This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json) Hash identifier: IWOhETJpoeSpr6QfveysmkQUBq+kY6UmiqlbdHa5fC8= Subject key identifier: 0E:47:66:85:66:AD:63:8F:7C:C5:C9:0D:F0:9D:4D:B5:60:36:E4:C1 Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019B3A9027848C583A286DBE106E11FA0969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft Manifest number: 0676 Signing time: Sat 20 Dec 2025 07:01:24 +0000 Manifest this update: Sat 20 Dec 2025 07:01:24 +0000 Manifest next update: Sun 21 Dec 2025 07:01:24 +0000 Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: FA6iskswXvS/BwGQkrx8GaPBZu3KcW4eFPTL6EIsmFM=) 2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:27:84:8c:58:3a:28:6d:be:10:6e:11:fa:09:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Dec 20 07:01:24 2025 GMT Not After : Dec 21 07:01:24 2025 GMT Subject: CN=0e47668566ad638f7cc5c90df09d4db56036e4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:a0:cf:22:90:99:f0:e5:71:aa:ef:be:e4: a6:ff:7b:e0:31:98:c4:d4:4e:60:0a:14:b4:a6:53: a5:cb:c6:62:ad:bf:11:d2:cd:b5:5d:c7:6f:d6:27: e8:0c:ca:ef:87:76:74:00:72:78:5a:bc:08:58:42: 93:77:57:83:b6:13:36:5d:12:20:dc:97:ea:24:cc: 63:de:65:79:23:fa:15:62:58:c0:e6:22:b7:6d:e3: b9:f5:06:b4:16:e3:f8:d8:af:8c:37:b6:80:1f:36: 25:dc:1f:f4:1e:70:e7:20:a7:2f:ac:67:32:55:73: f0:30:70:24:b5:18:ad:b2:7d:08:53:ee:bd:50:46: 19:f4:64:d1:28:a8:97:30:0e:b9:9a:fb:14:39:13: bc:49:be:1d:4c:a2:96:16:88:2d:5e:62:b8:4d:16: 90:e0:37:86:95:54:74:ae:77:1a:4c:e4:16:79:29: 89:0b:55:d4:ef:c8:1c:2d:60:c3:c1:7f:bc:41:e9: 3e:ea:45:b6:90:e7:15:6d:c7:54:c0:61:6c:8f:38: 10:c2:60:48:9b:7b:64:a7:15:f4:6a:83:34:e0:a3: 6b:8c:aa:79:b0:ae:8e:9b:54:7d:74:7e:e8:10:a5: 31:b9:e0:54:c5:e3:1a:36:77:7e:78:36:8c:3f:fd: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:47:66:85:66:AD:63:8F:7C:C5:C9:0D:F0:9D:4D:B5:60:36:E4:C1 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:24:75:26:e4:9c:9e:64:2a:ea:7e:7e:b6:8c:37:35:aa: 10:71:ec:48:22:d7:16:38:5e:11:00:88:31:36:06:3c:a4:ca: 57:ff:b1:a0:e5:88:01:97:a6:b7:34:5b:ca:42:95:ef:0e:40: 1f:ce:bb:5c:a9:d1:33:8c:d4:ef:3e:39:2e:f5:fa:c1:b0:58: 50:be:5a:d4:2b:c5:dc:91:22:19:fb:aa:4a:e6:0d:24:24:ba: ca:e4:45:ce:84:c6:da:13:02:c9:79:d0:20:15:06:44:57:60: ec:09:17:c5:d4:ae:fa:11:b2:4f:ca:8a:f9:aa:a3:d4:01:14: 4c:05:00:a0:2f:66:3e:85:ea:af:c4:df:a8:ff:93:ee:4e:6a: 83:b6:d2:43:e9:8f:ef:b2:ba:59:81:0e:ac:21:d3:3b:93:5d: 8c:89:37:d4:53:9c:2c:27:b5:00:78:8b:a9:30:7f:f1:68:17: 96:7a:b3:14:7a:b3:58:c1:ea:07:ae:65:51:23:54:5c:53:66: af:91:9b:66:f8:c6:e5:53:d2:0a:56:fd:d6:3b:1f:37:07:ce: 38:ca:e9:49:2f:85:62:c1:7c:42:b7:16:58:8b:15:d5:fc:00: 58:b5:e7:5f:66:ff:1b:85:1a:c4:34:17:1b:64:14:cd:c4:ec: 2b:ad:3a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kCeEjFg6KG2+EG4R+glpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjUxMjIwMDcwMTI0WhcNMjUxMjIxMDcwMTI0WjAzMTEwLwYDVQQD EygwZTQ3NjY4NTY2YWQ2MzhmN2NjNWM5MGRmMDlkNGRiNTYwMzZlNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYWgzyKQmfDlcarvvuSm/3vgMZjE 1E5gChS0plOly8Zirb8R0s21Xcdv1ifoDMrvh3Z0AHJ4WrwIWEKTd1eDthM2XRIg 3JfqJMxj3mV5I/oVYljA5iK3beO59Qa0FuP42K+MN7aAHzYl3B/0HnDnIKcvrGcy VXPwMHAktRitsn0IU+69UEYZ9GTRKKiXMA65mvsUORO8Sb4dTKKWFogtXmK4TRaQ 4DeGlVR0rncaTOQWeSmJC1XU78gcLWDDwX+8Qek+6kW2kOcVbcdUwGFsjzgQwmBI m3tkpxX0aoM04KNrjKp5sK6Om1R9dH7oEKUxueBUxeMaNnd+eDaMP/0ilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5HZoVmrWOPfMXJDfCdTbVgNuTBMB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao8kdSbk nJ5kKup+fraMNzWqEHHsSCLXFjheEQCIMTYGPKTKV/+xoOWIAZemtzRbykKV7w5A H867XKnRM4zU7z45LvX6wbBYUL5a1CvF3JEiGfuqSuYNJCS6yuRFzoTG2hMCyXnQ IBUGRFdg7AkXxdSu+hGyT8qK+aqj1AEUTAUAoC9mPoXqr8TfqP+T7k5qg7bSQ+mP 77K6WYEOrCHTO5NdjIk31FOcLCe1AHiLqTB/8WgXlnqzFHqzWMHqB65lUSNUXFNm r5GbZvjG5VPSClb91jsfNwfOOMrpSS+FYsF8QrcWWIsV1fwAWLXnX2b/G4UaxDQX G2QUzcTsK606Sw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:04:31 2025 by rpki-client