This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json) Hash identifier: IsFjYcNapIXTQnK06ypNKhWKJ/j7ar8lAO48fPRY/bY= Subject key identifier: EE:AB:44:24:8A:4A:62:DD:4C:B0:B6:22:18:4B:85:8B:36:D2:27:A7 Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87 Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887 Certificate serial: 019AF19B63490A57A22FF8ECF2B0AAB5B10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: ecmhWT0WGwkjxJ8ffp3ehGh2W1HKU9QenvQ8+YrsZT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:63:49:0a:57:a2:2f:f8:ec:f2:b0:aa:b5:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=eeab44248a4a62dd4cb0b622184b858b36d227a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:59:73:d9:db:95:05:b0:3b:ed:76:35:a9: 4c:c2:c9:f9:57:d5:20:11:3f:42:8e:45:00:7c:90: 33:cd:a3:48:db:ac:8e:ba:7b:94:cc:54:92:5e:29: 60:b0:1e:bb:a8:42:da:7e:88:49:1e:36:c9:f6:83: b5:5f:2c:98:37:0c:6e:cb:8b:48:46:57:82:a8:18: e4:b4:e5:ea:21:36:cc:ab:8e:4e:3a:25:ad:fd:4b: f2:ed:7b:cb:e5:a2:5a:c8:93:d1:3a:d3:74:c2:0f: b0:d2:30:83:c4:db:f8:ea:04:4c:23:aa:a1:0a:e5: 39:51:6a:63:38:17:73:b6:dd:1a:88:8a:5d:2b:7e: 47:54:df:a5:82:7f:9d:a7:47:3c:a4:5b:24:33:a7: 51:01:db:7d:4d:82:80:24:b7:2e:07:ca:cd:58:72: 65:cb:51:eb:56:46:e4:5e:95:a1:e5:e2:a2:ad:01: cd:9e:3f:f6:e3:6f:e2:4d:cf:75:7e:67:28:18:1e: d8:88:75:dc:d4:49:be:49:9e:85:7f:ba:c8:40:52: 1c:11:09:c1:b7:b3:1c:c5:16:f3:2a:fd:8b:d4:32: 84:2e:46:2a:64:cd:fe:36:55:3d:e3:5d:77:87:8a: 80:8d:bd:7b:50:b6:db:84:20:28:d5:a9:cb:ca:8f: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:44:24:8A:4A:62:DD:4C:B0:B6:22:18:4B:85:8B:36:D2:27:A7 X509v3 Authority Key Identifier: keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:43:03:e0:63:cc:b6:91:d1:d3:e2:e8:4b:4a:ad:a4:47: d9:1c:90:67:6d:e1:16:5d:f4:45:bb:b3:bc:9f:6e:21:5b:2d: 0f:5b:e6:85:c3:39:1a:f1:7c:14:93:87:a4:3b:0d:f9:ce:c1: ff:bf:67:1e:92:79:38:2e:12:be:a5:4c:6b:1c:27:d7:e1:4f: 69:8a:39:38:c6:8b:4a:34:e5:bb:94:c3:61:54:3d:e8:32:ba: 16:b3:81:b2:9c:68:64:7e:8d:2e:ef:f0:05:b7:ce:b1:b1:4b: ca:a5:c7:3f:5b:91:3b:f0:47:b4:8e:d1:4d:d0:21:9c:4e:62: fd:0a:b2:03:e3:e9:44:86:b5:fa:6a:93:9f:80:52:5d:67:71: 1c:28:0f:c3:2c:a4:91:ed:fb:be:0b:b7:6f:71:55:38:63:b1: c5:ef:66:60:d3:27:29:5b:7f:be:20:ff:c9:73:d5:ff:f3:55: 7b:9b:22:e1:fc:7a:e7:f6:e9:ee:03:f0:05:fc:1f:c6:cf:fc: e0:a9:83:ec:72:25:b1:22:ff:32:1d:d3:3b:b6:ee:b2:b4:b1: f9:92:61:05:2c:da:4f:db:4f:3a:d9:a6:39:8e:a0:c4:48:3c: 27:c7:ed:02:a1:cd:d0:0d:3f:9c:2b:c6:97:20:81:bf:0d:7d: 9c:59:09:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2NJCleiL/js8rCqtbEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYzRhNTY0NGYwNDI5NTIxZDFmZGM1YmJiMjMzYTA0MWIy MDA4ODcwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhlZWFiNDQyNDhhNGE2MmRkNGNiMGI2MjIxODRiODU4YjM2ZDIyN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyZZc9nblQWwO+12NalMwsn5V9Ug ET9CjkUAfJAzzaNI26yOunuUzFSSXilgsB67qELafohJHjbJ9oO1XyyYNwxuy4tI RleCqBjktOXqITbMq45OOiWt/Uvy7XvL5aJayJPROtN0wg+w0jCDxNv46gRMI6qh CuU5UWpjOBdztt0aiIpdK35HVN+lgn+dp0c8pFskM6dRAdt9TYKAJLcuB8rNWHJl y1HrVkbkXpWh5eKirQHNnj/242/iTc91fmcoGB7YiHXc1Em+SZ6Ff7rIQFIcEQnB t7McxRbzKv2L1DKELkYqZM3+NlU94113h4qAjb17ULbbhCAo1anLyo/SGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6rRCSKSmLdTLC2IhhLhYs20ienMB8GA1UdIwQY MBaAFEHEpWRPBClSHR/cW7sjOgQbIAiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDIt ZTg3OTMyYzU1NWYzLzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDItZTg3OTMyYzU1NWYz LzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXJDA+Bj zLaR0dPi6EtKraRH2RyQZ23hFl30RbuzvJ9uIVstD1vmhcM5GvF8FJOHpDsN+c7B /79nHpJ5OC4SvqVMaxwn1+FPaYo5OMaLSjTlu5TDYVQ96DK6FrOBspxoZH6NLu/w BbfOsbFLyqXHP1uRO/BHtI7RTdAhnE5i/QqyA+PpRIa1+mqTn4BSXWdxHCgPwyyk ke37vgu3b3FVOGOxxe9mYNMnKVt/viD/yXPV//NVe5si4fx65/bp7gPwBfwfxs/8 4KmD7HIlsSL/Mh3TO7busrSx+ZJhBSzaT9tPOtmmOY6gxEg8J8ftAqHN0A0/nCvG lyCBvw19nFkJCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:08 2025 by rpki-client