This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json) Hash identifier: 7+DZYDfqlvETiAmzocKBYfLcvVxamKBGl4aOplY/sNg= Subject key identifier: 3B:46:41:3C:09:1A:0B:FB:58:1A:3A:7B:58:A6:60:02:9A:D5:E2:D3 Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019B4325116E65E8BCDCB9F5BF028EDFB173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft Manifest number: 12BA Signing time: Sun 21 Dec 2025 23:01:01 +0000 Manifest this update: Sun 21 Dec 2025 23:01:01 +0000 Manifest next update: Mon 22 Dec 2025 23:01:01 +0000 Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=) 2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: W1Z95zFJ4G//cRyCb+qvSnzQEvZ4b1oxAeRpkeeAZQs=) 3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:11:6e:65:e8:bc:dc:b9:f5:bf:02:8e:df:b1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Dec 21 23:01:01 2025 GMT Not After : Dec 22 23:01:01 2025 GMT Subject: CN=3b46413c091a0bfb581a3a7b58a660029ad5e2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:2c:9a:1e:04:e6:7d:5d:71:f7:de:f8:9d: 36:43:d7:9b:0a:ef:ed:5d:7b:d9:c8:ca:94:ac:31: a0:6c:fe:e2:7a:14:b0:47:cc:4b:59:e3:ae:1a:e4: 93:41:aa:ac:4f:bd:b0:84:45:53:97:fd:58:1e:24: cc:5a:03:e1:d5:56:94:5e:fd:39:b3:fc:1f:47:70: 09:67:9c:d8:26:a8:7c:f6:86:a4:9d:f9:27:48:4b: f4:5d:b9:13:2e:30:6c:39:5a:b2:a0:0d:16:65:34: 6d:9b:6e:c6:84:f3:c6:68:3d:84:40:42:da:9e:73: ba:0f:68:86:a2:96:f6:9b:e0:f0:19:f4:53:bc:da: 62:cc:3b:22:21:3c:ca:65:b5:a5:90:bd:96:4e:85: bc:0a:ca:df:05:8f:89:1f:40:23:3e:c9:c9:cd:6a: 0c:41:4a:d5:58:f7:53:17:71:08:b6:cc:f6:22:0a: 26:64:f7:aa:8e:c4:c6:62:82:cd:fb:f6:59:b6:dc: b6:8c:a5:4c:5e:78:66:73:9d:68:2f:3f:4f:76:21: d4:6a:c6:7d:4a:9b:fc:81:41:49:36:de:ec:52:d3: b0:67:c7:d7:eb:e0:ae:2d:fc:c5:4b:c4:23:5a:eb: 45:a0:d5:ba:d8:69:34:57:e6:49:2c:4b:47:35:d1: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:46:41:3C:09:1A:0B:FB:58:1A:3A:7B:58:A6:60:02:9A:D5:E2:D3 X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f4:77:c9:b8:fe:8b:2f:90:c9:02:1d:55:40:58:da:54:74: 31:b5:df:08:23:78:81:b8:7e:ea:ba:fe:fb:64:74:60:29:6a: b8:8e:1f:32:c9:3e:43:60:f8:c7:b2:91:28:31:64:6c:f0:53: 6c:99:f9:84:1c:b1:b5:95:d0:b2:be:62:3d:a3:49:ca:5a:c6: 7f:a9:77:c6:09:25:2f:72:4a:d2:8d:9b:9f:1b:f8:5a:70:5e: 8d:a2:ef:74:05:74:f7:61:8b:32:45:9e:b4:4c:eb:c9:4b:8b: 65:cf:d3:58:fe:39:d0:4c:8d:5a:52:c9:12:c4:c3:ea:5f:f6: f3:70:54:58:e6:f7:7e:60:6c:a1:10:ca:14:66:57:53:78:28: 6f:7d:eb:f5:e7:80:4c:b3:72:58:ae:5e:3f:ae:88:6a:d0:34: a6:9f:4e:9c:a6:cd:73:76:e3:96:d5:b7:2f:8f:c6:c1:b7:be: 12:81:d1:79:a6:10:da:13:65:e5:f4:58:0e:88:35:9b:f0:5e: eb:1f:e1:6a:fa:79:d9:fb:ec:0f:a8:9c:58:83:f8:87:76:3c: 29:5e:8d:1a:3b:67:28:35:95:f1:85:48:b4:c7:04:7d:75:c0: 58:41:ec:cd:a4:c8:73:c6:23:f3:f0:dc:ea:76:4e:86:e7:da: ce:ad:02:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRFuZei83Ln1vwKO37FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjUxMjIxMjMwMTAxWhcNMjUxMjIyMjMwMTAxWjAzMTEwLwYDVQQD EygzYjQ2NDEzYzA5MWEwYmZiNTgxYTNhN2I1OGE2NjAwMjlhZDVlMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSYsmh4E5n1dcffe+J02Q9ebCu/t XXvZyMqUrDGgbP7iehSwR8xLWeOuGuSTQaqsT72whEVTl/1YHiTMWgPh1VaUXv05 s/wfR3AJZ5zYJqh89oaknfknSEv0XbkTLjBsOVqyoA0WZTRtm27GhPPGaD2EQELa nnO6D2iGopb2m+DwGfRTvNpizDsiITzKZbWlkL2WToW8CsrfBY+JH0AjPsnJzWoM QUrVWPdTF3EItsz2IgomZPeqjsTGYoLN+/ZZtty2jKVMXnhmc51oLz9PdiHUasZ9 Spv8gUFJNt7sUtOwZ8fX6+CuLfzFS8QjWutFoNW62Gk0V+ZJLEtHNdHF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtGQTwJGgv7WBo6e1imYAKa1eLTMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvR3ybj+ iy+QyQIdVUBY2lR0MbXfCCN4gbh+6rr++2R0YClquI4fMsk+Q2D4x7KRKDFkbPBT bJn5hByxtZXQsr5iPaNJylrGf6l3xgklL3JK0o2bnxv4WnBejaLvdAV092GLMkWe tEzryUuLZc/TWP450EyNWlLJEsTD6l/283BUWOb3fmBsoRDKFGZXU3gob33r9eeA TLNyWK5eP66IatA0pp9OnKbNc3bjltW3L4/Gwbe+EoHReaYQ2hNl5fRYDog1m/Be 6x/havp52fvsD6icWIP4h3Y8KV6NGjtnKDWV8YVItMcEfXXAWEHszaTIc8Yj8/Dc 6nZOhufazq0Cpg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:35 2025 by rpki-client