This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json) Hash identifier: NLnyJI14K5S17afe9wCZCb4shSc3KnCfUjPXjAhZPxk= Subject key identifier: 2B:28:7D:EA:D2:AF:1D:22:AA:89:8B:54:39:6B:A6:63:18:4C:AD:49 Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6 Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6 Certificate serial: 019AF12E6DC63E9E24F3634F4F3FBB4CE204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: 55wLbAJ6/Lo/8r9NnWpJ8Brwluy0+PCd+mu7+qoNT28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6d:c6:3e:9e:24:f3:63:4f:4f:3f:bb:4c:e2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=2b287dead2af1d22aa898b54396ba663184cad49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:09:05:43:db:dc:6c:4b:43:b1:5c:d8:55: 98:bd:9d:ff:89:13:79:ee:4b:62:97:1f:b9:0e:65: 4f:a7:96:a1:2b:00:f0:7b:15:18:e6:ac:0b:7c:21: da:8d:dd:5d:36:4a:10:6c:f5:2d:12:b0:e5:42:ca: 4e:63:4d:ad:37:d8:6d:f7:80:51:22:b3:3b:65:40: 8c:06:25:1a:4f:44:b8:98:cd:2b:cf:00:c8:d3:82: d2:ea:af:3f:22:70:33:c6:b1:f0:3f:51:7a:fd:d1: 85:2a:f1:f4:a3:a3:67:da:ae:31:6e:ed:51:cb:8c: 2c:f9:98:92:ba:37:13:b5:c1:8e:85:cd:37:dd:35: e7:18:8a:6a:c7:e8:7a:b2:51:1f:f0:65:d4:32:4b: 24:39:0e:78:60:49:a1:d7:1b:4f:f9:8d:8e:7d:eb: 6d:90:47:36:e3:3a:e6:b0:34:90:f7:27:d7:01:18: 2b:f9:67:bb:b6:a9:fd:31:78:e6:20:a2:19:03:26: 76:6c:70:3c:a8:6a:d6:2f:67:f7:ab:1a:cb:ec:07: c8:a7:1e:97:47:6d:c8:d9:07:51:0d:e5:df:51:bb: ee:5b:2e:00:c9:79:6f:64:c4:43:6c:b8:08:b0:45: 36:65:12:57:02:f5:bb:89:1b:42:aa:6f:39:09:95: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:7D:EA:D2:AF:1D:22:AA:89:8B:54:39:6B:A6:63:18:4C:AD:49 X509v3 Authority Key Identifier: keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:f7:a7:01:7e:2c:e5:81:0a:3e:55:91:6e:26:aa:0c:72: cd:ce:37:91:7d:65:19:4b:c1:c5:f3:5b:4b:46:11:f9:0c:05: 5f:96:37:7e:98:ea:2a:90:51:40:4c:f2:ea:48:68:cf:d1:9b: 79:a4:c0:40:57:fc:72:f4:be:76:46:87:f8:9e:53:42:e5:b4: a5:50:42:50:a1:1d:f0:ef:49:74:34:66:99:c8:83:af:b6:b0: 2b:42:0b:a8:09:ef:3f:70:68:83:6e:aa:ec:93:12:ca:49:2c: 0f:6f:0a:0f:a8:fb:8a:4c:a5:4c:db:e2:c3:37:ef:79:c3:71: 27:6b:04:4a:38:26:93:4c:94:85:84:e4:76:37:39:c9:0f:ae: 76:b7:99:ce:e2:e6:dc:b3:c9:81:ed:36:7b:26:e1:72:20:6d: 03:14:fb:ec:e6:31:2e:05:b9:99:c0:3e:51:15:da:5c:b6:01: a7:20:72:45:86:80:2e:02:17:2b:3c:99:b3:f4:4b:a9:24:6d: 2a:de:b4:d5:63:fb:ad:44:93:7b:9a:6e:09:28:7a:16:87:a6: 37:72:8c:ac:ac:e8:2d:4e:9d:d2:f9:a2:e7:30:c2:a7:1e:9f: f2:8b:e8:0b:3b:1a:9c:d4:d9:e2:d0:40:83:88:44:60:15:e7: 74:e4:2d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm3GPp4k82NPTz+7TOIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTc4OTU5MjkwY2U5YmIyYzFiNWI2MTQ0NDM4NDQxNWI1 YWZhZDYwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EygyYjI4N2RlYWQyYWYxZDIyYWE4OThiNTQzOTZiYTY2MzE4NGNhZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYJBUPb3GxLQ7Fc2FWYvZ3/iRN5 7ktilx+5DmVPp5ahKwDwexUY5qwLfCHajd1dNkoQbPUtErDlQspOY02tN9ht94BR IrM7ZUCMBiUaT0S4mM0rzwDI04LS6q8/InAzxrHwP1F6/dGFKvH0o6Nn2q4xbu1R y4ws+ZiSujcTtcGOhc033TXnGIpqx+h6slEf8GXUMkskOQ54YEmh1xtP+Y2Ofett kEc24zrmsDSQ9yfXARgr+We7tqn9MXjmIKIZAyZ2bHA8qGrWL2f3qxrL7AfIpx6X R23I2QdRDeXfUbvuWy4AyXlvZMRDbLgIsEU2ZRJXAvW7iRtCqm85CZWuMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsoferSrx0iqomLVDlrpmMYTK1JMB8GA1UdIwQY MBaAFEKXiVkpDOm7LBtbYURDhEFbWvrWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzBiMGEtMmU4My00NjlkLWI4OWIt MzI2ODA4ZWNjY2NjLzEvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hYzBiMGEtMmU4My00NjlkLWI4OWItMzI2ODA4ZWNjY2Nj LzEvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4T3pwF+ LOWBCj5VkW4mqgxyzc43kX1lGUvBxfNbS0YR+QwFX5Y3fpjqKpBRQEzy6khoz9Gb eaTAQFf8cvS+dkaH+J5TQuW0pVBCUKEd8O9JdDRmmciDr7awK0ILqAnvP3Bog26q 7JMSykksD28KD6j7ikylTNviwzfvecNxJ2sESjgmk0yUhYTkdjc5yQ+udreZzuLm 3LPJge02eybhciBtAxT77OYxLgW5mcA+URXaXLYBpyByRYaALgIXKzyZs/RLqSRt Kt601WP7rUSTe5puCSh6FoemN3KMrKzoLU6d0vmi5zDCpx6f8ovoCzsanNTZ4tBA g4hEYBXndOQtpg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:03 2025 by rpki-client