This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json) Hash identifier: XDvWConWBnLoJzyEPNKS2FOdwJY0Abll+o1Zn76S12g= Subject key identifier: 4A:7B:67:67:13:FF:D8:1C:B5:4C:84:2F:DA:C8:32:2C:7D:79:9D:C8 Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59 Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59 Certificate serial: 019AF2769EFEE9B0EDD03E4DF6DB0F5541C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft Manifest number: 05B3 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: Z2oI3zyaIWMq6ggz2XKa1le/kaQagQHtrKJfxA8lD6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9e:fe:e9:b0:ed:d0:3e:4d:f6:db:0f:55:41:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=4a7b676713ffd81cb54c842fdac8322c7d799dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:05:7d:55:be:57:31:29:5f:bc:be:3c:fc: 69:81:67:5c:76:7f:ad:78:4a:b7:7f:52:2d:2b:b0: 88:30:af:4e:fd:eb:4a:23:d4:81:e7:00:11:4a:52: 03:7d:c6:0c:13:45:8a:4c:18:34:b2:3b:4b:69:9d: 73:24:ed:c0:3d:72:ed:a9:28:29:fe:9e:ff:2a:03: 54:29:a3:19:a9:2d:bf:81:fd:87:98:9a:1a:57:3f: 70:42:b4:77:66:91:a2:d2:ae:aa:97:8d:7e:ab:c4: 39:a6:36:d6:7a:67:13:a8:b3:da:4c:d8:8c:b4:f6: 20:b9:9e:8c:16:7c:b5:f0:c7:dd:58:74:1a:3d:39: c7:03:bd:4e:cc:c5:19:ad:e2:e0:5a:bf:51:ce:77: 1f:e5:8f:9c:a3:de:f7:70:05:5d:32:97:a3:ad:b7: 23:3c:67:57:06:d7:2d:f0:41:15:cd:b2:a7:c0:c3: 8c:e6:ea:3c:53:3f:e4:8f:04:b2:81:67:f1:0d:45: ef:42:4e:34:b4:86:58:88:62:1d:e8:7f:a0:0c:d4: 30:27:4e:2c:38:37:ac:66:59:f0:4f:49:e3:03:5f: 4a:9a:1c:ce:a2:bb:aa:f8:ec:60:4f:ae:cc:82:90: 63:13:32:27:6c:c9:c6:94:9b:9e:f3:ba:54:4f:c5: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:67:67:13:FF:D8:1C:B5:4C:84:2F:DA:C8:32:2C:7D:79:9D:C8 X509v3 Authority Key Identifier: keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:76:5a:d2:50:82:73:0b:d0:5b:8b:d0:6d:e6:e2:6c:a1:4d: ae:7f:98:4a:5f:2a:cc:40:0f:5b:f1:3f:96:16:fd:2a:f8:10: be:16:01:11:a5:73:be:14:e8:dc:03:0c:42:4d:ce:ee:2d:31: 67:73:82:8a:16:45:2f:4b:3d:62:02:4e:4d:82:83:8c:76:cd: de:83:49:be:e3:91:de:99:6a:12:d6:ac:a5:4c:3a:93:09:d2: 40:c4:69:8a:71:a1:59:24:d7:ea:b4:23:79:82:02:7c:6c:34: 6d:b4:47:fc:75:71:5b:af:bc:93:e5:e7:e9:16:eb:27:5a:18: e2:15:3d:77:98:d5:25:ea:98:ce:8c:5a:2b:71:4d:e7:4b:9c: 48:76:2d:a2:ea:e3:3e:49:f3:12:0e:e0:d3:27:db:69:1b:b8: 94:d6:41:9b:50:73:eb:7a:d6:ee:8b:94:fb:37:14:93:91:30: 67:5f:cf:64:24:39:c1:22:b5:84:6b:1a:ae:54:bd:c3:35:c9: 26:b6:39:71:46:fd:f6:27:f1:78:e7:a0:5f:16:1c:49:f4:2c: f8:f9:2d:f5:20:c3:ba:af:93:38:c9:79:fb:d7:40:d3:70:a7: 55:dc:25:37:fb:b3:65:91:30:70:6d:9b:c0:2b:a0:66:99:b0: 49:96:7b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp7+6bDt0D5N9tsPVUHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRlMTA2YmU1Mzg2ZWQxMDY3NWVlMGRlMzM2ZGM3N2Uy MDBkNTkwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg0YTdiNjc2NzEzZmZkODFjYjU0Yzg0MmZkYWM4MzIyYzdkNzk5ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqcFfVW+VzEpX7y+PPxpgWdcdn+t eEq3f1ItK7CIMK9O/etKI9SB5wARSlIDfcYME0WKTBg0sjtLaZ1zJO3APXLtqSgp /p7/KgNUKaMZqS2/gf2HmJoaVz9wQrR3ZpGi0q6ql41+q8Q5pjbWemcTqLPaTNiM tPYguZ6MFny18MfdWHQaPTnHA71OzMUZreLgWr9Rzncf5Y+co973cAVdMpejrbcj PGdXBtct8EEVzbKnwMOM5uo8Uz/kjwSygWfxDUXvQk40tIZYiGId6H+gDNQwJ04s ODesZlnwT0njA19KmhzOoruq+OxgT67MgpBjEzInbMnGlJue87pUT8Xp4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp7Z2cT/9gctUyEL9rIMix9eZ3IMB8GA1UdIwQY MBaAFKk04Qa+U4btEGde4N4zbcd+IA1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYt MGE2YmYyZGY5ZDYyLzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYtMGE2YmYyZGY5ZDYy LzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHZa0lCC cwvQW4vQbebibKFNrn+YSl8qzEAPW/E/lhb9KvgQvhYBEaVzvhTo3AMMQk3O7i0x Z3OCihZFL0s9YgJOTYKDjHbN3oNJvuOR3plqEtaspUw6kwnSQMRpinGhWSTX6rQj eYICfGw0bbRH/HVxW6+8k+Xn6RbrJ1oY4hU9d5jVJeqYzoxaK3FN50ucSHYtourj PknzEg7g0yfbaRu4lNZBm1Bz63rW7ouU+zcUk5EwZ1/PZCQ5wSK1hGsarlS9wzXJ JrY5cUb99ifxeOegXxYcSfQs+Pkt9SDDuq+TOMl5+9dA03CnVdwlN/uzZZEwcG2b wCugZpmwSZZ7Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:49 2025 by rpki-client