This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json) Hash identifier: G03IbrJgq+4TKjqyk+3//7XtOgtIvP5+MGWqlMXiJKY= Subject key identifier: 4F:88:2B:9A:0D:0E:07:3E:51:2A:7D:E9:67:F9:D6:60:6A:22:4A:F2 Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc Certificate serial: 019B405C64A0F37587CA3EE3BA925CE5D53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft Manifest number: 0A53 Signing time: Sun 21 Dec 2025 10:02:35 +0000 Manifest this update: Sun 21 Dec 2025 10:02:35 +0000 Manifest next update: Mon 22 Dec 2025 10:02:35 +0000 Files and hashes: 1: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: YKBJJRfHYT/95/abQOu77AXAEzRs7FbckTb88bRisU8=) 2: dwbiIWEratA3KWkL5imPi021V8I.roa (hash: uBYUZ2jEhyVMlLuwkanT9PAiy5t/N1UtpXaLMB0jCDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:64:a0:f3:75:87:ca:3e:e3:ba:92:5c:e5:d5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc Validity Not Before: Dec 21 10:02:35 2025 GMT Not After : Dec 22 10:02:35 2025 GMT Subject: CN=4f882b9a0d0e073e512a7de967f9d6606a224af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:ec:03:26:20:3e:0b:59:f6:26:5d:24:24: c5:e6:1d:33:c5:7a:e5:01:55:b0:90:4e:8d:40:d5: 2f:f2:07:7f:81:a4:70:67:89:40:24:4a:93:c8:70: 1f:0b:2e:38:1d:17:16:db:4b:90:c5:8c:cf:a1:55: 68:a2:1c:9a:6c:0d:97:13:6b:e8:e2:86:75:bc:37: f9:40:eb:96:a0:e2:b8:4c:08:66:58:ad:fc:ec:49: 90:7d:d1:50:a1:de:25:dc:d5:60:ac:36:fc:71:a5: 2b:9d:06:4a:67:bb:0c:6f:a1:58:df:00:b8:c6:58: 92:6d:c7:ba:0a:15:6a:40:dd:59:eb:38:3b:94:96: ad:ff:19:7b:71:f4:15:4c:16:23:07:01:e5:5f:bf: b9:1e:cd:bb:75:10:71:14:d2:26:0a:3e:b7:04:8c: 3c:2d:27:d2:a7:fa:f1:76:14:6e:7b:46:78:1f:2f: 46:fc:ef:2d:6f:d9:dd:18:fa:28:70:05:47:e0:64: 7b:50:92:4d:d5:35:09:0a:ac:34:d0:ad:ec:b1:38: ae:2e:de:de:40:0f:6a:f2:49:be:6e:21:8e:9d:d5: a8:20:cb:f9:03:e1:93:51:10:65:cb:73:09:7f:03: 6f:05:8d:12:f6:0f:27:dd:83:84:f2:22:a7:d2:f6: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:2B:9A:0D:0E:07:3E:51:2A:7D:E9:67:F9:D6:60:6A:22:4A:F2 X509v3 Authority Key Identifier: keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:48:23:96:05:3f:59:cf:e2:5c:10:2f:a5:04:a7:61:68: 3a:4c:66:ec:24:33:a1:5c:da:02:03:bc:0f:b4:31:1a:3e:c4: 45:b3:43:ec:e4:50:14:de:c0:f3:63:81:b6:4b:89:a6:4d:55: 2f:54:80:29:ac:53:7c:11:7d:af:67:11:55:6e:02:34:0f:39: c8:4b:09:3c:e1:20:43:b4:ad:1b:40:d2:9b:66:85:67:08:fb: 35:2e:86:ad:08:fd:17:b9:58:98:6e:87:f4:8b:2d:4d:41:ef: 6e:e1:d3:89:9f:ec:69:14:7a:9a:c7:c3:09:f3:aa:54:2c:3a: 8e:40:23:63:6d:a1:81:82:cc:98:7b:1d:18:22:68:44:4f:ac: eb:83:2e:ad:3e:b3:88:93:c0:1d:34:1e:39:73:7f:82:f5:20: 0c:67:8f:59:87:9d:8a:70:b9:5e:05:96:d8:b0:e0:e1:6b:7b: ee:2c:d2:30:fa:b9:4d:c6:10:ab:86:8f:81:cf:96:8e:f8:d8: 12:28:5a:1d:d1:52:4a:86:cb:5b:7d:1e:d1:00:39:1f:68:dd: 6d:9e:05:8c:3b:16:6f:c3:b0:6f:dd:15:07:22:3b:d7:4e:a8: 9e:97:6e:b6:dc:87:bb:8a:75:7e:1e:49:2b:80:a8:26:db:9d: 26:3d:9f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXGSg83WHyj7jupJc5dU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDY0NTFiOTIzYTA3ZTM2NWIyZjE5MGZhYTU1YTU3MmRk MGZhZmMwHhcNMjUxMjIxMTAwMjM1WhcNMjUxMjIyMTAwMjM1WjAzMTEwLwYDVQQD Eyg0Zjg4MmI5YTBkMGUwNzNlNTEyYTdkZTk2N2Y5ZDY2MDZhMjI0YWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKzsAyYgPgtZ9iZdJCTF5h0zxXrl AVWwkE6NQNUv8gd/gaRwZ4lAJEqTyHAfCy44HRcW20uQxYzPoVVoohyabA2XE2vo 4oZ1vDf5QOuWoOK4TAhmWK387EmQfdFQod4l3NVgrDb8caUrnQZKZ7sMb6FY3wC4 xliSbce6ChVqQN1Z6zg7lJat/xl7cfQVTBYjBwHlX7+5Hs27dRBxFNImCj63BIw8 LSfSp/rxdhRue0Z4Hy9G/O8tb9ndGPoocAVH4GR7UJJN1TUJCqw00K3ssTiuLt7e QA9q8km+biGOndWoIMv5A+GTURBly3MJfwNvBY0S9g8n3YOE8iKn0vZcdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+IK5oNDgc+USp96Wf51mBqIkryMB8GA1UdIwQY MBaAFEHWRRuSOgfjZbLxkPqlWlct0Pr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEt ZjU2Yzg0OTQzYTdkLzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEtZjU2Yzg0OTQzYTdk LzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbhII5YF P1nP4lwQL6UEp2FoOkxm7CQzoVzaAgO8D7QxGj7ERbND7ORQFN7A82OBtkuJpk1V L1SAKaxTfBF9r2cRVW4CNA85yEsJPOEgQ7StG0DSm2aFZwj7NS6GrQj9F7lYmG6H 9IstTUHvbuHTiZ/saRR6msfDCfOqVCw6jkAjY22hgYLMmHsdGCJoRE+s64MurT6z iJPAHTQeOXN/gvUgDGePWYedinC5XgWW2LDg4Wt77izSMPq5TcYQq4aPgc+WjvjY EihaHdFSSobLW30e0QA5H2jdbZ4FjDsWb8Owb90VByI7106onpduttyHu4p1fh5J K4CoJtudJj2fUw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:38:57 2025 by rpki-client