This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File: QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier: GjBZVHzV1lPH5jfmE+lm2x9qyU9ISX7LlvnoAGG7ZYI=
Subject key identifier: 42:42:57:F3:E4:4A:B7:03:76:52:26:93:EA:7D:BE:E3:CD:B2:11:BB
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 019B4392EDE5FC69061B7281C34DE541A74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number: 1793
Signing time: Mon 22 Dec 2025 01:01:01 +0000
Manifest this update: Mon 22 Dec 2025 01:01:01 +0000
Manifest next update: Tue 23 Dec 2025 01:01:01 +0000
Files and hashes: 1: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: j2zTJM1+Mj3n2wrr+pkJbhaOWMt60NDjXnW7ce+FZpg=)
2: YqDxs-OvuVQHWefybCF_NO3X2LQ.roa (hash: T8m4+98qGxOiuFkFF1AHlHH+ajIR7QgNJlfbjXDXJ94=)
3: tc90ntWAEd82qK0_CS7-3-Q6s0Y.roa (hash: 0mZz7plH7Kh9tzG5C0loWt280MVfKoBtrgSHIPS0Ry4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:92:ed:e5:fc:69:06:1b:72:81:c3:4d:e5:41:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Dec 22 01:01:01 2025 GMT
Not After : Dec 23 01:01:01 2025 GMT
Subject: CN=424257f3e44ab70376522693ea7dbee3cdb211bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:89:d0:c8:b4:94:d1:dd:ee:11:61:2b:25:
9a:e9:0a:c6:7e:92:65:d3:bb:2d:9c:86:7e:f6:c3:
54:9a:8b:23:97:3e:c9:b4:3e:f0:96:23:a5:05:16:
44:12:8a:32:61:f4:0b:4e:b1:0c:21:1b:e5:47:17:
a5:4c:8f:86:23:ae:6a:b0:69:23:5a:7d:e8:d6:15:
22:55:3c:5f:3b:fd:24:60:f0:c9:b4:d4:b2:68:34:
bf:db:20:c9:83:a6:d1:d7:bb:4d:24:37:c0:ed:17:
b6:a5:fd:4a:2d:95:70:21:fa:fe:ec:03:38:0f:9c:
65:12:de:2b:56:fc:5b:3d:31:e0:88:b6:6e:d4:8a:
b9:4b:a6:fa:4c:e2:20:c6:9b:c9:a4:91:67:1b:d2:
1d:05:d6:fa:e8:16:d8:0f:58:4b:97:c2:20:41:a1:
9d:46:d3:db:e0:8f:a4:96:5f:1f:dc:4c:2f:ad:de:
9d:64:34:96:37:17:7e:fb:df:a9:d5:9c:48:4d:ad:
b5:99:f1:02:e7:5c:4b:31:55:a2:bc:fb:69:3c:f8:
c2:37:ba:6c:0b:ad:b6:86:97:67:8d:d5:03:22:c9:
aa:ea:78:98:1a:2e:dd:fd:25:bf:e1:23:7b:45:49:
6f:71:49:94:b2:43:39:da:08:16:19:c9:ae:a3:11:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:57:F3:E4:4A:B7:03:76:52:26:93:EA:7D:BE:E3:CD:B2:11:BB
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:ed:91:ce:4a:7e:38:bf:b5:7e:fe:ec:f8:65:8d:f4:e4:
7a:5a:bc:16:26:33:f3:fb:d9:7d:ad:87:0b:65:0c:06:39:c3:
4a:0f:0f:27:1e:46:e1:21:41:bc:3e:53:40:35:b7:f7:05:a4:
d6:9b:d1:68:1c:1e:4e:e0:4e:7a:e4:b6:aa:dd:51:01:2a:29:
47:80:8d:3a:5d:89:b7:70:67:51:29:95:18:e4:d3:fa:c4:67:
88:60:95:c3:e1:8b:98:0e:68:5e:f0:7c:b5:76:27:71:e8:26:
ed:35:4d:29:e7:b3:c5:77:85:19:15:2e:f9:9e:56:bf:e3:d4:
0f:1f:24:9f:96:91:68:ad:52:c4:e7:15:46:81:34:ac:a4:50:
13:45:2c:70:1e:b4:ab:30:90:7a:87:a9:04:7d:18:a8:1b:05:
25:99:dc:6e:93:4b:14:1a:c5:0f:24:a0:15:27:fc:cf:ec:ce:
75:be:6a:8b:ba:f0:11:45:34:bf:de:35:30:21:39:82:c7:55:
8a:ad:09:a9:6d:31:ac:0b:8d:b9:de:db:8a:5f:41:1d:10:cc:
62:d1:09:1e:13:bf:ea:3a:2a:99:a4:b2:36:2d:7f:b8:ea:1d:
45:55:d7:7e:7a:40:ce:fe:56:33:34:bd:a1:81:a7:04:8d:96:
21:20:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:47:10 2025 by rpki-client