This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json) Hash identifier: s2E09om+GP4/9VHombQKZMMSWGGb76EfsJlc+Kr13nA= Subject key identifier: 71:4F:5C:8C:DB:82:2E:A7:89:31:A1:C6:0A:73:C6:09:B2:33:A5:8B Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651 Certificate serial: 019B3A90EE28706CD828BA61F28B070A4BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft Manifest number: 13F8 Signing time: Sat 20 Dec 2025 07:02:15 +0000 Manifest this update: Sat 20 Dec 2025 07:02:15 +0000 Manifest next update: Sun 21 Dec 2025 07:02:15 +0000 Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=) 2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=) 3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: Rdb80gVp+jrO4YQ351JBDUQu78qQ59q29Yuw2wqeEfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ee:28:70:6c:d8:28:ba:61:f2:8b:07:0a:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651 Validity Not Before: Dec 20 07:02:15 2025 GMT Not After : Dec 21 07:02:15 2025 GMT Subject: CN=714f5c8cdb822ea78931a1c60a73c609b233a58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:2b:20:a2:7c:2a:6a:57:8b:d8:e8:95:f6: 03:ee:28:89:ca:f6:b5:c0:f0:56:d2:0c:57:9c:84: 25:ea:c2:3c:19:7f:09:6e:c1:68:aa:a4:ac:c6:9d: f0:17:11:56:85:68:e1:b6:43:2f:74:16:0b:95:1c: 20:63:23:08:1c:0a:b9:f9:d1:cf:9b:0a:00:24:3b: 4f:eb:bf:d4:36:cf:b4:ac:6f:97:6d:0c:e5:c7:c8: 6b:30:64:71:73:33:de:6a:fd:9c:8d:4a:01:03:7e: 11:a7:fe:70:5b:03:74:4b:da:a1:0d:fc:62:c4:e3: e6:68:1c:0b:37:14:13:ed:3a:20:64:39:20:1d:80: 14:b9:2f:66:5a:74:ad:77:10:a1:cc:3e:be:94:9f: 3a:7d:d1:9b:df:3e:15:0b:a0:5c:75:46:9a:0f:23: 3f:0a:ce:38:ca:c0:40:c8:77:69:09:e8:27:e3:10: 31:4c:70:da:dc:8c:5f:78:17:2e:fb:1a:10:66:90: e8:0d:17:6c:58:17:79:83:e6:54:6a:af:db:f3:a8: e8:ad:ef:86:41:95:e5:30:f5:52:1c:1e:4c:88:99: 22:f4:1c:49:94:54:17:89:cb:73:45:1a:de:1a:ae: 70:1f:e1:eb:50:13:e0:34:d3:55:cb:2b:ce:db:55: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4F:5C:8C:DB:82:2E:A7:89:31:A1:C6:0A:73:C6:09:B2:33:A5:8B X509v3 Authority Key Identifier: keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1b:bc:29:1b:ab:1d:72:58:0a:c1:8d:9d:1a:07:c5:f4:f5: 92:52:d6:98:29:27:d4:e2:6d:83:05:0b:6c:1a:66:96:1d:c2: f3:ca:04:14:59:6c:b9:66:1c:4a:d4:71:ee:95:36:51:49:58: 2f:44:27:d8:59:42:44:df:4c:b2:be:d8:95:e9:4c:95:ee:da: 54:2f:4e:0e:0c:08:35:d7:a7:e4:f7:4e:5e:4f:59:1c:35:3b: 37:99:39:a1:a4:c0:c4:7c:78:12:01:b3:5d:78:c3:1a:e3:73: e7:b2:e3:99:22:98:fd:d4:f3:0f:60:aa:05:24:9c:14:41:e9: 8e:1e:fd:55:1d:d4:32:77:52:57:a8:eb:95:16:df:1c:9f:57: 9d:ee:54:67:ba:26:49:38:7b:8c:18:ca:d1:d6:dd:cd:3e:88: d1:67:3f:f0:8a:a4:c2:26:dc:a4:14:94:5e:24:49:37:fe:cd: ea:37:cc:5e:44:4d:78:76:99:a4:05:d5:4b:c4:63:c4:70:f1: 78:09:3f:74:23:59:22:0d:15:7b:0b:a0:00:ba:0d:fe:ea:d9: 75:d6:e6:ee:72:e7:25:bb:e1:73:c8:ac:fd:e6:0e:f2:88:d4: 2a:53:cd:0a:c0:9d:1e:9c:97:02:35:5d:6b:b4:d6:db:19:68: a9:9f:4a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kO4ocGzYKLph8osHCkv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMDYwYTYzZGEyOWQ3Zjk1NjE3YTZmZmJiNGY1MWNjY2Jj Nzg2NTEwHhcNMjUxMjIwMDcwMjE1WhcNMjUxMjIxMDcwMjE1WjAzMTEwLwYDVQQD Eyg3MTRmNWM4Y2RiODIyZWE3ODkzMWExYzYwYTczYzYwOWIyMzNhNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJgrIKJ8KmpXi9jolfYD7iiJyva1 wPBW0gxXnIQl6sI8GX8JbsFoqqSsxp3wFxFWhWjhtkMvdBYLlRwgYyMIHAq5+dHP mwoAJDtP67/UNs+0rG+XbQzlx8hrMGRxczPeav2cjUoBA34Rp/5wWwN0S9qhDfxi xOPmaBwLNxQT7TogZDkgHYAUuS9mWnStdxChzD6+lJ86fdGb3z4VC6BcdUaaDyM/ Cs44ysBAyHdpCegn4xAxTHDa3IxfeBcu+xoQZpDoDRdsWBd5g+ZUaq/b86jore+G QZXlMPVSHB5MiJki9BxJlFQXictzRRreGq5wH+HrUBPgNNNVyyvO21XTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFPXIzbgi6niTGhxgpzxgmyM6WLMB8GA1UdIwQY MBaAFKoGCmPaKdf5Vhem/7tPUczLx4ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAt NzVmZWE2YTcwZWI3LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAtNzVmZWE2YTcwZWI3 LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhu8KRur HXJYCsGNnRoHxfT1klLWmCkn1OJtgwULbBpmlh3C88oEFFlsuWYcStRx7pU2UUlY L0Qn2FlCRN9Msr7YlelMle7aVC9ODgwINden5PdOXk9ZHDU7N5k5oaTAxHx4EgGz XXjDGuNz57LjmSKY/dTzD2CqBSScFEHpjh79VR3UMndSV6jrlRbfHJ9Xne5UZ7om STh7jBjK0dbdzT6I0Wc/8IqkwibcpBSUXiRJN/7N6jfMXkRNeHaZpAXVS8RjxHDx eAk/dCNZIg0VewugALoN/urZddbm7nLnJbvhc8is/eYO8ojUKlPNCsCdHpyXAjVd a7TW2xloqZ9KTA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:36 2025 by rpki-client