This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json) Hash identifier: GTGhFZ3zziUAmerO1tMLs/RETEQ144ecKwr4n35mVYE= Subject key identifier: A4:89:55:9B:72:4B:5E:5F:AD:45:F2:FE:9C:63:36:B1:8F:8F:8B:32 Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Certificate serial: 019B3D9078F3BB6B1D2AE237ABF28F8EC846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:00:36 +0000 Manifest this update: Sat 20 Dec 2025 21:00:36 +0000 Manifest next update: Sun 21 Dec 2025 21:00:36 +0000 Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=) 2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=) 3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: vEBS9I++6qJHx3kgYR58SsW7yYq5XYuZptbaE0SNAxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:78:f3:bb:6b:1d:2a:e2:37:ab:f2:8f:8e:c8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Validity Not Before: Dec 20 21:00:36 2025 GMT Not After : Dec 21 21:00:36 2025 GMT Subject: CN=a489559b724b5e5fad45f2fe9c6336b18f8f8b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:56:b2:90:94:03:15:93:a9:81:28:31:2c: ea:a6:74:e6:d5:ea:b0:0b:4d:25:c1:33:ab:3e:62: 79:2c:38:85:c6:a9:3c:ab:4b:81:26:e3:92:7f:d1: fd:94:5f:88:bd:39:85:ee:4e:78:93:09:8c:80:cf: d3:ae:f5:21:7e:52:17:c5:1b:5a:02:0f:fb:07:54: 5d:65:9b:f3:b6:1e:c4:ac:8c:0a:b5:3b:05:76:0d: 06:d6:0a:8e:11:64:aa:8f:f4:c6:63:b2:66:0c:68: 29:b1:0e:4b:8b:05:4b:9f:74:4b:a0:f1:73:a2:ad: fd:55:42:4d:4a:62:a3:42:e6:9c:88:3b:a7:cc:f1: 5c:a1:46:94:de:8d:e8:0c:a3:14:88:24:22:67:3e: ec:21:50:62:78:39:4f:52:2d:ac:ea:eb:27:fb:9b: 6b:b7:3a:cb:0d:9c:36:9a:6e:38:75:e4:77:5d:c3: f5:02:57:52:02:51:00:38:85:21:0a:b0:6a:0c:50: 43:27:60:29:34:bc:bf:09:3a:bf:84:8b:65:83:f2: a3:3d:39:71:06:b2:de:11:9a:15:8f:22:0b:fe:4b: d7:41:2c:ee:81:b1:97:5b:8e:b0:02:f5:bf:2e:9c: 94:cb:d7:d9:cd:57:e2:39:45:27:c6:6b:ff:18:0c: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:89:55:9B:72:4B:5E:5F:AD:45:F2:FE:9C:63:36:B1:8F:8F:8B:32 X509v3 Authority Key Identifier: keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:49:74:b8:43:43:fe:68:8a:dc:54:1d:08:78:11:b2:a9:8a: ee:be:b7:b5:fa:4f:bf:1c:ed:fd:7e:21:12:13:24:6c:69:81: a9:cd:ca:5a:1d:85:80:d5:3a:87:2d:4d:e8:7c:16:54:26:a3: 5c:d8:02:ac:9f:a1:a5:36:a2:27:f9:95:77:05:48:e1:e6:0a: 31:49:97:f2:68:96:36:3e:e0:14:ea:76:7e:38:00:ed:2e:ef: 43:77:c2:09:9e:83:03:f4:76:36:af:c0:b0:b3:31:3f:55:1e: e0:41:28:48:eb:b9:90:69:6d:0d:ea:a2:90:5a:8b:de:f0:0f: 3b:1c:d6:81:db:33:86:64:a3:39:88:03:27:6b:4e:8b:e6:32: 68:0b:8f:41:ff:fe:25:00:8b:0f:0d:5f:f3:bc:b8:6a:29:6b: 42:73:13:29:80:7e:45:32:2f:47:c6:be:34:01:01:b5:3d:71: d0:13:07:c3:ae:a8:73:92:96:33:5b:66:96:09:5c:c3:ea:23: 23:8f:53:56:ec:90:b6:d2:e4:15:7f:9c:2a:96:1f:68:5d:b3: fd:7a:1c:a5:1c:a1:0c:78:0c:d0:83:e2:4e:1e:e7:24:8d:15: 41:62:84:c8:a8:fa:0d:9b:b2:1c:56:30:df:10:2e:f6:46:e8: 09:e4:2e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHjzu2sdKuI3q/KPjshGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4 ZTI3ZTkwHhcNMjUxMjIwMjEwMDM2WhcNMjUxMjIxMjEwMDM2WjAzMTEwLwYDVQQD EyhhNDg5NTU5YjcyNGI1ZTVmYWQ0NWYyZmU5YzYzMzZiMThmOGY4YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS1WspCUAxWTqYEoMSzqpnTm1eqw C00lwTOrPmJ5LDiFxqk8q0uBJuOSf9H9lF+IvTmF7k54kwmMgM/TrvUhflIXxRta Ag/7B1RdZZvzth7ErIwKtTsFdg0G1gqOEWSqj/TGY7JmDGgpsQ5LiwVLn3RLoPFz oq39VUJNSmKjQuaciDunzPFcoUaU3o3oDKMUiCQiZz7sIVBieDlPUi2s6usn+5tr tzrLDZw2mm44deR3XcP1AldSAlEAOIUhCrBqDFBDJ2ApNLy/CTq/hItlg/KjPTlx BrLeEZoVjyIL/kvXQSzugbGXW46wAvW/LpyUy9fZzVfiOUUnxmv/GAzxfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSJVZtyS15frUXy/pxjNrGPj4syMB8GA1UdIwQY MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt ZjM4MTBiZDcwMzc2LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2 LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0l0uEND /miK3FQdCHgRsqmK7r63tfpPvxzt/X4hEhMkbGmBqc3KWh2FgNU6hy1N6HwWVCaj XNgCrJ+hpTaiJ/mVdwVI4eYKMUmX8miWNj7gFOp2fjgA7S7vQ3fCCZ6DA/R2Nq/A sLMxP1Ue4EEoSOu5kGltDeqikFqL3vAPOxzWgdszhmSjOYgDJ2tOi+YyaAuPQf/+ JQCLDw1f87y4ailrQnMTKYB+RTIvR8a+NAEBtT1x0BMHw66oc5KWM1tmlglcw+oj I49TVuyQttLkFX+cKpYfaF2z/XocpRyhDHgM0IPiTh7nJI0VQWKEyKj6DZuyHFYw 3xAu9kboCeQuhg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:26 2025 by rpki-client