This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft File: qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json) Hash identifier: Hu2WhWQ2WmW9iULGcBDJnaX04GnhBiUzxjJp9sVsmBY= Subject key identifier: A0:D3:DE:94:1C:F3:F6:E5:0F:62:5F:F4:FA:DC:92:8F:14:51:53:BB Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA Certificate issuer: /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Certificate serial: 019B4514112DFB49F8F862BBCB48B8EF7245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft Manifest number: 0771 Signing time: Mon 22 Dec 2025 08:01:41 +0000 Manifest this update: Mon 22 Dec 2025 08:01:41 +0000 Manifest next update: Tue 23 Dec 2025 08:01:41 +0000 Files and hashes: 1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=) 2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: pNlbxjjalTBpHB1fTPvBX7Np4KhNAm8HCJRwzzb22sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:11:2d:fb:49:f8:f8:62:bb:cb:48:b8:ef:72:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Validity Not Before: Dec 22 08:01:41 2025 GMT Not After : Dec 23 08:01:41 2025 GMT Subject: CN=a0d3de941cf3f6e50f625ff4fadc928f145153bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:86:2a:67:20:ee:02:40:4f:53:88:6a:7d: fe:58:eb:9c:3a:f8:7e:13:9a:7e:71:c3:db:6c:7e: ee:c1:cf:4e:f9:e6:6b:bb:ce:01:41:01:4b:12:19: 62:4c:33:53:fb:02:05:7a:cc:cf:02:e3:6e:80:48: 65:a7:a1:f6:1b:10:b9:ba:60:dc:38:c8:9e:67:a9: 5d:9f:8b:57:c3:d0:9a:80:4f:c3:a6:c7:b7:19:dd: e0:f6:cc:78:23:34:8a:17:6b:29:0b:af:9a:13:b0: 8b:26:52:95:de:47:49:2f:bc:59:bf:4e:95:49:9a: c3:fd:d5:a1:bd:22:aa:e1:e7:89:ec:70:95:9f:92: 37:fa:1a:45:c7:74:72:19:86:27:41:68:1c:51:68: ec:b4:2b:d3:94:58:38:09:81:a5:32:58:e2:b9:6b: ee:27:15:d8:8c:09:32:8b:27:24:c7:fb:0c:1f:97: 69:12:21:1e:6c:2f:a2:36:03:a3:02:7d:18:02:e7: 3d:f7:ca:71:af:2d:d7:74:eb:1b:a7:d8:12:a6:ec: 45:3b:ca:06:d8:2a:89:98:b9:a7:77:ce:8b:c0:6c: 05:7c:aa:7e:9a:d2:23:15:fc:49:e0:be:d1:20:d0: 10:da:f9:31:6d:16:5f:5b:64:e9:60:59:bf:22:91: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:DE:94:1C:F3:F6:E5:0F:62:5F:F4:FA:DC:92:8F:14:51:53:BB X509v3 Authority Key Identifier: keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:49:34:f6:c0:28:fb:69:53:c5:2e:d9:41:c6:50:16:50: a9:42:21:48:ee:15:8f:6c:da:fe:b5:b6:23:82:85:9a:78:05: 47:e1:a8:e3:d2:d6:49:c0:04:b6:bd:96:a1:7a:8c:77:6f:b7: 93:a1:93:22:95:36:e4:26:1e:41:dd:d8:fe:8e:4e:c8:5d:7d: d0:67:b4:7e:65:19:62:8a:42:bf:83:28:91:d0:98:46:27:9f: ae:07:90:fe:92:95:1d:57:05:b1:ec:ea:62:24:6e:7c:99:b6: 2e:5b:4a:20:9b:a7:c7:1e:05:24:a8:5c:d6:ae:fb:b6:73:4f: c1:ed:78:3a:2e:ec:3b:21:30:f8:33:ba:a4:94:d7:6d:8d:01: e1:38:95:07:f2:bf:4e:e1:24:4e:c3:e1:91:5a:9b:e0:87:79: 69:dc:8e:37:98:47:5b:d8:b4:19:17:55:51:50:6c:21:c4:2b: b5:6f:a7:3e:57:a7:bb:e2:47:52:75:0e:27:e6:80:f3:03:45: 6a:b7:5b:14:08:e5:43:51:c9:e0:38:d9:68:63:cf:82:d7:13: 7d:8a:c0:de:05:fd:08:f5:fe:c6:a5:ee:f5:ba:c0:c5:d7:1c: 96:02:64:b9:91:59:0d:fc:77:09:4a:e9:ac:10:fc:50:28:03: e8:91:e4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFBEt+0n4+GK7y0i473JFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZmI4MzFmNWJkNmMwYzIwYjhlMDliZTUxMWMyMWJlN2Rj NWRlYmEwHhcNMjUxMjIyMDgwMTQxWhcNMjUxMjIzMDgwMTQxWjAzMTEwLwYDVQQD EyhhMGQzZGU5NDFjZjNmNmU1MGY2MjVmZjRmYWRjOTI4ZjE0NTE1M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPWGKmcg7gJAT1OIan3+WOucOvh+ E5p+ccPbbH7uwc9O+eZru84BQQFLEhliTDNT+wIFeszPAuNugEhlp6H2GxC5umDc OMieZ6ldn4tXw9CagE/Dpse3Gd3g9sx4IzSKF2spC6+aE7CLJlKV3kdJL7xZv06V SZrD/dWhvSKq4eeJ7HCVn5I3+hpFx3RyGYYnQWgcUWjstCvTlFg4CYGlMljiuWvu JxXYjAkyiyckx/sMH5dpEiEebC+iNgOjAn0YAuc998pxry3XdOsbp9gSpuxFO8oG 2CqJmLmnd86LwGwFfKp+mtIjFfxJ4L7RINAQ2vkxbRZfW2TpYFm/IpFeXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDT3pQc8/blD2Jf9Prcko8UUVO7MB8GA1UdIwQY MBaAFKj7gx9b1sDCC44JvlEcIb59xd66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEt NjQ2ZDdlZWUwYTBmLzEvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEtNjQ2ZDdlZWUwYTBm LzEvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxxJNPbA KPtpU8Uu2UHGUBZQqUIhSO4Vj2za/rW2I4KFmngFR+Go49LWScAEtr2WoXqMd2+3 k6GTIpU25CYeQd3Y/o5OyF190Ge0fmUZYopCv4MokdCYRiefrgeQ/pKVHVcFsezq YiRufJm2LltKIJunxx4FJKhc1q77tnNPwe14Oi7sOyEw+DO6pJTXbY0B4TiVB/K/ TuEkTsPhkVqb4Id5adyON5hHW9i0GRdVUVBsIcQrtW+nPlenu+JHUnUOJ+aA8wNF ardbFAjlQ1HJ4DjZaGPPgtcTfYrA3gX9CPX+xqXu9brAxdcclgJkuZFZDfx3CUrp rBD8UCgD6JHkPw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:05:36 2025 by rpki-client