This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json) Hash identifier: cgZKaTFvMeiXj2BwwQQ8Mvka7QW6Hj+98TWii0QoaQs= Subject key identifier: AF:64:2B:4A:AB:CF:F0:E6:46:10:FD:95:E7:72:B6:F8:E3:AC:02:5D Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91 Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791 Certificate serial: 019AF12E9D9FA88526C08CCA53A6F763C163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft Manifest number: 06E0 Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: BLpjO2krB+ChlWe/1lyBI9K3eUaMmjPSHmyCy/Ms0Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9d:9f:a8:85:26:c0:8c:ca:53:a6:f7:63:c1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=af642b4aabcff0e64610fd95e772b6f8e3ac025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:ff:2e:14:7d:2e:1d:07:a3:14:94:33:45: 3b:1a:aa:8b:bc:dd:5f:a9:75:bf:0b:3a:2b:f5:0d: 87:32:9b:40:20:e9:8b:a5:65:26:81:9b:d9:4a:48: 13:89:ac:45:aa:32:c3:03:aa:39:dd:eb:87:a9:b7: c6:ad:94:5d:51:94:7e:aa:56:de:2d:db:83:31:d8: cf:ed:36:ae:ca:2d:a7:0b:36:93:4b:01:6c:ee:0e: b3:8b:1e:65:a3:84:02:54:aa:5d:93:b0:f1:03:d6: 78:37:c9:37:69:bc:6c:e3:69:7e:52:17:72:f7:d7: a7:73:f4:05:a8:04:72:b4:62:65:6f:3b:5b:5a:74: 4f:3a:a0:9e:90:7a:42:a0:01:95:48:3e:eb:e9:56: 11:8c:b6:1e:0a:96:60:48:06:41:b7:b3:9b:96:1d: 8d:f6:d3:28:64:75:92:c4:af:9c:2d:c3:e7:1e:68: 9d:db:e7:fe:dc:73:67:97:a9:3e:10:74:01:59:3b: b6:86:f6:0e:ee:6c:5d:c4:1b:15:ae:da:a4:51:e2: cf:6d:ba:5b:cd:42:d4:c5:e8:76:be:f1:67:50:7d: 11:31:1e:ea:3c:75:7b:b6:27:09:40:6d:2c:2e:f6: fb:07:7d:a6:f1:ac:ae:b9:a1:26:7e:e7:4a:75:4f: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:64:2B:4A:AB:CF:F0:E6:46:10:FD:95:E7:72:B6:F8:E3:AC:02:5D X509v3 Authority Key Identifier: keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d3:ca:62:30:10:df:92:f9:11:1d:b8:d8:9a:00:94:72:3c: e0:bf:d4:c7:6b:c0:04:a7:94:ce:7c:42:4a:23:c1:36:b2:58: d3:15:6c:36:30:10:96:79:aa:fa:d9:9d:25:45:67:3c:68:09: 9d:ad:71:eb:ad:ef:39:e4:80:d6:af:2a:60:ee:bd:3c:52:07: c2:6a:ab:e5:e1:eb:9b:3c:d0:bf:c1:56:72:34:b1:dd:3a:c6: eb:5e:b1:f2:e1:d0:5a:27:b8:12:7a:76:e6:6c:f5:e5:c1:f3: aa:9f:3d:e9:3e:90:a8:75:fc:d8:14:33:d3:8a:99:af:55:7e: 92:60:0c:47:31:c1:bc:b0:a4:be:20:bb:ea:d9:8d:4e:e6:52: 05:47:5d:0a:b1:be:ff:e5:dd:c7:2b:52:8a:a1:e0:d2:a0:e2: c9:0b:40:24:d1:52:18:74:65:0e:70:f4:fc:fb:b7:6c:be:d9: a6:da:64:5a:bb:ec:84:02:2e:b3:76:f3:f4:da:51:fa:4e:2c: d8:3d:51:69:be:88:d8:6d:ee:c3:c8:00:b5:e9:c3:74:15:b6: cb:cf:2c:b8:11:5b:0d:bc:d9:a6:11:91:bb:27:49:71:d2:19: 1e:d3:6b:1b:38:52:42:61:65:09:a6:c4:af:9c:4a:3e:f0:2c: 78:dd:8b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLp2fqIUmwIzKU6b3Y8FjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1 MWQ3OTEwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EyhhZjY0MmI0YWFiY2ZmMGU2NDYxMGZkOTVlNzcyYjZmOGUzYWMwMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHr/LhR9Lh0HoxSUM0U7GqqLvN1f qXW/Czor9Q2HMptAIOmLpWUmgZvZSkgTiaxFqjLDA6o53euHqbfGrZRdUZR+qlbe LduDMdjP7Tauyi2nCzaTSwFs7g6zix5lo4QCVKpdk7DxA9Z4N8k3abxs42l+Uhdy 99enc/QFqARytGJlbztbWnRPOqCekHpCoAGVSD7r6VYRjLYeCpZgSAZBt7Oblh2N 9tMoZHWSxK+cLcPnHmid2+f+3HNnl6k+EHQBWTu2hvYO7mxdxBsVrtqkUeLPbbpb zULUxeh2vvFnUH0RMR7qPHV7ticJQG0sLvb7B32m8ayuuaEmfudKdU/iZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9kK0qrz/DmRhD9ledytvjjrAJdMB8GA1UdIwQY MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4 LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9PKYjAQ 35L5ER242JoAlHI84L/Ux2vABKeUznxCSiPBNrJY0xVsNjAQlnmq+tmdJUVnPGgJ na1x663vOeSA1q8qYO69PFIHwmqr5eHrmzzQv8FWcjSx3TrG616x8uHQWie4Enp2 5mz15cHzqp896T6QqHX82BQz04qZr1V+kmAMRzHBvLCkviC76tmNTuZSBUddCrG+ /+XdxytSiqHg0qDiyQtAJNFSGHRlDnD0/Pu3bL7ZptpkWrvshAIus3bz9NpR+k4s 2D1Rab6I2G3uw8gAtenDdBW2y88suBFbDbzZphGRuydJcdIZHtNrGzhSQmFlCabE r5xKPvAseN2LNA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:33 2025 by rpki-client