This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json) Hash identifier: gHYauahPi3r8HMiOw/fiSwyp7+geCSyvrDpEeQOCmr8= Subject key identifier: 10:1C:9A:47:61:89:5A:55:86:1A:A4:C2:8B:10:76:EB:AD:17:5C:6E Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e Certificate serial: 019AF31D4C5650383E07C240AC6921F87B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: S7NY4gttxCaZBRfTL1DvkPqiHfZ+IF+dN/uskQx4Yso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4c:56:50:38:3e:07:c2:40:ac:69:21:f8:7b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=101c9a4761895a55861aa4c28b1076ebad175c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:5e:63:05:b7:e2:37:2e:8e:81:b6:e2:59: 76:6e:14:7e:21:a7:4d:6a:21:64:78:95:1f:fa:94: 0b:b1:cf:24:3f:11:cc:51:3a:fe:bc:76:4b:37:fb: e5:4e:c3:ef:63:8f:fe:40:fc:5d:56:fb:fd:4f:fa: d3:b8:13:f5:dc:b9:0a:62:0b:a0:69:0d:f6:77:2c: 89:26:86:0c:87:7b:c7:39:55:6d:e6:2c:9b:82:aa: c7:61:c0:6b:c7:f9:16:bf:3a:47:92:6f:df:4f:2f: f6:70:9e:cf:93:56:db:1b:2e:01:c3:1e:b0:f4:03: 96:53:5c:29:a0:39:d7:90:a8:71:15:38:38:f9:6c: 82:dc:f1:b7:bb:51:60:08:05:88:01:86:7b:8f:66: 57:03:06:2f:1c:c1:9e:16:2d:26:9c:e2:8d:04:9f: 2a:0c:d3:8a:5f:dd:28:85:19:5f:a0:f8:a8:21:3e: ae:f7:2c:82:70:c4:cd:af:dd:57:f7:51:74:83:79: de:bf:ef:05:0e:6b:82:dd:fe:fa:f1:e0:14:9a:99: 99:65:1a:cf:56:63:81:a8:1b:83:fa:54:3d:ce:c7: 04:7e:cf:2a:0e:b2:f1:22:c9:fe:da:f5:5a:5c:d5: ce:3d:b6:e4:e5:77:22:c3:c7:fe:1f:99:d2:19:ef: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:9A:47:61:89:5A:55:86:1A:A4:C2:8B:10:76:EB:AD:17:5C:6E X509v3 Authority Key Identifier: keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:55:0e:d6:aa:9b:30:56:03:2d:a1:03:a3:fe:89:7a:26: f1:ee:4b:90:f6:10:02:e2:51:d9:6a:54:4c:dd:8d:a0:93:f1: 8d:6f:ae:50:78:63:35:15:74:c0:c2:ce:76:b9:d1:fc:e9:33: 31:a5:05:e5:f1:c7:3b:62:02:ef:f4:14:63:4f:11:1b:eb:6c: 5e:75:75:d2:b2:cd:81:97:23:df:e7:e8:73:e5:aa:03:90:83: 6d:e3:bc:4f:6d:b3:4f:b6:13:7d:c5:e5:24:48:6a:91:f2:e9: 64:e1:ac:ee:ea:f9:7b:53:6e:ec:4e:4d:5e:05:38:19:74:ef: 22:bc:da:8e:2c:70:83:21:99:71:3d:93:b5:15:25:7d:f6:2e: c0:65:90:33:b4:a4:86:8b:93:c1:a5:7f:be:62:78:86:00:12: a5:b6:d3:5f:65:15:24:be:95:75:e9:f7:b9:53:a4:f6:4e:e3: 9e:30:ac:79:18:6d:de:0c:ed:ba:90:1b:a2:e0:75:dd:6e:7c: 75:e6:12:12:79:b5:09:f2:b2:e6:32:95:09:74:e0:88:9b:ba: 57:ce:f0:e9:e1:40:e0:bd:08:34:8a:aa:c4:1f:70:ef:92:2e: c0:0a:4e:d0:88:76:b8:04:18:3e:4b:77:1c:b3:ad:a1:ae:0d: 7f:45:c8:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUxWUDg+B8JArGkh+Ht3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWMyYzc3ZjQ0ZDVhYjdjMmFjOTJmZDI5YmFiNTg4OWE5 MDEzMGUwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD EygxMDFjOWE0NzYxODk1YTU1ODYxYWE0YzI4YjEwNzZlYmFkMTc1YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R5eYwW34jcujoG24ll2bhR+IadN aiFkeJUf+pQLsc8kPxHMUTr+vHZLN/vlTsPvY4/+QPxdVvv9T/rTuBP13LkKYgug aQ32dyyJJoYMh3vHOVVt5iybgqrHYcBrx/kWvzpHkm/fTy/2cJ7Pk1bbGy4Bwx6w 9AOWU1wpoDnXkKhxFTg4+WyC3PG3u1FgCAWIAYZ7j2ZXAwYvHMGeFi0mnOKNBJ8q DNOKX90ohRlfoPioIT6u9yyCcMTNr91X91F0g3nev+8FDmuC3f768eAUmpmZZRrP VmOBqBuD+lQ9zscEfs8qDrLxIsn+2vVaXNXOPbbk5Xciw8f+H5nSGe/jPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAcmkdhiVpVhhqkwosQduutF1xuMB8GA1UdIwQY MBaAFEGcLHf0TVq3wqyS/Sm6tYiakBMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDg4MGMtNWY5NS00ZmJjLTliZjIt Y2Y1MWUwMzZlZjBlLzEvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NDg4MGMtNWY5NS00ZmJjLTliZjItY2Y1MWUwMzZlZjBl LzEvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/5VDtaq mzBWAy2hA6P+iXom8e5LkPYQAuJR2WpUTN2NoJPxjW+uUHhjNRV0wMLOdrnR/Okz MaUF5fHHO2IC7/QUY08RG+tsXnV10rLNgZcj3+foc+WqA5CDbeO8T22zT7YTfcXl JEhqkfLpZOGs7ur5e1Nu7E5NXgU4GXTvIrzajixwgyGZcT2TtRUlffYuwGWQM7Sk houTwaV/vmJ4hgASpbbTX2UVJL6Vden3uVOk9k7jnjCseRht3gztupAbouB13W58 deYSEnm1CfKy5jKVCXTgiJu6V87w6eFA4L0INIqqxB9w75IuwApO0Ih2uAQYPkt3 HLOtoa4Nf0XIQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:40 2025 by rpki-client