This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json) Hash identifier: G/6Nh/Puak+sR0LBLUqAKgoShereG1hw+EEse47Vt8M= Subject key identifier: 9D:9A:7E:F5:49:A8:B6:1D:F2:24:B2:44:57:18:32:0B:36:B1:E5:5A Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77 Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77 Certificate serial: 019B446E386EBA78299B48B6D3F767A72182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft Manifest number: 0D60 Signing time: Mon 22 Dec 2025 05:00:32 +0000 Manifest this update: Mon 22 Dec 2025 05:00:32 +0000 Manifest next update: Tue 23 Dec 2025 05:00:32 +0000 Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=) 2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: fi5gAzW1rrhAlNODHKuYHFH//uUN7tghYxMGlsC3Nj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:38:6e:ba:78:29:9b:48:b6:d3:f7:67:a7:21:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77 Validity Not Before: Dec 22 05:00:32 2025 GMT Not After : Dec 23 05:00:32 2025 GMT Subject: CN=9d9a7ef549a8b61df224b2445718320b36b1e55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:04:f1:4b:ec:c9:65:ac:ad:4f:f5:43:a7: 13:09:58:7a:ac:fe:dc:b4:08:03:5c:bf:50:3c:7d: 43:33:58:8c:7e:2c:f8:be:c2:ed:a5:1d:c6:61:78: 05:a6:5c:54:68:5d:24:eb:99:7a:95:0a:03:06:44: 19:5c:47:f0:f9:71:a3:25:24:fb:5d:c7:fe:dc:e4: 66:7a:74:db:a1:b6:ec:db:bd:ba:c0:b6:91:53:fa: 55:ad:60:3c:28:09:14:2f:b9:4f:f9:f2:1c:cd:0b: 33:64:00:a3:ad:97:4a:d7:9e:90:19:d4:11:17:3b: 5b:dc:54:99:30:c0:eb:74:fb:b6:ae:ef:71:c0:ee: 10:c9:85:a7:5c:b3:d2:0b:91:cf:da:54:b3:0d:a5: e8:08:14:bd:db:d9:5b:f9:34:08:81:b1:29:7a:28: db:3c:b5:5a:ff:b7:34:42:a1:e5:d6:6c:09:64:0c: d3:b9:ac:fe:28:4f:5c:57:61:4a:0d:cf:20:9f:46: 21:4d:4c:5a:2e:c7:67:cd:87:78:78:45:87:99:c4: e0:5c:93:aa:a2:e2:72:4d:7d:e8:f0:46:72:1e:6b: 3a:82:55:e5:ae:97:dd:cb:23:6a:24:02:9e:57:61: 32:22:d6:86:91:3e:54:3b:f3:4d:77:23:28:9b:5f: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:7E:F5:49:A8:B6:1D:F2:24:B2:44:57:18:32:0B:36:B1:E5:5A X509v3 Authority Key Identifier: keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7d:d2:ba:9a:e0:08:15:a1:8a:b7:20:a6:b3:94:8d:13:f1: 5b:c3:ce:c7:51:24:64:c8:e7:da:ea:6f:9d:e2:f6:91:60:df: 83:30:a3:ec:51:66:6b:83:46:61:b4:18:54:6f:f7:4f:4a:98: 5f:34:1f:ad:ba:a8:73:cd:c4:8f:81:78:ba:3d:62:46:5f:a6: bb:4a:98:c3:f3:a0:7c:c9:d8:a0:34:58:da:d9:9c:e1:9b:e8: 03:b0:2c:53:61:e4:9c:cb:d6:6f:99:d8:b6:e5:c8:f1:99:de: d0:34:7e:a2:49:40:f1:4f:9b:8a:b6:a1:59:06:ff:7d:34:eb: a5:ab:a5:fe:e7:f7:1d:96:11:8b:37:df:b5:5b:c6:2f:30:e5: b3:2c:68:8f:53:59:eb:25:1a:a3:af:84:96:1f:72:e7:6d:70: 49:03:ab:a0:b2:0a:60:f7:84:5a:6e:35:a4:3d:24:b9:26:6b: 35:fc:47:d8:90:0d:5c:05:22:31:2e:81:22:0e:01:1d:74:f6: 0c:22:8e:3b:71:f9:ff:e7:ad:bf:2e:2f:c9:5e:d3:21:c4:08: fb:4c:29:13:20:f8:58:a5:9f:32:b6:ec:f5:b9:8d:e8:c0:f6: f5:be:84:89:0a:fd:ed:2a:50:c5:3e:25:bf:35:45:6a:3e:e9: 52:61:07:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbjhuungpm0i20/dnpyGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmU2ZDAxMDI5OThjMzg2ZjhkODU2ZmE1ZjkxZDdhZDNh YjRkNzcwHhcNMjUxMjIyMDUwMDMyWhcNMjUxMjIzMDUwMDMyWjAzMTEwLwYDVQQD Eyg5ZDlhN2VmNTQ5YThiNjFkZjIyNGIyNDQ1NzE4MzIwYjM2YjFlNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw8E8UvsyWWsrU/1Q6cTCVh6rP7c tAgDXL9QPH1DM1iMfiz4vsLtpR3GYXgFplxUaF0k65l6lQoDBkQZXEfw+XGjJST7 Xcf+3ORmenTbobbs2726wLaRU/pVrWA8KAkUL7lP+fIczQszZACjrZdK156QGdQR Fztb3FSZMMDrdPu2ru9xwO4QyYWnXLPSC5HP2lSzDaXoCBS929lb+TQIgbEpeijb PLVa/7c0QqHl1mwJZAzTuaz+KE9cV2FKDc8gn0YhTUxaLsdnzYd4eEWHmcTgXJOq ouJyTX3o8EZyHms6glXlrpfdyyNqJAKeV2EyItaGkT5UO/NNdyMom19XswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2afvVJqLYd8iSyRFcYMgs2seVaMB8GA1UdIwQY MBaAFEH+bQECmYw4b42Fb6X5HXrTq013MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEt OGNiNmQwZTVjY2UyLzEvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEtOGNiNmQwZTVjY2Uy LzEvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX3Suprg CBWhircgprOUjRPxW8POx1EkZMjn2upvneL2kWDfgzCj7FFma4NGYbQYVG/3T0qY XzQfrbqoc83Ej4F4uj1iRl+mu0qYw/OgfMnYoDRY2tmc4ZvoA7AsU2HknMvWb5nY tuXI8Zne0DR+oklA8U+birahWQb/fTTrpaul/uf3HZYRizfftVvGLzDlsyxoj1NZ 6yUao6+Elh9y521wSQOroLIKYPeEWm41pD0kuSZrNfxH2JANXAUiMS6BIg4BHXT2 DCKOO3H5/+etvy4vyV7TIcQI+0wpEyD4WKWfMrbs9bmN6MD29b6EiQr97SpQxT4l vzVFaj7pUmEHXQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:46 2025 by rpki-client