This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json) Hash identifier: PaU5l0fy/gBEBiMWtoOlN2FBtqbHbg1xQN7kitX2S3Y= Subject key identifier: 02:AC:64:97:4A:1B:AA:33:CD:22:4B:04:DA:F6:05:85:FC:94:B6:1D Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4 Certificate serial: 019B0E92D27AD84549ED8E755B90720F3B57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft Manifest number: 0C16 Signing time: Thu 11 Dec 2025 18:01:01 +0000 Manifest this update: Thu 11 Dec 2025 18:01:01 +0000 Manifest next update: Fri 12 Dec 2025 18:01:01 +0000 Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: by6FMl3PzSJyMBdgBLZYafPhBXMfF7VJXKrkrz7fSIo=) 2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:d2:7a:d8:45:49:ed:8e:75:5b:90:72:0f:3b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4 Validity Not Before: Dec 11 18:01:01 2025 GMT Not After : Dec 12 18:01:01 2025 GMT Subject: CN=02ac64974a1baa33cd224b04daf60585fc94b61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:66:3b:f8:15:c0:54:b5:66:48:38:f2:6d: c1:c4:c4:41:73:9d:59:e5:43:53:4b:d2:db:67:4a: b1:9b:f2:b1:ae:51:d6:5e:25:1a:6d:51:18:4c:79: 6b:c3:19:b5:7c:16:4b:c1:26:a5:86:2e:f6:4d:4e: 22:15:24:40:3a:96:f5:0c:8e:6a:15:e6:f6:e2:29: 69:0c:ae:fb:d6:ad:8a:d6:19:d5:73:eb:f2:5a:02: 79:15:9f:7b:49:a1:f3:59:ff:85:e8:19:f9:7f:62: a4:94:56:5c:40:05:a5:39:62:ba:9d:c2:a0:cf:06: 9b:0a:fd:42:41:62:d6:ab:b6:d7:aa:9e:ba:53:78: 6d:d0:a4:69:03:3f:81:ae:54:78:a0:b5:81:04:48: 8b:85:49:c4:04:4c:ca:47:5b:61:2c:d3:56:4e:36: c9:89:92:c0:c4:e1:b2:6e:f7:1f:0e:64:21:29:84: 90:ed:26:18:c8:5e:0d:70:fd:08:73:ca:74:04:dd: ad:5c:31:cc:c1:a7:9c:59:8d:89:43:21:10:08:70: dc:18:7d:e0:0d:03:7e:bf:14:a7:06:a0:c3:b5:b6: f5:ee:84:da:40:a1:9d:04:72:94:fc:6b:ae:57:91: 91:f3:7c:a5:46:14:91:55:8b:79:2a:5a:2c:be:29: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:64:97:4A:1B:AA:33:CD:22:4B:04:DA:F6:05:85:FC:94:B6:1D X509v3 Authority Key Identifier: keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ac:8b:49:fb:76:f9:8c:4f:b7:08:8c:ec:15:af:2d:67:ad: 93:03:67:52:5e:51:40:c7:99:6f:4d:d6:f5:b0:b3:c7:3d:e2: 45:6f:5c:80:5e:5c:c8:b8:03:d1:44:80:6c:77:69:93:43:c3: 80:25:c3:7b:4c:74:27:6b:1a:88:68:08:a6:5e:a0:26:a9:4e: 4b:dc:bd:02:5a:b2:ee:73:8d:c6:1b:22:c9:4c:0d:96:93:60: 54:e9:25:ff:be:b9:55:0a:84:1d:9b:40:76:c5:f3:09:0d:49: 82:5d:9d:32:88:48:b6:b4:8b:51:ee:73:17:05:15:b9:65:f2: 57:e3:64:f7:f6:cb:a4:10:cd:b2:58:04:94:72:a3:70:18:1e: d6:f7:fa:58:7d:4b:dd:9e:00:34:8e:88:49:c2:90:22:19:e1: a2:e0:6d:65:b2:b4:da:2e:94:3d:66:a3:ff:e9:7e:c6:ed:cc: 82:e9:f3:fa:3e:ed:ba:62:ca:de:35:2a:f4:7a:9c:00:f0:7d: f0:69:bc:72:14:ef:2b:7f:9e:57:03:9a:2c:d7:a7:c1:eb:28: 5f:3d:7b:b0:79:bb:c5:84:58:01:04:1c:78:c3:d9:d7:23:84: d7:76:98:dc:3d:29:a0:72:bc:5f:b2:50:ed:8c:89:ff:17:72: c4:15:25:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOktJ62EVJ7Y51W5ByDztXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1 MTk1YTQwHhcNMjUxMjExMTgwMTAxWhcNMjUxMjEyMTgwMTAxWjAzMTEwLwYDVQQD EygwMmFjNjQ5NzRhMWJhYTMzY2QyMjRiMDRkYWY2MDU4NWZjOTRiNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7dmO/gVwFS1Zkg48m3BxMRBc51Z 5UNTS9LbZ0qxm/KxrlHWXiUabVEYTHlrwxm1fBZLwSalhi72TU4iFSRAOpb1DI5q Feb24ilpDK771q2K1hnVc+vyWgJ5FZ97SaHzWf+F6Bn5f2KklFZcQAWlOWK6ncKg zwabCv1CQWLWq7bXqp66U3ht0KRpAz+BrlR4oLWBBEiLhUnEBEzKR1thLNNWTjbJ iZLAxOGybvcfDmQhKYSQ7SYYyF4NcP0Ic8p0BN2tXDHMwaecWY2JQyEQCHDcGH3g DQN+vxSnBqDDtbb17oTaQKGdBHKU/GuuV5GR83ylRhSRVYt5KlosvinokQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKsZJdKG6ozzSJLBNr2BYX8lLYdMB8GA1UdIwQY MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKyLSft2 +YxPtwiM7BWvLWetkwNnUl5RQMeZb03W9bCzxz3iRW9cgF5cyLgD0USAbHdpk0PD gCXDe0x0J2saiGgIpl6gJqlOS9y9Alqy7nONxhsiyUwNlpNgVOkl/765VQqEHZtA dsXzCQ1Jgl2dMohItrSLUe5zFwUVuWXyV+Nk9/bLpBDNslgElHKjcBge1vf6WH1L 3Z4ANI6IScKQIhnhouBtZbK02i6UPWaj/+l+xu3Mgunz+j7tumLK3jUq9HqcAPB9 8Gm8chTvK3+eVwOaLNenwesoXz17sHm7xYRYAQQceMPZ1yOE13aY3D0poHK8X7JQ 7YyJ/xdyxBUl/w== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:54 2025 by rpki-client