This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json) Hash identifier: 4zdTDoEb+RA3c8sQKp7r06SAwNibqaDcz7eJZLryOVg= Subject key identifier: 3B:76:53:DA:B0:0F:84:54:BA:36:92:4B:E1:25:A8:3C:68:34:E4:74 Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82 Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82 Certificate serial: 019B3DFEDD97FF2590E01ED92E889251E500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 23:01:11 +0000 Manifest this update: Sat 20 Dec 2025 23:01:11 +0000 Manifest next update: Sun 21 Dec 2025 23:01:11 +0000 Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=) 2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: pcc4A3WtkeDQGv3pDtjMk0/SPTIMitzWnpCAsloyWT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:dd:97:ff:25:90:e0:1e:d9:2e:88:92:51:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82 Validity Not Before: Dec 20 23:01:11 2025 GMT Not After : Dec 21 23:01:11 2025 GMT Subject: CN=3b7653dab00f8454ba36924be125a83c6834e474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:81:da:01:e0:36:b4:6e:c8:58:3f:cc:67: 5e:f5:20:9c:13:9a:96:4d:36:27:f9:cb:75:d2:b1: 32:5d:45:d9:6d:ac:9e:4f:eb:c1:86:44:50:9f:6e: 3d:2f:d0:9a:3f:a9:78:ba:26:52:63:81:10:81:4d: e8:4a:3b:b5:f0:1a:7b:50:0f:4d:a4:b8:61:63:b5: 10:f2:23:60:cf:6a:41:33:c1:89:63:00:ad:b4:a9: 7d:32:7d:3d:71:70:e7:ee:27:19:aa:19:65:3c:82: 8e:c0:c6:c6:a8:82:01:67:c0:c0:67:60:c7:1e:43: e8:b8:78:79:63:e1:eb:74:53:d4:17:02:73:df:37: fa:3b:b1:cc:20:a4:33:63:9f:f4:28:a0:be:e1:4a: 26:c5:f3:02:4f:dc:c2:55:a3:f9:0f:1f:b7:10:2d: b5:54:7d:a5:9c:8c:cf:a2:75:e6:0f:97:a0:87:25: 2d:87:8a:16:5d:40:62:c0:6a:2f:d3:93:28:e4:a7: 7f:65:b2:42:64:20:0b:3b:6d:2b:f7:f7:f7:e4:c5: 1e:59:93:95:82:4f:c0:86:fd:0f:b3:85:67:6b:05: 91:25:c4:50:7c:de:ab:3e:a1:10:82:e4:7a:d4:2f: 15:1f:84:1f:6a:7d:1a:0a:7c:dd:c1:b0:7d:9e:a1: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:76:53:DA:B0:0F:84:54:BA:36:92:4B:E1:25:A8:3C:68:34:E4:74 X509v3 Authority Key Identifier: keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:96:af:9f:3a:0e:12:38:f9:01:33:22:b2:58:95:0b:e4:eb: ac:b6:84:21:1b:96:43:7a:c6:ce:e0:ba:01:df:fd:6b:05:29: 49:81:64:12:7e:18:0c:74:21:8d:e6:d3:96:19:5d:82:52:c2: 37:d1:b0:5a:30:45:b7:44:3e:66:40:a1:d0:16:90:95:44:b8: 17:72:91:a5:5a:03:52:18:c4:d2:35:41:c5:90:ab:fd:c7:45: 0e:af:bb:4b:82:1a:98:43:db:b3:c8:55:8b:f3:f6:5d:72:d7: 04:58:73:f0:f3:5a:d7:a5:6d:e7:7d:ca:bf:b2:87:ad:fd:e6: e3:ae:ce:fb:f7:de:f4:ae:c2:04:be:43:64:c9:50:72:e5:0e: 99:45:c3:d5:c2:d6:6b:cf:36:51:f5:6f:68:66:cd:e4:00:61: e5:14:a0:16:c7:18:ad:c4:96:6f:12:6b:8f:b4:9d:59:d9:e1: 11:11:68:ea:96:10:72:60:a6:33:df:46:fc:44:28:80:99:6a: 2e:0d:87:a4:6b:bd:37:a9:ae:5a:dc:76:64:2b:82:6c:62:a9: d3:80:d0:fd:1e:9e:8b:e5:e1:ce:da:5e:af:9d:41:2e:b3:a7: bc:f9:4b:64:c4:88:f1:d8:9a:92:20:e1:a4:12:4c:9d:02:d2: 7d:08:5f:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/t2X/yWQ4B7ZLoiSUeUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMjcyOTY0MmQyZTM1MzdkOWFiN2M0NWM1MWZlMjZkZWE0 NjhiODIwHhcNMjUxMjIwMjMwMTExWhcNMjUxMjIxMjMwMTExWjAzMTEwLwYDVQQD EygzYjc2NTNkYWIwMGY4NDU0YmEzNjkyNGJlMTI1YTgzYzY4MzRlNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdeB2gHgNrRuyFg/zGde9SCcE5qW TTYn+ct10rEyXUXZbayeT+vBhkRQn249L9CaP6l4uiZSY4EQgU3oSju18Bp7UA9N pLhhY7UQ8iNgz2pBM8GJYwCttKl9Mn09cXDn7icZqhllPIKOwMbGqIIBZ8DAZ2DH HkPouHh5Y+HrdFPUFwJz3zf6O7HMIKQzY5/0KKC+4UomxfMCT9zCVaP5Dx+3EC21 VH2lnIzPonXmD5eghyUth4oWXUBiwGov05Mo5Kd/ZbJCZCALO20r9/f35MUeWZOV gk/Ahv0Ps4VnawWRJcRQfN6rPqEQguR61C8VH4Qfan0aCnzdwbB9nqF6XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt2U9qwD4RUujaSS+ElqDxoNOR0MB8GA1UdIwQY MBaAFKsnKWQtLjU32at8RcUf4m3qRouCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYt NWQwZTYyMGY1MjVkLzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYtNWQwZTYyMGY1MjVk LzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpavnzoO Ejj5ATMisliVC+TrrLaEIRuWQ3rGzuC6Ad/9awUpSYFkEn4YDHQhjebTlhldglLC N9GwWjBFt0Q+ZkCh0BaQlUS4F3KRpVoDUhjE0jVBxZCr/cdFDq+7S4IamEPbs8hV i/P2XXLXBFhz8PNa16Vt533Kv7KHrf3m467O+/fe9K7CBL5DZMlQcuUOmUXD1cLW a882UfVvaGbN5ABh5RSgFscYrcSWbxJrj7SdWdnhERFo6pYQcmCmM99G/EQogJlq Lg2HpGu9N6muWtx2ZCuCbGKp04DQ/R6ei+Xhztper51BLrOnvPlLZMSI8diakiDh pBJMnQLSfQhf2w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:00 2025 by rpki-client