This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json) Hash identifier: 9ZMEN0ffo3IrpuMGiLqGu3IdCcoOFqjFcae/1l4YDrE= Subject key identifier: 65:44:0A:94:EE:C5:D8:DC:C8:F6:04:58:8C:A1:B2:65:41:CF:97:39 Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Certificate serial: 019B0FA53A4993D2E61116B196DF9D55C060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft Manifest number: 05C7 Signing time: Thu 11 Dec 2025 23:00:45 +0000 Manifest this update: Thu 11 Dec 2025 23:00:45 +0000 Manifest next update: Fri 12 Dec 2025 23:00:45 +0000 Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=) 2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: KCQ7Saf14Q79E0wmqPn8vBo0ZKs3iSy91zfb9mvCKQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:3a:49:93:d2:e6:11:16:b1:96:df:9d:55:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Validity Not Before: Dec 11 23:00:45 2025 GMT Not After : Dec 12 23:00:45 2025 GMT Subject: CN=65440a94eec5d8dcc8f604588ca1b26541cf9739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:1c:22:f9:07:85:67:4f:9a:8d:9d:87:6d: 02:56:78:be:c6:6c:9c:74:be:03:9a:7f:98:33:98: 60:45:6e:69:f5:16:f3:5b:55:0d:cc:ae:c5:47:4c: a2:9d:f7:fe:55:ff:0e:7f:8a:88:26:12:3f:59:48: da:09:1c:66:ee:84:a2:a4:33:b5:93:db:52:9d:ae: 33:16:89:8f:6f:cf:df:bf:b1:96:57:b3:a4:84:76: e0:0b:2e:7c:38:9d:b4:11:80:d8:e8:78:af:59:52: bb:a4:a0:a5:6a:95:d0:86:5f:63:cb:9d:f2:38:84: 57:1a:00:5e:db:69:fb:ca:6d:a2:00:a3:71:6d:f7: e9:31:f5:71:15:f4:de:2e:df:82:d5:27:a3:c2:9f: 8d:0a:42:c0:1e:f7:4a:78:c4:91:53:e9:3a:75:68: 77:d9:08:fa:bb:53:c3:05:74:9f:21:06:cd:28:36: 0c:ed:83:31:79:47:ae:c2:1e:54:8e:c2:cb:3b:07: 25:83:ba:b3:42:b9:43:c2:79:a0:9d:e7:36:23:e2: 3c:3b:96:4f:4f:2f:db:6a:5e:e1:82:ea:48:47:8b: ed:96:67:c7:5c:ff:e8:27:56:46:8a:be:5f:4f:d6: 0a:d3:61:6a:de:ed:84:c5:f6:7a:91:3c:19:17:38: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:0A:94:EE:C5:D8:DC:C8:F6:04:58:8C:A1:B2:65:41:CF:97:39 X509v3 Authority Key Identifier: keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5a:57:b1:d0:1a:0d:77:ea:7c:b8:4a:a3:64:3e:c8:4c:97: 3e:61:6a:d8:f3:34:d1:12:fb:c3:8c:c6:28:f3:aa:2b:68:0a: bd:11:f8:c8:76:49:c1:d3:e0:30:9a:b1:ce:75:71:7f:da:39: 1b:75:5d:e1:40:41:32:21:29:0b:3e:ad:85:79:d3:ef:fe:a2: 3c:6c:a2:a6:5b:41:25:de:ea:2d:66:30:cb:a1:5b:ce:eb:8a: d1:64:59:74:82:11:12:64:1a:e4:cf:7d:71:ce:25:a5:49:05: 96:cf:68:d2:d0:e7:5c:c1:74:df:a0:0d:6b:50:0f:4a:c9:1b: f6:54:07:90:a7:ab:49:80:be:6b:18:06:9e:e4:44:8a:4f:ab: 15:a2:0d:fb:ba:c8:9f:2a:37:ff:ba:d1:57:b0:06:42:11:a7: f8:f0:36:0d:2c:2e:89:1f:5d:d9:b7:4a:be:96:87:82:d8:8f: e2:94:46:2e:05:0e:11:c9:4a:c0:be:6a:00:a6:64:d2:84:ab: 4f:99:c6:8f:b3:11:a0:8b:d6:f5:20:e4:fc:28:6c:a6:58:14: 5a:57:c9:62:3f:04:e2:a0:ad:e4:f8:8a:3f:0f:fc:7c:a0:25: a1:78:62:84:90:bb:1e:f9:4e:ed:13:3e:12:02:ee:e6:7a:e5: 34:6c:d1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTpJk9LmERaxlt+dVcBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli NjIxZTQwHhcNMjUxMjExMjMwMDQ1WhcNMjUxMjEyMjMwMDQ1WjAzMTEwLwYDVQQD Eyg2NTQ0MGE5NGVlYzVkOGRjYzhmNjA0NTg4Y2ExYjI2NTQxY2Y5NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueQcIvkHhWdPmo2dh20CVni+xmyc dL4Dmn+YM5hgRW5p9RbzW1UNzK7FR0yinff+Vf8Of4qIJhI/WUjaCRxm7oSipDO1 k9tSna4zFomPb8/fv7GWV7OkhHbgCy58OJ20EYDY6HivWVK7pKClapXQhl9jy53y OIRXGgBe22n7ym2iAKNxbffpMfVxFfTeLt+C1Sejwp+NCkLAHvdKeMSRU+k6dWh3 2Qj6u1PDBXSfIQbNKDYM7YMxeUeuwh5UjsLLOwclg7qzQrlDwnmgnec2I+I8O5ZP Ty/bal7hgupIR4vtlmfHXP/oJ1ZGir5fT9YK02Fq3u2ExfZ6kTwZFziHnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVECpTuxdjcyPYEWIyhsmVBz5c5MB8GA1UdIwQY MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1 LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklpXsdAa DXfqfLhKo2Q+yEyXPmFq2PM00RL7w4zGKPOqK2gKvRH4yHZJwdPgMJqxznVxf9o5 G3Vd4UBBMiEpCz6thXnT7/6iPGyipltBJd7qLWYwy6FbzuuK0WRZdIIREmQa5M99 cc4lpUkFls9o0tDnXMF036ANa1APSskb9lQHkKerSYC+axgGnuREik+rFaIN+7rI nyo3/7rRV7AGQhGn+PA2DSwuiR9d2bdKvpaHgtiP4pRGLgUOEclKwL5qAKZk0oSr T5nGj7MRoIvW9SDk/ChsplgUWlfJYj8E4qCt5PiKPw/8fKAloXhihJC7HvlO7RM+ EgLu5nrlNGzRlg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:35:47 2025 by rpki-client