This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json) Hash identifier: xS1i6aopttG2By8PhpbHge+MekBTovlz+c91Im8E4iE= Subject key identifier: 37:70:B8:01:3B:E4:23:B0:B2:FD:F5:5C:F5:A3:B1:53:B1:5B:75:B6 Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7 Certificate serial: 019B4C28602818470015AB8A0972A7F8861C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft Manifest number: 1559 Signing time: Tue 23 Dec 2025 17:01:12 +0000 Manifest this update: Tue 23 Dec 2025 17:01:12 +0000 Manifest next update: Wed 24 Dec 2025 17:01:12 +0000 Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=) 2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: 1rb0ooBZoY0ZrsJuRkKDowaaLf68/B3SKvCZ2kPzDh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:60:28:18:47:00:15:ab:8a:09:72:a7:f8:86:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7 Validity Not Before: Dec 23 17:01:12 2025 GMT Not After : Dec 24 17:01:12 2025 GMT Subject: CN=3770b8013be423b0b2fdf55cf5a3b153b15b75b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:0a:96:19:aa:d7:16:a2:d4:71:c4:a0:16: a1:41:95:a3:09:c5:5e:8a:1b:d8:e5:41:08:ca:c4: ea:83:3d:dc:6e:05:34:ab:6d:d7:f5:6a:74:16:e0: 89:93:86:da:ee:d4:c4:e7:bd:8b:4f:9f:45:0b:1b: 79:d5:f2:14:c7:89:2b:2d:57:64:a5:e0:2b:8d:83: cc:90:47:2c:ae:e3:21:70:6a:f1:7b:d0:16:8c:db: 57:36:8b:2b:0e:f1:de:3f:22:5d:c2:2a:03:13:06: da:de:17:ee:35:67:8c:e7:5a:b6:01:03:8c:a5:3c: 13:27:12:5a:a2:ee:5c:f3:15:fe:2e:c7:10:eb:20: 66:4b:24:94:f4:cb:78:1d:7f:da:ec:33:fb:39:4d: f2:5b:b0:cd:07:e3:0c:37:03:23:7e:1f:f3:c0:f7: ba:3c:ac:d3:3b:8c:5e:03:af:56:fc:73:2e:7b:84: 38:85:17:ce:c9:6b:4e:8b:f7:07:72:40:7e:b7:b8: 4c:7d:d5:aa:8f:70:48:52:36:0a:e8:d5:bd:c9:42: 5b:a3:91:16:31:c8:ab:fb:b1:77:80:8a:f2:6c:4a: 31:2d:35:7e:d5:da:96:b5:d0:ea:5c:f4:e8:d2:be: 23:61:90:46:65:e4:0f:c4:ae:97:86:31:d3:ce:9f: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:B8:01:3B:E4:23:B0:B2:FD:F5:5C:F5:A3:B1:53:B1:5B:75:B6 X509v3 Authority Key Identifier: keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:11:6c:da:53:c5:ed:11:dd:a5:0f:c1:07:aa:9f:c9:0c:e5: de:00:de:8c:86:6f:bc:aa:71:68:2c:23:1d:37:53:f5:e4:60: a2:39:32:dc:dc:48:13:da:f6:15:1b:05:c2:61:ec:20:3a:30: 36:94:dc:4d:a5:ba:ac:d7:44:c5:9a:c5:3c:91:d7:03:51:2a: f3:a5:05:4f:61:ea:00:e7:58:6d:be:92:34:df:35:76:5e:7c: e0:f7:f0:2b:03:e4:cb:39:33:a2:4c:ff:9e:e7:60:ed:80:3b: 0e:4c:0f:57:1b:02:e0:b5:ac:c8:6b:2d:25:87:b9:5b:1c:31: 7a:d6:ef:68:7d:89:c7:8b:44:f7:a3:73:27:e4:38:86:18:ae: 9c:49:cd:7a:73:7c:0a:44:d2:52:fc:a1:9a:9a:76:57:f6:55: 08:b5:a7:4e:10:be:c3:de:90:bb:a6:73:eb:39:4b:23:68:96: 07:14:69:21:f1:b7:51:99:53:5e:1d:5b:3f:41:1f:41:ae:43: c9:74:3d:c3:2f:9e:49:1b:2c:54:78:1c:4a:5a:17:1a:e2:47: ab:b1:c0:99:0c:cd:94:2c:52:3b:90:f6:33:68:37:69:f0:7a: 26:ae:c8:66:37:44:4f:0c:84:63:4a:49:69:4c:60:e6:c2:46: 04:2d:6a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKGAoGEcAFauKCXKn+IYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm MzE1YjcwHhcNMjUxMjIzMTcwMTEyWhcNMjUxMjI0MTcwMTEyWjAzMTEwLwYDVQQD EygzNzcwYjgwMTNiZTQyM2IwYjJmZGY1NWNmNWEzYjE1M2IxNWI3NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK8Klhmq1xai1HHEoBahQZWjCcVe ihvY5UEIysTqgz3cbgU0q23X9Wp0FuCJk4ba7tTE572LT59FCxt51fIUx4krLVdk peArjYPMkEcsruMhcGrxe9AWjNtXNosrDvHePyJdwioDEwba3hfuNWeM51q2AQOM pTwTJxJaou5c8xX+LscQ6yBmSySU9Mt4HX/a7DP7OU3yW7DNB+MMNwMjfh/zwPe6 PKzTO4xeA69W/HMue4Q4hRfOyWtOi/cHckB+t7hMfdWqj3BIUjYK6NW9yUJbo5EW Mcir+7F3gIrybEoxLTV+1dqWtdDqXPTo0r4jYZBGZeQPxK6XhjHTzp+4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdwuAE75COwsv31XPWjsVOxW3W2MB8GA1UdIwQY MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhFs2lPF 7RHdpQ/BB6qfyQzl3gDejIZvvKpxaCwjHTdT9eRgojky3NxIE9r2FRsFwmHsIDow NpTcTaW6rNdExZrFPJHXA1Eq86UFT2HqAOdYbb6SNN81dl584PfwKwPkyzkzokz/ nudg7YA7DkwPVxsC4LWsyGstJYe5WxwxetbvaH2Jx4tE96NzJ+Q4hhiunEnNenN8 CkTSUvyhmpp2V/ZVCLWnThC+w96Qu6Zz6zlLI2iWBxRpIfG3UZlTXh1bP0EfQa5D yXQ9wy+eSRssVHgcSloXGuJHq7HAmQzNlCxSO5D2M2g3afB6Jq7IZjdETwyEY0pJ aUxg5sJGBC1qNA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:46:05 2025 by rpki-client