This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json) Hash identifier: cK6j2VtWopgFBp4ETOMe/gRycUW+oQyVDhYCTskX4Rk= Subject key identifier: F2:9A:B2:25:E3:42:28:E8:39:1E:68:8B:A7:86:60:AA:CB:DD:50:72 Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Certificate serial: 019B3FB61831F38867EE1020FB20BF03BAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 07:00:56 +0000 Manifest this update: Sun 21 Dec 2025 07:00:56 +0000 Manifest next update: Mon 22 Dec 2025 07:00:56 +0000 Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=) 2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=) 3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: op1bDUpGtoSSpbyvgvgz62OEm4sSGAvcoT5Lx6027+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:18:31:f3:88:67:ee:10:20:fb:20:bf:03:ba:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Validity Not Before: Dec 21 07:00:56 2025 GMT Not After : Dec 22 07:00:56 2025 GMT Subject: CN=f29ab225e34228e8391e688ba78660aacbdd5072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:b2:97:5e:74:84:49:18:7a:a4:98:8c:50: 6d:11:c3:7d:9e:3b:45:75:89:ae:53:4f:d3:5f:02: d4:a6:fe:6d:e7:9c:b5:6b:92:03:09:eb:3e:a7:0a: 4d:20:f4:b9:fb:f4:cb:65:64:cb:38:8e:01:b8:90: fa:a0:fb:16:20:7b:e7:e1:86:c1:a8:b3:33:15:d1: 44:0e:a0:11:59:76:56:38:66:b9:f9:2a:05:3c:09: 73:12:88:a5:35:ad:3c:d9:8b:55:fb:ed:de:16:ae: 47:73:3f:16:b6:10:97:74:51:07:8f:86:92:77:66: ff:95:01:22:01:94:07:d7:ce:23:4b:a8:b9:0c:c1: 81:59:5f:19:de:f1:c1:9c:43:2d:15:5f:86:ea:cb: a5:f4:14:9a:31:82:cf:fd:55:06:13:93:bd:51:36: ed:d4:b7:5b:1a:df:c7:18:2f:10:9b:a3:79:34:40: b1:aa:24:2d:a5:e6:49:05:6c:b0:23:d4:d9:0c:15: c3:2a:49:89:d5:ff:f1:7f:f5:e3:6c:55:a5:da:5e: 92:e6:56:71:e4:8b:26:3f:10:2e:a1:b7:a0:88:86: 60:61:e3:dc:bc:17:16:f5:66:80:25:c7:23:6d:bf: c0:c7:16:be:3b:a6:52:cb:47:2b:52:22:86:22:ce: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:B2:25:E3:42:28:E8:39:1E:68:8B:A7:86:60:AA:CB:DD:50:72 X509v3 Authority Key Identifier: keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:8e:5d:50:98:a0:f0:29:1a:7e:ed:e7:3f:1d:b0:67:0c: 65:e8:54:8f:cd:32:74:91:e6:35:fa:40:f4:ea:e9:4a:4f:65: e3:ac:cf:62:ae:2d:37:21:87:44:57:57:ab:97:51:14:50:b8: a7:be:3c:9a:1b:3e:5e:c3:c0:d0:59:1b:b0:a8:d3:03:c9:23: d8:a3:ec:b7:29:f9:9b:47:e5:b4:e2:55:8b:b4:7a:bb:51:b2: a3:cb:6e:68:75:b7:ec:0a:d8:f5:39:0d:11:98:b9:34:59:57: dc:4a:2b:6b:78:a1:a5:4c:23:d8:ef:57:52:c3:4a:28:5f:a5: b6:e4:5d:26:25:1a:fb:dc:d6:1e:dc:fe:d3:37:87:a0:62:da: 77:00:62:0d:ba:3c:88:43:52:35:29:a7:b0:ec:41:e6:06:e1: a7:2e:41:40:00:9e:15:e3:3f:41:b5:20:cd:55:4f:5a:96:ef: 9f:76:b8:94:01:40:88:6d:46:5b:43:56:3b:d7:a9:5f:67:dd: e7:09:7f:46:56:04:3a:bc:32:28:39:5d:1e:92:43:10:d3:16: f8:ba:20:a7:f8:6a:55:91:d6:ef:5d:af:e3:e8:af:b0:93:32: f8:38:f8:f8:9e:26:6a:22:e5:2b:0d:f1:9b:3a:d6:87:bc:45: 31:5b:2f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/thgx84hn7hAg+yC/A7qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk NTMyYzIwHhcNMjUxMjIxMDcwMDU2WhcNMjUxMjIyMDcwMDU2WjAzMTEwLwYDVQQD EyhmMjlhYjIyNWUzNDIyOGU4MzkxZTY4OGJhNzg2NjBhYWNiZGQ1MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNmyl150hEkYeqSYjFBtEcN9njtF dYmuU0/TXwLUpv5t55y1a5IDCes+pwpNIPS5+/TLZWTLOI4BuJD6oPsWIHvn4YbB qLMzFdFEDqARWXZWOGa5+SoFPAlzEoilNa082YtV++3eFq5Hcz8WthCXdFEHj4aS d2b/lQEiAZQH184jS6i5DMGBWV8Z3vHBnEMtFV+G6sul9BSaMYLP/VUGE5O9UTbt 1LdbGt/HGC8Qm6N5NECxqiQtpeZJBWywI9TZDBXDKkmJ1f/xf/XjbFWl2l6S5lZx 5IsmPxAuobegiIZgYePcvBcW9WaAJccjbb/Axxa+O6ZSy0crUiKGIs6gdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKasiXjQijoOR5oi6eGYKrL3VByMB8GA1UdIwQY MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQeOXVCY oPApGn7t5z8dsGcMZehUj80ydJHmNfpA9OrpSk9l46zPYq4tNyGHRFdXq5dRFFC4 p748mhs+XsPA0FkbsKjTA8kj2KPstyn5m0fltOJVi7R6u1Gyo8tuaHW37ArY9TkN EZi5NFlX3Eora3ihpUwj2O9XUsNKKF+ltuRdJiUa+9zWHtz+0zeHoGLadwBiDbo8 iENSNSmnsOxB5gbhpy5BQACeFeM/QbUgzVVPWpbvn3a4lAFAiG1GW0NWO9epX2fd 5wl/RlYEOrwyKDldHpJDENMW+Logp/hqVZHW712v4+ivsJMy+Dj4+J4maiLlKw3x mzrWh7xFMVsvKg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:36 2025 by rpki-client