This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json) Hash identifier: 56WtGogok7Ue9mZeK7WDnFwSOrG0mblhjn4ED5rGVrg= Subject key identifier: B5:44:55:9A:B4:2C:3B:3C:2C:43:3F:70:0F:18:2C:E2:79:CF:A3:47 Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Certificate serial: 019B405AB154CA3635AE99C1E88EF960F13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:00:43 +0000 Manifest this update: Sun 21 Dec 2025 10:00:43 +0000 Manifest next update: Mon 22 Dec 2025 10:00:43 +0000 Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=) 2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: gungukAhsUpy76zT6xl12cFSZaBfoPTDjjdkGlZlbpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:b1:54:ca:36:35:ae:99:c1:e8:8e:f9:60:f1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Validity Not Before: Dec 21 10:00:43 2025 GMT Not After : Dec 22 10:00:43 2025 GMT Subject: CN=b544559ab42c3b3c2c433f700f182ce279cfa347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:27:4c:1d:e5:73:c8:91:f8:97:b9:40:ab: 31:a8:e6:ed:1e:53:c3:db:20:97:af:c8:0a:e7:ce: 71:26:67:3b:6f:e0:f3:ba:d3:26:01:ca:23:66:2c: d1:36:36:5e:a9:21:5b:eb:33:77:da:80:84:e0:0b: 65:ff:c5:e9:9c:c1:c4:64:bc:5f:3f:57:b9:91:59: b2:b4:a6:c4:3a:29:ba:c7:8c:d7:77:49:8a:16:04: c9:b4:04:fd:90:09:7c:04:bc:44:fe:fc:32:7d:89: bb:9f:1f:2f:f5:f7:3a:4a:45:ea:63:12:bb:a1:c7: e7:fa:90:f5:0f:2f:59:d4:d8:63:fb:48:ad:13:d1: 36:ee:94:91:5d:8d:c1:91:c2:f3:24:32:df:23:c2: 93:69:7e:00:d3:2d:3d:0c:c1:f8:bc:37:e1:5d:7d: 7b:bf:0a:48:a0:8c:2a:c8:3b:7b:59:dc:3a:22:4c: dc:76:07:6b:51:c0:f0:e2:0b:9e:55:45:5a:36:1f: 4c:65:11:88:c5:31:e1:15:a9:7c:e0:d7:0f:ab:50: 39:9d:9b:56:1f:31:5f:97:c0:f4:44:db:43:f1:00: 99:21:30:04:69:5b:77:cc:9a:44:14:fc:a6:43:d3: 6d:7f:4c:9f:fb:55:49:ac:40:39:25:20:9d:db:a7: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:44:55:9A:B4:2C:3B:3C:2C:43:3F:70:0F:18:2C:E2:79:CF:A3:47 X509v3 Authority Key Identifier: keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:0b:6d:ca:10:7e:4e:d4:20:ca:ca:9c:c7:6a:be:76:b1: 0c:66:66:35:04:75:3a:7f:65:c7:0a:6b:58:d0:ac:81:fe:a9: 5e:5b:07:d1:e7:1d:98:6a:9b:ef:9e:be:46:b6:5c:c4:c9:8f: c9:75:0d:00:c3:c3:e8:9b:24:59:6e:14:62:43:72:d4:2f:a6: 69:bb:97:c0:d6:09:07:b6:3a:c5:2f:ea:c1:cc:b1:e6:aa:2c: 55:d8:bd:05:67:9f:7a:4f:7a:f5:ad:08:3a:1a:07:a4:22:90: e3:7c:a8:09:80:87:59:a8:62:61:04:70:7b:e6:53:45:85:91: c2:7e:82:16:7f:25:b6:ae:b5:5b:cc:9a:52:49:d7:e8:39:f7: 59:da:09:f9:98:c8:b4:a1:0c:ca:2d:6c:3a:2f:8d:5c:a8:84: a3:32:5d:82:8b:31:78:ec:3f:83:2c:51:77:40:22:70:ab:2a: 49:e8:dc:ff:6c:58:db:3e:15:47:a0:a9:90:fc:2e:4e:d9:23: ba:6a:09:36:ef:17:ba:57:ef:8e:01:0c:a7:55:0c:79:cb:f9: d3:8b:6f:bb:92:a1:dd:7f:56:6f:dd:1a:43:61:9f:21:f6:8f: a6:fa:9a:37:7b:a8:18:0d:b9:88:4a:3b:05:0d:f4:fd:3b:6d: c8:db:46:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWrFUyjY1rpnB6I75YPE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi YzY5NzgwHhcNMjUxMjIxMTAwMDQzWhcNMjUxMjIyMTAwMDQzWjAzMTEwLwYDVQQD EyhiNTQ0NTU5YWI0MmMzYjNjMmM0MzNmNzAwZjE4MmNlMjc5Y2ZhMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfMnTB3lc8iR+Je5QKsxqObtHlPD 2yCXr8gK585xJmc7b+DzutMmAcojZizRNjZeqSFb6zN32oCE4Atl/8XpnMHEZLxf P1e5kVmytKbEOim6x4zXd0mKFgTJtAT9kAl8BLxE/vwyfYm7nx8v9fc6SkXqYxK7 ocfn+pD1Dy9Z1Nhj+0itE9E27pSRXY3BkcLzJDLfI8KTaX4A0y09DMH4vDfhXX17 vwpIoIwqyDt7Wdw6IkzcdgdrUcDw4gueVUVaNh9MZRGIxTHhFal84NcPq1A5nZtW HzFfl8D0RNtD8QCZITAEaVt3zJpEFPymQ9Ntf0yf+1VJrEA5JSCd26dgIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVEVZq0LDs8LEM/cA8YLOJ5z6NHMB8GA1UdIwQY MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1 LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwYLbcoQ fk7UIMrKnMdqvnaxDGZmNQR1On9lxwprWNCsgf6pXlsH0ecdmGqb756+RrZcxMmP yXUNAMPD6JskWW4UYkNy1C+mabuXwNYJB7Y6xS/qwcyx5qosVdi9BWefek969a0I OhoHpCKQ43yoCYCHWahiYQRwe+ZTRYWRwn6CFn8ltq61W8yaUknX6Dn3WdoJ+ZjI tKEMyi1sOi+NXKiEozJdgosxeOw/gyxRd0AicKsqSejc/2xY2z4VR6CpkPwuTtkj umoJNu8XulfvjgEMp1UMecv504tvu5Kh3X9Wb90aQ2GfIfaPpvqaN3uoGA25iEo7 BQ30/TttyNtGLg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:15 2025 by rpki-client