This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json) Hash identifier: xHYCmN+/GALOhteEwkKMBS85whj7EKq8Av63MZMtokE= Subject key identifier: 8A:46:C3:CD:44:C4:F1:DA:73:DA:BD:8B:F0:EC:88:99:63:B7:1E:8B Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B3C46EAB8DE47D58B4249CEC8FDC82D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 15:00:38 +0000 Manifest this update: Sat 20 Dec 2025 15:00:38 +0000 Manifest next update: Sun 21 Dec 2025 15:00:38 +0000 Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=) 2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=) 3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=) 4: X0xBUO01yDVN5CRqvm4XAUfMOJU.roa (hash: 4DOTlT3v5tZvSddUKapPHYVNXtvABPFyf5Abe5iqGYM=) 5: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=) 6: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=) 7: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=) 8: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=) 9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: KRMTKz5xDcMG1UzR/aMj80K1rjYRgpZVUvTLLrtzjow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:ea:b8:de:47:d5:8b:42:49:ce:c8:fd:c8:2d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Dec 20 15:00:38 2025 GMT Not After : Dec 21 15:00:38 2025 GMT Subject: CN=8a46c3cd44c4f1da73dabd8bf0ec889963b71e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:13:2c:38:8d:e9:83:14:1c:63:9a:af:75: b0:d7:f4:85:a7:5e:63:35:90:b5:7e:db:be:4c:bf: dc:bb:40:cd:aa:3e:6e:97:a2:70:74:50:00:ba:0f: d7:d0:e2:c4:3e:c9:c3:5b:47:c7:5a:4b:a6:08:04: 8b:c3:0d:df:12:2b:79:4a:2e:34:56:73:df:eb:df: 81:dd:f2:98:c8:e6:a4:32:86:c8:5e:de:22:33:69: 47:cf:e9:7f:83:4b:1f:87:de:ee:6b:0e:c1:4d:28: 72:02:b6:8a:e4:71:63:3f:0d:1a:10:99:a2:d6:77: 24:a6:4e:cd:17:b0:0d:5d:51:0c:db:9e:ab:c2:ec: 5b:04:e1:ad:99:5f:bb:86:65:a9:11:38:de:fc:0c: 9d:18:62:44:cf:48:c3:6a:1e:99:4c:57:d5:94:d4: 66:1c:05:3c:65:ba:bf:11:2f:f9:ef:92:ef:ea:ce: d1:23:21:49:7c:84:15:8e:62:98:84:02:65:c6:cc: a2:e3:fc:5d:08:8b:54:16:0c:f4:85:72:b8:8f:3f: f1:95:69:72:74:d5:33:f6:6d:0b:08:de:f8:65:b8: 5c:1e:c1:70:61:5c:05:f0:b4:ec:db:ca:54:dd:09: de:71:fe:dd:33:9d:31:75:72:9c:7a:2e:fb:8f:38: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:C3:CD:44:C4:F1:DA:73:DA:BD:8B:F0:EC:88:99:63:B7:1E:8B X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:80:7b:11:e3:da:9b:56:24:79:61:6a:43:82:93:1e:a8:50: dc:5a:60:d5:fe:99:ff:78:4f:a4:61:fa:7a:aa:99:6e:c2:92: 25:32:17:a9:28:54:1a:7f:21:bf:bc:2d:e1:41:4d:cc:cf:a8: 8a:d6:dd:6c:82:b4:51:3e:56:15:f6:f5:e6:bc:03:f9:ec:67: cf:c5:e5:39:a5:7e:2c:42:0c:21:8b:2d:3c:11:89:30:c8:78: 7f:53:e7:ee:29:0b:c9:bb:d7:a6:fb:6e:c7:aa:b3:37:e4:a8: 07:13:e3:8d:14:c1:31:65:90:95:b3:12:e6:8b:9f:83:92:bf: de:74:d1:1d:36:64:95:db:05:f8:0e:67:ec:46:7b:d1:54:4f: 56:18:e2:b4:b6:eb:a6:60:f0:00:4c:00:f4:fa:e5:9f:31:3a: b8:7b:65:e7:8c:1f:2d:6f:b0:c2:09:94:a7:17:90:c7:5e:79: 8b:58:3c:de:af:b4:24:97:44:ab:20:1d:a8:e8:c5:5c:bc:01: 9f:15:a4:44:97:1a:1b:6a:e2:86:43:9d:eb:20:38:af:00:15: d3:74:5c:6c:f3:80:11:d9:ab:04:8d:5f:7c:3b:9d:66:b3:78: 2f:fb:c6:0e:24:83:c3:77:50:15:28:41:4e:da:de:d9:e7:cc: d0:78:ee:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Ruq43kfVi0JJzsj9yC2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjUxMjIwMTUwMDM4WhcNMjUxMjIxMTUwMDM4WjAzMTEwLwYDVQQD Eyg4YTQ2YzNjZDQ0YzRmMWRhNzNkYWJkOGJmMGVjODg5OTYzYjcxZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xsTLDiN6YMUHGOar3Ww1/SFp15j NZC1ftu+TL/cu0DNqj5ul6JwdFAAug/X0OLEPsnDW0fHWkumCASLww3fEit5Si40 VnPf69+B3fKYyOakMobIXt4iM2lHz+l/g0sfh97uaw7BTShyAraK5HFjPw0aEJmi 1nckpk7NF7ANXVEM256rwuxbBOGtmV+7hmWpETje/AydGGJEz0jDah6ZTFfVlNRm HAU8Zbq/ES/575Lv6s7RIyFJfIQVjmKYhAJlxsyi4/xdCItUFgz0hXK4jz/xlWly dNUz9m0LCN74ZbhcHsFwYVwF8LTs28pU3Qnecf7dM50xdXKcei77jzhkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpGw81ExPHac9q9i/DsiJljtx6LMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4B7EePa m1YkeWFqQ4KTHqhQ3Fpg1f6Z/3hPpGH6eqqZbsKSJTIXqShUGn8hv7wt4UFNzM+o itbdbIK0UT5WFfb15rwD+exnz8XlOaV+LEIMIYstPBGJMMh4f1Pn7ikLybvXpvtu x6qzN+SoBxPjjRTBMWWQlbMS5oufg5K/3nTRHTZkldsF+A5n7EZ70VRPVhjitLbr pmDwAEwA9PrlnzE6uHtl54wfLW+wwgmUpxeQx155i1g83q+0JJdEqyAdqOjFXLwB nxWkRJcaG2rihkOd6yA4rwAV03RcbPOAEdmrBI1ffDudZrN4L/vGDiSDw3dQFShB Ttre2efM0HjupQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:39 2025 by rpki-client