This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json) Hash identifier: 4pZZUfRkkQBpThoOtrG53iZxMm46iSsOdRUjfx81dLg= Subject key identifier: 2C:1E:57:C3:92:E3:24:8E:0E:44:A3:28:E7:A8:2D:BA:27:DE:47:D1 Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc Certificate serial: 019B544F91D8CBAB7BCFE30AA5E2852B52FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft Manifest number: 0372 Signing time: Thu 25 Dec 2025 07:00:59 +0000 Manifest this update: Thu 25 Dec 2025 07:00:59 +0000 Manifest next update: Fri 26 Dec 2025 07:00:59 +0000 Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: CmVldtimxpUaIokXQxYP0n+vESa2EwaAHi2tpDNT6Hg=) 2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:91:d8:cb:ab:7b:cf:e3:0a:a5:e2:85:2b:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc Validity Not Before: Dec 25 07:00:59 2025 GMT Not After : Dec 26 07:00:59 2025 GMT Subject: CN=2c1e57c392e3248e0e44a328e7a82dba27de47d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:05:ee:87:f1:28:11:ff:01:6d:d6:0a:de: 92:ac:99:c9:9e:63:a9:d4:77:ab:e8:d0:be:bc:c7: 6b:6c:b5:d6:fe:ca:e0:bd:f0:2a:ad:60:d7:06:6d: 87:5a:4e:33:e6:0e:9f:37:bb:a5:4a:83:91:9f:ba: cd:26:7a:00:a9:7e:17:da:6c:78:72:2c:c2:75:ad: 0d:a7:39:2d:2c:d8:13:3e:a9:f8:92:80:ad:8f:42: 5e:85:f7:73:82:84:07:5a:9f:7e:44:db:74:5a:a2: 70:21:44:52:8c:38:f8:7b:1d:96:cb:be:f0:ca:06: 49:40:85:9c:ee:af:73:47:05:21:2d:3d:dd:be:9b: f3:ab:3b:98:2f:c4:29:08:ba:b9:3d:c0:3f:e0:ca: 2f:66:e9:d8:06:e7:11:65:c7:9f:02:05:b8:b8:5a: b3:dc:6f:5b:a2:c0:37:5f:fa:31:44:d2:2b:86:66: db:df:78:c7:e0:1d:8e:ec:f8:6e:b8:a9:03:09:08: 69:24:31:83:95:87:ca:3a:3d:9f:ba:dd:2e:3a:55: c8:b2:f2:2c:d2:ad:8b:66:d7:bd:58:66:f9:82:28: ee:89:c0:5d:de:c0:3a:d4:19:ba:d7:e8:22:bd:c2: 1f:90:da:cc:34:86:99:39:87:1b:22:01:ed:5c:41: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:57:C3:92:E3:24:8E:0E:44:A3:28:E7:A8:2D:BA:27:DE:47:D1 X509v3 Authority Key Identifier: keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d3:ff:89:71:c3:37:06:32:fd:90:21:01:46:38:9f:44:94: da:84:f5:96:4c:ee:60:47:a4:93:d0:47:58:2f:0a:84:d3:21: f4:71:1a:00:80:af:67:d3:f2:79:2d:fc:df:35:24:f7:ca:9a: fc:d4:e6:ca:2f:61:c5:04:65:e8:7b:ec:d4:09:2d:86:6f:42: 58:00:09:5e:33:23:1b:f4:d3:1b:a5:42:78:cb:66:26:8c:13: d2:5f:0c:04:76:6d:3b:3d:55:6f:1e:6c:e4:7d:2a:26:0e:b6: d8:44:bb:91:5f:85:1c:e4:2f:4e:74:34:a1:6e:92:ce:59:b4: e9:11:7f:db:ea:2b:47:eb:16:76:cc:b8:7d:20:c0:87:7f:7b: b1:d9:5f:b9:7f:ce:c2:77:87:ce:63:a3:27:3e:89:79:99:3f: ff:a9:18:4f:c0:d4:6b:59:a8:e7:a9:ac:2c:75:a7:ff:eb:d8: cb:60:a4:40:41:2f:37:ff:8a:1d:1e:9b:ee:d6:22:4b:72:ec: aa:6c:c8:50:44:8e:3c:5a:bf:94:bb:71:c6:04:fe:14:bb:7f: 57:eb:2e:a3:e0:cc:0b:95:8f:22:6d:73:c8:2e:d5:23:ff:4d: 3a:67:07:44:cd:6e:48:47:a9:b4:68:09:09:f0:57:1c:b7:c7: c0:44:39:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT5HYy6t7z+MKpeKFK1L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTY4OTJkMDdhMDA5MDZiMWI3YWQ0YmY4NTBkOGJmODA4 ODZmYmMwHhcNMjUxMjI1MDcwMDU5WhcNMjUxMjI2MDcwMDU5WjAzMTEwLwYDVQQD EygyYzFlNTdjMzkyZTMyNDhlMGU0NGEzMjhlN2E4MmRiYTI3ZGU0N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HwF7ofxKBH/AW3WCt6SrJnJnmOp 1Her6NC+vMdrbLXW/srgvfAqrWDXBm2HWk4z5g6fN7ulSoORn7rNJnoAqX4X2mx4 cizCda0NpzktLNgTPqn4koCtj0JehfdzgoQHWp9+RNt0WqJwIURSjDj4ex2Wy77w ygZJQIWc7q9zRwUhLT3dvpvzqzuYL8QpCLq5PcA/4MovZunYBucRZcefAgW4uFqz 3G9bosA3X/oxRNIrhmbb33jH4B2O7PhuuKkDCQhpJDGDlYfKOj2fut0uOlXIsvIs 0q2LZte9WGb5gijuicBd3sA61Bm61+givcIfkNrMNIaZOYcbIgHtXEEe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCweV8OS4ySODkSjKOeoLbon3kfRMB8GA1UdIwQY MBaAFEGWiS0HoAkGsbetS/hQ2L+AiG+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEt ZGVlMzMzM2MzNjdiLzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEtZGVlMzMzM2MzNjdi LzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdP/iXHD NwYy/ZAhAUY4n0SU2oT1lkzuYEekk9BHWC8KhNMh9HEaAICvZ9PyeS383zUk98qa /NTmyi9hxQRl6Hvs1Akthm9CWAAJXjMjG/TTG6VCeMtmJowT0l8MBHZtOz1Vbx5s 5H0qJg622ES7kV+FHOQvTnQ0oW6Szlm06RF/2+orR+sWdsy4fSDAh397sdlfuX/O wneHzmOjJz6JeZk//6kYT8DUa1mo56msLHWn/+vYy2CkQEEvN/+KHR6b7tYiS3Ls qmzIUESOPFq/lLtxxgT+FLt/V+suo+DMC5WPIm1zyC7VI/9NOmcHRM1uSEeptGgJ CfBXHLfHwEQ5Pw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:40:16 2025 by rpki-client