This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json) Hash identifier: 3Lxmqts26/J6KvXhthPDdOp4LmdO7B4K3DveYuUtMx8= Subject key identifier: 00:9A:58:BC:7A:AF:9F:B4:9E:E8:85:CD:E5:20:29:EE:D6:12:EE:A2 Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Certificate serial: 019B593EE092747BFE4BE10F4547ADDC0213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft Manifest number: BF Signing time: Fri 26 Dec 2025 06:00:51 +0000 Manifest this update: Fri 26 Dec 2025 06:00:51 +0000 Manifest next update: Sat 27 Dec 2025 06:00:51 +0000 Files and hashes: 1: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (hash: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=) 2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: WCkvtCaddS2FpTu85Ss/Y2fjd3SIEPQ+IJ/erpZxxoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e0:92:74:7b:fe:4b:e1:0f:45:47:ad:dc:02:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Validity Not Before: Dec 26 06:00:51 2025 GMT Not After : Dec 27 06:00:51 2025 GMT Subject: CN=009a58bc7aaf9fb49ee885cde52029eed612eea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:ef:cd:3d:a1:53:a7:6c:3b:db:f9:12:bd: 22:38:59:1f:24:8d:95:66:c2:36:74:75:cd:e1:13: 24:b4:92:9b:dc:2d:5a:12:a4:ba:bc:1a:dd:af:2a: 1e:21:9f:62:86:b6:2e:11:a2:f6:72:6e:5f:a9:00: e8:eb:82:17:4b:01:bb:c4:24:b2:ad:81:93:2f:67: 40:63:a4:ee:4a:8f:96:16:81:3a:40:8f:73:b6:43: 30:19:dc:48:e9:ac:f4:42:0e:f2:51:ca:ab:38:49: a4:7e:0c:4d:f2:f4:ea:42:e6:c3:0e:b2:5b:77:c3: 16:72:6b:6a:0d:a7:25:47:ac:3b:a2:ca:17:ef:7a: 97:40:a3:a1:b0:41:38:69:6d:69:fe:25:55:e5:03: cb:36:63:88:e9:1c:c3:27:29:b0:6a:e8:78:c5:b3: a2:32:95:ad:1e:27:6c:e0:28:30:1d:d9:49:db:0e: 1f:1e:fd:f1:67:40:4b:3f:84:cf:eb:8a:c8:f0:64: 9c:41:61:80:dd:e3:a3:0e:05:43:25:87:11:b1:b3: 01:e3:e1:7b:11:2b:51:bf:66:e8:ac:29:0f:08:e7: 72:96:08:1a:ee:da:5c:33:f2:e3:4c:6f:1c:fe:8d: 75:b6:3b:3f:8b:59:b9:13:1c:7b:ef:20:81:bf:45: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:58:BC:7A:AF:9F:B4:9E:E8:85:CD:E5:20:29:EE:D6:12:EE:A2 X509v3 Authority Key Identifier: keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5e:bc:5d:43:05:1a:e4:d7:1d:f6:82:5b:1f:f3:50:ef:fa: f6:92:cc:e4:40:c6:fe:f6:af:b4:58:ec:96:54:6f:0c:07:1a: c5:3b:be:59:57:a3:35:b1:33:8a:82:1e:8b:8b:29:f3:39:25: ab:98:4d:3e:a1:78:da:ac:52:b0:0c:e1:1a:26:6d:bb:37:cb: f0:19:71:80:96:a4:62:d0:e0:a7:26:4e:9f:74:52:24:c7:6f: 91:9e:eb:e9:2b:5c:e4:60:06:cb:37:79:35:87:ae:90:82:e5: ab:92:04:1b:e2:c3:24:e7:35:8b:a8:7c:80:02:b6:c8:98:5d: ab:29:72:dd:6e:49:9a:d9:78:97:0f:52:cd:9a:7d:da:9a:98: 22:99:0f:35:c4:31:13:8b:0b:a4:b0:a6:71:1d:74:dd:db:32: 7c:cc:7e:fb:d8:7f:f8:be:1d:0a:e9:31:b3:45:a1:66:5b:0b: 3f:77:be:9a:10:cc:92:b6:b4:dd:34:ba:d9:b2:82:7f:7e:82: b9:0b:2c:5d:26:23:73:ad:61:65:ff:6b:ed:1e:8c:3f:b6:0d: 17:d7:03:6c:b4:fc:55:bd:2c:89:d2:d1:e3:f9:18:e2:c3:c9: 6d:7f:fe:40:45:7b:40:d3:89:17:e3:1a:81:30:a8:a1:d4:e8: 2d:9c:c0:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuCSdHv+S+EPRUet3AITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDRmNTNiMjEzZmQ1ZjZlNDZkZDNlZTNiN2U5ZDI4N2Zj OTE3MzIwHhcNMjUxMjI2MDYwMDUxWhcNMjUxMjI3MDYwMDUxWjAzMTEwLwYDVQQD EygwMDlhNThiYzdhYWY5ZmI0OWVlODg1Y2RlNTIwMjllZWQ2MTJlZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpXvzT2hU6dsO9v5Er0iOFkfJI2V ZsI2dHXN4RMktJKb3C1aEqS6vBrdryoeIZ9ihrYuEaL2cm5fqQDo64IXSwG7xCSy rYGTL2dAY6TuSo+WFoE6QI9ztkMwGdxI6az0Qg7yUcqrOEmkfgxN8vTqQubDDrJb d8MWcmtqDaclR6w7osoX73qXQKOhsEE4aW1p/iVV5QPLNmOI6RzDJymwauh4xbOi MpWtHids4CgwHdlJ2w4fHv3xZ0BLP4TP64rI8GScQWGA3eOjDgVDJYcRsbMB4+F7 EStRv2borCkPCOdylgga7tpcM/LjTG8c/o11tjs/i1m5Exx77yCBv0V8+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACaWLx6r5+0nuiFzeUgKe7WEu6iMB8GA1UdIwQY MBaAFKrU9TshP9X25G3T7jt+nSh/yRcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEt MTZhYjU3NDZlZjRlLzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEtMTZhYjU3NDZlZjRl LzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ168XUMF GuTXHfaCWx/zUO/69pLM5EDG/vavtFjsllRvDAcaxTu+WVejNbEzioIei4sp8zkl q5hNPqF42qxSsAzhGiZtuzfL8BlxgJakYtDgpyZOn3RSJMdvkZ7r6Stc5GAGyzd5 NYeukILlq5IEG+LDJOc1i6h8gAK2yJhdqyly3W5Jmtl4lw9SzZp92pqYIpkPNcQx E4sLpLCmcR103dsyfMx++9h/+L4dCukxs0WhZlsLP3e+mhDMkra03TS62bKCf36C uQssXSYjc61hZf9r7R6MP7YNF9cDbLT8Vb0sidLR4/kY4sPJbX/+QEV7QNOJF+Ma gTCoodToLZzAnA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:31 2025 by rpki-client