This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json) Hash identifier: 9P7xlMZGgpfCTJPbODLm7U/mvkb/pyaqx/+BoNvq8U4= Subject key identifier: AE:9C:51:0E:DE:3D:47:92:BC:B8:90:39:50:3A:4A:25:BF:21:7B:FC Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a Certificate serial: 019B4513DF59B5334AF2A590976BC7EC2BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 08:01:28 +0000 Manifest this update: Mon 22 Dec 2025 08:01:28 +0000 Manifest next update: Tue 23 Dec 2025 08:01:28 +0000 Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: KfhD3Dieo4M1eKmDa2u45yQB9EEo7z82o/XDMOcG5Yw=) 2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=) 3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:df:59:b5:33:4a:f2:a5:90:97:6b:c7:ec:2b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a Validity Not Before: Dec 22 08:01:28 2025 GMT Not After : Dec 23 08:01:28 2025 GMT Subject: CN=ae9c510ede3d4792bcb89039503a4a25bf217bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:ac:f6:01:5e:fd:f2:1c:67:e3:92:0b:56: 87:82:5f:2c:e9:22:88:1f:a3:62:89:e1:78:2f:5e: 71:a2:14:5e:d5:f6:f4:65:b7:c9:a9:ca:0a:9e:c9: d8:1b:53:8b:e5:00:82:52:d5:ee:7b:1d:b0:e3:8a: 4f:ac:95:7f:ea:c4:69:1b:6e:1d:fc:cf:7a:20:b7: 31:cf:85:6f:70:57:c9:9b:b6:ac:80:ed:fb:79:1e: dd:fe:f9:95:20:cd:54:05:30:a4:b6:56:6d:a7:1f: c1:21:8b:85:60:fd:7d:af:b6:1c:68:48:7c:c3:5e: 05:cf:a6:4d:df:ad:34:5d:4e:5b:94:69:32:94:b5: 47:ee:b5:e4:b1:06:8d:28:d4:f7:f8:1d:af:3f:a6: 67:e9:8b:bd:a9:8f:71:1c:84:96:b7:93:25:eb:67: 20:a1:99:52:ac:b5:e3:03:d9:43:49:60:5b:68:ba: 0e:fb:73:23:bf:c6:e6:f5:76:8c:83:a3:9c:a1:b8: 8f:b9:24:5b:46:d0:8e:e8:87:0c:24:0c:1b:dc:8f: 91:bd:96:83:a9:97:18:d9:e2:f0:af:ae:5c:09:f7: c7:a8:78:27:17:87:97:cb:82:b3:ff:3a:fe:79:45: 24:a0:9e:58:e9:50:cd:4f:4e:a4:6d:ea:2b:10:99: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:51:0E:DE:3D:47:92:BC:B8:90:39:50:3A:4A:25:BF:21:7B:FC X509v3 Authority Key Identifier: keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d4:0d:db:20:a1:11:57:c6:73:5d:47:c0:da:99:7d:4a:4c: d5:9c:5e:5b:3d:f0:fd:14:0b:13:18:00:47:5e:11:e1:a4:fa: a2:80:fd:ac:2f:62:8b:64:af:00:64:b6:7c:1d:b4:6e:38:9a: 2b:6f:b1:cf:b5:e9:5b:bb:87:f1:ee:84:17:a6:44:48:dd:25: 5f:34:3a:cf:03:06:04:f6:91:54:42:32:3d:67:e1:2e:d3:09: da:a2:1e:a1:15:cd:2f:ce:a9:9d:e9:85:03:b3:24:2d:f4:a3: 86:21:4a:53:86:02:34:d3:7d:12:55:8a:69:86:9a:16:62:c0: 17:12:1b:21:0f:2e:e6:e9:9d:3e:0c:31:2a:69:98:3a:c1:7a: f8:d0:72:59:c9:5d:53:15:a3:d5:b9:48:e7:06:2a:8d:8f:0e: 20:bf:0c:c0:aa:d7:41:6e:96:98:79:1e:36:c7:d1:65:6b:76: 87:57:d2:ef:ea:41:64:b5:09:a7:71:5b:db:be:c2:20:ee:61: 78:e8:14:b6:df:72:b3:5e:8c:f2:c6:86:26:e8:4e:1a:00:6d: 38:be:78:e0:c2:3f:fb:4f:42:c9:53:a5:35:6e:ad:b3:43:5f: 5e:b2:b0:55:61:86:23:7e:fb:42:51:6d:86:fc:bf:55:c9:7f: 13:8c:a1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE99ZtTNK8qWQl2vH7CvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4 MzZmMWEwHhcNMjUxMjIyMDgwMTI4WhcNMjUxMjIzMDgwMTI4WjAzMTEwLwYDVQQD EyhhZTljNTEwZWRlM2Q0NzkyYmNiODkwMzk1MDNhNGEyNWJmMjE3YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcGs9gFe/fIcZ+OSC1aHgl8s6SKI H6NiieF4L15xohRe1fb0ZbfJqcoKnsnYG1OL5QCCUtXuex2w44pPrJV/6sRpG24d /M96ILcxz4VvcFfJm7asgO37eR7d/vmVIM1UBTCktlZtpx/BIYuFYP19r7YcaEh8 w14Fz6ZN3600XU5blGkylLVH7rXksQaNKNT3+B2vP6Zn6Yu9qY9xHISWt5Ml62cg oZlSrLXjA9lDSWBbaLoO+3Mjv8bm9XaMg6OcobiPuSRbRtCO6IcMJAwb3I+RvZaD qZcY2eLwr65cCffHqHgnF4eXy4Kz/zr+eUUkoJ5Y6VDNT06kbeorEJmc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6cUQ7ePUeSvLiQOVA6SiW/IXv8MB8GA1UdIwQY MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9QN2yCh EVfGc11HwNqZfUpM1ZxeWz3w/RQLExgAR14R4aT6ooD9rC9ii2SvAGS2fB20bjia K2+xz7XpW7uH8e6EF6ZESN0lXzQ6zwMGBPaRVEIyPWfhLtMJ2qIeoRXNL86pnemF A7MkLfSjhiFKU4YCNNN9ElWKaYaaFmLAFxIbIQ8u5umdPgwxKmmYOsF6+NByWcld UxWj1blI5wYqjY8OIL8MwKrXQW6WmHkeNsfRZWt2h1fS7+pBZLUJp3Fb277CIO5h eOgUtt9ys16M8saGJuhOGgBtOL544MI/+09CyVOlNW6ts0NfXrKwVWGGI377QlFt hvy/Vcl/E4yhiw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:09:27 2025 by rpki-client