This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json) Hash identifier: SdUvP2AvJ9h5DCJ0yhDfSD9ZKOV7MEBj/S6b3Plx5zQ= Subject key identifier: 99:DF:5C:98:AC:0D:81:7F:DA:3C:85:7A:7D:E0:6C:08:E8:D3:E0:36 Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Certificate serial: 019B1CF35EAABAF501B79E6140DC6D64156C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft Manifest number: 160B Signing time: Sun 14 Dec 2025 13:01:10 +0000 Manifest this update: Sun 14 Dec 2025 13:01:10 +0000 Manifest next update: Mon 15 Dec 2025 13:01:10 +0000 Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: wTigK0axjy2wt4Wp0580wXAOoLZNQJpWS4ZG2JpbslE=) 2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=) 3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:5e:aa:ba:f5:01:b7:9e:61:40:dc:6d:64:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Validity Not Before: Dec 14 13:01:10 2025 GMT Not After : Dec 15 13:01:10 2025 GMT Subject: CN=99df5c98ac0d817fda3c857a7de06c08e8d3e036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:e7:bc:a0:3a:16:78:57:6f:1a:59:dc:2d: be:7b:43:5d:36:9c:b1:d7:0c:1a:1e:9d:67:f8:be: 18:d4:66:e9:22:cb:75:e7:33:3c:88:3b:29:36:31: c8:ce:d4:02:93:ec:ab:98:6c:1b:8d:62:c9:2b:c1: 40:18:2a:ba:b8:8f:cc:9d:a6:27:e1:29:eb:b0:d8: cc:ca:a6:a0:91:95:6c:a2:c9:b5:a5:90:35:43:89: 8d:36:aa:69:65:00:84:3f:ef:5c:d1:06:de:51:ee: f1:ba:7f:18:3b:a6:44:f0:e0:80:68:c1:4f:ae:0b: 16:b6:90:85:d1:49:9e:f5:08:b1:34:2f:d2:a5:39: c8:ca:79:94:24:68:47:30:d9:53:6b:77:28:11:ee: 7f:23:82:71:d7:c8:27:35:22:c3:8f:7a:05:85:a7: 7e:50:4b:b7:68:1f:42:a1:5b:42:39:1f:66:4d:e1: a3:5c:17:02:a5:d3:f8:85:4d:75:83:49:2a:9e:eb: 4a:47:2a:69:10:4c:90:a5:24:72:74:fc:65:02:9d: 1e:d7:5f:f2:85:a0:7a:4a:11:59:3b:eb:c0:f8:96: c7:15:cd:8a:0e:61:fd:0e:11:c5:6b:27:ab:77:e1: dd:1e:ab:ab:f4:3c:61:30:96:02:f3:8c:4f:79:c9: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:5C:98:AC:0D:81:7F:DA:3C:85:7A:7D:E0:6C:08:E8:D3:E0:36 X509v3 Authority Key Identifier: keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ed:c1:22:3c:40:bb:fd:31:84:be:d9:01:d0:a5:cc:e9:8d: 67:66:60:1f:5b:10:db:43:18:ba:93:4c:2f:cc:d2:99:54:e3: c8:51:27:af:70:b4:ae:eb:c0:a6:75:57:12:50:79:a7:a1:0d: 3f:6e:97:69:93:3b:07:3e:1e:5d:a9:a2:89:57:d7:04:59:b9: 61:02:25:f6:fe:d0:29:2a:30:89:7d:f7:4a:ab:19:0e:66:46: 70:8c:10:87:2d:67:36:a3:eb:fb:95:56:c1:8c:04:7a:88:64: 19:0e:02:0b:13:48:c4:9a:1a:5b:9d:e2:29:cd:62:d4:b8:86: 50:8d:77:76:02:0a:b0:97:e0:8c:04:83:48:05:ad:54:d2:5c: 61:cd:5c:9f:3c:de:3b:ca:52:d1:0d:6b:a6:43:43:54:ee:c8: 6b:19:8e:b4:12:09:a9:6b:f7:99:71:d5:82:8c:c2:bb:7d:69: 54:4b:f6:e4:bd:97:2b:62:c6:92:34:ea:04:20:5b:82:4f:a5: 52:36:1c:c5:77:92:e8:5b:06:d2:92:ac:83:6c:42:5f:b0:43: 6b:d6:96:ff:cc:17:f9:84:c5:0e:88:dc:22:a3:02:b8:f2:59: 55:62:4f:85:ce:e3:ae:3e:3c:b1:32:a7:ed:06:42:e5:78:41: d4:64:98:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc816quvUBt55hQNxtZBVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1 OTI2ZmQwHhcNMjUxMjE0MTMwMTEwWhcNMjUxMjE1MTMwMTEwWjAzMTEwLwYDVQQD Eyg5OWRmNWM5OGFjMGQ4MTdmZGEzYzg1N2E3ZGUwNmMwOGU4ZDNlMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytnnvKA6FnhXbxpZ3C2+e0NdNpyx 1wwaHp1n+L4Y1GbpIst15zM8iDspNjHIztQCk+yrmGwbjWLJK8FAGCq6uI/MnaYn 4SnrsNjMyqagkZVsosm1pZA1Q4mNNqppZQCEP+9c0QbeUe7xun8YO6ZE8OCAaMFP rgsWtpCF0Ume9QixNC/SpTnIynmUJGhHMNlTa3coEe5/I4Jx18gnNSLDj3oFhad+ UEu3aB9CoVtCOR9mTeGjXBcCpdP4hU11g0kqnutKRyppEEyQpSRydPxlAp0e11/y haB6ShFZO+vA+JbHFc2KDmH9DhHFayerd+HdHqur9DxhMJYC84xPeclX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnfXJisDYF/2jyFen3gbAjo0+A2MB8GA1UdIwQY MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO3BIjxA u/0xhL7ZAdClzOmNZ2ZgH1sQ20MYupNML8zSmVTjyFEnr3C0ruvApnVXElB5p6EN P26XaZM7Bz4eXamiiVfXBFm5YQIl9v7QKSowiX33SqsZDmZGcIwQhy1nNqPr+5VW wYwEeohkGQ4CCxNIxJoaW53iKc1i1LiGUI13dgIKsJfgjASDSAWtVNJcYc1cnzze O8pS0Q1rpkNDVO7IaxmOtBIJqWv3mXHVgozCu31pVEv25L2XK2LGkjTqBCBbgk+l UjYcxXeS6FsG0pKsg2xCX7BDa9aW/8wX+YTFDojcIqMCuPJZVWJPhc7jrj48sTKn 7QZC5XhB1GSYKg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:32:21 2025 by rpki-client