This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json) Hash identifier: O4VVx+tophylw5GpWFyKkI7Ab066t1SYeDMHLMtvKTE= Subject key identifier: 77:36:20:6E:75:C0:14:78:BA:34:A6:EC:F4:96:7B:C3:46:57:AD:8D Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50 Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250 Certificate serial: 019AF12DA7EEF8D7F89938921073571F5F2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: tmtTv5sVujnSytEyYOtlHxk5QTFIwjw7iOiMrG8TD4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a7:ee:f8:d7:f8:99:38:92:10:73:57:1f:5f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=7736206e75c01478ba34a6ecf4967bc34657ad8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:72:ab:a8:1f:bf:fe:52:c6:b7:91:8a:c3: 36:26:5e:28:37:67:9e:ef:ca:62:d1:0f:d0:23:6c: cb:2c:76:b5:68:b9:38:bb:17:04:a3:39:32:cc:8f: 60:56:68:56:d0:f9:ab:dd:e3:ba:e7:b6:47:39:56: ea:4a:64:30:f3:10:b2:ea:7d:9c:bf:07:7f:1c:fc: ef:87:99:ab:85:e8:36:75:3d:78:5c:11:09:af:79: 8c:05:43:72:49:14:e7:07:48:e1:ff:6e:c4:0e:22: f7:cf:6d:d2:71:57:be:56:44:aa:bc:02:64:ea:3b: 53:c8:b8:67:88:aa:33:b7:6a:53:e9:81:d8:d1:e0: bc:9c:a5:06:df:1d:ef:ae:15:56:f6:50:66:a7:58: b5:47:f1:22:a2:f4:49:ad:37:b2:89:35:79:95:25: 8a:18:11:e6:45:88:ef:1e:54:d2:34:aa:c4:18:98: 07:77:81:b4:95:29:d9:63:37:01:b1:5e:ca:93:4a: e6:a3:34:7b:c1:ae:01:d2:9e:ae:63:b0:82:88:37: 2c:e5:ef:e9:49:90:40:35:bd:e8:b6:a7:94:de:5f: bd:a7:2a:e3:74:46:12:dc:5b:6d:59:0f:fe:1c:df: ec:de:33:58:56:c0:df:61:3b:3a:96:71:e1:cc:52: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:20:6E:75:C0:14:78:BA:34:A6:EC:F4:96:7B:C3:46:57:AD:8D X509v3 Authority Key Identifier: keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:93:f5:19:c7:b0:f7:be:9b:74:30:a0:48:89:80:34:2f: 7c:9c:19:34:fd:e8:fb:ea:12:68:d7:8b:94:bb:08:00:ab:b9: 12:16:29:de:05:c8:97:10:48:a4:c5:21:7a:82:14:8d:97:34: 63:f8:a2:f8:33:00:da:39:67:88:96:1b:4d:69:e3:c1:80:bc: 3a:7f:8a:34:ab:80:1b:7e:66:75:4e:d0:76:d3:c3:0f:b0:0f: 01:02:c6:f4:33:01:eb:01:9e:a1:1f:9c:5e:15:1c:26:a0:76: 2e:2a:e4:0b:74:03:f6:b3:a4:a5:c2:70:01:0a:c4:bf:cf:d9: 71:13:10:fa:39:68:73:ac:25:80:1f:9e:b2:52:77:48:68:29: 08:c5:c1:b3:6d:aa:1c:62:ca:b7:dd:2c:12:ec:4d:74:d0:d4: 83:8c:56:ba:ab:97:1b:1c:9d:ac:30:dc:66:18:50:a5:81:64: a2:6c:d1:93:54:36:c2:06:0a:92:d2:ca:ba:14:a3:f3:19:52: c9:0d:3d:d1:0f:7c:18:15:52:c2:ef:6e:4c:b4:8d:80:50:72: 33:ed:14:66:0d:61:13:b0:ba:69:d5:5d:c8:6b:53:fd:1d:77: 21:a3:15:4a:80:25:46:a0:bb:ca:b6:ce:a6:06:e9:a0:93:37: 8e:68:01:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLafu+Nf4mTiSEHNXH18uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxN2VkNDFmMGFkZmRmMTlhNzE2MTRlMzkwNGMwZjA4NDk5 NzkyNTAwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD Eyg3NzM2MjA2ZTc1YzAxNDc4YmEzNGE2ZWNmNDk2N2JjMzQ2NTdhZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhZyq6gfv/5SxreRisM2Jl4oN2ee 78pi0Q/QI2zLLHa1aLk4uxcEozkyzI9gVmhW0Pmr3eO657ZHOVbqSmQw8xCy6n2c vwd/HPzvh5mrheg2dT14XBEJr3mMBUNySRTnB0jh/27EDiL3z23ScVe+VkSqvAJk 6jtTyLhniKozt2pT6YHY0eC8nKUG3x3vrhVW9lBmp1i1R/EiovRJrTeyiTV5lSWK GBHmRYjvHlTSNKrEGJgHd4G0lSnZYzcBsV7Kk0rmozR7wa4B0p6uY7CCiDcs5e/p SZBANb3otqeU3l+9pyrjdEYS3FttWQ/+HN/s3jNYVsDfYTs6lnHhzFJTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc2IG51wBR4ujSm7PSWe8NGV62NMB8GA1UdIwQY MBaAFEF+1B8K398ZpxYU45BMDwhJl5JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEt NmVhODkxZThjZmM3LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEtNmVhODkxZThjZmM3 LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ2T9RnH sPe+m3QwoEiJgDQvfJwZNP3o++oSaNeLlLsIAKu5EhYp3gXIlxBIpMUheoIUjZc0 Y/ii+DMA2jlniJYbTWnjwYC8On+KNKuAG35mdU7QdtPDD7APAQLG9DMB6wGeoR+c XhUcJqB2LirkC3QD9rOkpcJwAQrEv8/ZcRMQ+jloc6wlgB+eslJ3SGgpCMXBs22q HGLKt90sEuxNdNDUg4xWuquXGxydrDDcZhhQpYFkomzRk1Q2wgYKktLKuhSj8xlS yQ090Q98GBVSwu9uTLSNgFByM+0UZg1hE7C6adVdyGtT/R13IaMVSoAlRqC7yrbO pgbpoJM3jmgBcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:24 2025 by rpki-client