This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json) Hash identifier: 7QOcGSsh9lzx6H8YcPi0PLaz7BN890SEYFNfF4L+d0k= Subject key identifier: 34:76:CF:84:05:39:F3:14:D6:47:7C:2D:3E:80:50:0E:7A:18:AB:51 Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169 Certificate serial: 019B3E6D52D393F46B3AAB451DC5A805FAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 01:01:50 +0000 Manifest this update: Sun 21 Dec 2025 01:01:50 +0000 Manifest next update: Mon 22 Dec 2025 01:01:50 +0000 Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=) 2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=) 3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=) 4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: oyLeInRbh2eMpN+rCMiBujTz+rrwu80ydCTnp7wpvGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:52:d3:93:f4:6b:3a:ab:45:1d:c5:a8:05:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169 Validity Not Before: Dec 21 01:01:50 2025 GMT Not After : Dec 22 01:01:50 2025 GMT Subject: CN=3476cf840539f314d6477c2d3e80500e7a18ab51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:4c:63:50:fe:e9:c2:78:35:af:71:d3:c4: a1:9b:40:18:94:3f:0b:33:9a:77:92:7b:71:4d:37: cd:a2:b3:96:31:6b:ff:cc:1a:58:57:1b:06:6b:e8: a2:05:82:47:eb:3e:bf:0c:16:4b:d0:9e:4d:ee:c3: 6e:de:25:1c:a1:62:84:43:24:16:3a:22:47:c8:c9: 7a:8c:2e:d1:1c:09:e6:15:ca:c5:41:b2:69:56:b3: d6:94:f0:c6:7a:c6:9a:a9:32:ae:43:0b:eb:32:3a: e3:37:32:59:ac:ae:00:7a:94:ee:81:86:3a:c9:72: d4:89:6b:db:ca:0b:74:0e:76:8f:c4:e3:f4:97:49: 11:4a:b5:1a:0f:c4:68:5f:73:13:02:04:9b:e1:2e: ee:a0:ce:68:e0:71:af:97:0e:1f:db:90:4d:53:5c: 15:74:7e:80:9f:cb:79:1d:fb:75:f4:42:28:f2:07: 1b:5b:e8:3b:48:3f:90:98:65:b4:b4:47:48:7f:be: 97:40:5f:a6:37:03:89:7d:66:9c:e0:50:26:c0:67: f6:ef:72:60:9a:a0:9a:43:4a:19:ee:a0:9a:31:d2: 07:fc:3b:bf:b0:f9:5e:06:d2:a0:98:69:df:0a:0d: ef:de:2d:41:68:63:41:95:e4:76:36:28:5d:ca:7b: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:76:CF:84:05:39:F3:14:D6:47:7C:2D:3E:80:50:0E:7A:18:AB:51 X509v3 Authority Key Identifier: keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:a4:76:e4:6a:91:f7:28:23:13:2a:9b:67:8e:e8:64:43: f4:e4:bd:7d:54:f6:0e:d9:b2:2d:81:e3:51:c1:83:b9:31:d9: f1:2b:ab:15:51:1d:19:62:9b:1b:69:4d:22:a9:f3:5e:84:7f: 74:62:62:67:e8:75:32:10:9f:f5:63:62:d7:68:17:b9:ac:fb: 4e:f3:79:44:b5:38:ee:33:59:9d:54:a6:27:ae:57:9f:d5:4f: 5c:75:b9:2e:f2:f7:b3:8a:f9:9f:e2:fa:0d:ae:5a:11:d2:50: a1:03:36:a8:9c:23:57:6c:8b:69:86:6c:b5:c2:8f:ec:2d:00: ac:28:e1:5c:7e:1d:5c:86:be:5b:5d:0b:b8:5e:84:f5:b5:ab: 35:1c:20:91:b5:44:20:91:f7:7a:48:f0:53:2a:13:14:14:c3: 73:3e:d6:ad:56:2b:24:52:3c:7e:0b:ba:cb:78:eb:48:be:e2: 05:ff:f3:3b:76:08:7a:10:7a:64:12:47:d1:01:6c:79:5a:9e: f7:22:92:09:09:66:c5:c9:2e:88:12:ce:f6:b6:6f:ea:41:16: 52:b9:95:c3:5c:21:d2:13:cf:12:0b:76:ce:09:e7:32:30:21: 51:39:db:a3:e3:4c:ea:82:6f:35:2b:71:72:86:ce:96:27:81: ba:60:2f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVLTk/RrOqtFHcWoBfrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5 ZWMxNjkwHhcNMjUxMjIxMDEwMTUwWhcNMjUxMjIyMDEwMTUwWjAzMTEwLwYDVQQD EygzNDc2Y2Y4NDA1MzlmMzE0ZDY0NzdjMmQzZTgwNTAwZTdhMThhYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNNMY1D+6cJ4Na9x08Shm0AYlD8L M5p3kntxTTfNorOWMWv/zBpYVxsGa+iiBYJH6z6/DBZL0J5N7sNu3iUcoWKEQyQW OiJHyMl6jC7RHAnmFcrFQbJpVrPWlPDGesaaqTKuQwvrMjrjNzJZrK4AepTugYY6 yXLUiWvbygt0DnaPxOP0l0kRSrUaD8RoX3MTAgSb4S7uoM5o4HGvlw4f25BNU1wV dH6An8t5Hft19EIo8gcbW+g7SD+QmGW0tEdIf76XQF+mNwOJfWac4FAmwGf273Jg mqCaQ0oZ7qCaMdIH/Du/sPleBtKgmGnfCg3v3i1BaGNBleR2Nihdyntn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR2z4QFOfMU1kd8LT6AUA56GKtRMB8GA1UdIwQY MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDKkduRq kfcoIxMqm2eO6GRD9OS9fVT2DtmyLYHjUcGDuTHZ8SurFVEdGWKbG2lNIqnzXoR/ dGJiZ+h1MhCf9WNi12gXuaz7TvN5RLU47jNZnVSmJ65Xn9VPXHW5LvL3s4r5n+L6 Da5aEdJQoQM2qJwjV2yLaYZstcKP7C0ArCjhXH4dXIa+W10LuF6E9bWrNRwgkbVE IJH3ekjwUyoTFBTDcz7WrVYrJFI8fgu6y3jrSL7iBf/zO3YIehB6ZBJH0QFseVqe 9yKSCQlmxckuiBLO9rZv6kEWUrmVw1wh0hPPEgt2zgnnMjAhUTnbo+NM6oJvNStx cobOlieBumAv4g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:27 2025 by rpki-client