This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json) Hash identifier: mSPP2LyrQH1jvvDbuh0iwDbF/Kyiu7tvSv0IjuNHGIM= Subject key identifier: 41:4E:C8:47:CB:F8:0E:0E:23:FA:22:36:47:8F:F6:85:A4:61:33:16 Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Certificate serial: 019B3A586C978E9DB328EA888D36CA7DEF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft Manifest number: 0846 Signing time: Sat 20 Dec 2025 06:00:32 +0000 Manifest this update: Sat 20 Dec 2025 06:00:32 +0000 Manifest next update: Sun 21 Dec 2025 06:00:32 +0000 Files and hashes: 1: fK4A406_cDMWDbbITZ8j0-6GJrU.roa (hash: bX1tVxJTNfb2sGSB9JY1Wec4/HKYzsBLiSEQzrPo2fo=) 2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: /Gb+dofexyLrPQRG3hWL2ILFpeGmT3OE7+Kj36X3lS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:6c:97:8e:9d:b3:28:ea:88:8d:36:ca:7d:ef:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Validity Not Before: Dec 20 06:00:32 2025 GMT Not After : Dec 21 06:00:32 2025 GMT Subject: CN=414ec847cbf80e0e23fa2236478ff685a4613316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:63:c7:09:26:bf:b3:d9:49:1a:51:b6:5f: a0:47:cf:85:79:a1:eb:92:86:02:c1:13:5c:f0:cf: d6:a5:b5:5f:b6:9b:dd:e1:8d:52:ee:5c:61:72:53: 71:2c:3a:25:48:d6:19:e8:7e:7b:11:40:c0:71:2c: 4b:e9:f2:1b:40:d2:45:c1:4a:b8:b9:1b:3b:ea:78: 3d:30:e2:7f:4f:14:a8:ab:f6:30:eb:96:ba:f4:91: 69:27:b2:a8:04:e1:6c:ee:f2:e2:d4:26:e6:6c:66: df:f9:1d:18:72:bb:63:0a:fb:ce:1e:62:65:c8:82: 43:6b:a9:bb:b0:63:f2:f1:39:b8:d4:0b:ff:67:b9: 96:c6:03:47:17:3d:ec:ba:4d:0a:c1:89:62:de:66: f1:08:7c:8b:af:e6:ef:fe:56:67:81:b5:fb:33:4e: 0e:fb:35:3d:1d:0c:38:01:f4:98:04:e5:e5:84:73: a4:da:06:e1:34:27:bd:bd:86:d0:92:63:45:89:53: ef:83:b7:ff:02:90:02:31:6b:3e:50:41:fd:4d:85: 1b:e3:fa:b0:9e:44:54:71:a3:3d:2d:2e:55:81:de: db:dd:9a:f6:f1:06:9b:06:c3:8e:e5:9a:ee:3e:33: 3d:89:e7:87:32:92:ff:dc:0e:25:47:26:b0:38:70: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:C8:47:CB:F8:0E:0E:23:FA:22:36:47:8F:F6:85:A4:61:33:16 X509v3 Authority Key Identifier: keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:76:e0:e6:9a:a6:c3:a6:78:1a:9f:d8:60:44:ad:20:cd:75: 68:c4:58:aa:2b:c4:1a:a9:ee:c1:fb:32:b8:8a:b0:e5:54:a4: 46:8c:ef:43:a4:1d:a7:db:4d:f9:44:56:61:b8:d0:c6:63:e0: a1:c8:ad:be:3c:1d:6d:9f:75:ba:ef:6f:17:93:d2:26:28:8e: 62:38:7a:24:d0:96:e5:57:8c:2d:ed:e1:43:4c:8f:8c:cb:18: f6:52:ba:35:e8:52:e9:86:31:58:a7:70:bb:58:8b:bd:7c:d3: 43:41:af:76:f2:96:eb:af:92:2c:80:64:33:a2:23:f0:70:7d: b4:f5:a2:59:e8:34:f6:d3:6a:4c:5b:58:c7:99:ad:97:f7:de: 65:6a:a1:11:63:ba:28:a4:ac:cc:bc:a5:3e:e2:dd:7f:d5:bd: 30:d3:f9:91:34:92:44:e4:64:fc:8b:42:df:46:a7:af:cc:2d: ca:ac:a7:68:02:50:18:b5:5a:04:74:42:73:52:aa:14:6b:6f: 76:7a:64:1f:d9:2b:40:da:c6:62:70:ab:57:43:6c:b3:fe:fc: 48:ed:ba:7a:dc:02:1e:d5:f7:e4:19:52:3d:9b:81:4a:0f:35: 8d:43:c2:95:b3:d2:93:a8:0c:9e:29:e6:d4:b3:6e:08:dc:4b: 5c:b5:a0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGyXjp2zKOqIjTbKfe83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj MTE2M2IwHhcNMjUxMjIwMDYwMDMyWhcNMjUxMjIxMDYwMDMyWjAzMTEwLwYDVQQD Eyg0MTRlYzg0N2NiZjgwZTBlMjNmYTIyMzY0NzhmZjY4NWE0NjEzMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTBjxwkmv7PZSRpRtl+gR8+FeaHr koYCwRNc8M/WpbVftpvd4Y1S7lxhclNxLDolSNYZ6H57EUDAcSxL6fIbQNJFwUq4 uRs76ng9MOJ/TxSoq/Yw65a69JFpJ7KoBOFs7vLi1CbmbGbf+R0YcrtjCvvOHmJl yIJDa6m7sGPy8Tm41Av/Z7mWxgNHFz3suk0KwYli3mbxCHyLr+bv/lZngbX7M04O +zU9HQw4AfSYBOXlhHOk2gbhNCe9vYbQkmNFiVPvg7f/ApACMWs+UEH9TYUb4/qw nkRUcaM9LS5Vgd7b3Zr28QabBsOO5ZruPjM9ieeHMpL/3A4lRyawOHACTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFOyEfL+A4OI/oiNkeP9oWkYTMWMB8GA1UdIwQY MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHbg5pqm w6Z4Gp/YYEStIM11aMRYqivEGqnuwfsyuIqw5VSkRozvQ6Qdp9tN+URWYbjQxmPg ocitvjwdbZ91uu9vF5PSJiiOYjh6JNCW5VeMLe3hQ0yPjMsY9lK6NehS6YYxWKdw u1iLvXzTQ0GvdvKW66+SLIBkM6Ij8HB9tPWiWeg09tNqTFtYx5mtl/feZWqhEWO6 KKSszLylPuLdf9W9MNP5kTSSRORk/ItC30anr8wtyqynaAJQGLVaBHRCc1KqFGtv dnpkH9krQNrGYnCrV0Nss/78SO26etwCHtX35BlSPZuBSg81jUPClbPSk6gMninm 1LNuCNxLXLWgBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:10 2025 by rpki-client