This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json) Hash identifier: kbD5WtkjdBV4EYcUnAtVGmpQYxRX76EToR8CWT4AweQ= Subject key identifier: 22:7A:58:A6:08:45:E3:89:DD:28:F3:12:B1:AB:87:DB:65:4B:15:9A Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5 Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5 Certificate serial: 019AF20922E6C3C2B5C6936765A92ED4E769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft Manifest number: 04EC Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: 9SX5q6OJlzSfykxy4fDqiKL2zobmIr99d/5J3IWU8Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:22:e6:c3:c2:b5:c6:93:67:65:a9:2e:d4:e7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=227a58a60845e389dd28f312b1ab87db654b159a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:11:21:c8:f1:c4:70:1a:0c:1c:aa:f4:31: 36:48:8a:8d:e3:02:cf:4f:20:1b:81:66:f0:12:fc: a3:4f:7a:f2:47:12:c1:f0:e5:69:73:39:8b:ce:fc: 16:b5:fc:24:a8:a3:9a:f4:c2:32:da:25:af:00:52: b2:50:9c:84:64:cd:ec:7f:9c:f4:2a:dc:59:dc:0a: 24:7e:dc:aa:db:c3:8a:23:ce:b3:a6:a8:77:f7:10: 40:6d:c6:79:e4:21:06:1c:cc:16:9d:80:76:ad:10: cb:63:4b:40:d2:d8:e2:36:6f:e0:3e:d4:97:11:12: 10:a5:fc:b9:8c:79:80:d9:69:c4:5c:84:25:b5:1b: a2:de:db:cf:09:18:ab:c9:72:30:6f:c1:3e:af:3c: 5f:77:2d:8b:42:12:d2:a0:9a:cd:8a:77:28:78:bf: 06:53:86:15:e5:4d:44:46:c6:29:47:5b:07:c7:70: a9:47:36:8d:64:65:61:a9:94:4d:1c:43:7d:39:95: 08:49:ed:8a:08:86:6c:ef:2a:e4:13:23:f8:be:d3: b0:f9:0e:f8:86:20:77:0b:e6:1b:d5:31:34:c8:97: b0:72:99:2f:ca:f5:d7:a9:86:39:27:74:a6:4a:c8: 90:73:1d:74:b8:52:f2:7a:cf:11:f9:bb:2f:ac:70: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7A:58:A6:08:45:E3:89:DD:28:F3:12:B1:AB:87:DB:65:4B:15:9A X509v3 Authority Key Identifier: keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0d:cb:6b:50:cf:6f:ac:10:04:08:37:d2:9c:96:07:65:6b: 63:e3:03:d5:96:1c:6d:06:e6:38:75:d7:d6:26:65:77:d6:29: ff:69:f4:77:97:70:c0:67:35:c6:d1:1d:72:97:d1:00:31:17: b5:e4:a2:f4:92:fb:68:45:ac:64:42:83:d4:8f:21:df:f8:47: ac:d8:b9:2f:2b:71:20:02:cb:bb:79:9a:ea:36:d0:5a:70:7a: d9:c7:91:27:cf:bc:35:89:03:e3:b3:e0:03:09:16:e0:69:5f: ee:a7:fd:1a:62:86:9f:06:aa:e4:d7:28:7a:8f:6d:82:39:7c: 40:b3:a0:9d:64:56:c7:96:81:e1:7e:ef:a4:ea:c8:52:58:b6: fe:2d:f5:b4:56:dc:54:4f:21:7c:7e:ae:d8:ea:4b:3a:0d:51: 5a:3d:d6:75:6e:75:7f:4a:5e:f6:cb:fc:5c:ed:10:77:ab:dd: 50:f8:84:61:90:d4:9e:ff:86:2b:7f:2d:d2:c4:00:ca:9f:dd: fe:25:b5:9e:f3:da:61:a9:e9:b0:a2:31:23:1f:f2:4a:09:c4: 29:d2:65:82:ce:dc:b2:16:32:4a:a4:26:a1:99:bb:10:3b:c0: 4e:b7:46:7e:14:1f:94:f0:ac:27:97:a2:af:1c:82:a6:3a:ab: 2c:aa:28:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSLmw8K1xpNnZaku1OdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYThjZDQ5NzliYzVkZDMxYjEwZDdiNzE4NTBlZjEyZWFj M2NmYjUwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EygyMjdhNThhNjA4NDVlMzg5ZGQyOGYzMTJiMWFiODdkYjY1NGIxNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrERIcjxxHAaDByq9DE2SIqN4wLP TyAbgWbwEvyjT3ryRxLB8OVpczmLzvwWtfwkqKOa9MIy2iWvAFKyUJyEZM3sf5z0 KtxZ3Aokftyq28OKI86zpqh39xBAbcZ55CEGHMwWnYB2rRDLY0tA0tjiNm/gPtSX ERIQpfy5jHmA2WnEXIQltRui3tvPCRiryXIwb8E+rzxfdy2LQhLSoJrNincoeL8G U4YV5U1ERsYpR1sHx3CpRzaNZGVhqZRNHEN9OZUISe2KCIZs7yrkEyP4vtOw+Q74 hiB3C+Yb1TE0yJewcpkvyvXXqYY5J3SmSsiQcx10uFLyes8R+bsvrHBCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ6WKYIReOJ3SjzErGrh9tlSxWaMB8GA1UdIwQY MBaAFEKozUl5vF3TGxDXtxhQ7xLqw8+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWU3ZjYtZjRmYi00ZWEwLThkZGYt YmU1YTBmZmI4Y2E1LzEvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWU3ZjYtZjRmYi00ZWEwLThkZGYtYmU1YTBmZmI4Y2E1 LzEvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw3La1DP b6wQBAg30pyWB2VrY+MD1ZYcbQbmOHXX1iZld9Yp/2n0d5dwwGc1xtEdcpfRADEX teSi9JL7aEWsZEKD1I8h3/hHrNi5LytxIALLu3ma6jbQWnB62ceRJ8+8NYkD47Pg AwkW4Glf7qf9GmKGnwaq5Ncoeo9tgjl8QLOgnWRWx5aB4X7vpOrIUli2/i31tFbc VE8hfH6u2OpLOg1RWj3WdW51f0pe9sv8XO0Qd6vdUPiEYZDUnv+GK38t0sQAyp/d /iW1nvPaYanpsKIxIx/ySgnEKdJlgs7cshYySqQmoZm7EDvATrdGfhQflPCsJ5ei rxyCpjqrLKooxA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:27 2025 by rpki-client