This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json) Hash identifier: QQt7DjJywoPHzPUeanJ03Q5xpuJMo+mBelnTJv7yCAE= Subject key identifier: 87:D4:3E:38:12:85:9C:82:0B:D5:9B:7E:5F:12:A8:73:4E:35:77:0D Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e Certificate serial: 019B3EDAB72C1700CF9A1B76B59EDA17F935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft Manifest number: 0134 Signing time: Sun 21 Dec 2025 03:01:19 +0000 Manifest this update: Sun 21 Dec 2025 03:01:19 +0000 Manifest next update: Mon 22 Dec 2025 03:01:19 +0000 Files and hashes: 1: 0kO4HDhs-Z05CdJzgp5tseLyhSU.asa (hash: /YkuI+YVFPmtxpbrJU27qGqrMqF1Tro9Xx9l6QKKoAU=) 2: BrmKnel9vz9ZJoRYmUMmfv_fkdA.roa (hash: iTZbysj75EFXeStqkEh3kRfDOJLprFh8UOBLsS70Pok=) 3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: 9+lPnwsQgGGsTHgFmi2AAGolTY4khwOczUyY9It374k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b7:2c:17:00:cf:9a:1b:76:b5:9e:da:17:f9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e Validity Not Before: Dec 21 03:01:19 2025 GMT Not After : Dec 22 03:01:19 2025 GMT Subject: CN=87d43e3812859c820bd59b7e5f12a8734e35770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:5a:29:61:76:6e:26:d8:88:9e:28:5a:95: 16:1b:25:fb:58:bc:38:7f:aa:5a:c8:6e:7e:c8:9f: 15:e9:bd:b4:01:e8:64:1c:d0:60:03:d7:a6:7e:56: d0:92:d0:24:08:f7:31:9a:c7:37:ed:61:30:e9:d0: ec:eb:df:0c:fb:41:f2:e3:ff:6f:92:8c:08:56:3b: 63:a4:62:38:e8:f8:cf:8f:9c:88:67:e5:f6:a2:77: dc:56:ef:a9:9a:d4:d8:bb:35:46:09:bd:94:21:1f: 61:cf:4c:7f:e7:c5:c4:54:84:0a:42:c4:30:1e:40: f1:18:8c:0b:26:6e:05:38:70:5a:83:18:55:10:b9: 98:e0:d8:97:b7:a0:f2:2a:fa:d1:eb:ba:18:e9:70: 46:ba:56:2c:16:67:b2:fc:08:f4:cd:ad:cc:0e:78: d3:5e:29:38:d0:bf:5e:99:3e:e9:b0:96:7d:8b:3d: 9b:20:e0:06:1c:62:e9:56:ff:92:90:8f:8a:8f:3e: 0c:2f:c9:77:92:68:16:22:8a:43:cf:38:5a:db:54: e6:b1:0c:59:71:c4:58:dd:95:5a:05:9b:2c:fb:84: 67:fb:6c:36:cd:cb:91:04:8e:b2:31:b1:31:84:e0: c1:3c:52:53:7c:77:bb:58:75:ad:7b:f8:b6:fb:9b: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:3E:38:12:85:9C:82:0B:D5:9B:7E:5F:12:A8:73:4E:35:77:0D X509v3 Authority Key Identifier: keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bc:4b:6f:17:06:81:f3:8e:55:24:e9:e7:ae:7d:a1:5f:58: 4d:81:73:b7:50:72:56:af:0e:8a:c2:16:5b:2c:aa:da:60:4f: 4b:ae:30:a3:46:10:e0:91:cc:22:ea:5c:3c:a1:ac:62:e6:7f: 59:99:31:46:85:2a:5c:84:d4:71:0c:3e:91:ae:8d:dc:14:44: d3:88:78:f7:9e:8c:87:7e:c2:ba:49:8c:eb:3c:fc:05:e1:fb: 7f:7a:a5:eb:d9:b3:5e:6d:0b:6d:4f:02:cb:97:5d:ad:90:50: f2:06:41:5b:04:06:4b:e2:26:49:c0:f6:1d:19:4a:83:06:51: 77:15:92:01:26:17:24:6f:12:13:a1:0d:54:18:ce:e9:26:a3: 78:ea:a2:19:6b:cf:61:d1:68:40:80:1e:78:e4:25:1a:a3:07: bc:12:9f:04:6c:ae:bb:98:55:16:b8:05:69:0f:3c:32:35:d8: a6:17:cf:ec:15:a3:09:4e:7f:2c:ed:9d:b9:65:74:9d:fb:5d: a3:eb:dc:33:ee:24:c9:b3:dc:69:cd:ae:28:81:a4:b7:b6:c2: f8:be:66:6c:53:13:a2:e6:74:9a:3a:c1:47:ea:be:07:f2:5a: aa:ae:e4:d6:4f:bf:3e:3d:8f:9f:db:a2:63:36:67:e3:79:6d: 48:c1:5b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rcsFwDPmht2tZ7aF/k1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw YTU4MGUwHhcNMjUxMjIxMDMwMTE5WhcNMjUxMjIyMDMwMTE5WjAzMTEwLwYDVQQD Eyg4N2Q0M2UzODEyODU5YzgyMGJkNTliN2U1ZjEyYTg3MzRlMzU3NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvxaKWF2bibYiJ4oWpUWGyX7WLw4 f6payG5+yJ8V6b20AehkHNBgA9emflbQktAkCPcxmsc37WEw6dDs698M+0Hy4/9v kowIVjtjpGI46PjPj5yIZ+X2onfcVu+pmtTYuzVGCb2UIR9hz0x/58XEVIQKQsQw HkDxGIwLJm4FOHBagxhVELmY4NiXt6DyKvrR67oY6XBGulYsFmey/Aj0za3MDnjT Xik40L9emT7psJZ9iz2bIOAGHGLpVv+SkI+Kjz4ML8l3kmgWIopDzzha21TmsQxZ ccRY3ZVaBZss+4Rn+2w2zcuRBI6yMbExhODBPFJTfHe7WHWte/i2+5sYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfUPjgShZyCC9Wbfl8SqHNONXcNMB8GA1UdIwQY MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt YjY2MzAwYTdmOWYxLzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7xLbxcG gfOOVSTp5659oV9YTYFzt1ByVq8OisIWWyyq2mBPS64wo0YQ4JHMIupcPKGsYuZ/ WZkxRoUqXITUcQw+ka6N3BRE04h4956Mh37CukmM6zz8BeH7f3ql69mzXm0LbU8C y5ddrZBQ8gZBWwQGS+ImScD2HRlKgwZRdxWSASYXJG8SE6ENVBjO6SajeOqiGWvP YdFoQIAeeOQlGqMHvBKfBGyuu5hVFrgFaQ88MjXYphfP7BWjCU5/LO2duWV0nftd o+vcM+4kybPcac2uKIGkt7bC+L5mbFMTouZ0mjrBR+q+B/Jaqq7k1k+/Pj2Pn9ui YzZn43ltSMFbaA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:41 2025 by rpki-client