This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json) Hash identifier: vKR+AnJ/P3HyqxJDW/mWVuO1XgFKDsl4bIq2u6GdU80= Subject key identifier: A6:26:2F:EF:29:F8:B5:06:7F:FD:5B:04:09:AB:30:9A:B4:93:A3:F5 Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Certificate serial: 019B59E433B80C117472FA258F477D926B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft Manifest number: 0FB6 Signing time: Fri 26 Dec 2025 09:01:26 +0000 Manifest this update: Fri 26 Dec 2025 09:01:26 +0000 Manifest next update: Sat 27 Dec 2025 09:01:26 +0000 Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: vl4GDc5ymL/5O682U3awe8MS3ZDWgGYNAEkgANbR7ms=) 2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:33:b8:0c:11:74:72:fa:25:8f:47:7d:92:6b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Validity Not Before: Dec 26 09:01:26 2025 GMT Not After : Dec 27 09:01:26 2025 GMT Subject: CN=a6262fef29f8b5067ffd5b0409ab309ab493a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:bd:12:bc:ae:d0:92:b6:f4:26:0d:d1:d9: e9:12:76:96:e0:bd:58:2c:49:bd:9e:38:ca:07:d8: 74:52:bf:ec:26:9b:97:f6:f9:9c:39:81:d5:24:aa: 14:83:cd:20:a7:e2:fd:eb:e9:d4:4a:0b:ac:cb:9e: ea:58:fb:32:7f:bc:4b:3c:0f:d5:be:d8:5c:f8:f0: 51:a9:8b:73:4d:59:ef:5a:54:c7:a8:35:73:33:45: 1a:87:17:33:b7:f9:cd:ac:2f:88:7a:7d:69:e9:05: 48:a7:1f:2e:c7:f7:aa:b2:f7:f1:90:f4:3e:b8:6f: d2:3f:5c:fe:e1:6b:87:57:a7:81:f5:f1:a1:b1:be: d5:51:d3:e0:09:88:34:0f:fb:80:90:4b:9a:2c:99: a1:8c:9c:c6:69:73:98:41:7c:87:99:11:66:4c:e4: 18:b1:66:75:28:66:69:f0:1d:9f:76:cf:d1:b4:9b: fc:f5:3c:7f:c6:ad:5e:6c:6d:15:50:23:c7:dc:3d: 8c:79:bb:d3:1b:47:a0:3d:b2:fb:3b:72:cd:e7:97: b8:53:a3:45:b4:27:34:f8:ab:f5:c5:97:a3:a1:00: 57:ed:eb:e0:11:f8:9d:88:76:9a:2c:17:d8:f2:de: 67:44:46:f5:00:17:cd:29:0b:e3:be:e0:4d:99:b7: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:26:2F:EF:29:F8:B5:06:7F:FD:5B:04:09:AB:30:9A:B4:93:A3:F5 X509v3 Authority Key Identifier: keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:ac:56:29:79:8b:f7:ee:96:c1:a7:a4:3f:52:85:0e:79: 4f:03:e1:7d:09:b9:26:42:cc:18:cf:66:12:2c:10:d3:0b:bd: 0f:fa:9b:25:96:df:64:52:1a:ec:78:8f:48:ff:1c:54:ae:cc: 17:c4:58:6a:9c:fc:4d:0f:10:54:01:dd:a7:d3:e6:54:e3:a0: 01:8d:4e:aa:47:e7:7a:03:77:e7:1a:3b:c9:57:eb:1c:7b:c8: b1:8d:b8:e7:56:81:f4:39:21:b4:a8:0c:6f:2e:b8:ae:cc:d9: 80:12:d5:74:88:cb:8d:3a:1d:c8:1a:99:be:3f:4f:aa:3a:27: 7f:84:2c:98:06:11:8a:89:76:0e:4e:d2:ce:29:48:28:11:e3: 15:0d:11:7e:3a:ea:f9:78:5a:f6:5a:16:6b:cb:3e:57:75:cb: 00:c9:7c:49:7b:f3:db:2c:25:95:4a:de:32:47:0e:c6:4f:41: ba:ba:a7:23:10:9b:99:a3:1c:b0:19:89:fc:36:b2:f0:b9:ac: 00:e9:7d:07:3c:fb:91:35:39:dd:60:a5:84:4d:d6:f8:c9:2e: 87:38:e6:68:28:af:0c:14:0a:03:a1:3c:0a:c4:0e:c9:8e:66: dd:93:0f:ae:da:2a:21:cc:a4:4c:57:c2:96:c5:4b:fe:6b:30: 8f:bd:02:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DO4DBF0cvolj0d9kmsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1 ZDJiYzAwHhcNMjUxMjI2MDkwMTI2WhcNMjUxMjI3MDkwMTI2WjAzMTEwLwYDVQQD EyhhNjI2MmZlZjI5ZjhiNTA2N2ZmZDViMDQwOWFiMzA5YWI0OTNhM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAW9Eryu0JK29CYN0dnpEnaW4L1Y LEm9njjKB9h0Ur/sJpuX9vmcOYHVJKoUg80gp+L96+nUSgusy57qWPsyf7xLPA/V vthc+PBRqYtzTVnvWlTHqDVzM0Uahxczt/nNrC+Ien1p6QVIpx8ux/eqsvfxkPQ+ uG/SP1z+4WuHV6eB9fGhsb7VUdPgCYg0D/uAkEuaLJmhjJzGaXOYQXyHmRFmTOQY sWZ1KGZp8B2fds/RtJv89Tx/xq1ebG0VUCPH3D2MebvTG0egPbL7O3LN55e4U6NF tCc0+Kv1xZejoQBX7evgEfidiHaaLBfY8t5nREb1ABfNKQvjvuBNmbdeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYmL+8p+LUGf/1bBAmrMJq0k6P1MB8GA1UdIwQY MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKSsVil5 i/fulsGnpD9ShQ55TwPhfQm5JkLMGM9mEiwQ0wu9D/qbJZbfZFIa7HiPSP8cVK7M F8RYapz8TQ8QVAHdp9PmVOOgAY1OqkfnegN35xo7yVfrHHvIsY2451aB9DkhtKgM by64rszZgBLVdIjLjTodyBqZvj9Pqjonf4QsmAYRiol2Dk7SzilIKBHjFQ0Rfjrq +Xha9loWa8s+V3XLAMl8SXvz2ywllUreMkcOxk9BurqnIxCbmaMcsBmJ/Day8Lms AOl9Bzz7kTU53WClhE3W+MkuhzjmaCivDBQKA6E8CsQOyY5m3ZMPrtoqIcykTFfC lsVL/mswj70CDg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:46 2025 by rpki-client