This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json) Hash identifier: YEuUkj4zXuaUj+6KLtulDP2ou1caow3T/ANiEWQgip4= Subject key identifier: 6C:EE:97:12:E9:F1:27:B2:6A:23:C0:AB:06:C5:BA:72:FE:95:68:5F Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Certificate serial: 019AF12E29F3945D10A866AE325361F0CD36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=) 2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: UuBk68sax86YFRAYHpaSQ3jKpiJBpVx24FBVr67K5GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:f3:94:5d:10:a8:66:ae:32:53:61:f0:cd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=6cee9712e9f127b26a23c0ab06c5ba72fe95685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:95:a7:5d:ae:c6:de:d5:e6:49:d6:dc:59: 65:fa:e6:3c:78:b3:49:e0:3e:bb:f4:5b:5f:b7:d7: 7a:81:68:b4:5d:a2:ed:84:c2:32:86:c3:44:52:aa: 53:89:b1:dc:7a:df:7d:37:90:fb:50:94:7f:83:2b: 66:c3:7e:b3:ab:ce:b2:75:4c:78:5f:e4:86:0b:57: 95:83:5c:2f:e6:3e:7d:3f:53:99:d9:c1:85:e6:d5: 78:c0:03:dc:79:2c:46:7a:df:dc:91:a7:ae:5e:20: 45:c5:26:b9:f9:2a:51:4a:b6:f1:dc:43:22:15:d4: dd:60:28:ae:d2:e1:d8:bd:cf:f5:85:03:35:26:f7: 2d:5d:7e:db:a9:2d:cb:9f:e2:e2:93:02:ff:dd:64: 93:1d:8d:50:b6:64:8a:ae:5f:dd:44:f3:60:c6:38: 92:1a:ab:fa:eb:1f:2f:aa:c1:8f:ae:f1:89:62:20: c3:79:89:f8:2f:38:75:02:3d:60:91:c3:55:7f:8f: b0:bf:4f:94:4c:e5:b5:f4:3b:a8:5a:3f:95:3b:7e: da:f0:11:8d:01:39:1c:17:06:ad:ca:95:bf:f5:f7: b6:0e:d7:5c:9d:a4:ec:9c:83:f9:b8:15:2a:fa:fa: 9b:e8:2d:63:40:0b:41:11:ed:04:cd:19:6e:17:54: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EE:97:12:E9:F1:27:B2:6A:23:C0:AB:06:C5:BA:72:FE:95:68:5F X509v3 Authority Key Identifier: keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c9:e6:2e:23:ce:92:97:04:52:2f:e9:2b:15:b0:90:68:18: 2a:c0:d5:1b:27:c3:7f:73:39:35:9c:67:d8:0a:b0:0d:5e:da: 5f:88:4a:aa:c1:76:41:78:19:0f:b0:bb:00:03:e1:49:13:0d: 44:70:f6:0c:c4:87:69:67:d3:ac:67:a0:33:2a:ec:55:13:03: 78:0f:2b:35:8e:64:ad:9c:6e:c7:d3:f8:6e:c8:e9:5e:64:a0: 92:fa:f4:82:bf:95:3e:b1:1f:4b:0b:46:2b:52:bc:b4:8d:a4: 59:bc:90:21:b1:3d:b2:86:d2:29:b6:85:6e:95:f0:da:00:e5: f4:e7:23:c3:73:20:28:1b:32:5b:27:0a:c4:ff:18:98:e5:27: e5:91:d8:a9:b3:b2:a3:cf:87:c6:e6:f3:1d:85:bf:93:94:7c: 24:dc:dd:62:4d:e4:a4:83:1e:44:f2:0f:c5:c7:36:9b:82:79: e2:c4:33:6c:1f:1e:00:34:48:01:86:5c:08:c3:54:c5:e2:f5: d2:79:d9:8e:8e:c0:de:63:e4:0e:08:f4:70:b8:63:a2:a0:e9: 68:ef:82:9d:66:f8:e0:04:e2:ce:2c:10:62:0d:fe:d4:f4:30: 57:f5:dd:fe:0f:78:ae:cc:23:29:a4:64:bc:dd:d2:c9:d3:cb: 1c:07:44:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLinzlF0QqGauMlNh8M02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw NDc3OWYwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg2Y2VlOTcxMmU5ZjEyN2IyNmEyM2MwYWIwNmM1YmE3MmZlOTU2ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUCVp12uxt7V5knW3Fll+uY8eLNJ 4D679Ftft9d6gWi0XaLthMIyhsNEUqpTibHcet99N5D7UJR/gytmw36zq86ydUx4 X+SGC1eVg1wv5j59P1OZ2cGF5tV4wAPceSxGet/ckaeuXiBFxSa5+SpRSrbx3EMi FdTdYCiu0uHYvc/1hQM1JvctXX7bqS3Ln+LikwL/3WSTHY1QtmSKrl/dRPNgxjiS Gqv66x8vqsGPrvGJYiDDeYn4Lzh1Aj1gkcNVf4+wv0+UTOW19DuoWj+VO37a8BGN ATkcFwatypW/9fe2DtdcnaTsnIP5uBUq+vqb6C1jQAtBEe0EzRluF1TNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzulxLp8SeyaiPAqwbFunL+lWhfMB8GA1UdIwQY MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMnmLiPO kpcEUi/pKxWwkGgYKsDVGyfDf3M5NZxn2AqwDV7aX4hKqsF2QXgZD7C7AAPhSRMN RHD2DMSHaWfTrGegMyrsVRMDeA8rNY5krZxux9P4bsjpXmSgkvr0gr+VPrEfSwtG K1K8tI2kWbyQIbE9sobSKbaFbpXw2gDl9Ocjw3MgKBsyWycKxP8YmOUn5ZHYqbOy o8+HxubzHYW/k5R8JNzdYk3kpIMeRPIPxcc2m4J54sQzbB8eADRIAYZcCMNUxeL1 0nnZjo7A3mPkDgj0cLhjoqDpaO+CnWb44ATiziwQYg3+1PQwV/Xd/g94rswjKaRk vN3SydPLHAdEpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:14 2025 by rpki-client