This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json) Hash identifier: 6sIHk+PEGubWc9SivSFxHXP+GlbTitx86ekNVbXcu3o= Subject key identifier: 5F:89:E4:62:35:9F:C1:EE:4C:79:E5:0C:40:B0:87:A7:EC:81:5A:3D Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Certificate serial: 019AF3524B9E04EEE554ACE202BCAE81E025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft Manifest number: 0BF4 Signing time: Sat 06 Dec 2025 11:00:47 +0000 Manifest this update: Sat 06 Dec 2025 11:00:47 +0000 Manifest next update: Sun 07 Dec 2025 11:00:47 +0000 Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: Q/u4dWS22KQwBMOIcnzpKCokH28ScC0sPVtB5l3bN/g=) 2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4b:9e:04:ee:e5:54:ac:e2:02:bc:ae:81:e0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Validity Not Before: Dec 6 11:00:47 2025 GMT Not After : Dec 7 11:00:47 2025 GMT Subject: CN=5f89e462359fc1ee4c79e50c40b087a7ec815a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:ea:63:ef:ca:1e:cf:0d:17:92:25:c5:67: 7c:79:ad:cf:4f:5d:c1:a8:de:ed:93:39:d0:d3:fa: 36:75:41:d5:40:e9:6e:79:28:44:c0:a9:ed:88:ab: 4c:82:30:d8:d6:49:31:d0:18:5d:03:bd:bb:5b:2a: 33:0d:78:b9:bb:32:42:27:dd:a0:8c:2a:80:c0:1d: 32:48:b9:46:a7:5e:1e:7c:88:7f:3e:96:32:bb:fd: 37:9a:94:79:2a:c5:93:c0:28:74:bf:7d:1d:2a:ee: 35:7c:b2:76:3b:b9:68:98:5d:3e:70:e4:4d:f7:65: 61:10:e1:50:d3:6c:aa:87:18:a5:67:93:06:25:d7: 95:d9:6a:1d:c0:cc:34:e4:e9:e4:90:fe:51:38:44: 7d:a4:f4:cb:9a:0b:55:1a:64:b9:07:f2:b2:71:74: df:31:d0:6d:2e:7f:20:d6:6e:39:e7:56:32:df:68: 75:ee:fb:35:81:23:3b:e1:e8:ff:11:c5:4b:b0:8e: 17:49:94:74:5e:83:64:5f:d7:fc:32:30:aa:ed:ca: 7e:08:77:00:55:92:1b:0b:64:20:4c:dd:34:78:35: 0d:ca:2b:7f:0d:b6:bb:15:80:b1:9d:b7:ba:b1:42: 81:0b:92:73:c9:8f:44:64:bc:28:be:5a:aa:0e:d6: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:E4:62:35:9F:C1:EE:4C:79:E5:0C:40:B0:87:A7:EC:81:5A:3D X509v3 Authority Key Identifier: keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6f:0c:0f:1f:72:e7:92:8e:29:fd:fc:f1:37:9f:3e:4a:e6: 90:61:5b:f8:0f:11:dd:d4:c1:b5:07:28:35:e4:c3:61:95:41: 0c:a2:fe:25:4b:29:5f:86:03:fa:40:29:9f:01:67:85:3e:73: 90:e2:98:08:31:fa:2b:93:11:84:15:bf:d9:42:dd:30:1f:1c: da:e4:1b:2d:57:bf:91:19:4e:b6:b2:c1:c1:a1:19:28:b8:94: 9e:8d:53:c5:65:00:d3:ed:a2:48:21:77:a0:a4:ea:7c:a1:4c: be:8e:f1:c8:c9:6f:cf:64:11:c8:ff:04:da:5f:ff:fe:94:17: d7:7f:d2:0f:ec:0c:7e:67:bc:9c:77:68:ed:84:c1:2b:30:4b: 86:01:42:ea:50:aa:e1:93:ba:0e:18:60:49:6e:47:4c:58:15: 2e:e6:af:98:68:91:5d:22:a5:fa:ff:05:cb:bc:56:4c:28:c6: 85:15:af:26:cd:6a:fe:38:80:dd:9a:5d:87:6c:11:0b:d4:21: c4:25:10:84:ca:97:5a:63:97:e9:22:08:e7:50:85:eb:9e:76: ea:b8:69:2b:e1:73:6f:ad:fe:34:45:7a:73:e9:52:88:71:09: fb:e0:4e:91:93:4e:b6:b2:32:e5:1e:cc:b3:c2:8d:f5:a8:77: ce:44:99:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkueBO7lVKziAryugeAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi NzlmY2EwHhcNMjUxMjA2MTEwMDQ3WhcNMjUxMjA3MTEwMDQ3WjAzMTEwLwYDVQQD Eyg1Zjg5ZTQ2MjM1OWZjMWVlNGM3OWU1MGM0MGIwODdhN2VjODE1YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cHqY+/KHs8NF5IlxWd8ea3PT13B qN7tkznQ0/o2dUHVQOlueShEwKntiKtMgjDY1kkx0BhdA727WyozDXi5uzJCJ92g jCqAwB0ySLlGp14efIh/PpYyu/03mpR5KsWTwCh0v30dKu41fLJ2O7lomF0+cORN 92VhEOFQ02yqhxilZ5MGJdeV2WodwMw05OnkkP5ROER9pPTLmgtVGmS5B/KycXTf MdBtLn8g1m4551Yy32h17vs1gSM74ej/EcVLsI4XSZR0XoNkX9f8MjCq7cp+CHcA VZIbC2QgTN00eDUNyit/Dba7FYCxnbe6sUKBC5JzyY9EZLwovlqqDtZxewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+J5GI1n8HuTHnlDECwh6fsgVo9MB8GA1UdIwQY MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5 LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG8MDx9y 55KOKf388TefPkrmkGFb+A8R3dTBtQcoNeTDYZVBDKL+JUspX4YD+kApnwFnhT5z kOKYCDH6K5MRhBW/2ULdMB8c2uQbLVe/kRlOtrLBwaEZKLiUno1TxWUA0+2iSCF3 oKTqfKFMvo7xyMlvz2QRyP8E2l///pQX13/SD+wMfme8nHdo7YTBKzBLhgFC6lCq 4ZO6DhhgSW5HTFgVLuavmGiRXSKl+v8Fy7xWTCjGhRWvJs1q/jiA3Zpdh2wRC9Qh xCUQhMqXWmOX6SII51CF65526rhpK+Fzb63+NEV6c+lSiHEJ++BOkZNOtrIy5R7M s8KN9ah3zkSZCA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:08 2025 by rpki-client