This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json) Hash identifier: ycZ88hHog5MA3l7y/xAzYHUcGOA5yr80ezxY/4/8yu8= Subject key identifier: 95:8D:E6:20:11:49:62:8E:3F:00:94:5F:05:BC:32:11:0D:89:21:AB Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Certificate serial: 019B3CEBCE9C18CF01783A4D3BFDCD53E9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft Manifest number: DC Signing time: Sat 20 Dec 2025 18:00:45 +0000 Manifest this update: Sat 20 Dec 2025 18:00:45 +0000 Manifest next update: Sun 21 Dec 2025 18:00:45 +0000 Files and hashes: 1: CxgM5umcJQIKAphd4HGRMxjPCiQ.roa (hash: A0nE+ddeI2g2MvTBC556Td71a5D11i+c62doMFlZiC8=) 2: JknyP3Ybin2U1sEXva4KCDR1c1I.roa (hash: O0vUT6Dy38kn7d3i/5/I+631QCA6tRSEMUbIaeBWKKg=) 3: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: vqcPoCk7tvRA2nTfbsaFRlBhr03+EtgbAEm+VYe3gK8=) 4: hraQuSPXm_BKduHB1VDVz3ZUcQY.roa (hash: WS2hCjy7E85ll6h/ANkIKpGGT1mve9bfebhKK3l26Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ce:9c:18:cf:01:78:3a:4d:3b:fd:cd:53:e9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Validity Not Before: Dec 20 18:00:45 2025 GMT Not After : Dec 21 18:00:45 2025 GMT Subject: CN=958de6201149628e3f00945f05bc32110d8921ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:83:ac:d2:89:0c:27:e3:5d:8c:9a:3e:29: 01:48:4a:d3:bb:3c:3c:a2:3c:63:b2:20:1e:4c:db: df:61:6f:20:b5:9e:b0:15:02:20:57:37:71:eb:f1: 7d:29:51:fc:e5:c3:12:a2:b7:7f:42:1c:cd:ed:34: 1e:14:2e:1a:26:4d:46:f2:e3:54:76:63:10:33:fb: 84:4b:76:f8:4f:42:9b:b3:bc:7a:c1:ac:b2:fd:ee: cb:9f:52:c5:fd:ea:62:83:65:5e:f0:e7:43:22:4f: c8:71:4a:6e:7f:19:e9:54:ea:19:23:94:d0:ab:1e: 48:63:40:f8:7d:15:d6:35:d6:9f:d9:5f:b1:cb:7a: fb:f0:01:ae:f9:8d:01:0e:96:a5:a3:94:28:80:0b: 66:54:be:dc:68:d1:da:b2:b8:f0:fe:3f:41:b9:30: 3c:a4:da:d6:04:bb:32:3f:67:6b:45:ac:31:3e:2d: dd:4e:fd:ad:c1:11:e2:a8:78:22:38:78:df:6d:93: e3:0c:4c:63:d4:02:7a:36:ff:78:65:63:4c:ce:30: 92:6a:af:40:08:ae:38:ce:38:39:32:01:ac:b7:34: e9:92:3f:ff:04:6a:06:11:f8:8a:51:ba:7b:14:e1: e9:bf:42:44:af:05:6d:eb:82:32:bb:e9:97:50:e4: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:E6:20:11:49:62:8E:3F:00:94:5F:05:BC:32:11:0D:89:21:AB X509v3 Authority Key Identifier: keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:17:3d:02:bc:f2:ff:35:df:99:08:2d:2c:94:0d:9e:f6:74: 30:04:be:e6:a8:f6:75:bc:35:bd:c9:a0:80:31:04:c2:91:ae: b9:26:56:40:0b:c7:47:29:21:3f:4a:19:ae:28:a0:bc:48:04: 43:e0:c0:98:31:f3:96:4c:93:a9:b3:4b:4d:ba:f7:6e:99:01: 44:7e:dd:fa:c1:be:60:ca:c0:1a:94:8d:42:fa:57:a6:8c:72: 30:24:2f:d3:21:07:0e:f0:ed:f4:a4:95:1c:6e:ec:90:2b:16: 83:88:9f:b7:b3:1d:16:0c:a0:a8:58:99:2c:6d:87:75:04:16: e7:0d:f6:66:06:03:83:9e:12:4b:3e:19:5c:57:35:30:1c:83: 9e:9f:36:7a:c1:42:ba:5f:83:bb:1b:12:00:6b:2b:ce:92:ec: 55:59:67:a7:77:fb:f8:bd:85:3c:1a:03:3a:38:cd:f5:fb:5c: 7d:20:4f:5c:e3:9e:3c:cc:8d:80:38:16:23:eb:61:70:bc:7f: e9:62:ad:6c:54:58:be:16:8c:87:c9:33:be:00:06:30:86:56: b2:e2:28:b5:10:8a:fe:b9:f0:a7:a8:dd:eb:98:ad:c1:c4:ac: c6:b1:65:2b:7a:d0:43:00:96:ad:4d:07:1f:02:8a:f9:f5:f7: a6:3a:15:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8686cGM8BeDpNO/3NU+nhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi ZjBhOTEwHhcNMjUxMjIwMTgwMDQ1WhcNMjUxMjIxMTgwMDQ1WjAzMTEwLwYDVQQD Eyg5NThkZTYyMDExNDk2MjhlM2YwMDk0NWYwNWJjMzIxMTBkODkyMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmDrNKJDCfjXYyaPikBSErTuzw8 ojxjsiAeTNvfYW8gtZ6wFQIgVzdx6/F9KVH85cMSord/QhzN7TQeFC4aJk1G8uNU dmMQM/uES3b4T0Kbs7x6wayy/e7Ln1LF/epig2Ve8OdDIk/IcUpufxnpVOoZI5TQ qx5IY0D4fRXWNdaf2V+xy3r78AGu+Y0BDpalo5QogAtmVL7caNHasrjw/j9BuTA8 pNrWBLsyP2drRawxPi3dTv2twRHiqHgiOHjfbZPjDExj1AJ6Nv94ZWNMzjCSaq9A CK44zjg5MgGstzTpkj//BGoGEfiKUbp7FOHpv0JErwVt64Iyu+mXUORw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWN5iARSWKOPwCUXwW8MhENiSGrMB8GA1UdIwQY MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2 LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxc9Arzy /zXfmQgtLJQNnvZ0MAS+5qj2dbw1vcmggDEEwpGuuSZWQAvHRykhP0oZriigvEgE Q+DAmDHzlkyTqbNLTbr3bpkBRH7d+sG+YMrAGpSNQvpXpoxyMCQv0yEHDvDt9KSV HG7skCsWg4ift7MdFgygqFiZLG2HdQQW5w32ZgYDg54SSz4ZXFc1MByDnp82esFC ul+DuxsSAGsrzpLsVVlnp3f7+L2FPBoDOjjN9ftcfSBPXOOePMyNgDgWI+thcLx/ 6WKtbFRYvhaMh8kzvgAGMIZWsuIotRCK/rnwp6jd65itwcSsxrFlK3rQQwCWrU0H HwKK+fX3pjoVqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:38 2025 by rpki-client