This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json) Hash identifier: aERvYWEAu7gHhmaHqfkoTjT5bZBk1aBgHronC1802+8= Subject key identifier: 9D:42:E9:47:EC:C5:1F:AC:8E:2F:07:3F:69:E0:C1:E5:C9:79:95:4E Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702 Certificate serial: 019B3155EBD9892409611D483A52A61D0E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 12:01:12 +0000 Manifest this update: Thu 18 Dec 2025 12:01:12 +0000 Manifest next update: Fri 19 Dec 2025 12:01:12 +0000 Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=) 2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: iVEXZmYT1BHg88MtPEWWFnjMc0McYxIk2N9vU6peg5w=) 3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:eb:d9:89:24:09:61:1d:48:3a:52:a6:1d:0e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702 Validity Not Before: Dec 18 12:01:12 2025 GMT Not After : Dec 19 12:01:12 2025 GMT Subject: CN=9d42e947ecc51fac8e2f073f69e0c1e5c979954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:72:dd:35:2a:5b:e4:fb:94:10:20:30:06: d8:1e:b6:b0:77:bf:2b:bf:e4:b4:0e:91:d2:f0:94: 63:03:9d:11:79:60:68:de:e0:4c:50:31:87:02:de: 7a:4a:af:ac:be:14:58:a0:ac:fd:14:c8:c8:83:bf: 1f:82:85:e6:f3:fb:ae:31:a5:7f:56:25:b6:4e:a3: 81:72:1a:f2:fc:a7:e3:be:46:d0:ba:04:e9:a4:91: 50:d6:57:3f:af:cd:05:54:f0:d6:e5:98:2c:5c:8a: c0:bb:83:1f:a2:1f:49:79:18:77:77:e9:ca:f7:78: 0c:b1:c0:59:0e:e9:ad:dc:85:91:11:43:37:33:e7: 79:30:a2:f9:f4:5b:f1:11:3e:ee:5e:35:18:9e:92: 17:8a:e4:c3:91:8e:cc:1b:43:95:0d:5d:40:e9:5e: 82:c2:e6:46:40:55:f9:65:b7:b0:83:05:c1:66:e9: 19:81:6b:71:0f:34:1e:c3:6b:2b:37:ca:06:9c:08: 49:8c:d2:7c:e6:00:4f:28:f8:90:27:a1:08:39:ab: 6a:f4:c5:9f:86:ad:d6:1d:a1:50:73:f5:69:56:5f: 31:e2:56:4d:e9:20:d8:61:f4:70:07:23:1e:43:69: 02:4e:72:7c:53:3e:c0:47:a6:41:19:29:e5:0b:71: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:42:E9:47:EC:C5:1F:AC:8E:2F:07:3F:69:E0:C1:E5:C9:79:95:4E X509v3 Authority Key Identifier: keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:96:f6:1c:56:13:f0:79:de:a3:2b:44:10:37:ae:a6:63:c8: 0f:62:03:1b:83:8a:66:d3:ef:55:43:9e:b7:9b:87:aa:02:e9: e8:e9:e4:9b:4e:8e:45:3c:fa:fb:c9:8a:e6:c6:26:f6:07:20: 15:d1:de:f7:e9:5e:f1:0f:c6:c2:ac:e1:25:1b:25:2c:a5:36: 6f:f5:74:9e:8b:b5:9c:75:5c:38:f7:77:47:d3:d6:b0:6f:fa: f0:66:d7:e2:fa:bd:2a:04:16:c5:23:41:fc:78:f5:73:4f:28: 21:16:d1:df:ac:8e:00:bd:49:1a:71:ff:34:83:79:ed:23:8e: 3b:51:3e:86:72:a4:97:14:5b:ec:d0:c9:d3:d0:b8:23:a2:6b: ed:42:d6:f1:ee:05:c8:fd:a2:a9:e4:16:54:c3:78:19:8b:f8: fb:9e:dd:34:52:9f:37:d5:37:45:a7:95:77:c0:4b:c1:d5:7b: 9f:cd:73:d4:9a:6f:1a:56:5a:3d:97:92:66:db:fd:5d:da:bc: 06:69:cf:f7:72:81:ff:4d:38:93:53:41:3d:e5:3a:2e:e3:c5: ba:19:45:11:81:61:cb:7b:cb:8f:e3:3c:c8:99:0f:d9:d9:bf: e1:9d:b8:d8:f3:e0:d8:a9:33:7e:f7:f9:60:ce:97:7d:24:eb: 40:47:90:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVevZiSQJYR1IOlKmHQ4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl YTU3MDIwHhcNMjUxMjE4MTIwMTEyWhcNMjUxMjE5MTIwMTEyWjAzMTEwLwYDVQQD Eyg5ZDQyZTk0N2VjYzUxZmFjOGUyZjA3M2Y2OWUwYzFlNWM5Nzk5NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKxy3TUqW+T7lBAgMAbYHrawd78r v+S0DpHS8JRjA50ReWBo3uBMUDGHAt56Sq+svhRYoKz9FMjIg78fgoXm8/uuMaV/ ViW2TqOBchry/KfjvkbQugTppJFQ1lc/r80FVPDW5ZgsXIrAu4Mfoh9JeRh3d+nK 93gMscBZDumt3IWREUM3M+d5MKL59FvxET7uXjUYnpIXiuTDkY7MG0OVDV1A6V6C wuZGQFX5ZbewgwXBZukZgWtxDzQew2srN8oGnAhJjNJ85gBPKPiQJ6EIOatq9MWf hq3WHaFQc/VpVl8x4lZN6SDYYfRwByMeQ2kCTnJ8Uz7AR6ZBGSnlC3GHywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1C6UfsxR+sji8HP2ngweXJeZVOMB8GA1UdIwQY MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1 LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6pb2HFYT 8HneoytEEDeupmPID2IDG4OKZtPvVUOet5uHqgLp6Onkm06ORTz6+8mK5sYm9gcg FdHe9+le8Q/GwqzhJRslLKU2b/V0nou1nHVcOPd3R9PWsG/68GbX4vq9KgQWxSNB /Hj1c08oIRbR36yOAL1JGnH/NIN57SOOO1E+hnKklxRb7NDJ09C4I6Jr7ULW8e4F yP2iqeQWVMN4GYv4+57dNFKfN9U3RaeVd8BLwdV7n81z1JpvGlZaPZeSZtv9Xdq8 BmnP93KB/004k1NBPeU6LuPFuhlFEYFhy3vLj+M8yJkP2dm/4Z242PPg2Kkzfvf5 YM6XfSTrQEeQtg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:10:08 2025 by rpki-client