This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json) Hash identifier: xP3VKS6EaAcdx9FoFXOjDYrnrJtQ1AArpH0pmE6jhKw= Subject key identifier: 07:74:53:8A:E4:21:DF:A3:4F:E5:B1:4F:DE:D6:B7:17:A0:46:39:D0 Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Certificate serial: 019B3D90A81542978AA715639A6674DA104B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft Manifest number: 16BD Signing time: Sat 20 Dec 2025 21:00:48 +0000 Manifest this update: Sat 20 Dec 2025 21:00:48 +0000 Manifest next update: Sun 21 Dec 2025 21:00:48 +0000 Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=) 2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=) 3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: CSMvrfzJiJjS8Yuua+tnKlaY/dmsenUjSvnEx9dwp2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a8:15:42:97:8a:a7:15:63:9a:66:74:da:10:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Validity Not Before: Dec 20 21:00:48 2025 GMT Not After : Dec 21 21:00:48 2025 GMT Subject: CN=0774538ae421dfa34fe5b14fded6b717a04639d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:5c:a9:dd:e4:2c:26:5c:92:d0:ad:40:dd: a6:8d:1e:33:0e:44:61:5e:59:f9:6a:c7:2b:35:a1: 7c:56:91:bb:29:a3:01:88:f7:f9:3d:30:59:28:de: b4:2d:ca:81:c5:38:f5:1f:6b:d2:1a:28:7a:0b:6b: 2a:91:e4:5f:43:a5:6a:37:69:d1:b1:49:cb:57:2c: 43:f7:3b:77:a9:70:2b:b5:94:f2:be:8a:f1:9d:74: e5:06:48:dd:24:3e:aa:67:23:a9:ba:cf:a0:d6:57: 11:83:b5:3b:39:3e:2a:ee:2b:ea:d3:2f:05:6f:f0: f5:a4:fd:04:c1:c6:57:d0:6e:08:9c:9f:be:30:32: 8b:04:7e:26:e6:6d:45:b7:4d:5e:b7:e5:8f:0e:50: f1:13:95:7c:83:b1:f9:d2:05:b3:68:0e:31:a9:8d: 02:18:9a:09:84:c5:e5:21:54:64:1b:79:58:b7:ee: 27:3c:ed:b9:75:cf:d9:9f:8f:fc:31:a5:91:0b:3e: 3f:85:1b:6a:d6:2b:48:f3:59:06:24:7c:60:93:e9: 18:29:bf:c9:ff:e6:06:37:9f:95:a7:4f:b6:d2:33: 69:34:00:89:fc:33:b6:99:64:9b:39:06:65:31:aa: fd:6c:88:19:ea:cd:bc:5b:9b:35:e8:8c:19:b0:5f: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:74:53:8A:E4:21:DF:A3:4F:E5:B1:4F:DE:D6:B7:17:A0:46:39:D0 X509v3 Authority Key Identifier: keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ce:c4:cf:fa:8e:20:77:95:d4:f4:cb:ce:ff:a2:d9:16:35: 94:6e:0a:a8:fb:d7:96:4c:2f:75:71:32:9c:c1:1c:e8:9d:ab: f7:3a:5e:61:c1:b7:d4:ff:7e:4c:19:cd:4f:4f:34:69:93:55: 8a:b5:6a:5d:bd:89:31:fe:81:65:4e:88:25:4b:9a:e2:ab:b2: 2b:d3:3b:f1:78:fd:af:d0:6d:44:6e:36:29:a4:07:16:4b:f7: 6a:fb:f2:1a:21:00:67:90:65:54:73:0f:c6:08:66:d8:b0:d7: 93:f7:b4:16:a3:84:f1:b0:a0:31:06:f1:4c:e7:94:47:05:8b: cb:32:d8:68:4f:91:75:f4:bb:e7:35:c2:b8:ca:c0:22:4c:33: 93:ed:a9:bd:63:fa:1a:3c:69:e4:f7:5f:5d:e8:bf:99:93:53: bf:4b:80:fb:41:6a:f7:35:f8:df:40:c9:95:4f:7e:0c:c4:36: 91:6f:45:e0:c8:0b:da:39:ea:44:ea:d0:77:41:99:3b:33:f7: c3:74:0a:86:a4:d7:31:8d:ee:b6:a6:52:05:85:f3:43:4e:9e: 19:06:93:16:d8:e8:95:85:4b:fe:9b:e0:53:53:f0:6d:a5:ec: 2d:0f:0a:d9:b7:24:bf:8f:b4:ef:38:31:76:da:94:b8:ae:52: ea:90:a7:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKgVQpeKpxVjmmZ02hBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk MGMzYzkwHhcNMjUxMjIwMjEwMDQ4WhcNMjUxMjIxMjEwMDQ4WjAzMTEwLwYDVQQD EygwNzc0NTM4YWU0MjFkZmEzNGZlNWIxNGZkZWQ2YjcxN2EwNDYzOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUJcqd3kLCZcktCtQN2mjR4zDkRh Xln5ascrNaF8VpG7KaMBiPf5PTBZKN60LcqBxTj1H2vSGih6C2sqkeRfQ6VqN2nR sUnLVyxD9zt3qXArtZTyvorxnXTlBkjdJD6qZyOpus+g1lcRg7U7OT4q7ivq0y8F b/D1pP0EwcZX0G4InJ++MDKLBH4m5m1Ft01et+WPDlDxE5V8g7H50gWzaA4xqY0C GJoJhMXlIVRkG3lYt+4nPO25dc/Zn4/8MaWRCz4/hRtq1itI81kGJHxgk+kYKb/J /+YGN5+Vp0+20jNpNACJ/DO2mWSbOQZlMar9bIgZ6s28W5s16IwZsF+0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd0U4rkId+jT+WxT97WtxegRjnQMB8GA1UdIwQY MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM7Ez/qO IHeV1PTLzv+i2RY1lG4KqPvXlkwvdXEynMEc6J2r9zpeYcG31P9+TBnNT080aZNV irVqXb2JMf6BZU6IJUua4quyK9M78Xj9r9BtRG42KaQHFkv3avvyGiEAZ5BlVHMP xghm2LDXk/e0FqOE8bCgMQbxTOeURwWLyzLYaE+RdfS75zXCuMrAIkwzk+2pvWP6 Gjxp5PdfXei/mZNTv0uA+0Fq9zX430DJlU9+DMQ2kW9F4MgL2jnqROrQd0GZOzP3 w3QKhqTXMY3utqZSBYXzQ06eGQaTFtjolYVL/pvgU1PwbaXsLQ8K2bckv4+07zgx dtqUuK5S6pCnxw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:38 2025 by rpki-client