This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json) Hash identifier: L1hMN4fqKw3hE4Pbrwj45oRgJI7zFzVgnxncI/Nx6Es= Subject key identifier: DC:9B:C8:0D:BA:21:47:57:8C:AC:63:4D:BA:7D:4E:41:33:A9:AD:35 Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Certificate serial: 019B65B126E948B9585D4F8E7CA9894ABAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft Manifest number: 12F9 Signing time: Sun 28 Dec 2025 16:01:07 +0000 Manifest this update: Sun 28 Dec 2025 16:01:07 +0000 Manifest next update: Mon 29 Dec 2025 16:01:07 +0000 Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: jIuYE5178OQGAIu983ztX7X/exQbCtkB+1GhUbh1YoQ=) 2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:26:e9:48:b9:58:5d:4f:8e:7c:a9:89:4a:ba:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Validity Not Before: Dec 28 16:01:07 2025 GMT Not After : Dec 29 16:01:07 2025 GMT Subject: CN=dc9bc80dba2147578cac634dba7d4e4133a9ad35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:b2:b0:86:be:97:76:dc:00:97:a0:ff:90: 80:14:9f:c4:ab:3e:0c:dd:22:65:98:09:1b:96:4d: cc:78:d7:32:39:fc:ac:95:e4:bb:e1:3b:b9:9a:d1: 33:7f:af:22:df:c6:e4:f9:47:c3:60:8e:0a:23:57: 7a:52:a4:0e:6f:91:38:b8:6e:4c:ab:62:19:70:35: 76:04:3c:78:84:bc:a2:9d:3c:fe:66:56:82:99:27: ef:15:f6:6b:b4:e9:c5:cd:52:0c:6f:3d:79:25:ea: 84:f2:90:bc:bf:fb:a4:05:7f:f0:c6:c8:c3:26:c6: 40:e5:68:32:ad:dd:92:2a:cd:cb:c2:88:d7:dc:68: d9:14:17:d7:3e:c8:5a:0c:9d:f9:72:b7:b8:4f:e4: bb:11:80:78:5c:5e:84:14:44:55:7c:59:c9:eb:a6: 62:23:42:9b:3f:01:11:9c:0c:df:a3:67:33:05:c2: d0:08:c6:7a:50:3b:ab:91:a1:ff:a7:6b:31:9b:83: 4e:bc:00:20:76:ca:78:14:47:b9:15:9f:10:d0:36: 82:f1:fc:b5:41:ab:1d:c0:df:44:50:20:93:80:72: 7b:c5:89:91:83:b7:ca:c6:73:20:53:d6:96:72:b3: f5:29:c8:5d:06:60:6c:b1:12:eb:56:d4:69:64:7d: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:C8:0D:BA:21:47:57:8C:AC:63:4D:BA:7D:4E:41:33:A9:AD:35 X509v3 Authority Key Identifier: keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:73:7c:78:65:07:f1:3f:c4:a8:a4:78:ad:72:c7:3f:f8:54: 10:5a:5b:f1:75:8a:aa:3d:ef:05:da:05:9b:11:d9:b1:13:bd: 3e:09:8b:6f:0c:d5:92:ae:ec:45:e7:02:88:1e:b5:36:7e:be: e5:7d:50:14:64:5e:ae:d4:51:46:f8:c4:4f:35:66:a3:88:4a: da:de:2b:44:be:7e:70:cb:09:36:78:96:9d:70:f3:aa:1e:dc: d1:e9:18:a3:53:bb:23:44:dd:82:e9:a7:7c:00:9c:d2:9e:53: bb:a3:12:b4:ac:b1:3e:dc:f2:f7:8d:92:3f:8f:6e:c5:ed:01: 8f:c9:95:69:f2:e7:80:c7:4b:12:96:73:07:5c:80:82:a2:8e: a5:9e:aa:99:c1:5e:ac:48:0e:04:df:ea:7b:32:e0:b9:2b:b9: 4e:df:fb:c9:64:70:ce:a7:a4:3b:4d:f3:34:0e:eb:94:b8:77: 88:9b:6f:34:69:40:14:fd:9d:c1:f5:21:fd:3e:34:eb:89:33: 0b:cf:eb:0f:a5:89:f2:92:be:82:c4:cf:7b:0f:0f:9a:af:ae: 0d:5d:07:a7:50:ac:b3:c5:31:eb:dc:56:31:84:6c:55:29:4f: c4:61:64:af:59:84:27:6f:0e:c3:34:f0:4b:3b:79:ea:84:c4: 4c:02:63:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsSbpSLlYXU+OfKmJSrr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk NGU1OTIwHhcNMjUxMjI4MTYwMTA3WhcNMjUxMjI5MTYwMTA3WjAzMTEwLwYDVQQD EyhkYzliYzgwZGJhMjE0NzU3OGNhYzYzNGRiYTdkNGU0MTMzYTlhZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GqysIa+l3bcAJeg/5CAFJ/Eqz4M 3SJlmAkblk3MeNcyOfysleS74Tu5mtEzf68i38bk+UfDYI4KI1d6UqQOb5E4uG5M q2IZcDV2BDx4hLyinTz+ZlaCmSfvFfZrtOnFzVIMbz15JeqE8pC8v/ukBX/wxsjD JsZA5Wgyrd2SKs3LwojX3GjZFBfXPshaDJ35cre4T+S7EYB4XF6EFERVfFnJ66Zi I0KbPwERnAzfo2czBcLQCMZ6UDurkaH/p2sxm4NOvAAgdsp4FEe5FZ8Q0DaC8fy1 QasdwN9EUCCTgHJ7xYmRg7fKxnMgU9aWcrP1KchdBmBssRLrVtRpZH3/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNybyA26IUdXjKxjTbp9TkEzqa01MB8GA1UdIwQY MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4 LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXN8eGUH 8T/EqKR4rXLHP/hUEFpb8XWKqj3vBdoFmxHZsRO9PgmLbwzVkq7sRecCiB61Nn6+ 5X1QFGRertRRRvjETzVmo4hK2t4rRL5+cMsJNniWnXDzqh7c0ekYo1O7I0Tdgumn fACc0p5Tu6MStKyxPtzy942SP49uxe0Bj8mVafLngMdLEpZzB1yAgqKOpZ6qmcFe rEgOBN/qezLguSu5Tt/7yWRwzqekO03zNA7rlLh3iJtvNGlAFP2dwfUh/T4064kz C8/rD6WJ8pK+gsTPew8Pmq+uDV0Hp1Css8Ux69xWMYRsVSlPxGFkr1mEJ28OwzTw Szt56oTETAJjOQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:51 2025 by rpki-client