This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json) Hash identifier: PQtdDBoaDUJA5unYn32eRNUvVBC2eObr+Ox+JGW/e8M= Subject key identifier: 9A:67:73:3E:BB:37:D3:8F:11:62:81:35:74:C5:E0:71:E6:31:21:58 Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Certificate serial: 019B39B42375641B159A12709A0D94694576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft Manifest number: 13E3 Signing time: Sat 20 Dec 2025 03:01:05 +0000 Manifest this update: Sat 20 Dec 2025 03:01:05 +0000 Manifest next update: Sun 21 Dec 2025 03:01:05 +0000 Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=) 2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=) 3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=) 4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: pifC1NF2ZQ6Lt5xDKzFZdnGUw931P4ne/kolBW8V/Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:23:75:64:1b:15:9a:12:70:9a:0d:94:69:45:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Validity Not Before: Dec 20 03:01:05 2025 GMT Not After : Dec 21 03:01:05 2025 GMT Subject: CN=9a67733ebb37d38f1162813574c5e071e6312158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:23:af:23:10:60:57:e8:70:78:2d:65:9d:8f: f3:7e:2b:54:bc:7a:e2:1d:a5:bc:9b:1f:87:60:b8: 03:1c:e8:69:b4:65:27:5a:ef:01:a7:f8:ce:86:86: 7e:04:84:03:4f:83:dc:25:9e:5a:ef:eb:f1:67:72: f4:fd:01:af:8d:3c:1a:00:71:38:0b:be:7c:38:30: 7c:3e:b9:45:f8:87:6c:2c:5d:95:3d:66:62:ae:42: e7:3c:8a:8b:d7:42:7c:d1:0b:1f:b6:45:e2:1a:93: b4:91:e9:3b:43:7f:19:5f:b9:6a:f5:d7:1e:56:0a: 5b:74:7e:9d:2e:f6:70:7b:8e:6e:e6:72:7f:2b:7a: 4b:8f:81:ba:76:9a:76:2e:13:ae:a2:dc:6e:ec:a9: 04:0d:cc:02:67:af:24:eb:c4:a6:8b:cf:e4:bd:8b: d9:5f:1a:a5:aa:51:d4:86:7c:14:df:52:24:bf:7d: ac:8c:5f:00:c4:8c:2e:ca:5e:53:1a:8b:6f:89:63: d2:a1:cf:04:ea:b6:0f:61:85:4f:af:b3:d1:0d:74: 36:df:96:f5:82:60:f8:18:5b:c9:69:49:90:6b:81: 84:ef:37:40:f1:5a:64:c8:4e:d1:f3:60:b6:72:b8: 7d:f7:c7:e7:fe:f0:7e:e3:81:7c:2d:67:26:cd:25: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:67:73:3E:BB:37:D3:8F:11:62:81:35:74:C5:E0:71:E6:31:21:58 X509v3 Authority Key Identifier: keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:51:2b:ef:d0:6a:a8:b3:82:af:5d:5f:7c:e0:2a:06:b0:16: 0b:c6:ca:77:09:61:4a:2a:06:bd:e9:1e:7d:f9:f7:cc:9e:f5: d3:de:b4:4e:0d:d7:c9:55:e8:47:a7:8c:63:b5:c7:1b:e6:8c: 22:3d:3f:f9:f2:c7:6b:06:59:f9:8e:b0:2c:43:d5:4b:63:5f: 89:db:1f:06:44:62:99:f8:6e:64:30:03:bb:9c:90:42:c3:a2: df:10:23:a5:73:39:65:36:b0:9b:fb:f6:6a:ad:69:41:e9:c3: b1:71:b0:2d:98:15:bf:09:c3:77:08:23:5a:90:af:54:76:b5: 93:18:32:88:25:3b:d5:78:00:7e:0d:ff:16:95:6c:5a:dd:6c: d8:11:6b:07:b0:ae:91:2c:b2:2c:d8:a1:c6:c5:b6:e6:bb:2e: de:ae:4b:ef:00:08:d5:37:34:c4:3a:db:af:31:38:f2:56:ca: 47:6b:d1:75:a9:2b:33:70:1c:17:14:0b:3f:e0:14:46:ce:8f: 09:a3:23:76:29:15:21:6a:0f:d9:31:ee:74:b3:9a:5d:aa:11: 29:6c:c7:86:d3:9c:ab:af:53:41:e5:8e:ca:25:0d:1b:05:b3: 96:9d:d9:3f:5b:92:97:46:d5:81:25:ae:f2:5f:d1:25:41:ea: 1a:0b:4d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCN1ZBsVmhJwmg2UaUV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh NjVjYTMwHhcNMjUxMjIwMDMwMTA1WhcNMjUxMjIxMDMwMTA1WjAzMTEwLwYDVQQD Eyg5YTY3NzMzZWJiMzdkMzhmMTE2MjgxMzU3NGM1ZTA3MWU2MzEyMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SOvIxBgV+hweC1lnY/zfitUvHri HaW8mx+HYLgDHOhptGUnWu8Bp/jOhoZ+BIQDT4PcJZ5a7+vxZ3L0/QGvjTwaAHE4 C758ODB8PrlF+IdsLF2VPWZirkLnPIqL10J80QsftkXiGpO0kek7Q38ZX7lq9dce VgpbdH6dLvZwe45u5nJ/K3pLj4G6dpp2LhOuotxu7KkEDcwCZ68k68Smi8/kvYvZ XxqlqlHUhnwU31Ikv32sjF8AxIwuyl5TGotviWPSoc8E6rYPYYVPr7PRDXQ235b1 gmD4GFvJaUmQa4GE7zdA8VpkyE7R82C2crh998fn/vB+44F8LWcmzSXLpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpncz67N9OPEWKBNXTF4HHmMSFYMB8GA1UdIwQY MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2 LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Er79Bq qLOCr11ffOAqBrAWC8bKdwlhSioGvekeffn3zJ710960Tg3XyVXoR6eMY7XHG+aM Ij0/+fLHawZZ+Y6wLEPVS2NfidsfBkRimfhuZDADu5yQQsOi3xAjpXM5ZTawm/v2 aq1pQenDsXGwLZgVvwnDdwgjWpCvVHa1kxgyiCU71XgAfg3/FpVsWt1s2BFrB7Cu kSyyLNihxsW25rsu3q5L7wAI1Tc0xDrbrzE48lbKR2vRdakrM3AcFxQLP+AURs6P CaMjdikVIWoP2THudLOaXaoRKWzHhtOcq69TQeWOyiUNGwWzlp3ZP1uSl0bVgSWu 8l/RJUHqGgtNIg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:34 2025 by rpki-client