This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json) Hash identifier: lRWg3Qr7T0XpDuwQlaqSThuj+Zzg+RBSGDDDBb3w15c= Subject key identifier: AC:C8:90:22:74:01:81:07:9F:FD:DF:1C:AB:43:7C:41:7B:BE:CC:FC Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Certificate serial: 019B4F60168FA69037F33C791E828E3B6C53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft Manifest number: 0FEE Signing time: Wed 24 Dec 2025 08:00:55 +0000 Manifest this update: Wed 24 Dec 2025 08:00:55 +0000 Manifest next update: Thu 25 Dec 2025 08:00:55 +0000 Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: eM0L1yNftHC6KlM7pDV6Zslymd0gGmxzSJp73U3wHis=) 2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:16:8f:a6:90:37:f3:3c:79:1e:82:8e:3b:6c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Validity Not Before: Dec 24 08:00:55 2025 GMT Not After : Dec 25 08:00:55 2025 GMT Subject: CN=acc89022740181079ffddf1cab437c417bbeccfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:f5:53:82:70:79:5e:f4:d8:2e:22:84:70: 20:b9:09:7e:6b:21:20:6a:31:63:f6:7a:df:16:d2: 2e:a7:16:c5:83:d7:28:fe:14:b9:1e:54:8b:a8:4e: d3:d8:37:6f:02:52:97:79:ac:90:37:4b:e4:96:77: 7a:0e:65:6a:5f:56:fa:be:03:bb:d4:51:ca:b7:ae: f1:b6:55:b6:f5:b0:28:71:e5:12:3b:9c:38:7d:e3: ab:81:24:4d:2c:bb:9a:8b:41:27:47:be:ee:1c:6e: 2a:3c:cd:98:ec:2a:d8:a2:c5:24:05:4d:de:bb:a2: 50:f5:fe:ed:f9:e8:e4:cf:62:00:89:17:11:36:14: df:bc:72:d8:8a:cb:da:8c:e0:62:5e:97:12:75:27: 17:08:bb:df:a9:27:55:61:5d:f0:0e:53:0b:d8:d8: fd:f4:fb:4b:d4:20:1a:93:dc:2c:1f:1d:3e:d7:01: 57:e7:3a:84:ca:06:de:3d:e2:ee:59:24:72:f9:af: 01:53:f6:49:f1:18:6c:33:10:d2:b8:6d:46:79:78: 70:86:f2:17:e1:a0:28:54:60:ca:62:ec:cd:51:02: da:f4:9d:a9:28:80:6e:04:65:f0:b4:fd:94:0c:9b: f3:5b:c5:f3:fb:69:cc:06:8f:e6:60:b6:78:6c:f1: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:90:22:74:01:81:07:9F:FD:DF:1C:AB:43:7C:41:7B:BE:CC:FC X509v3 Authority Key Identifier: keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:14:9b:90:8b:ce:e1:d6:1f:db:8b:37:5b:8f:02:04:07:fe: 34:30:61:32:de:62:a8:53:a9:07:0f:d3:fe:59:b8:f6:5c:25: 01:22:95:6c:79:84:be:ef:d8:19:d4:f2:0c:20:54:43:9f:a5: 1c:da:ce:1d:d9:d5:23:f6:0d:24:f4:d0:bd:72:a2:7c:31:5a: 86:a7:94:ec:eb:be:bc:49:51:d8:1e:ed:73:27:21:9a:1f:96: a8:28:e8:2f:f3:31:05:84:35:50:c3:0b:86:e9:fc:b3:be:b8: de:01:bd:48:2e:a8:59:a1:97:89:f8:d4:83:77:59:b5:19:0b: b3:ad:72:61:fa:ee:9e:ce:3b:37:7b:25:54:3c:83:7f:d8:e2: 14:e6:80:fd:8d:c1:24:a7:20:00:3f:de:b7:9c:e9:3c:2c:56: 26:1c:d0:4b:50:a3:0c:48:a4:49:d8:cb:6b:d4:66:76:59:54: 9d:a2:c6:49:2a:e4:1d:e3:d6:40:b7:4a:53:0a:04:b1:d4:56: 0b:88:0f:60:34:c0:2e:97:aa:c6:c6:d9:50:30:40:e0:6c:5f: 1e:3f:ba:d1:1a:b0:41:17:94:24:a4:68:dd:33:ac:5f:fa:ee: 8e:ca:6a:ce:cb:32:da:d8:8e:75:63:22:f2:31:c1:d6:5a:f3: 95:94:55:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYBaPppA38zx5HoKOO2xTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz YTRmMGIwHhcNMjUxMjI0MDgwMDU1WhcNMjUxMjI1MDgwMDU1WjAzMTEwLwYDVQQD EyhhY2M4OTAyMjc0MDE4MTA3OWZmZGRmMWNhYjQzN2M0MTdiYmVjY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJv1U4JweV702C4ihHAguQl+ayEg ajFj9nrfFtIupxbFg9co/hS5HlSLqE7T2DdvAlKXeayQN0vklnd6DmVqX1b6vgO7 1FHKt67xtlW29bAoceUSO5w4feOrgSRNLLuai0EnR77uHG4qPM2Y7CrYosUkBU3e u6JQ9f7t+ejkz2IAiRcRNhTfvHLYisvajOBiXpcSdScXCLvfqSdVYV3wDlML2Nj9 9PtL1CAak9wsHx0+1wFX5zqEygbePeLuWSRy+a8BU/ZJ8RhsMxDSuG1GeXhwhvIX 4aAoVGDKYuzNUQLa9J2pKIBuBGXwtP2UDJvzW8Xz+2nMBo/mYLZ4bPHYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzIkCJ0AYEHn/3fHKtDfEF7vsz8MB8GA1UdIwQY MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt MmNkMDA5MTBiY2I3LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3 LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRSbkIvO 4dYf24s3W48CBAf+NDBhMt5iqFOpBw/T/lm49lwlASKVbHmEvu/YGdTyDCBUQ5+l HNrOHdnVI/YNJPTQvXKifDFahqeU7Ou+vElR2B7tcychmh+WqCjoL/MxBYQ1UMML hun8s7643gG9SC6oWaGXifjUg3dZtRkLs61yYfruns47N3slVDyDf9jiFOaA/Y3B JKcgAD/et5zpPCxWJhzQS1CjDEikSdjLa9RmdllUnaLGSSrkHePWQLdKUwoEsdRW C4gPYDTALpeqxsbZUDBA4GxfHj+60RqwQReUJKRo3TOsX/rujspqzssy2tiOdWMi 8jHB1lrzlZRVTA== -----END CERTIFICATE-----Generated at Wed Dec 24 09:21:50 2025 by rpki-client