This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json) Hash identifier: qjjLus0mAhcJVG7Nint1GgvEbGL3K5r8f2RNBTqCIC0= Subject key identifier: 41:22:AD:70:1C:BB:AF:66:2E:FD:03:2B:1E:C2:85:0A:6C:62:BC:52 Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Certificate serial: 019B3946DE33BB71631491C1AD245C4E874C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft Manifest number: 068A Signing time: Sat 20 Dec 2025 01:01:44 +0000 Manifest this update: Sat 20 Dec 2025 01:01:44 +0000 Manifest next update: Sun 21 Dec 2025 01:01:44 +0000 Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=) 2: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (hash: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=) 3: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: rL8cE88vNxbDZvG0IpiZ5nROUIifttSiOCIZQ2T4myo=) 4: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:de:33:bb:71:63:14:91:c1:ad:24:5c:4e:87:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Validity Not Before: Dec 20 01:01:44 2025 GMT Not After : Dec 21 01:01:44 2025 GMT Subject: CN=4122ad701cbbaf662efd032b1ec2850a6c62bc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:16:1f:c7:56:19:76:da:e5:02:78:39:6a: ff:58:aa:c3:28:b1:69:3f:d2:68:74:6a:4e:4a:14: ce:d8:f4:db:28:14:12:9b:f5:12:cb:9d:6e:b2:2f: 90:e1:ab:81:2e:51:bb:44:02:02:c1:95:02:fb:2d: d3:c6:6f:21:39:0b:bc:e1:1b:08:e0:c2:eb:1b:6b: 9c:c5:d6:20:aa:9e:e5:b8:73:92:3c:65:fe:60:b3: ab:4d:31:7e:54:2a:3c:32:df:1c:27:a1:7f:dc:0f: 4a:4a:15:4e:87:07:d4:e5:c2:a5:39:08:cf:c4:3e: 2a:d4:b3:e5:20:14:80:ea:85:9f:06:ec:24:77:2e: d0:eb:06:a4:6f:cb:6f:fa:57:42:c4:45:22:ff:77: eb:13:88:31:88:aa:ee:d7:8a:39:60:f6:18:30:bd: 29:f2:29:96:50:25:97:2d:b5:e7:b3:78:48:b0:ff: 82:32:f9:34:c5:00:26:ea:00:69:c9:6d:3c:5e:05: e9:78:5e:17:11:42:af:0a:98:7d:69:60:88:32:1d: e6:d3:bc:62:e7:72:59:59:96:42:47:62:ce:9e:7f: c6:25:5e:2a:35:e4:d0:a4:d4:52:ea:e0:48:15:40: e5:e8:80:91:03:b4:1c:52:e0:cc:51:0f:b9:ea:7c: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:AD:70:1C:BB:AF:66:2E:FD:03:2B:1E:C2:85:0A:6C:62:BC:52 X509v3 Authority Key Identifier: keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:66:15:3a:7d:92:a1:44:b3:7a:a9:ec:ed:63:18:b6:fd:e8: 79:c0:2c:35:c7:8c:ef:c9:ca:91:71:f8:22:ea:80:62:25:57: 3d:6b:68:ac:f5:60:cc:6f:4c:c3:15:9d:d5:6f:83:cf:0c:31: b0:37:ba:85:ec:9e:59:52:c6:f5:fe:d1:6f:2d:ec:17:c8:07: 29:93:0a:de:04:4f:a9:b5:83:c6:b0:da:7d:92:8e:05:c1:16: d9:95:a3:a6:44:8b:ef:b8:ec:16:e1:70:d7:e6:39:11:e8:d2: 9d:07:60:88:ba:59:f6:a0:77:a6:24:98:a5:a2:74:f5:a4:1d: da:54:2b:89:ee:9e:92:d4:e6:88:d5:8a:81:e4:ed:7e:73:d0: dc:2e:9e:77:6e:5f:df:ca:0d:62:42:0a:ee:ef:a0:26:1b:4f: 5b:4a:eb:b2:e2:8f:dc:52:3b:9e:36:03:7b:b4:c2:09:a7:fb: 59:20:bf:86:19:61:04:c9:a4:43:a5:02:86:88:17:14:f6:b4: 70:20:d9:d1:78:ee:5d:6b:c6:9d:7f:2c:86:60:9e:1b:10:49: 1d:ab:4b:5f:5c:dc:73:1a:1b:86:99:bd:d8:76:a9:d8:62:c9: 87:f0:6c:eb:d2:e6:08:50:c3:9f:98:f4:10:3e:d1:16:ee:f9: 6d:5d:01:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rt4zu3FjFJHBrSRcTodMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw MzBjOWQwHhcNMjUxMjIwMDEwMTQ0WhcNMjUxMjIxMDEwMTQ0WjAzMTEwLwYDVQQD Eyg0MTIyYWQ3MDFjYmJhZjY2MmVmZDAzMmIxZWMyODUwYTZjNjJiYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu04WH8dWGXba5QJ4OWr/WKrDKLFp P9JodGpOShTO2PTbKBQSm/USy51usi+Q4auBLlG7RAICwZUC+y3Txm8hOQu84RsI 4MLrG2ucxdYgqp7luHOSPGX+YLOrTTF+VCo8Mt8cJ6F/3A9KShVOhwfU5cKlOQjP xD4q1LPlIBSA6oWfBuwkdy7Q6wakb8tv+ldCxEUi/3frE4gxiKru14o5YPYYML0p 8imWUCWXLbXns3hIsP+CMvk0xQAm6gBpyW08XgXpeF4XEUKvCph9aWCIMh3m07xi 53JZWZZCR2LOnn/GJV4qNeTQpNRS6uBIFUDl6ICRA7QcUuDMUQ+56nyycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEirXAcu69mLv0DKx7ChQpsYrxSMB8GA1UdIwQY MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1 LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImYVOn2S oUSzeqns7WMYtv3oecAsNceM78nKkXH4IuqAYiVXPWtorPVgzG9MwxWd1W+Dzwwx sDe6heyeWVLG9f7Rby3sF8gHKZMK3gRPqbWDxrDafZKOBcEW2ZWjpkSL77jsFuFw 1+Y5EejSnQdgiLpZ9qB3piSYpaJ09aQd2lQrie6ektTmiNWKgeTtfnPQ3C6ed25f 38oNYkIK7u+gJhtPW0rrsuKP3FI7njYDe7TCCaf7WSC/hhlhBMmkQ6UChogXFPa0 cCDZ0XjuXWvGnX8shmCeGxBJHatLX1zccxobhpm92Hap2GLJh/Bs69LmCFDDn5j0 ED7RFu75bV0BRg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:09 2025 by rpki-client