This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json) Hash identifier: 5QVtslB0x7hyRO1hDcSgURMLiKTWEg11PBEr52AkQzA= Subject key identifier: 17:32:B1:03:95:45:16:1E:89:D5:70:8F:34:D1:7E:EB:45:14:AF:C2 Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Certificate serial: 019B35D71C29E023EE410348BE1988E2E01C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft Manifest number: 1746 Signing time: Fri 19 Dec 2025 09:00:48 +0000 Manifest this update: Fri 19 Dec 2025 09:00:48 +0000 Manifest next update: Sat 20 Dec 2025 09:00:48 +0000 Files and hashes: 1: nb55NPYG5futkVsWZo-wVL_ldGY.roa (hash: cu4c/kzKRZLMIS781v1I0bcKBcOwOHj6UQu9CoqV18Q=) 2: pNaiOm8VSjwm_Pu9LpbyEzU38Qk.roa (hash: aJUnjDaTqib7CSeeX7ryyzVGByoqlihHOgf+TQ3wW+k=) 3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: Gzv0TJiaFKVYrS+mD3GuohFEVwlNzT1xN9TjQCPUh6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:1c:29:e0:23:ee:41:03:48:be:19:88:e2:e0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Validity Not Before: Dec 19 09:00:48 2025 GMT Not After : Dec 20 09:00:48 2025 GMT Subject: CN=1732b1039545161e89d5708f34d17eeb4514afc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c9:64:75:5b:f2:78:2b:7b:cf:91:85:f4:8e: 1a:4f:05:e9:83:29:ea:ed:67:2d:91:24:6d:a0:ad: 47:9e:d5:e8:da:ef:69:f5:77:ce:45:2d:69:c0:61: c8:d9:0f:18:26:5d:05:33:9a:e2:31:ff:2f:f9:3d: fa:2e:9d:37:a3:aa:d8:81:61:33:d1:a3:00:f1:c3: 67:e1:f7:bb:d1:f2:d7:61:6d:57:14:95:89:56:37: 25:93:c8:fc:d7:0c:63:68:9e:99:b2:fc:ed:88:5d: 73:0a:cc:07:7c:bf:18:c1:60:93:b4:18:4e:65:06: 02:d7:19:29:2c:b9:c7:dd:d4:4b:1d:e2:93:9a:cb: f2:ca:4d:d4:04:93:30:84:f7:f3:a0:2f:7a:de:ea: 87:2a:d0:da:b7:d0:2f:52:7d:eb:1b:78:d8:18:f9: 70:26:f3:f3:37:61:89:15:2a:fc:99:36:b4:6e:da: 7a:f8:c5:e8:fd:23:6c:b1:18:ee:2b:fd:65:01:93: 9d:8f:02:24:b3:86:9c:a2:83:8d:df:24:12:de:ac: 66:9a:ff:f2:d3:01:94:ca:91:fd:bc:8f:30:bc:16: 54:44:d7:8c:97:64:96:53:52:0f:8c:b8:af:ba:72: 08:0d:c4:5b:14:36:b2:b0:2d:cc:cd:2d:9b:d0:ac: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:B1:03:95:45:16:1E:89:D5:70:8F:34:D1:7E:EB:45:14:AF:C2 X509v3 Authority Key Identifier: keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:79:10:67:39:e6:ca:b5:90:e4:c1:a0:f8:5e:9e:b2:a9:31: 24:5a:51:df:df:aa:b1:74:06:f3:43:4e:34:62:86:2b:9f:fd: 62:5f:d3:2d:da:49:3e:d6:99:31:ec:51:26:cd:e9:5f:34:6c: 77:66:e1:34:aa:36:b1:75:17:56:17:50:30:b5:e5:f6:01:a3: 6e:76:d4:e9:65:42:bb:75:8e:8a:15:18:14:6c:09:c1:f0:8a: b6:cd:fc:da:6c:21:b0:c9:ab:75:b9:9c:0e:e9:e3:81:7b:6e: fb:d1:a9:81:fb:9c:ba:1a:e5:d0:31:18:60:29:7e:96:12:8f: 55:83:3a:fc:ca:09:44:f5:dd:8b:74:68:9f:50:a4:34:3b:0e: 30:3c:79:89:67:9d:25:27:a8:1c:0c:c8:20:52:c0:4f:dc:e9: 27:1d:2e:3f:9f:1f:92:d9:e6:aa:75:8d:6a:87:9a:a2:fe:0d: 53:5c:ac:0e:58:65:5a:67:3c:2b:a1:ed:7d:31:c3:d0:32:12: 94:82:57:52:42:d6:b8:3d:85:48:7c:e6:93:ba:35:b7:a9:80: 09:69:3f:41:e1:68:30:ef:23:ef:d3:a2:e2:3c:22:91:ef:dd: 3c:d5:83:82:6c:7d:a7:97:4f:f7:21:75:d0:ce:1a:de:c3:e4: fe:20:db:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11xwp4CPuQQNIvhmI4uAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm Zjg4ZDQwHhcNMjUxMjE5MDkwMDQ4WhcNMjUxMjIwMDkwMDQ4WjAzMTEwLwYDVQQD EygxNzMyYjEwMzk1NDUxNjFlODlkNTcwOGYzNGQxN2VlYjQ1MTRhZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9slkdVvyeCt7z5GF9I4aTwXpgynq 7WctkSRtoK1HntXo2u9p9XfORS1pwGHI2Q8YJl0FM5riMf8v+T36Lp03o6rYgWEz 0aMA8cNn4fe70fLXYW1XFJWJVjclk8j81wxjaJ6ZsvztiF1zCswHfL8YwWCTtBhO ZQYC1xkpLLnH3dRLHeKTmsvyyk3UBJMwhPfzoC963uqHKtDat9AvUn3rG3jYGPlw JvPzN2GJFSr8mTa0btp6+MXo/SNssRjuK/1lAZOdjwIks4acooON3yQS3qxmmv/y 0wGUypH9vI8wvBZURNeMl2SWU1IPjLivunIIDcRbFDaysC3MzS2b0KzJ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcysQOVRRYeidVwjzTRfutFFK/CMB8GA1UdIwQY MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt OGRiMGVmYjU2MjBhLzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3kQZznm yrWQ5MGg+F6esqkxJFpR39+qsXQG80NONGKGK5/9Yl/TLdpJPtaZMexRJs3pXzRs d2bhNKo2sXUXVhdQMLXl9gGjbnbU6WVCu3WOihUYFGwJwfCKts382mwhsMmrdbmc DunjgXtu+9Gpgfucuhrl0DEYYCl+lhKPVYM6/MoJRPXdi3Ron1CkNDsOMDx5iWed JSeoHAzIIFLAT9zpJx0uP58fktnmqnWNaoeaov4NU1ysDlhlWmc8K6HtfTHD0DIS lIJXUkLWuD2FSHzmk7o1t6mACWk/QeFoMO8j79Oi4jwike/dPNWDgmx9p5dP9yF1 0M4a3sPk/iDbdw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:36:33 2025 by rpki-client