This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json) Hash identifier: POyK0hPl6r/D2/69SchGDTrtBixKer3Yn2SvEIUH24k= Subject key identifier: 2C:B9:15:02:21:7B:A4:3E:DE:72:B0:FE:75:E8:40:8C:8D:F4:80:9F Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Certificate serial: 019B59080EDFCFB667F36547246CA7438E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 05:00:58 +0000 Manifest this update: Fri 26 Dec 2025 05:00:58 +0000 Manifest next update: Sat 27 Dec 2025 05:00:58 +0000 Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=) 2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: Uqzs1eb10OPq27UZ1X01ESZ/FWdvBaWxcpi9nA5Y99w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:0e:df:cf:b6:67:f3:65:47:24:6c:a7:43:8e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Validity Not Before: Dec 26 05:00:58 2025 GMT Not After : Dec 27 05:00:58 2025 GMT Subject: CN=2cb91502217ba43ede72b0fe75e8408c8df4809f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:b2:52:e3:fc:1d:52:18:11:db:55:21:3c: 0f:45:36:03:13:fb:f6:cd:9e:a8:ee:14:c8:2a:6f: 67:e7:63:0d:46:75:ab:74:ba:20:76:eb:ad:f6:cc: d0:03:33:00:d9:d0:36:a6:46:2c:ec:d9:39:d5:46: e1:8c:15:44:a2:4c:2e:c9:6d:76:5a:f8:d6:30:f9: 23:b8:1c:f2:48:b7:fe:fe:8e:e0:4f:65:08:fe:5d: 4f:79:ca:60:52:9b:de:2f:8d:53:fb:b8:39:88:5d: 3c:bc:4b:4e:58:87:71:55:36:4b:bc:17:b4:c4:15: ad:4f:3a:dc:16:71:bb:fa:8c:7d:11:d1:b7:e1:81: e9:68:fb:40:08:70:73:67:89:72:13:e9:c6:be:1b: 1d:2c:29:52:b4:28:e3:c8:b4:d0:90:3a:c9:6e:6e: cf:fa:e8:12:3f:00:46:16:9a:b2:27:72:6d:94:64: c1:49:1b:d1:99:b7:ec:2f:8a:19:f8:47:a8:4d:10: c5:17:4a:7b:b3:09:2c:d2:28:19:34:df:08:76:08: 73:eb:d2:66:e9:da:d9:35:0c:c7:04:22:5a:75:5f: d1:5e:57:f4:a9:7a:06:d7:31:da:e4:70:47:d5:85: 31:43:c9:18:f4:41:86:26:ef:51:68:f4:da:c8:5f: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B9:15:02:21:7B:A4:3E:DE:72:B0:FE:75:E8:40:8C:8D:F4:80:9F X509v3 Authority Key Identifier: keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3d:cc:7b:f7:6e:ce:a7:c5:bd:a3:e4:31:ed:59:e9:2c:62: d1:c7:1e:71:73:48:58:e4:a5:f3:9f:79:62:aa:e1:9e:1a:63: 5d:77:2a:cb:f8:6d:c5:66:ab:86:b9:6f:c0:53:ab:c9:98:c7: 1a:12:02:52:80:35:be:3f:a8:79:3d:33:0b:61:fe:8a:11:e7: 96:90:ab:6e:d6:17:0c:20:93:59:2f:b6:1e:b3:04:82:09:86: c9:72:23:ca:67:1b:da:ab:52:7a:cb:b1:60:27:6c:de:a0:74: 39:f6:b2:c1:34:f0:7f:80:d9:ad:2e:16:6e:ad:28:c3:d6:26: 1c:78:9a:0f:c8:2b:81:36:46:cd:e2:bf:f1:ee:7a:3f:fa:92: 83:02:25:73:56:35:7b:cc:0f:c2:c0:72:c5:b3:23:51:c4:46: d5:48:92:b0:f6:2a:3e:52:8b:1c:44:83:3b:aa:af:a1:11:0b: b9:b0:d9:39:5b:6b:14:9e:c8:3d:e8:00:4b:57:d3:19:ad:14: 98:c2:fb:ef:ce:45:fb:53:a0:ec:6c:a9:94:47:13:0f:66:74: 8d:b1:75:ee:5c:62:0d:20:96:63:e0:30:c9:b6:10:2d:af:ca: bc:51:9f:8a:de:9a:60:ec:4c:53:e9:a8:c3:c0:0b:ec:39:c9: 3e:f7:57:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCA7fz7Zn82VHJGynQ45IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5 Y2NmYTgwHhcNMjUxMjI2MDUwMDU4WhcNMjUxMjI3MDUwMDU4WjAzMTEwLwYDVQQD EygyY2I5MTUwMjIxN2JhNDNlZGU3MmIwZmU3NWU4NDA4YzhkZjQ4MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnyyUuP8HVIYEdtVITwPRTYDE/v2 zZ6o7hTIKm9n52MNRnWrdLogduut9szQAzMA2dA2pkYs7Nk51UbhjBVEokwuyW12 WvjWMPkjuBzySLf+/o7gT2UI/l1PecpgUpveL41T+7g5iF08vEtOWIdxVTZLvBe0 xBWtTzrcFnG7+ox9EdG34YHpaPtACHBzZ4lyE+nGvhsdLClStCjjyLTQkDrJbm7P +ugSPwBGFpqyJ3JtlGTBSRvRmbfsL4oZ+EeoTRDFF0p7swks0igZNN8Idghz69Jm 6drZNQzHBCJadV/RXlf0qXoG1zHa5HBH1YUxQ8kY9EGGJu9RaPTayF9UdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy5FQIhe6Q+3nKw/nXoQIyN9ICfMB8GA1UdIwQY MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT3Me/du zqfFvaPkMe1Z6Sxi0ccecXNIWOSl8595YqrhnhpjXXcqy/htxWarhrlvwFOryZjH GhICUoA1vj+oeT0zC2H+ihHnlpCrbtYXDCCTWS+2HrMEggmGyXIjymcb2qtSesux YCds3qB0OfaywTTwf4DZrS4Wbq0ow9YmHHiaD8grgTZGzeK/8e56P/qSgwIlc1Y1 e8wPwsByxbMjUcRG1UiSsPYqPlKLHESDO6qvoRELubDZOVtrFJ7IPegAS1fTGa0U mML7785F+1Og7GyplEcTD2Z0jbF17lxiDSCWY+AwybYQLa/KvFGfit6aYOxMU+mo w8AL7DnJPvdXAA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:19 2025 by rpki-client