This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json) Hash identifier: NXBj14yZx9UBSfNcbtw9Z8ERCwT1PUjlHW8ZPfDTQt4= Subject key identifier: 10:9F:20:81:1C:B0:91:39:62:55:AD:4D:77:27:17:AD:48:C5:D9:49 Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC Certificate issuer: /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Certificate serial: 019B3E6C5E5915AAFA8F4B8D29E2DDF7E230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft Manifest number: 0AD5 Signing time: Sun 21 Dec 2025 01:00:47 +0000 Manifest this update: Sun 21 Dec 2025 01:00:47 +0000 Manifest next update: Mon 22 Dec 2025 01:00:47 +0000 Files and hashes: 1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=) 2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: sh2aAwo+ts+ew6gReBKKqmGI8ID99c6V1djFYIlphDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:5e:59:15:aa:fa:8f:4b:8d:29:e2:dd:f7:e2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc Validity Not Before: Dec 21 01:00:47 2025 GMT Not After : Dec 22 01:00:47 2025 GMT Subject: CN=109f20811cb091396255ad4d772717ad48c5d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:f4:b5:d1:31:d5:b7:70:1d:c8:a4:90:bc: 4c:ae:9d:0a:de:85:14:1e:cb:c4:a8:b7:d6:c1:86: c7:bc:46:d9:8f:14:29:e7:15:af:c1:55:86:7e:ea: eb:00:3d:18:2d:ef:52:b3:79:bc:6b:5b:8a:2c:86: 43:64:8b:96:f1:e4:83:6e:88:a9:9b:0c:5f:1c:1b: d2:86:bf:c0:b0:08:29:0d:f0:fa:11:6a:65:56:3e: 96:a0:90:fe:d4:1a:92:5c:8f:51:ed:0f:43:09:d2: 9f:e2:1b:17:78:a3:dc:74:00:09:34:97:77:67:e2: 6e:34:bc:15:89:d8:af:f2:3a:32:e9:bd:c2:ae:ee: 72:79:42:a6:ba:b5:39:7f:bb:5a:e1:17:85:86:c0: bc:56:93:dd:4c:49:7a:e1:a5:e6:a9:cb:4d:50:95: cf:33:3d:41:42:13:24:cb:6c:12:9d:35:3c:cc:93: 2f:cd:47:8e:84:bf:bc:c1:62:d6:37:eb:74:84:0c: 81:f3:d2:db:17:88:1d:ab:7d:73:da:4d:8f:06:b2: e7:03:9e:e5:2f:a7:86:ce:e6:28:a5:28:a1:61:00: 6b:cf:55:fc:7e:4e:8d:b0:c3:47:b6:49:55:07:4c: 18:44:75:bb:aa:4f:2c:81:50:60:b1:cd:12:f6:39: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:20:81:1C:B0:91:39:62:55:AD:4D:77:27:17:AD:48:C5:D9:49 X509v3 Authority Key Identifier: keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:30:76:96:af:b2:5a:9e:fd:5f:cd:eb:e3:7e:df:2a:63: a1:9a:a1:a9:47:30:38:70:ea:f3:33:12:7a:80:4c:b9:fd:95: 59:50:a1:91:24:92:10:09:6f:3b:c8:7f:19:47:c1:f9:b2:89: 29:8f:20:05:39:1d:ee:c9:ca:cd:0e:3e:c3:0a:4c:01:1e:61: 4c:72:b8:21:a0:7c:d2:b5:10:63:1b:97:ea:67:3e:e4:a5:27: cc:4f:c7:ae:df:3d:d3:87:7e:68:05:05:26:4e:3b:c9:2e:d2: b4:a3:ef:b3:94:6a:77:b4:e2:d7:88:1e:ca:4b:37:c6:79:a2: 22:85:51:75:5c:e1:b6:d2:a1:3c:8b:1f:69:78:14:49:44:cb: 53:eb:f8:ec:54:5c:25:70:b4:2b:b1:da:b9:7e:02:01:84:55: 18:99:48:0e:e1:32:68:a4:b7:e7:ed:9a:16:0a:68:8e:14:49: 63:d2:65:77:46:d3:ec:24:a1:93:d7:19:09:e9:a0:d8:73:6b: 1f:91:ae:06:70:b1:ec:c4:10:a8:22:cf:54:2b:52:c9:b6:0d: 4e:89:0a:ab:9a:01:b3:46:5f:f5:aa:90:b1:48:e2:f3:32:0b: 1e:2a:4b:1d:9b:1e:39:fb:02:d2:fd:52:8b:e7:c0:9d:6d:b5: ac:6d:04:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bF5ZFar6j0uNKeLd9+IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm YmIxYmMwHhcNMjUxMjIxMDEwMDQ3WhcNMjUxMjIyMDEwMDQ3WjAzMTEwLwYDVQQD EygxMDlmMjA4MTFjYjA5MTM5NjI1NWFkNGQ3NzI3MTdhZDQ4YzVkOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bf0tdEx1bdwHcikkLxMrp0K3oUU HsvEqLfWwYbHvEbZjxQp5xWvwVWGfurrAD0YLe9Ss3m8a1uKLIZDZIuW8eSDboip mwxfHBvShr/AsAgpDfD6EWplVj6WoJD+1BqSXI9R7Q9DCdKf4hsXeKPcdAAJNJd3 Z+JuNLwVidiv8joy6b3Cru5yeUKmurU5f7ta4ReFhsC8VpPdTEl64aXmqctNUJXP Mz1BQhMky2wSnTU8zJMvzUeOhL+8wWLWN+t0hAyB89LbF4gdq31z2k2PBrLnA57l L6eGzuYopSihYQBrz1X8fk6NsMNHtklVB0wYRHW7qk8sgVBgsc0S9jmlNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCfIIEcsJE5YlWtTXcnF61IxdlJMB8GA1UdIwQY MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3 LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgUwdpav slqe/V/N6+N+3ypjoZqhqUcwOHDq8zMSeoBMuf2VWVChkSSSEAlvO8h/GUfB+bKJ KY8gBTkd7snKzQ4+wwpMAR5hTHK4IaB80rUQYxuX6mc+5KUnzE/Hrt8904d+aAUF Jk47yS7StKPvs5Rqd7Ti14geyks3xnmiIoVRdVzhttKhPIsfaXgUSUTLU+v47FRc JXC0K7HauX4CAYRVGJlIDuEyaKS35+2aFgpojhRJY9Jld0bT7CShk9cZCemg2HNr H5GuBnCx7MQQqCLPVCtSybYNTokKq5oBs0Zf9aqQsUji8zILHipLHZseOfsC0v1S i+fAnW21rG0EDA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:21 2025 by rpki-client