This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json) Hash identifier: Omn2GboRDlNILdmWj3Do5rGdKYG2wZ2GqK5NveIz0Us= Subject key identifier: F0:D4:DF:C2:BE:CD:8B:FE:E7:DA:63:78:AE:EF:54:3F:1D:E5:04:08 Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Certificate serial: 019B3EA3812C8E77D72AB3108149E64F1A79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft Manifest number: 0E6F Signing time: Sun 21 Dec 2025 02:01:01 +0000 Manifest this update: Sun 21 Dec 2025 02:01:01 +0000 Manifest next update: Mon 22 Dec 2025 02:01:01 +0000 Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=) 2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: 7Q5l+Hry3/Z/f4stgWC0kBNg5E/w5Aw6aQtB5N6Aqc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:81:2c:8e:77:d7:2a:b3:10:81:49:e6:4f:1a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Validity Not Before: Dec 21 02:01:01 2025 GMT Not After : Dec 22 02:01:01 2025 GMT Subject: CN=f0d4dfc2becd8bfee7da6378aeef543f1de50408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:7a:c0:b1:81:a7:56:8c:1a:1c:3a:94:66: 76:45:74:65:2e:8c:77:7a:10:d5:b0:c2:1a:12:1b: 8e:98:18:d0:97:1b:8e:20:ef:5d:08:e2:9e:dc:23: 41:76:98:82:b5:9b:d9:c8:27:cf:14:7d:1e:5a:3b: 1d:38:3c:33:e4:cd:c6:88:b3:ae:d4:27:eb:f5:96: 3b:c6:f4:56:45:92:89:99:f8:fb:7b:22:15:f9:a7: f2:c1:02:17:3d:70:38:f9:de:14:a5:b9:bf:f2:6d: cf:cb:30:39:1d:b8:51:8e:97:0c:f1:50:fd:83:64: 1f:7f:4e:ee:20:24:f5:05:08:ef:80:cd:b1:d8:4e: ba:5d:01:2a:90:33:bb:dd:b5:72:5c:2f:71:24:12: d4:07:64:bd:29:2e:7c:a1:1e:1e:fb:6d:07:ae:1f: b3:d9:7b:20:39:86:80:8e:11:de:8c:b9:ca:96:34: a5:c2:53:33:75:68:c1:f6:dc:1a:2f:a1:f8:b9:9f: 3a:36:7c:c6:66:f4:24:67:c3:3d:0a:78:3b:27:28: 44:f9:b4:6f:7c:17:12:3d:60:8c:21:6d:ff:64:68: 32:91:3c:3b:85:46:19:ad:04:e7:db:d7:aa:42:f0: b9:ee:d2:94:b1:00:81:e7:86:9e:83:97:34:2e:6e: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:DF:C2:BE:CD:8B:FE:E7:DA:63:78:AE:EF:54:3F:1D:E5:04:08 X509v3 Authority Key Identifier: keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ed:58:c5:26:5c:6b:2b:c3:64:b7:8a:b5:e0:aa:f4:fd:11: 56:92:7d:ba:fe:2c:43:be:98:78:20:36:1f:fd:01:ae:0e:aa: 3a:a9:6b:d3:cf:fd:5e:dc:9c:af:12:5f:d6:e6:7f:5c:64:34: fb:15:d9:0e:9d:17:ae:88:67:53:44:5c:28:a7:ef:6e:04:38: df:af:11:91:48:47:96:35:84:c5:d5:85:46:01:22:34:50:70: a7:24:6d:86:21:c3:47:db:f3:59:86:2a:bd:cf:48:06:80:6a: a7:32:b1:9b:9d:d4:24:64:5d:31:58:55:52:e2:df:be:47:10: 57:50:05:49:ce:cf:64:f9:f3:b5:b5:82:f1:e8:34:0d:fe:38: 81:64:61:89:b8:08:33:63:44:53:18:1d:19:41:46:9e:20:e8: ea:45:39:25:c3:4c:99:33:14:f1:78:a3:84:a9:fb:e4:4c:78: b2:74:ec:c3:e1:0d:11:44:80:0c:8e:0e:99:29:1d:4b:1a:30: e7:6c:61:e5:71:35:d8:5f:5c:29:15:a2:fa:7f:18:ec:7c:dc: d5:90:be:62:64:9f:af:5f:7d:52:f3:8d:2c:76:9d:c5:42:ea: d4:06:12:f1:61:c3:10:a6:76:7a:f0:b9:be:53:70:7a:16:48: a9:dd:aa:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4EsjnfXKrMQgUnmTxp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk NGRhODgwHhcNMjUxMjIxMDIwMTAxWhcNMjUxMjIyMDIwMTAxWjAzMTEwLwYDVQQD EyhmMGQ0ZGZjMmJlY2Q4YmZlZTdkYTYzNzhhZWVmNTQzZjFkZTUwNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdx6wLGBp1aMGhw6lGZ2RXRlLox3 ehDVsMIaEhuOmBjQlxuOIO9dCOKe3CNBdpiCtZvZyCfPFH0eWjsdODwz5M3GiLOu 1Cfr9ZY7xvRWRZKJmfj7eyIV+afywQIXPXA4+d4Upbm/8m3PyzA5HbhRjpcM8VD9 g2Qff07uICT1BQjvgM2x2E66XQEqkDO73bVyXC9xJBLUB2S9KS58oR4e+20Hrh+z 2XsgOYaAjhHejLnKljSlwlMzdWjB9twaL6H4uZ86NnzGZvQkZ8M9Cng7JyhE+bRv fBcSPWCMIW3/ZGgykTw7hUYZrQTn29eqQvC57tKUsQCB54aeg5c0Lm5IZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDU38K+zYv+59pjeK7vVD8d5QQIMB8GA1UdIwQY MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt Nzg3YzA2MzJjZmVhLzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju1YxSZc ayvDZLeKteCq9P0RVpJ9uv4sQ76YeCA2H/0Brg6qOqlr08/9XtycrxJf1uZ/XGQ0 +xXZDp0XrohnU0RcKKfvbgQ4368RkUhHljWExdWFRgEiNFBwpyRthiHDR9vzWYYq vc9IBoBqpzKxm53UJGRdMVhVUuLfvkcQV1AFSc7PZPnztbWC8eg0Df44gWRhibgI M2NEUxgdGUFGniDo6kU5JcNMmTMU8XijhKn75Ex4snTsw+ENEUSADI4OmSkdSxow 52xh5XE12F9cKRWi+n8Y7Hzc1ZC+YmSfr199UvONLHadxULq1AYS8WHDEKZ2evC5 vlNwehZIqd2qLA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:01:34 2025 by rpki-client