This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json) Hash identifier: dRQdMfNbzkJftwzXZwASI3hIgJOYrlbQOUpkifbC8Lw= Subject key identifier: 6B:F8:25:5A:A6:E2:0D:0B:23:66:35:03:F8:7A:BA:73:45:AE:0E:0F Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f Certificate serial: 019B3C1034770ABD4302B1AB7AFCE50969D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 14:00:53 +0000 Manifest next update: Sun 21 Dec 2025 14:00:53 +0000 Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: 5hwg6nA5ir9qVYmqfVE1Hb1ZNviNPu6c7jRl8wqj7tA=) 2: ybs61exhN0sYw1YgpfqdbmCmhqk.roa (hash: PW/e8DJb4WqsNiI0ODBUiDNLr0vhf0OlyJoAR5NWnhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:34:77:0a:bd:43:02:b1:ab:7a:fc:e5:09:69:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f Validity Not Before: Dec 20 14:00:53 2025 GMT Not After : Dec 21 14:00:53 2025 GMT Subject: CN=6bf8255aa6e20d0b23663503f87aba7345ae0e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:2e:5a:5e:12:0c:0a:73:71:b8:33:62:7f: 3b:34:60:56:47:c3:f2:43:42:9c:62:84:ba:16:0a: ae:7f:fc:85:8b:ca:c0:d9:d0:2a:d3:0c:de:5d:4f: 1c:5a:b6:ec:a6:79:6d:48:29:eb:58:cb:b4:d3:d7: 21:1e:90:d0:5b:9a:ff:cd:a8:e3:b5:33:d7:83:33: 4b:47:29:b3:c4:ca:de:1e:cd:4e:63:cd:a3:75:30: 62:58:e4:f7:b7:85:49:d1:d6:67:93:ce:31:2e:e0: a1:c2:c3:ab:7a:05:67:26:70:f4:78:49:d6:9b:b8: 16:5f:50:73:1a:e1:1d:59:dd:12:fa:ee:4d:e6:f5: f3:ae:c2:b0:34:28:6d:bf:d7:ec:97:27:ce:ef:9f: 5e:99:8d:76:26:2c:ac:96:d2:d3:18:ea:a4:19:c2: c4:70:6b:8d:0f:d7:38:6e:77:41:d0:de:a5:3d:0b: 13:ff:0d:d0:e0:5d:b6:fc:32:58:95:24:df:e7:4e: 62:0c:6f:b5:61:a8:29:f5:5a:9f:ca:5a:62:26:0e: f0:3e:d5:4a:1e:c3:c5:8a:4f:e2:c2:17:7e:e0:36: 03:1f:7e:8e:de:9b:eb:e3:a2:16:bd:28:87:e8:8c: ff:2e:f5:3e:e5:05:2f:dc:b2:6e:c9:86:40:b1:31: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F8:25:5A:A6:E2:0D:0B:23:66:35:03:F8:7A:BA:73:45:AE:0E:0F X509v3 Authority Key Identifier: keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c5:85:85:f9:e4:79:33:cb:49:d7:80:51:07:66:af:52:a2: 4a:e7:a3:4b:0b:d2:f2:dc:4a:87:9a:b6:36:db:88:92:df:ab: 5c:7d:b8:c6:27:2c:dc:9d:c0:5b:67:6d:a4:5e:ac:04:2a:bc: 7d:88:fe:43:a9:a1:ed:ce:a2:6e:c9:0c:a7:73:b4:bc:eb:bc: 3f:25:31:60:e8:34:cd:22:9f:5a:d5:9d:ab:77:87:ae:14:69: 4d:6c:d1:08:70:02:8d:df:c9:1a:7e:0a:8e:4a:dd:82:ce:34: bf:ed:73:27:44:54:b2:38:7a:3b:83:63:80:00:e7:2d:e2:be: 0a:c9:1a:1d:1c:60:70:07:08:a5:a3:ab:33:d8:f2:12:ea:dc: eb:92:5c:ab:0c:69:f9:00:20:ff:48:dd:f3:22:d6:5d:29:cd: 9a:41:f8:c9:a7:f1:a8:dd:11:24:d1:2a:4e:aa:93:88:c8:b0: 01:d7:f4:aa:c9:21:cb:79:9f:bd:3d:6e:93:0a:5d:ee:de:4a: aa:9c:bb:96:ea:5e:e6:e7:87:8a:64:0a:a3:fd:d4:bb:5d:49: 30:5d:87:81:8d:39:8b:5b:ef:a7:bd:e9:24:76:55:f7:16:19: 85:27:24:5d:56:90:91:7e:2e:60:65:17:2e:f3:57:14:0c:fc: 84:cf:79:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDR3Cr1DArGrevzlCWnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWE1ZTM5Zjg2MzU3MzZlNDhkZjUzODIyYTVjYWNjMTBi NDNhMWYwHhcNMjUxMjIwMTQwMDUzWhcNMjUxMjIxMTQwMDUzWjAzMTEwLwYDVQQD Eyg2YmY4MjU1YWE2ZTIwZDBiMjM2NjM1MDNmODdhYmE3MzQ1YWUwZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYuWl4SDApzcbgzYn87NGBWR8Py Q0KcYoS6Fgquf/yFi8rA2dAq0wzeXU8cWrbspnltSCnrWMu009chHpDQW5r/zajj tTPXgzNLRymzxMreHs1OY82jdTBiWOT3t4VJ0dZnk84xLuChwsOregVnJnD0eEnW m7gWX1BzGuEdWd0S+u5N5vXzrsKwNChtv9fslyfO759emY12JiysltLTGOqkGcLE cGuND9c4bndB0N6lPQsT/w3Q4F22/DJYlSTf505iDG+1Yagp9VqfylpiJg7wPtVK HsPFik/iwhd+4DYDH36O3pvr46IWvSiH6Iz/LvU+5QUv3LJuyYZAsTEUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGv4JVqm4g0LI2Y1A/h6unNFrg4PMB8GA1UdIwQY MBaAFEDqXjn4Y1c25I31OCKlyswQtDofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMt MThlOTEyOTYwMjJkLzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMtMThlOTEyOTYwMjJk LzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8WFhfnk eTPLSdeAUQdmr1KiSuejSwvS8txKh5q2NtuIkt+rXH24xics3J3AW2dtpF6sBCq8 fYj+Q6mh7c6ibskMp3O0vOu8PyUxYOg0zSKfWtWdq3eHrhRpTWzRCHACjd/JGn4K jkrdgs40v+1zJ0RUsjh6O4NjgADnLeK+CskaHRxgcAcIpaOrM9jyEurc65Jcqwxp +QAg/0jd8yLWXSnNmkH4yafxqN0RJNEqTqqTiMiwAdf0qskhy3mfvT1ukwpd7t5K qpy7lupe5ueHimQKo/3Uu11JMF2HgY05i1vvp73pJHZV9xYZhSckXVaQkX4uYGUX LvNXFAz8hM95YA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:15 2025 by rpki-client