This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json) Hash identifier: Mm7Z1ir79TYPnivO7BflrWBU/04rEphuu8a0OyY3BXU= Subject key identifier: 30:F7:16:A9:E1:1D:A6:C0:CD:91:D2:4C:18:60:B1:72:0A:44:89:80 Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Certificate serial: 019B635499FF8B7B379BF83308B814AB8DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft Manifest number: 0C2E Signing time: Sun 28 Dec 2025 05:00:47 +0000 Manifest this update: Sun 28 Dec 2025 05:00:47 +0000 Manifest next update: Mon 29 Dec 2025 05:00:47 +0000 Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: mMm8IJWytLo8e+caNdjoQE26N3Uu+lgQEOAPuDSSSG4=) 2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:99:ff:8b:7b:37:9b:f8:33:08:b8:14:ab:8d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Validity Not Before: Dec 28 05:00:47 2025 GMT Not After : Dec 29 05:00:47 2025 GMT Subject: CN=30f716a9e11da6c0cd91d24c1860b1720a448980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:83:f8:8d:b4:25:86:a3:dc:12:0a:c3:2b: ec:da:d0:d6:05:9d:03:bb:ba:22:a0:a8:b9:12:1c: 61:f7:12:c8:52:53:6c:5c:98:e6:a6:c5:7f:b7:26: 48:8a:4b:82:47:c5:ea:87:a9:bb:74:84:a4:70:a6: e1:c2:fb:13:ce:5f:f7:87:fa:26:11:b2:b2:fd:f7: 49:d0:9f:d4:d7:c9:a5:1d:83:43:cc:a3:54:c9:5f: 39:b6:af:bf:00:ce:fd:ad:28:5c:4a:b5:f8:29:26: cc:2f:f7:a3:a2:7d:23:7d:48:34:7c:2a:17:73:8d: 34:7f:bf:50:34:47:b3:84:8f:d6:77:98:d9:8a:5c: b3:ac:01:34:e4:5f:a9:a9:d3:f1:65:eb:f7:97:7e: 9c:84:00:9b:32:65:ee:18:1b:5e:33:5f:86:99:e6: 9e:5b:99:9f:43:50:97:fa:78:3f:0b:02:ce:ee:3a: d4:50:b6:e1:11:98:20:66:b2:b5:53:39:0e:2d:e1: 48:d7:c7:b1:30:f4:a1:1f:3b:f3:52:02:40:53:85: e7:39:9b:5f:6c:e8:08:a3:31:8a:6b:6e:6d:67:55: f7:21:fb:8e:6a:fa:0f:6c:88:c8:ec:35:14:7f:f5: f6:2c:00:7a:6f:54:12:ee:e3:e9:63:c5:6f:9f:8d: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F7:16:A9:E1:1D:A6:C0:CD:91:D2:4C:18:60:B1:72:0A:44:89:80 X509v3 Authority Key Identifier: keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:d6:a1:81:73:2e:5f:b6:fd:f2:10:ce:a3:d7:63:3b:22: 5d:12:60:09:a5:fa:72:ba:3d:ca:0c:ce:97:f8:73:55:60:30: 9f:22:82:99:60:8c:4e:27:ce:07:ae:9a:66:0f:74:9e:e7:38: bf:60:ee:80:17:4b:a2:f6:c1:fd:3d:14:93:ed:1a:ac:08:9e: c1:40:23:c8:95:d8:33:c9:08:16:88:da:fe:cc:de:49:db:2c: c1:f4:20:ff:ee:70:17:50:0e:c6:3f:ae:41:ad:d1:e0:f4:83: d7:40:1e:31:88:a9:16:ec:35:e8:cd:4f:67:cb:df:06:b7:e2: 80:f4:99:bf:17:03:c2:f6:e4:02:cf:fc:8f:44:79:a7:96:90: 67:c8:a3:17:50:d7:86:a3:dd:5b:65:a3:ff:db:96:c2:60:5b: 1b:b4:35:f7:53:e8:c0:67:c8:c6:b0:49:e0:a4:20:fb:46:eb: 83:ed:b8:86:be:c0:29:fb:13:1b:0b:38:9a:34:4e:83:a9:ad: c0:d1:fd:48:27:72:9e:ea:ed:de:3b:a1:6f:4d:dd:7d:cc:99: 56:ff:33:3f:c6:93:c3:ff:55:77:c5:07:3f:8e:a0:ef:71:cb: 81:7e:7e:1f:a7:7e:38:1d:07:ef:b5:10:3f:cc:c9:77:a3:cb: c9:ab:03:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVJn/i3s3m/gzCLgUq42zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi NzlmY2EwHhcNMjUxMjI4MDUwMDQ3WhcNMjUxMjI5MDUwMDQ3WjAzMTEwLwYDVQQD EygzMGY3MTZhOWUxMWRhNmMwY2Q5MWQyNGMxODYwYjE3MjBhNDQ4OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXiD+I20JYaj3BIKwyvs2tDWBZ0D u7oioKi5Ehxh9xLIUlNsXJjmpsV/tyZIikuCR8Xqh6m7dISkcKbhwvsTzl/3h/om EbKy/fdJ0J/U18mlHYNDzKNUyV85tq+/AM79rShcSrX4KSbML/ejon0jfUg0fCoX c400f79QNEezhI/Wd5jZilyzrAE05F+pqdPxZev3l36chACbMmXuGBteM1+Gmeae W5mfQ1CX+ng/CwLO7jrUULbhEZggZrK1UzkOLeFI18exMPShHzvzUgJAU4XnOZtf bOgIozGKa25tZ1X3IfuOavoPbIjI7DUUf/X2LAB6b1QS7uPpY8Vvn41PGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD3FqnhHabAzZHSTBhgsXIKRImAMB8GA1UdIwQY MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5 LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1bWoYFz Ll+2/fIQzqPXYzsiXRJgCaX6cro9ygzOl/hzVWAwnyKCmWCMTifOB66aZg90nuc4 v2DugBdLovbB/T0Uk+0arAiewUAjyJXYM8kIFoja/szeSdsswfQg/+5wF1AOxj+u Qa3R4PSD10AeMYipFuw16M1PZ8vfBrfigPSZvxcDwvbkAs/8j0R5p5aQZ8ijF1DX hqPdW2Wj/9uWwmBbG7Q191PowGfIxrBJ4KQg+0brg+24hr7AKfsTGws4mjROg6mt wNH9SCdynurt3juhb03dfcyZVv8zP8aTw/9Vd8UHP46g73HLgX5+H6d+OB0H77UQ P8zJd6PLyasDCQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:23 2025 by rpki-client