This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json) Hash identifier: XVz1zvu5g085CxoJWYZC83KrDlBO5czwbpPE5tHzDg0= Subject key identifier: 5F:6E:19:55:58:02:BD:3B:F2:45:10:C2:5A:E5:AF:27:53:26:D7:46 Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe Certificate serial: 019B3F7F7EA3C5F367C58D4F0C3F111C2103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft Manifest number: 0B0D Signing time: Sun 21 Dec 2025 06:01:18 +0000 Manifest this update: Sun 21 Dec 2025 06:01:18 +0000 Manifest next update: Mon 22 Dec 2025 06:01:18 +0000 Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=) 2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: V+croT/ESgaRjlXpHFQBwsyumoQJsoziIEOVnpHQbMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:7e:a3:c5:f3:67:c5:8d:4f:0c:3f:11:1c:21:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe Validity Not Before: Dec 21 06:01:18 2025 GMT Not After : Dec 22 06:01:18 2025 GMT Subject: CN=5f6e19555802bd3bf24510c25ae5af275326d746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:ab:a2:23:9d:7b:71:2a:4a:d6:c4:d3:82: 0e:ca:53:4c:b2:0d:b5:fd:0a:bd:d0:4a:6b:6f:e7: 3e:a4:cf:18:1b:49:f4:65:e0:67:a4:85:43:79:56: 50:31:cc:8b:bd:bd:32:f8:58:61:09:24:c8:05:04: d3:56:c6:72:cf:df:a3:d6:9e:1f:27:94:e4:23:eb: 93:7c:38:9e:67:d5:e4:dc:2f:49:32:c4:6e:6a:05: 8a:b1:04:ef:46:41:f1:08:ff:79:ef:4f:41:30:d8: ac:12:6e:0a:fe:aa:9e:a5:0d:de:bf:59:f6:71:05: 96:05:42:65:6c:09:7c:83:15:b7:19:ee:3a:08:18: ef:9b:23:24:e1:a9:cf:52:98:c0:a6:e4:6c:10:e7: 19:e1:85:db:2f:a0:0d:79:9d:2c:ba:90:63:db:34: 2b:b7:7f:b1:87:31:a3:29:71:17:3e:90:ca:89:fa: f0:23:41:46:bc:dd:5d:d2:9d:88:68:37:66:bf:53: f8:19:2a:7f:2e:6a:d4:e9:0c:f7:89:2b:4b:6f:fe: ca:f6:f0:74:b3:be:d2:cf:f0:fb:35:8f:1e:48:d6: d1:5c:c8:78:0f:ca:02:c4:ed:e8:ab:df:eb:32:da: 1e:88:e8:93:0b:91:d3:ed:0a:9c:94:6b:e0:c7:17: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:19:55:58:02:BD:3B:F2:45:10:C2:5A:E5:AF:27:53:26:D7:46 X509v3 Authority Key Identifier: keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2c:a8:56:07:6f:e2:e8:85:57:1a:eb:8a:3b:0e:9b:da:e5: d3:ea:5c:91:c5:7f:e9:93:c4:e3:c7:84:c6:f0:25:1d:0f:a2: 17:59:eb:a4:b1:30:d3:84:f8:0e:e7:e7:de:c0:24:dc:52:1b: 6f:5d:fe:5f:5d:26:dd:2c:b2:96:7c:47:97:7f:76:6e:e6:ea: 83:a4:9b:7b:45:42:f5:41:ee:af:d6:64:b6:98:e2:e9:e3:31: 50:ec:0e:15:c7:b2:f4:61:13:16:f3:b4:9c:90:e4:a8:5f:b1: 91:ec:97:d6:a6:1b:5d:35:d3:5f:79:7e:54:c0:22:4a:94:3d: 90:09:50:ca:bb:d1:6a:3a:8a:36:40:bf:a5:81:d9:7b:0a:c2: e3:1a:71:0a:23:08:ba:a0:c3:d9:ef:31:7d:97:fd:40:a0:bb: b4:1d:7a:fc:b9:a3:a6:39:83:29:02:02:03:da:84:42:3c:dc: ed:39:1e:55:6e:94:92:1c:63:a0:e6:28:40:c2:23:fd:3d:50: 2a:96:f2:b4:f6:6e:44:73:b8:d3:3a:7d:26:3e:75:37:7f:e9: fd:3f:75:97:7d:37:59:5d:5a:80:ec:31:56:7c:94:86:d3:31: 5a:12:c9:ca:3f:51:05:64:c7:9b:91:45:d7:a8:3e:08:09:c2: ee:7e:af:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f36jxfNnxY1PDD8RHCEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZjU4NzU3MWMwYzY5ODQ1OGMzODViMTVkNjBjN2YwOGM3 MGI2ZmUwHhcNMjUxMjIxMDYwMTE4WhcNMjUxMjIyMDYwMTE4WjAzMTEwLwYDVQQD Eyg1ZjZlMTk1NTU4MDJiZDNiZjI0NTEwYzI1YWU1YWYyNzUzMjZkNzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstqroiOde3EqStbE04IOylNMsg21 /Qq90Eprb+c+pM8YG0n0ZeBnpIVDeVZQMcyLvb0y+FhhCSTIBQTTVsZyz9+j1p4f J5TkI+uTfDieZ9Xk3C9JMsRuagWKsQTvRkHxCP95709BMNisEm4K/qqepQ3ev1n2 cQWWBUJlbAl8gxW3Ge46CBjvmyMk4anPUpjApuRsEOcZ4YXbL6ANeZ0supBj2zQr t3+xhzGjKXEXPpDKifrwI0FGvN1d0p2IaDdmv1P4GSp/LmrU6Qz3iStLb/7K9vB0 s77Sz/D7NY8eSNbRXMh4D8oCxO3oq9/rMtoeiOiTC5HT7QqclGvgxxc9JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9uGVVYAr078kUQwlrlrydTJtdGMB8GA1UdIwQY MBaAFKv1h1ccDGmEWMOFsV1gx/CMcLb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQt NzgyZmU3MDkyMDEwLzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQtNzgyZmU3MDkyMDEw LzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiyoVgdv 4uiFVxrrijsOm9rl0+pckcV/6ZPE48eExvAlHQ+iF1nrpLEw04T4Dufn3sAk3FIb b13+X10m3SyylnxHl392bubqg6Sbe0VC9UHur9Zktpji6eMxUOwOFcey9GETFvO0 nJDkqF+xkeyX1qYbXTXTX3l+VMAiSpQ9kAlQyrvRajqKNkC/pYHZewrC4xpxCiMI uqDD2e8xfZf9QKC7tB16/LmjpjmDKQICA9qEQjzc7TkeVW6UkhxjoOYoQMIj/T1Q KpbytPZuRHO40zp9Jj51N3/p/T91l303WV1agOwxVnyUhtMxWhLJyj9RBWTHm5FF 16g+CAnC7n6vdg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:42 2025 by rpki-client