This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json) Hash identifier: 2mG8Xu2+FwWe627tAdHd4JO0wF0uuNLgUOFLQBPdtuA= Subject key identifier: 1A:0E:F5:D4:6F:A1:81:08:71:0E:9F:72:10:8E:27:5B:D6:3F:A0:D8 Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a Certificate serial: 019AF20938E3422D4B50B0B36969E441C83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft Manifest number: 06BE Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: jzsPNbX5Bu5ABDo2RFwzpOiUnj6dWw8KLOqIAD3kbG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:e3:42:2d:4b:50:b0:b3:69:69:e4:41:c8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=1a0ef5d46fa18108710e9f72108e275bd63fa0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:f8:5b:29:ce:f7:47:49:e7:28:77:22:29: 90:d6:db:d1:2b:69:c8:9a:7a:1f:52:a4:8d:3a:50: f0:2a:c5:37:b9:13:94:9b:9e:f9:97:bf:31:fd:e6: 0d:4e:bd:37:09:82:b0:c6:00:43:0d:51:e5:33:f9: f4:f8:36:c5:87:40:75:ea:62:bc:08:dc:86:94:df: b6:ee:ba:d9:e1:4c:b3:2a:d8:0b:44:a0:0d:a4:bd: 53:f1:5a:fc:f7:95:bc:a8:73:1d:f1:b9:86:1a:ba: 3b:32:36:ba:22:48:71:05:1a:13:c3:7d:95:53:20: 8e:fd:e1:bd:d1:1d:d3:bd:24:81:34:f4:66:2d:53: 30:43:bf:20:f1:d6:29:ca:fb:83:66:0c:f8:ed:42: d2:97:c4:aa:79:51:a0:4a:f5:6e:da:c1:04:3e:f6: 50:6d:c5:ea:1a:24:d0:40:82:5d:eb:ab:6d:11:99: a9:3e:d2:23:ac:2c:17:e4:ff:dd:f7:ab:73:f5:77: 00:80:5f:8c:a0:84:16:4f:c2:1c:6e:70:69:d0:1c: 15:0e:d9:fb:98:9f:54:dc:32:c9:cf:b8:d6:b9:9c: 70:b3:2b:bd:31:99:85:03:82:5d:29:39:dc:0e:9e: 76:71:da:b5:a8:fc:3e:7b:f7:4c:a6:33:32:84:2a: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:F5:D4:6F:A1:81:08:71:0E:9F:72:10:8E:27:5B:D6:3F:A0:D8 X509v3 Authority Key Identifier: keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c9:a4:2e:d7:74:97:74:fe:6e:53:31:26:6d:2f:ba:70:90: 95:06:ce:da:01:2c:ab:2f:4f:c5:cd:6d:4f:38:f3:e7:5c:22: d2:d1:ff:bf:43:f9:97:c5:3b:d9:24:99:ea:39:20:45:16:80: d1:20:d5:43:6e:0c:ac:bf:23:54:50:3c:57:ee:3b:31:8b:28: 5c:6f:e3:8a:50:91:13:a1:7f:3e:53:92:4c:1e:3b:d9:25:f9: 01:bb:a3:aa:8b:77:fc:de:94:ce:9b:86:25:dd:a8:24:1a:39: 7e:74:93:71:48:f9:b4:2f:fc:dd:ba:9a:ed:8f:67:5c:e2:10: a9:8f:94:f7:45:f4:1d:e3:38:da:f5:46:e6:62:3d:42:cd:c8: cb:a1:1c:82:d5:a9:cc:ab:bc:ec:44:31:53:9d:b1:b1:35:db: 46:8d:0c:10:5a:90:94:14:d0:c4:e1:7f:aa:ff:4b:7f:23:4b: 30:9a:3b:81:87:e5:73:e1:90:ea:41:34:49:08:0c:19:a7:da: af:ab:c7:22:bb:66:87:0d:92:0f:64:0e:21:d9:79:20:29:b2: b5:ca:cb:04:f7:1e:7b:a8:63:52:15:d7:e5:d2:1a:da:8e:06: ad:d0:19:68:db:b0:19:53:b7:b6:f0:4b:94:21:06:2a:11:84: cd:21:71:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTjjQi1LULCzaWnkQcg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYTA4ODg5YTVjYzcyODRmZDMyNGE5OTJiZmE4ZGU3ZDZj MmMxOGEwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygxYTBlZjVkNDZmYTE4MTA4NzEwZTlmNzIxMDhlMjc1YmQ2M2ZhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzn4WynO90dJ5yh3IimQ1tvRK2nI mnofUqSNOlDwKsU3uROUm575l78x/eYNTr03CYKwxgBDDVHlM/n0+DbFh0B16mK8 CNyGlN+27rrZ4UyzKtgLRKANpL1T8Vr895W8qHMd8bmGGro7Mja6IkhxBRoTw32V UyCO/eG90R3TvSSBNPRmLVMwQ78g8dYpyvuDZgz47ULSl8SqeVGgSvVu2sEEPvZQ bcXqGiTQQIJd66ttEZmpPtIjrCwX5P/d96tz9XcAgF+MoIQWT8IcbnBp0BwVDtn7 mJ9U3DLJz7jWuZxwsyu9MZmFA4JdKTncDp52cdq1qPw+e/dMpjMyhCrtBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoO9dRvoYEIcQ6fchCOJ1vWP6DYMB8GA1UdIwQY MBaAFEGgiImlzHKE/TJKmSv6jefWwsGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kZGI1YTYtNTNmMy00ZDY0LWJjMzkt NTYxMjY3YTQyOTI2LzEvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kZGI1YTYtNTNmMy00ZDY0LWJjMzktNTYxMjY3YTQyOTI2 LzEvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMmkLtd0 l3T+blMxJm0vunCQlQbO2gEsqy9Pxc1tTzjz51wi0tH/v0P5l8U72SSZ6jkgRRaA 0SDVQ24MrL8jVFA8V+47MYsoXG/jilCRE6F/PlOSTB472SX5Abujqot3/N6UzpuG Jd2oJBo5fnSTcUj5tC/83bqa7Y9nXOIQqY+U90X0HeM42vVG5mI9Qs3Iy6EcgtWp zKu87EQxU52xsTXbRo0MEFqQlBTQxOF/qv9LfyNLMJo7gYflc+GQ6kE0SQgMGafa r6vHIrtmhw2SD2QOIdl5ICmytcrLBPcee6hjUhXX5dIa2o4GrdAZaNuwGVO3tvBL lCEGKhGEzSFxVg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:27 2025 by rpki-client