This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json) Hash identifier: rp+PYuJNT+U7N0CLl8uEo6yksnFK6L0+qCaEQykvxIA= Subject key identifier: DA:DD:7E:C6:E7:95:CB:54:DD:9B:E4:30:C0:65:3A:A2:5F:1B:C8:F5 Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193 Certificate serial: 019AF3BFE09E4E55C773F17CC00E53A1F269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft Manifest number: 07D3 Signing time: Sat 06 Dec 2025 13:00:29 +0000 Manifest this update: Sat 06 Dec 2025 13:00:29 +0000 Manifest next update: Sun 07 Dec 2025 13:00:29 +0000 Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: Q7MieCk0vacG2DoilZrpmbRePRNDmh9iXE9WybYRVGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e0:9e:4e:55:c7:73:f1:7c:c0:0e:53:a1:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193 Validity Not Before: Dec 6 13:00:29 2025 GMT Not After : Dec 7 13:00:29 2025 GMT Subject: CN=dadd7ec6e795cb54dd9be430c0653aa25f1bc8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:01:e1:b2:56:bb:33:8b:95:cd:c9:1d:7c: 2b:76:a9:6e:4a:35:43:7e:46:7a:9e:ff:59:94:4a: e5:9b:8f:fd:be:d0:62:e4:b2:29:9d:cc:15:eb:aa: 80:4a:c4:72:32:f1:6a:8f:3e:55:26:d7:e2:a1:5b: a2:e9:d7:99:00:ca:71:20:c4:4b:f5:46:fb:17:0e: 7c:35:57:f0:15:33:fc:80:2b:2e:25:ef:99:ed:e4: 45:f2:7b:39:d0:c7:d7:db:a5:61:39:fa:89:30:e7: b5:ba:1e:95:99:75:00:b1:a6:7a:35:20:7c:ec:41: 8e:9c:b1:c8:65:b7:0a:af:d3:54:57:b7:51:39:34: 0e:34:c5:9e:ea:13:b9:2d:67:ec:ba:d8:33:a2:64: 34:39:1d:1f:f3:83:d9:0f:57:18:6e:50:9b:70:8b: d8:c6:55:b0:72:13:aa:04:27:29:aa:77:6a:82:d0: 9a:19:41:49:d8:fa:08:51:77:1d:51:ce:cb:b5:ed: 52:8d:e6:0c:06:00:e1:e3:a3:0c:ba:4b:0c:3e:05: 07:c6:b4:18:45:e2:31:48:31:ca:be:b9:8e:dc:f8: c4:d4:07:4e:e8:37:27:49:8f:2a:5b:ce:e7:7a:6d: ff:d6:7c:9f:23:3b:bf:b2:bf:b7:ca:3e:3f:15:3a: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:7E:C6:E7:95:CB:54:DD:9B:E4:30:C0:65:3A:A2:5F:1B:C8:F5 X509v3 Authority Key Identifier: keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:73:98:66:43:cd:ce:cf:f4:c0:b4:7c:69:e0:80:7c:9f:9d: ec:18:58:86:f9:10:0b:4c:c6:9a:fa:fe:c7:84:09:75:f9:5e: fb:fc:0e:bc:a0:3a:fa:04:80:ee:7f:46:83:e2:a3:fa:31:ac: 1e:43:68:77:cc:36:c1:ea:ea:b7:22:c5:ab:f5:f2:b8:20:3d: 01:17:bb:93:dd:a3:52:ef:0b:28:a4:11:81:c7:a7:da:b3:08: 6d:42:49:f8:6e:2c:de:f2:6c:30:99:a4:9e:25:28:06:f7:ab: bd:40:4b:ae:64:7a:ae:26:87:19:b4:c5:5e:8c:22:39:8a:55: 42:a6:19:26:0b:36:ed:39:05:d4:2f:a0:79:b6:bb:94:dd:a4: 6f:de:b2:9f:9f:82:c1:67:f1:3e:64:6e:ed:93:8e:cc:ea:3c: a5:72:36:31:f7:8f:f0:65:4e:30:14:84:a3:5a:dc:ef:de:c9: 28:b2:56:87:a5:14:e1:63:a6:d7:d9:7e:5d:b2:b9:18:b7:68: fe:45:30:9e:c8:22:fd:2e:e6:df:10:37:05:3d:b1:6d:50:de: f2:cf:e9:c8:cf:96:b2:bb:7c:26:9a:3e:27:c4:5a:e0:fa:7f: 09:07:35:46:fd:e9:b7:b2:31:b3:ff:4f:bf:b7:81:95:73:f0: 51:4c:5c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+CeTlXHc/F8wA5TofJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5 YWIxOTMwHhcNMjUxMjA2MTMwMDI5WhcNMjUxMjA3MTMwMDI5WjAzMTEwLwYDVQQD EyhkYWRkN2VjNmU3OTVjYjU0ZGQ5YmU0MzBjMDY1M2FhMjVmMWJjOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq4B4bJWuzOLlc3JHXwrdqluSjVD fkZ6nv9ZlErlm4/9vtBi5LIpncwV66qASsRyMvFqjz5VJtfioVui6deZAMpxIMRL 9Ub7Fw58NVfwFTP8gCsuJe+Z7eRF8ns50MfX26VhOfqJMOe1uh6VmXUAsaZ6NSB8 7EGOnLHIZbcKr9NUV7dROTQONMWe6hO5LWfsutgzomQ0OR0f84PZD1cYblCbcIvY xlWwchOqBCcpqndqgtCaGUFJ2PoIUXcdUc7Lte1SjeYMBgDh46MMuksMPgUHxrQY ReIxSDHKvrmO3PjE1AdO6DcnSY8qW87nem3/1nyfIzu/sr+3yj4/FToTSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrdfsbnlctU3ZvkMMBlOqJfG8j1MB8GA1UdIwQY MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXOYZkPN zs/0wLR8aeCAfJ+d7BhYhvkQC0zGmvr+x4QJdfle+/wOvKA6+gSA7n9Gg+Kj+jGs HkNod8w2werqtyLFq/XyuCA9ARe7k92jUu8LKKQRgcen2rMIbUJJ+G4s3vJsMJmk niUoBvervUBLrmR6riaHGbTFXowiOYpVQqYZJgs27TkF1C+geba7lN2kb96yn5+C wWfxPmRu7ZOOzOo8pXI2MfeP8GVOMBSEo1rc797JKLJWh6UU4WOm19l+XbK5GLdo /kUwnsgi/S7m3xA3BT2xbVDe8s/pyM+Wsrt8Jpo+J8Ra4Pp/CQc1Rv3pt7Ixs/9P v7eBlXPwUUxciQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:08 2025 by rpki-client