This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json) Hash identifier: fMcjdnkgB2hGMhPADQnghPSl2FegpAHAx2YIWrToEF8= Subject key identifier: 8C:20:17:3B:D5:32:A4:F9:33:07:F8:59:DC:CC:25:FC:09:63:BA:A5 Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Certificate serial: 019B3CEBD7BCDADCD5BFC00FCA1EA8F86477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft Manifest number: 0E1D Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=) 2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=) 3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: p9ZfXNpBlJhwmOotCzd1pR17gU46wrxX5ye0oMVyG+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d7:bc:da:dc:d5:bf:c0:0f:ca:1e:a8:f8:64:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=8c20173bd532a4f93307f859dccc25fc0963baa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:f8:80:e5:7c:ba:9c:25:07:de:2f:17:76: a1:6e:2b:5b:90:76:0c:d7:11:6c:3c:13:c2:c2:b5: 0f:85:66:46:dd:ac:3d:f5:8f:5d:33:d1:0e:59:55: 81:1c:31:ec:db:ee:6a:c7:00:50:dc:66:f8:0a:c8: 41:96:4a:bb:09:a9:03:5d:53:ab:f6:a2:df:74:bb: 81:f1:4f:0a:8b:93:5b:a5:3c:29:de:59:ce:4b:7a: f9:1c:9d:16:cc:50:45:bd:24:07:ff:ca:06:88:e5: 2a:bd:f4:b9:4f:ea:fb:ef:09:b7:22:cb:98:ca:0c: db:4b:63:2c:f0:48:aa:d8:31:da:fd:47:d6:53:de: 8c:25:da:aa:6d:35:40:82:56:5a:c4:14:1c:e4:b7: 35:59:c0:e7:68:1f:92:76:c1:33:db:ba:0d:01:1b: 0f:3b:0e:81:90:aa:3a:9d:05:e2:e6:5e:71:77:1d: cb:c7:22:39:cc:4d:73:c1:67:f3:3c:2f:a4:cd:d7: 6a:64:c9:89:7e:ba:7c:fb:2c:36:6a:87:c6:00:5e: aa:16:3f:d2:9b:f0:a8:a8:d8:dd:b1:6b:5b:d5:15: e3:22:4b:9f:7e:59:62:ac:28:03:a0:fb:59:9c:5b: 85:76:77:73:fa:6a:a7:af:a5:92:e4:41:b1:08:21: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:20:17:3B:D5:32:A4:F9:33:07:F8:59:DC:CC:25:FC:09:63:BA:A5 X509v3 Authority Key Identifier: keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:e1:cc:b4:fb:24:5a:1f:77:c0:71:f7:47:ba:1c:41:44: dc:10:8e:2d:ef:60:ed:1b:49:1e:3e:74:17:98:35:57:a4:ad: ea:8b:80:1f:74:53:79:d4:c3:f2:fd:cf:99:7a:8f:f1:0c:10: 8c:60:91:a6:7d:42:e3:60:91:6a:f1:89:7f:81:4f:59:4b:82: 67:d6:b3:8f:5b:eb:b4:23:bd:ac:47:b3:d3:2d:63:6a:e0:b8: d9:51:f1:67:f6:ec:4b:40:8c:d3:8a:b3:18:2b:c7:10:58:7b: 05:3e:73:92:91:ad:54:10:d3:2a:92:26:8c:3b:5d:56:18:e3: b0:fb:18:d6:89:11:3d:1b:52:be:8f:ee:5e:52:a6:45:18:99: 04:5f:cf:29:72:15:1e:45:f2:ca:5c:59:95:62:ef:71:be:b5: b7:ac:d9:23:5e:16:3a:2e:76:ec:cf:0e:c1:3d:bf:95:c5:ab: 50:4c:c7:62:b0:9d:07:22:6e:a8:56:7f:d8:af:f8:55:74:6d: ea:7b:fe:13:c9:c7:93:69:e5:5f:35:72:21:b8:df:38:e1:71: a2:e6:9b:55:26:42:1a:b3:a6:60:c1:46:ec:96:e8:b3:ef:ff: 6f:5a:1d:be:09:5d:90:23:44:91:f2:47:68:2b:52:b6:cc:65: 51:5b:4b:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869e82tzVv8APyh6o+GR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2 MTljY2QwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD Eyg4YzIwMTczYmQ1MzJhNGY5MzMwN2Y4NTlkY2NjMjVmYzA5NjNiYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywP4gOV8upwlB94vF3ahbitbkHYM 1xFsPBPCwrUPhWZG3aw99Y9dM9EOWVWBHDHs2+5qxwBQ3Gb4CshBlkq7CakDXVOr 9qLfdLuB8U8Ki5NbpTwp3lnOS3r5HJ0WzFBFvSQH/8oGiOUqvfS5T+r77wm3IsuY ygzbS2Ms8Eiq2DHa/UfWU96MJdqqbTVAglZaxBQc5Lc1WcDnaB+SdsEz27oNARsP Ow6BkKo6nQXi5l5xdx3LxyI5zE1zwWfzPC+kzddqZMmJfrp8+yw2aofGAF6qFj/S m/CoqNjdsWtb1RXjIkuffllirCgDoPtZnFuFdndz+mqnr6WS5EGxCCFJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwgFzvVMqT5Mwf4WdzMJfwJY7qlMB8GA1UdIwQY MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsHhzLT7 JFofd8Bx90e6HEFE3BCOLe9g7RtJHj50F5g1V6St6ouAH3RTedTD8v3PmXqP8QwQ jGCRpn1C42CRavGJf4FPWUuCZ9azj1vrtCO9rEez0y1jauC42VHxZ/bsS0CM04qz GCvHEFh7BT5zkpGtVBDTKpImjDtdVhjjsPsY1okRPRtSvo/uXlKmRRiZBF/PKXIV HkXyylxZlWLvcb61t6zZI14WOi527M8OwT2/lcWrUEzHYrCdByJuqFZ/2K/4VXRt 6nv+E8nHk2nlXzVyIbjfOOFxouabVSZCGrOmYMFG7Jbos+//b1odvgldkCNEkfJH aCtStsxlUVtLbw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:03 2025 by rpki-client