This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json) Hash identifier: 9MFBToPRJ3yCai99LS8d4LZtTJDvGLpPZ3ydJpAvlZ8= Subject key identifier: 1F:48:38:23:E8:9D:35:06:EE:62:EB:6A:AB:77:D8:32:14:F9:AF:D5 Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Certificate serial: 019B0890977D2CC9BD9D12BE75A598EF5FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft Manifest number: 0B9E Signing time: Wed 10 Dec 2025 14:00:52 +0000 Manifest this update: Wed 10 Dec 2025 14:00:52 +0000 Manifest next update: Thu 11 Dec 2025 14:00:52 +0000 Files and hashes: 1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=) 2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: MP7OOIMO2HyEaF3gLlkW6oLkRVnfcbOENBB0Xqzg9+I=) 3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:97:7d:2c:c9:bd:9d:12:be:75:a5:98:ef:5f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Validity Not Before: Dec 10 14:00:52 2025 GMT Not After : Dec 11 14:00:52 2025 GMT Subject: CN=1f483823e89d3506ee62eb6aab77d83214f9afd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:16:da:9f:12:56:b4:9c:33:29:e2:6e:5d: 7c:59:39:16:cb:9f:0c:ea:b8:ee:96:2a:d9:4a:a7: 2b:db:f3:31:0b:b2:1f:27:0a:fc:60:87:c6:58:b3: a3:4a:63:ac:2b:f2:52:b7:5e:2b:3e:64:9c:af:ce: 28:79:05:ed:a1:19:4e:e5:1e:ae:dc:f6:65:bf:73: 74:78:94:8e:ad:3f:30:7b:6e:be:0c:93:da:eb:96: 76:c2:a6:e5:09:6e:e9:e6:22:49:c7:c3:8e:81:db: 7a:3e:11:7d:30:76:1d:6b:7c:bf:5a:8e:66:3e:34: e9:cf:b1:01:12:9e:4d:3c:0a:fc:ad:81:91:d8:b2: b9:8a:45:ff:61:75:d4:ea:65:7e:89:9e:42:41:1f: 2c:37:b0:84:2c:d4:79:63:30:c9:37:bd:b2:63:93: 62:2e:89:3c:7f:cd:9a:c3:ac:f9:55:74:f7:b1:6c: 48:b3:40:b7:48:55:82:57:f4:ca:24:6b:56:b8:02: 50:d6:7a:18:14:a8:06:37:58:44:62:1a:47:cb:a2: cf:7f:fa:63:c5:d7:17:a1:41:b6:0c:de:26:df:a3: d6:43:da:df:d0:eb:02:fc:a3:5c:4e:26:84:5c:87: 75:cf:d5:e6:a3:d4:ee:b2:61:75:72:60:0a:63:b6: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:48:38:23:E8:9D:35:06:EE:62:EB:6A:AB:77:D8:32:14:F9:AF:D5 X509v3 Authority Key Identifier: keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f1:e5:af:8d:c7:eb:14:ca:a9:af:5d:75:11:bd:8d:a7:86: 24:75:3c:ee:d6:89:e7:e6:c5:44:bb:72:5e:da:7f:ae:37:27: 2b:97:21:e8:94:92:e3:55:36:74:56:11:63:f2:7f:7e:09:af: a3:6e:1b:d6:9b:6f:a6:1c:fe:ad:1d:3d:7b:e3:7c:3b:f6:2e: 51:e2:35:04:f7:f9:63:60:1d:4e:3e:d8:6b:c8:54:a8:ff:eb: a2:30:3e:71:ca:b8:af:fe:1e:7b:13:94:2d:cc:f7:e9:c1:0a: e9:fb:5c:7c:4e:90:64:3e:7d:2e:dd:8f:6e:8d:b4:a5:2e:42: 79:a6:35:d8:9a:a6:96:94:11:f3:46:b3:24:af:21:e2:8c:42: a7:b9:80:fb:a2:96:c1:67:7f:50:67:50:c3:f3:1d:f8:2f:78: c2:38:eb:dc:9d:89:fc:49:18:a6:7e:7e:eb:7b:7d:eb:92:be: a6:9b:90:74:19:d7:f4:8b:81:ce:fa:3f:78:06:f3:33:bb:20: 40:5f:a6:b2:a2:96:78:17:eb:29:44:ab:d2:dc:cd:1c:e3:d3: fd:b5:6b:b4:96:6d:38:b3:13:64:96:f2:eb:93:72:f5:04:d1: 46:85:3e:fb:99:59:5a:e2:0c:ad:7d:be:af:a5:64:47:07:92: 52:52:24:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkJd9LMm9nRK+daWY71/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj ZWFjNzgwHhcNMjUxMjEwMTQwMDUyWhcNMjUxMjExMTQwMDUyWjAzMTEwLwYDVQQD EygxZjQ4MzgyM2U4OWQzNTA2ZWU2MmViNmFhYjc3ZDgzMjE0ZjlhZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mEW2p8SVrScMynibl18WTkWy58M 6rjulirZSqcr2/MxC7IfJwr8YIfGWLOjSmOsK/JSt14rPmScr84oeQXtoRlO5R6u 3PZlv3N0eJSOrT8we26+DJPa65Z2wqblCW7p5iJJx8OOgdt6PhF9MHYda3y/Wo5m PjTpz7EBEp5NPAr8rYGR2LK5ikX/YXXU6mV+iZ5CQR8sN7CELNR5YzDJN72yY5Ni Lok8f82aw6z5VXT3sWxIs0C3SFWCV/TKJGtWuAJQ1noYFKgGN1hEYhpHy6LPf/pj xdcXoUG2DN4m36PWQ9rf0OsC/KNcTiaEXId1z9Xmo9TusmF1cmAKY7bWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9IOCPonTUG7mLraqt32DIU+a/VMB8GA1UdIwQY MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt OWJiYjQyZmE4Y2VkLzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfHlr43H 6xTKqa9ddRG9jaeGJHU87taJ5+bFRLtyXtp/rjcnK5ch6JSS41U2dFYRY/J/fgmv o24b1ptvphz+rR09e+N8O/YuUeI1BPf5Y2AdTj7Ya8hUqP/rojA+ccq4r/4eexOU Lcz36cEK6ftcfE6QZD59Lt2Pbo20pS5CeaY12JqmlpQR80azJK8h4oxCp7mA+6KW wWd/UGdQw/Md+C94wjjr3J2J/EkYpn5+63t965K+ppuQdBnX9IuBzvo/eAbzM7sg QF+msqKWeBfrKUSr0tzNHOPT/bVrtJZtOLMTZJby65Ny9QTRRoU++5lZWuIMrX2+ r6VkRweSUlIk7w== -----END CERTIFICATE-----Generated at Wed Dec 10 18:13:39 2025 by rpki-client