This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json) Hash identifier: P3wpCxTyw08t/gL11gVJ08b6DduyDgEI43wJ3stx51E= Subject key identifier: 51:63:39:B0:19:6F:3F:7A:76:F5:DC:7D:71:62:09:EA:CC:99:C4:B8 Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687 Certificate serial: 019B2FD558F48B042E13119D4BC9880E8B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 05:01:09 +0000 Manifest this update: Thu 18 Dec 2025 05:01:09 +0000 Manifest next update: Fri 19 Dec 2025 05:01:09 +0000 Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=) 2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: 3VRPtwCqBVnxFG/yUnd2QoIUcjbrfMZljJhYN/y0WIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:58:f4:8b:04:2e:13:11:9d:4b:c9:88:0e:8b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687 Validity Not Before: Dec 18 05:01:09 2025 GMT Not After : Dec 19 05:01:09 2025 GMT Subject: CN=516339b0196f3f7a76f5dc7d716209eacc99c4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:af:8f:1a:fb:28:0e:07:23:2b:e9:4d:c8: 2a:57:f0:5f:d1:3b:16:d3:6c:50:8d:ab:d6:78:03: a7:14:42:fa:90:fc:dc:48:18:d3:55:eb:a0:7b:c9: c8:2a:31:85:8d:bf:f7:f9:68:d8:3f:e7:64:76:5f: b8:40:3a:ad:31:0e:9d:fd:4e:dc:f4:af:2b:94:04: 69:6e:c0:53:a5:1e:2a:ce:48:16:80:44:7d:3e:21: d7:b7:e2:66:98:85:79:b8:d1:c2:a3:04:e7:31:0d: e8:b6:5f:39:3a:bd:51:eb:f3:ed:ef:1f:d4:bf:e0: 99:9b:1e:74:ba:44:33:11:20:07:d9:9e:ca:17:47: c3:52:d8:cc:ab:38:f8:3e:2e:40:6c:1d:d6:be:c6: ff:76:73:57:a2:b3:58:65:82:bc:8b:25:09:6d:7e: 96:50:05:e0:6f:f4:a1:03:21:65:2b:60:c3:1a:0b: 10:b0:34:55:60:26:2d:b2:37:45:82:17:5f:b3:58: 70:8c:33:db:60:98:b7:d7:18:84:90:f6:b1:76:81: d1:3d:45:7a:14:0d:05:82:8f:f9:b6:1c:59:b4:53: ed:36:80:ae:b1:ff:fd:2a:76:23:19:c1:4a:07:35: 36:56:86:7e:1c:ad:57:f7:b8:2f:14:25:82:dc:3c: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:63:39:B0:19:6F:3F:7A:76:F5:DC:7D:71:62:09:EA:CC:99:C4:B8 X509v3 Authority Key Identifier: keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:23:b9:ff:cd:b2:45:ef:4c:83:04:ae:25:69:d8:79:94:e2: 8a:cd:d8:89:95:8c:92:27:16:ec:71:06:d8:b4:af:ff:72:29: 42:61:39:d2:bc:55:73:46:c6:64:d1:31:a9:b8:06:46:7b:08: cc:f7:66:54:b1:a5:a9:6c:07:1e:0a:8b:94:95:a3:a9:d3:1f: 73:a0:78:6f:9b:e6:3a:8c:34:61:39:ae:ba:8f:6c:63:8a:33: 44:5b:42:c5:a9:93:ac:58:32:d8:59:30:7e:f2:7a:31:83:44: 24:47:e6:fd:cd:2b:6d:4e:c9:a0:6d:e7:d6:98:02:01:7a:6c: 9a:f5:3f:41:85:84:f5:58:8b:6c:73:d7:f7:6e:47:e1:3b:3a: 5d:14:c5:74:3f:07:79:eb:ef:5d:82:b1:16:e3:06:7b:1d:c1: 6a:13:3e:65:89:da:78:b9:ca:1b:03:fe:03:ad:5e:c0:b3:95: 6f:3f:38:0a:f1:de:98:eb:d4:33:6b:cf:8a:b4:b6:19:9c:f5: b9:5b:de:db:25:a3:4b:40:92:a9:dc:c8:20:92:58:07:ba:09: aa:e0:f7:29:1e:12:94:03:5d:b6:f9:81:77:e5:37:9b:ca:bb: a5:a1:d8:bd:ca:96:3a:00:78:63:be:7e:a2:30:37:b8:a1:72: 52:00:df:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Vj0iwQuExGdS8mIDos/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5 MTk2ODcwHhcNMjUxMjE4MDUwMTA5WhcNMjUxMjE5MDUwMTA5WjAzMTEwLwYDVQQD Eyg1MTYzMzliMDE5NmYzZjdhNzZmNWRjN2Q3MTYyMDllYWNjOTljNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhqvjxr7KA4HIyvpTcgqV/Bf0TsW 02xQjavWeAOnFEL6kPzcSBjTVeuge8nIKjGFjb/3+WjYP+dkdl+4QDqtMQ6d/U7c 9K8rlARpbsBTpR4qzkgWgER9PiHXt+JmmIV5uNHCowTnMQ3otl85Or1R6/Pt7x/U v+CZmx50ukQzESAH2Z7KF0fDUtjMqzj4Pi5AbB3Wvsb/dnNXorNYZYK8iyUJbX6W UAXgb/ShAyFlK2DDGgsQsDRVYCYtsjdFghdfs1hwjDPbYJi31xiEkPaxdoHRPUV6 FA0Fgo/5thxZtFPtNoCusf/9KnYjGcFKBzU2VoZ+HK1X97gvFCWC3DwbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFjObAZbz96dvXcfXFiCerMmcS4MB8GA1UdIwQY MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt ZTQ3NTY0Y2QwYmFlLzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiO5/82y Re9MgwSuJWnYeZTiis3YiZWMkicW7HEG2LSv/3IpQmE50rxVc0bGZNExqbgGRnsI zPdmVLGlqWwHHgqLlJWjqdMfc6B4b5vmOow0YTmuuo9sY4ozRFtCxamTrFgy2Fkw fvJ6MYNEJEfm/c0rbU7JoG3n1pgCAXpsmvU/QYWE9ViLbHPX925H4Ts6XRTFdD8H eevvXYKxFuMGex3BahM+ZYnaeLnKGwP+A61ewLOVbz84CvHemOvUM2vPirS2GZz1 uVve2yWjS0CSqdzIIJJYB7oJquD3KR4SlANdtvmBd+U3m8q7paHYvcqWOgB4Y75+ ojA3uKFyUgDfcA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:49:28 2025 by rpki-client