+NpHvXWvAeVnGTRewx2KwOuZniNQzq6mz+YMdFJ9ZT7rhWe6ocOgRGPA 9n1XZTkpi/xxvD6EqNyRgcveu/XbRFZ590PgopNxp3M8qn6Hc3cjNVqp3vGPs22t iNmUDlwR72/ft2lLwxSX2EfEUIzBwMqnAbYAWyoOUaGpHZBK8xTKxaStOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4aTZY82/+5wkcb5lI59mGdsCy1MB8GA1UdIwQY MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt NmI4NzcwMzZhYTFhLzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMpMS01+ v2AcAoRJSKGEzMNgpJhM3KajWI8SV/qznGMDAhcjojSc8DppG1DL8ikjiLHmqdsk Kmkb33eLx8p6mZEIkq1DGxV9Frz7LirL2J6+lcrFqXb5zLm1egDf8Om2/jXMyDFm gxvARHZiFIfEV8+4ayFwt5sMEYvIsNlDTf5nGoiT2JsuAU4g9IC3usiDXcRaFFNd ki2+u00QXi2gkvC0bPxiRVOjVM92tcjJcecptM58x6o9jbSbnBCMVkfYI5Gs7N8J dbRuL2CDyzRWha2T+B8+5ppeJSZygXWH9jJRXrwNsw2S5GfD8WTnDphtw3ah14b2 uzt0PPzodS9GQA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:07:51 2025 by rpki-client