This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json) Hash identifier: d8+Oyry2RfcKDOy9aabvdSHem3HP+ijwEy6UvVCAX5I= Subject key identifier: 1A:A4:C7:33:E9:F4:3B:88:8C:F7:C1:B7:85:9E:05:39:03:EB:AD:BC Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7 Certificate serial: 019B2F66FB46D5A8F2FB2C531DC3BA6533EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft Manifest number: 054C Signing time: Thu 18 Dec 2025 03:00:36 +0000 Manifest this update: Thu 18 Dec 2025 03:00:36 +0000 Manifest next update: Fri 19 Dec 2025 03:00:36 +0000 Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=) 2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: +BseZinDqaolgH4NapZj/Gv8sT+gcznEbdY2ew71rdE=) 3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:fb:46:d5:a8:f2:fb:2c:53:1d:c3:ba:65:33:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Validity Not Before: Dec 18 03:00:36 2025 GMT Not After : Dec 19 03:00:36 2025 GMT Subject: CN=1aa4c733e9f43b888cf7c1b7859e053903ebadbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:c0:ee:93:60:a5:2f:ea:95:4c:b6:b5:16: 9c:4f:aa:00:84:8f:8d:a5:17:ca:43:97:85:48:cf: 62:47:11:03:1c:87:d8:39:94:17:eb:6e:19:bb:c3: 20:52:20:64:d1:45:36:25:26:55:a8:ea:77:3a:82: f7:e5:18:dd:64:be:b6:77:7d:1b:3a:1d:f5:db:8f: dd:5c:90:17:a0:15:c1:1c:ea:77:7a:34:01:c1:4f: 0a:2e:3e:af:99:05:7e:a0:e6:94:af:b1:2a:b2:27: 7c:01:2c:27:d7:95:77:ac:74:3c:11:ea:0e:f4:6f: 10:76:e0:16:11:9e:57:ad:1e:78:2d:ae:93:dd:8b: e1:08:36:da:37:1c:8a:31:3d:8a:92:4b:1a:08:5f: fa:cc:b9:ef:ad:03:da:c7:3c:8d:ce:b1:6a:f6:4d: 15:21:1e:dc:d3:ec:66:c2:5d:31:c3:38:4a:c6:40: b4:58:9f:46:3d:24:7e:fa:98:69:71:3d:08:16:60: a6:57:cd:22:d0:b3:02:59:e8:98:fc:0e:d2:9d:a1: aa:51:8f:04:80:ee:73:0b:be:3d:97:e6:50:56:c3: 29:9e:a4:7e:78:fa:3c:e7:06:3b:f2:77:e5:0e:bd: 21:52:47:d5:a9:c3:07:e9:2c:98:46:a0:27:d1:7d: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:C7:33:E9:F4:3B:88:8C:F7:C1:B7:85:9E:05:39:03:EB:AD:BC X509v3 Authority Key Identifier: keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:2a:be:fd:89:f1:cb:93:31:7d:fd:38:41:a4:25:5d:5c: 4b:af:38:d0:ff:45:bc:35:89:16:af:cf:f9:40:b3:e0:a0:d8: 80:31:fb:9a:3b:8f:d9:a4:8b:fc:f4:be:30:ed:59:66:d5:ae: 7e:dc:cb:b1:88:2e:30:ac:5c:5c:ac:4f:42:b1:4d:c0:c5:32: 5f:81:46:e6:85:d6:e3:eb:8d:aa:3d:4d:3b:28:07:86:c3:84: 6a:61:b7:ee:14:78:9a:ca:9d:85:2f:a4:5a:9e:e9:32:f8:12: f8:be:17:44:f4:04:07:72:cb:c3:19:d7:aa:c2:6b:68:bc:e6: a0:43:9d:1d:f7:0c:35:fc:66:36:2a:be:ab:ae:31:99:29:0b: 99:54:f5:52:4f:2b:a3:c1:c9:45:8d:67:df:a5:88:ab:37:f8: 7e:f5:94:b3:a4:c7:59:2e:63:e9:98:84:35:88:32:58:23:37: fb:49:f4:d6:70:3e:44:8b:87:08:a3:77:37:a8:37:c7:80:9e: 6b:dc:49:47:c6:87:ad:2b:a0:ce:76:69:5d:bd:f8:7c:2f:29: f4:b3:15:1d:13:d1:28:29:65:05:fe:a9:ed:3a:8b:ec:7d:70: 03:90:95:ae:c9:38:8a:23:c6:65:12:cf:a0:ff:18:52:74:3f: bb:cd:b4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvtG1ajy+yxTHcO6ZTPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm NjM1YjcwHhcNMjUxMjE4MDMwMDM2WhcNMjUxMjE5MDMwMDM2WjAzMTEwLwYDVQQD EygxYWE0YzczM2U5ZjQzYjg4OGNmN2MxYjc4NTllMDUzOTAzZWJhZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9vA7pNgpS/qlUy2tRacT6oAhI+N pRfKQ5eFSM9iRxEDHIfYOZQX624Zu8MgUiBk0UU2JSZVqOp3OoL35RjdZL62d30b Oh3124/dXJAXoBXBHOp3ejQBwU8KLj6vmQV+oOaUr7Eqsid8ASwn15V3rHQ8EeoO 9G8QduAWEZ5XrR54La6T3YvhCDbaNxyKMT2KkksaCF/6zLnvrQPaxzyNzrFq9k0V IR7c0+xmwl0xwzhKxkC0WJ9GPSR++phpcT0IFmCmV80i0LMCWeiY/A7SnaGqUY8E gO5zC749l+ZQVsMpnqR+ePo85wY78nflDr0hUkfVqcMH6SyYRqAn0X1tVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqkxzPp9DuIjPfBt4WeBTkD6628MB8GA1UdIwQY MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGN4qvv2J 8cuTMX39OEGkJV1cS6840P9FvDWJFq/P+UCz4KDYgDH7mjuP2aSL/PS+MO1ZZtWu ftzLsYguMKxcXKxPQrFNwMUyX4FG5oXW4+uNqj1NOygHhsOEamG37hR4msqdhS+k Wp7pMvgS+L4XRPQEB3LLwxnXqsJraLzmoEOdHfcMNfxmNiq+q64xmSkLmVT1Uk8r o8HJRY1n36WIqzf4fvWUs6THWS5j6ZiENYgyWCM3+0n01nA+RIuHCKN3N6g3x4Ce a9xJR8aHrSugznZpXb34fC8p9LMVHRPRKCllBf6p7TqL7H1wA5CVrsk4iiPGZRLP oP8YUnQ/u820RA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:01 2025 by rpki-client