This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json) Hash identifier: SdtF8kCP2ayP/QfvpT7cBO6CII2XSJscopRZpuEYkRE= Subject key identifier: DA:F8:C4:23:12:A7:39:0E:3D:5C:FF:D1:2D:CC:E8:05:9D:2A:AB:FB Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad Certificate serial: 019AF653C01AF6E21BCC9C1732B2032C5821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft Manifest number: 0548 Signing time: Sun 07 Dec 2025 01:01:14 +0000 Manifest this update: Sun 07 Dec 2025 01:01:14 +0000 Manifest next update: Mon 08 Dec 2025 01:01:14 +0000 Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: 11iUNQbuQjSmxAqXFilhSm0wUF0oKNnf6zBU+JPn6iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:c0:1a:f6:e2:1b:cc:9c:17:32:b2:03:2c:58:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad Validity Not Before: Dec 7 01:01:14 2025 GMT Not After : Dec 8 01:01:14 2025 GMT Subject: CN=daf8c42312a7390e3d5cffd12dcce8059d2aabfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:8a:49:c6:64:be:e6:26:15:22:7b:7c:11: ff:79:d8:e6:f1:94:dd:1b:19:d6:4a:f9:f0:84:55: d4:cb:72:7c:68:26:22:03:a5:b4:14:f1:a2:eb:c8: 0e:81:da:34:3c:a5:a3:df:43:ea:f0:66:59:13:ea: 9a:07:74:84:70:31:b0:c4:2c:29:4a:f7:ff:e2:3d: 9b:b4:5a:3b:f8:08:72:07:ef:43:6b:59:2a:31:d0: e3:e9:82:d1:ff:cf:30:e6:bc:c2:86:1a:46:69:be: 3e:e1:07:b9:d2:e3:d8:62:be:3d:ec:66:07:90:3c: af:84:5d:44:80:d8:26:ce:c5:3e:8f:dc:ee:7b:f0: 4b:47:73:b5:d7:15:27:6b:28:d5:b9:73:4d:12:c7: 52:4b:bd:fd:e8:10:52:e2:e4:77:e4:ed:82:2c:7a: 1d:2f:97:46:5d:61:c3:78:e6:70:1b:28:bc:41:42: 83:b4:f3:4a:f8:07:19:9e:fa:26:f6:56:4c:ae:d7: 1f:a4:70:2d:54:ae:69:7b:ea:8d:ce:df:16:b0:0c: 0e:db:1f:61:20:74:0a:d3:8b:35:09:ad:5f:9f:6e: c8:68:06:20:b1:69:02:1d:49:83:96:ee:02:ac:88: bd:4e:09:38:41:57:94:9b:25:fd:4e:5e:f4:93:5a: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:C4:23:12:A7:39:0E:3D:5C:FF:D1:2D:CC:E8:05:9D:2A:AB:FB X509v3 Authority Key Identifier: keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b9:f2:5b:22:8b:88:17:db:b1:4f:d3:a3:91:7a:39:ed:a4: 1f:f5:56:07:39:88:43:0d:e2:10:aa:58:12:e5:f1:71:13:54: d9:91:c6:98:88:9c:f5:cb:80:4b:1f:41:59:5c:36:9d:8b:d3: 56:4e:92:16:46:51:22:00:46:0a:41:07:67:88:93:0c:d9:db: 30:96:e7:7c:d0:4d:19:34:11:fa:7c:9a:4a:e4:24:c6:53:22: 91:9d:1a:15:a9:38:98:2d:3b:a1:77:2b:21:c9:58:df:a6:8b: 77:10:53:19:bb:35:34:50:80:85:b5:68:62:7c:68:69:71:9e: 3e:98:8b:7a:9c:02:06:0e:f0:1d:e8:13:63:e4:b0:88:65:06: 19:ed:64:02:ff:f9:35:4b:3c:30:b3:35:39:2f:3a:59:30:94: b3:03:ac:48:5a:6d:14:d5:54:aa:54:57:9b:7c:1b:38:c6:95: 45:cb:c2:34:cd:76:87:b9:2c:ae:b1:db:93:38:50:c1:7e:83: ce:87:36:ef:38:97:01:c0:ff:92:95:8a:a8:9d:e2:93:83:1b: c1:76:18:d5:9c:ad:06:72:dc:e7:3f:77:a2:6a:a9:a6:8b:33: 9c:99:f4:56:21:02:4d:40:35:9d:a1:82:f7:68:f4:5d:83:6f: 10:c1:de:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U8Aa9uIbzJwXMrIDLFghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxN2VjODI4NWE1NjVkZjUyOTRhM2IzYjYwM2ZkZjkxOTRl NmVmYWQwHhcNMjUxMjA3MDEwMTE0WhcNMjUxMjA4MDEwMTE0WjAzMTEwLwYDVQQD EyhkYWY4YzQyMzEyYTczOTBlM2Q1Y2ZmZDEyZGNjZTgwNTlkMmFhYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQaKScZkvuYmFSJ7fBH/edjm8ZTd GxnWSvnwhFXUy3J8aCYiA6W0FPGi68gOgdo0PKWj30Pq8GZZE+qaB3SEcDGwxCwp Svf/4j2btFo7+AhyB+9Da1kqMdDj6YLR/88w5rzChhpGab4+4Qe50uPYYr497GYH kDyvhF1EgNgmzsU+j9zue/BLR3O11xUnayjVuXNNEsdSS7396BBS4uR35O2CLHod L5dGXWHDeOZwGyi8QUKDtPNK+AcZnvom9lZMrtcfpHAtVK5pe+qNzt8WsAwO2x9h IHQK04s1Ca1fn27IaAYgsWkCHUmDlu4CrIi9Tgk4QVeUmyX9Tl70k1oubwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr4xCMSpzkOPVz/0S3M6AWdKqv7MB8GA1UdIwQY MBaAFEF+yChaVl31KUo7O2A/35GU5u+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMt Nzc1ZjAyMmZkMDY0LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMtNzc1ZjAyMmZkMDY0 LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbnyWyKL iBfbsU/To5F6Oe2kH/VWBzmIQw3iEKpYEuXxcRNU2ZHGmIic9cuASx9BWVw2nYvT Vk6SFkZRIgBGCkEHZ4iTDNnbMJbnfNBNGTQR+nyaSuQkxlMikZ0aFak4mC07oXcr IclY36aLdxBTGbs1NFCAhbVoYnxoaXGePpiLepwCBg7wHegTY+SwiGUGGe1kAv/5 NUs8MLM1OS86WTCUswOsSFptFNVUqlRXm3wbOMaVRcvCNM12h7ksrrHbkzhQwX6D zoc27ziXAcD/kpWKqJ3ik4MbwXYY1ZytBnLc5z93omqpposznJn0ViECTUA1naGC 92j0XYNvEMHerQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:44 2025 by rpki-client