This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json) Hash identifier: S33EpM+OZQ57TH8jNKnJDRjdhngA+oj3KLbPMDT6Rso= Subject key identifier: 9D:B2:D4:19:2B:F3:5F:CC:0A:14:06:87:C6:FC:E9:96:98:86:8C:96 Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f Certificate serial: 019B38A2DB572AE720FBBE61B0D6CD517DEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft Manifest number: 1418 Signing time: Fri 19 Dec 2025 22:02:35 +0000 Manifest this update: Fri 19 Dec 2025 22:02:35 +0000 Manifest next update: Sat 20 Dec 2025 22:02:35 +0000 Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=) 2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: kHLzn4S8S+YmnKTxOfbFA5CTDUarrtZ7A/ieB+RvzNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:db:57:2a:e7:20:fb:be:61:b0:d6:cd:51:7d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f Validity Not Before: Dec 19 22:02:35 2025 GMT Not After : Dec 20 22:02:35 2025 GMT Subject: CN=9db2d4192bf35fcc0a140687c6fce99698868c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:0a:76:a4:1a:58:da:60:5a:d1:9c:7c:7a: dd:65:9a:c6:ea:44:8d:15:b9:11:aa:0a:f8:4c:8e: 34:6c:de:88:c6:34:7e:aa:82:b1:65:d1:c1:6d:f9: 16:63:f7:34:ad:b3:98:cf:bf:70:9a:15:9b:c8:7b: a6:5f:6d:64:aa:6a:c5:02:a9:3f:7f:b8:32:17:c9: 03:86:8c:de:6d:76:c7:56:78:2f:48:f6:f4:66:cf: 78:ce:e5:91:8d:7e:7c:f9:32:19:1a:40:36:13:3e: ef:f5:07:fd:74:fb:91:9b:0e:86:26:5e:de:ba:5c: a7:40:13:70:f4:04:44:86:6d:43:da:e9:cf:96:d7: b2:b2:27:a0:04:dc:23:2c:6f:16:84:81:c7:bb:cf: 2f:8c:19:1f:fd:a1:f2:68:3b:5a:ee:a3:02:aa:48: 3d:2b:21:54:1d:46:62:53:63:a3:fc:ac:9c:ef:e0: bc:13:f8:04:5f:3f:08:4a:34:fe:10:b6:fa:10:5a: 95:ef:31:1b:75:94:57:31:19:4d:62:fe:6c:27:2f: 4c:4c:74:78:6a:61:31:a7:77:75:fb:ed:5e:ae:b5: c0:a7:1c:a8:4c:dd:db:de:3f:62:79:1c:09:ff:43: 41:ab:ca:05:a1:2d:c5:7e:ba:db:82:8c:6c:67:1e: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B2:D4:19:2B:F3:5F:CC:0A:14:06:87:C6:FC:E9:96:98:86:8C:96 X509v3 Authority Key Identifier: keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ff:14:e2:f2:bf:7d:a7:67:28:83:d4:f4:c3:43:b1:f1:81: 35:90:cb:7f:e4:1d:c9:d3:b2:8e:cf:e3:5a:34:c7:ca:17:63: aa:45:57:6b:68:be:74:e6:80:5d:db:99:ad:71:4c:0d:5c:dc: ee:f4:cd:41:ae:98:ec:ee:cb:15:75:7e:1b:12:d7:05:10:f5: b9:46:cb:0d:80:42:72:18:04:59:df:c2:d4:26:d2:f0:48:45: 03:64:77:a3:d6:5c:25:5d:7b:c0:02:64:0d:f1:99:82:a0:ab: 16:f6:67:ce:27:cd:18:64:c9:e7:4f:b9:db:68:0b:99:4a:fa: a4:38:88:20:46:22:2b:4d:0e:78:c4:68:36:42:e8:f7:00:77: 95:85:dc:b8:8f:1b:4d:ee:61:45:9e:88:43:6d:78:ff:ee:75: 72:44:b2:13:0b:28:ce:98:3a:a7:55:a1:1a:05:17:a8:24:d8: 9e:9b:7c:55:9d:d3:62:9f:fc:e5:7b:89:02:6a:81:45:8f:4c: 13:61:06:dc:8e:e9:8f:d2:3b:35:18:60:25:c2:51:8a:81:1c: 53:fe:d2:8c:27:ca:43:32:de:b7:9d:cc:17:10:c9:98:ad:41: 7e:82:e8:43:d1:57:9a:8d:b6:e0:90:7b:fd:de:46:ee:87:f7: 37:23:b9:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ottXKucg+75hsNbNUX3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj NTA0OGYwHhcNMjUxMjE5MjIwMjM1WhcNMjUxMjIwMjIwMjM1WjAzMTEwLwYDVQQD Eyg5ZGIyZDQxOTJiZjM1ZmNjMGExNDA2ODdjNmZjZTk5Njk4ODY4Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX0KdqQaWNpgWtGcfHrdZZrG6kSN FbkRqgr4TI40bN6IxjR+qoKxZdHBbfkWY/c0rbOYz79wmhWbyHumX21kqmrFAqk/ f7gyF8kDhozebXbHVngvSPb0Zs94zuWRjX58+TIZGkA2Ez7v9Qf9dPuRmw6GJl7e ulynQBNw9AREhm1D2unPlteysiegBNwjLG8WhIHHu88vjBkf/aHyaDta7qMCqkg9 KyFUHUZiU2Oj/Kyc7+C8E/gEXz8ISjT+ELb6EFqV7zEbdZRXMRlNYv5sJy9MTHR4 amExp3d1++1errXApxyoTN3b3j9ieRwJ/0NBq8oFoS3FfrrbgoxsZx4e9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2y1Bkr81/MChQGh8b86ZaYhoyWMB8GA1UdIwQY MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0 LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv8U4vK/ fadnKIPU9MNDsfGBNZDLf+QdydOyjs/jWjTHyhdjqkVXa2i+dOaAXduZrXFMDVzc 7vTNQa6Y7O7LFXV+GxLXBRD1uUbLDYBCchgEWd/C1CbS8EhFA2R3o9ZcJV17wAJk DfGZgqCrFvZnzifNGGTJ50+522gLmUr6pDiIIEYiK00OeMRoNkLo9wB3lYXcuI8b Te5hRZ6IQ214/+51ckSyEwsozpg6p1WhGgUXqCTYnpt8VZ3TYp/85XuJAmqBRY9M E2EG3I7pj9I7NRhgJcJRioEcU/7SjCfKQzLet53MFxDJmK1BfoLoQ9FXmo224JB7 /d5G7of3NyO5ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:05 2025 by rpki-client