This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json) Hash identifier: Isg8W8oymn1LIZbCzLE1Je2NSei/ndDnLib0dSUKx8k= Subject key identifier: CE:19:B9:C7:48:D3:E4:CA:7A:E4:42:09:C7:41:6B:8B:12:82:42:10 Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B3EA38031080BAF72701F670F26E48684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft Manifest number: 029A Signing time: Sun 21 Dec 2025 02:01:01 +0000 Manifest this update: Sun 21 Dec 2025 02:01:01 +0000 Manifest next update: Mon 22 Dec 2025 02:01:01 +0000 Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=) 2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: xnDVT3WkSysGNLOOrp7ILx+nFI7ZBnYoFOrikPK7Fn4=) 3: nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa (hash: Rxp3n+E0mBpZW+sjoLUEVlF4FRUu+OtPU6hBGL/IMhQ=) 4: tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa (hash: iAsKbhwAIaMriFFQqjvhhA1IMlhgJ5DoMkToHGforLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:80:31:08:0b:af:72:70:1f:67:0f:26:e4:86:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Dec 21 02:01:01 2025 GMT Not After : Dec 22 02:01:01 2025 GMT Subject: CN=ce19b9c748d3e4ca7ae44209c7416b8b12824210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:66:5f:a5:1d:8d:71:e3:ef:28:e2:35:51: f5:ce:08:a6:e1:f7:14:45:04:e3:ba:a2:6c:45:70: 5b:d1:5d:41:4d:21:53:61:1e:90:68:93:b4:0e:dc: 79:48:7a:40:42:ac:dc:60:b0:c1:f4:e5:a3:54:87: f9:c8:0f:30:9d:b1:ce:c5:88:23:7e:c4:e3:13:34: 54:d3:37:89:75:e7:7c:a1:d5:e6:71:1d:56:66:04: 87:da:ec:fa:7a:09:ad:c4:80:7c:a7:69:d3:5f:06: 01:7a:e9:41:40:f4:2d:91:b3:65:c8:69:bc:4a:8a: 05:5d:bd:7a:5a:d7:b0:34:00:1e:3e:48:de:7c:94: 0d:d7:91:51:d3:55:36:3d:c6:8a:5a:c2:58:28:05: ef:3a:d1:4b:f2:3d:0b:8e:19:fc:6e:70:36:36:0d: 12:62:d2:01:74:42:05:db:7c:4f:05:17:e3:99:19: b6:2f:2e:12:7b:4f:7a:f6:da:52:0a:37:e2:ae:ba: ed:e1:4d:8a:3f:8e:c4:f6:50:fc:3f:7a:ee:f0:65: 4b:28:6a:4f:ae:02:16:2e:a8:ce:bc:eb:e3:ce:99: d7:4a:13:fa:81:77:4c:24:d4:4f:b6:54:2b:13:13: d3:f9:cf:d6:4f:6d:73:be:38:be:a6:28:8d:f9:15: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:B9:C7:48:D3:E4:CA:7A:E4:42:09:C7:41:6B:8B:12:82:42:10 X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:58:78:50:f6:7e:9e:5b:53:58:cc:95:10:41:aa:17:25:c7: 8e:b2:9c:ea:23:8d:8c:30:b0:03:16:bd:e6:4f:c3:ee:dd:3f: 3e:8f:39:3e:71:91:b8:72:df:f1:bf:ff:33:3f:b4:2e:aa:23: a1:0c:f7:8b:dc:5a:be:20:83:6f:b2:8d:31:e4:36:64:b7:d2: 20:e8:b1:e8:9e:c1:34:57:cc:92:47:ce:6d:0e:e6:49:5a:a3: c0:c5:15:64:5a:6f:e1:ad:3f:3c:29:65:31:ae:bb:4b:eb:12: 45:df:e3:a3:c7:e0:50:58:9c:9d:06:3b:83:c2:d1:ca:1e:76: 73:86:ab:2d:8a:51:ca:34:63:9d:59:0f:f0:c1:dc:6c:70:2a: a9:19:61:43:4f:f1:b3:1e:4d:ff:9d:63:3a:fb:95:31:53:ef: 68:c8:09:c1:af:12:cb:39:f8:4c:56:e6:c8:07:5d:96:08:4d: ee:47:f5:25:d1:0f:1b:47:40:b1:92:04:d1:a8:9d:16:ce:fd: 49:bf:29:e6:4f:5e:19:27:94:be:bb:1c:35:5c:45:9e:68:e8: 1d:0f:3d:21:ed:c4:94:62:01:e9:4a:53:c6:5d:33:f8:4f:98: 92:d9:b6:5f:a1:57:ba:be:95:ca:58:20:6e:da:ab:fd:7c:5b: fd:21:1b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4AxCAuvcnAfZw8m5IaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjUxMjIxMDIwMTAxWhcNMjUxMjIyMDIwMTAxWjAzMTEwLwYDVQQD EyhjZTE5YjljNzQ4ZDNlNGNhN2FlNDQyMDljNzQxNmI4YjEyODI0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2BmX6UdjXHj7yjiNVH1zgim4fcU RQTjuqJsRXBb0V1BTSFTYR6QaJO0Dtx5SHpAQqzcYLDB9OWjVIf5yA8wnbHOxYgj fsTjEzRU0zeJded8odXmcR1WZgSH2uz6egmtxIB8p2nTXwYBeulBQPQtkbNlyGm8 SooFXb16WtewNAAePkjefJQN15FR01U2PcaKWsJYKAXvOtFL8j0Ljhn8bnA2Ng0S YtIBdEIF23xPBRfjmRm2Ly4Se0969tpSCjfirrrt4U2KP47E9lD8P3ru8GVLKGpP rgIWLqjOvOvjzpnXShP6gXdMJNRPtlQrExPT+c/WT21zvji+piiN+RVZKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4ZucdI0+TKeuRCCcdBa4sSgkIQMB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlh4UPZ+ nltTWMyVEEGqFyXHjrKc6iONjDCwAxa95k/D7t0/Po85PnGRuHLf8b//Mz+0Lqoj oQz3i9xaviCDb7KNMeQ2ZLfSIOix6J7BNFfMkkfObQ7mSVqjwMUVZFpv4a0/PCll Ma67S+sSRd/jo8fgUFicnQY7g8LRyh52c4arLYpRyjRjnVkP8MHcbHAqqRlhQ0/x sx5N/51jOvuVMVPvaMgJwa8Syzn4TFbmyAddlghN7kf1JdEPG0dAsZIE0aidFs79 Sb8p5k9eGSeUvrscNVxFnmjoHQ89Ie3ElGIB6UpTxl0z+E+Yktm2X6FXur6Vylgg btqr/Xxb/SEbuw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:58 2025 by rpki-client