This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json) Hash identifier: mS+hgLEIGJSGkW/mhYwuFvBHoCbXekCsek1Z9nZv++o= Subject key identifier: 8F:74:18:68:AD:9E:42:73:BC:3D:7F:21:47:A8:C5:40:9F:E8:1C:D9 Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Certificate serial: 019AF12EA1CB7890D9B192DEF9FEAEDCD07C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft Manifest number: 0E37 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: WXjLSxrX8i6hNsRuFq0Ge3OQ+5V/3evLqCDFVXu9ong=) 2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a1:cb:78:90:d9:b1:92:de:f9:fe:ae:dc:d0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=8f741868ad9e4273bc3d7f2147a8c5409fe81cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:54:a6:d7:b3:6a:85:2f:87:5a:50:f5:8d: f5:6a:a1:b3:25:13:ea:2d:83:ad:4c:f4:8d:ad:d7: 3f:4e:d0:8e:8a:de:89:32:85:06:18:62:c2:c3:3b: 75:0b:e7:99:49:92:a6:74:1b:55:b0:7b:55:1d:c0: 59:b7:00:d2:a7:76:b6:21:c2:e0:85:a6:ea:78:7e: ae:de:bf:a0:2a:b8:28:63:49:27:3a:9c:25:56:df: 3b:4c:38:03:f2:d0:4b:00:49:b4:10:24:db:c8:55: 39:49:c4:05:23:14:1e:53:02:42:e3:60:1f:1d:d8: 0f:29:7a:cf:47:e8:60:a8:ea:84:a3:45:72:81:cb: df:76:45:c9:36:dc:f1:fb:f4:58:2c:ba:c8:18:cc: af:1f:75:4d:10:ed:87:45:c5:41:ea:37:54:5e:74: 19:99:e3:1e:5d:2f:b2:dc:15:6f:9f:e8:a1:b1:fb: ef:24:f6:30:6f:99:c5:0c:a0:d6:77:e4:73:42:d5: 80:da:32:6d:d8:34:b0:a3:6c:2f:dd:20:12:25:49: 6f:29:08:6d:77:e2:ad:97:1c:83:cf:64:dc:51:19: f7:08:7a:08:28:aa:44:9b:88:9c:e0:c7:4f:6b:08: 8a:7c:45:97:31:c6:b9:d2:2c:0b:ed:a0:2e:61:60: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:18:68:AD:9E:42:73:BC:3D:7F:21:47:A8:C5:40:9F:E8:1C:D9 X509v3 Authority Key Identifier: keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9c:26:3b:8e:2e:1d:3d:64:be:9a:c7:d6:c2:3a:cc:df:e4: f6:62:b5:ef:5e:a6:23:55:82:68:d0:f4:42:fb:9a:c9:5b:08: de:65:00:cc:45:65:c1:a6:ed:9a:3e:9d:4f:c8:a6:3b:c3:02: 01:75:9c:d6:93:44:1c:02:20:fa:1c:a3:5d:3e:b3:00:54:c3: f7:42:bc:9c:f0:c8:96:79:95:74:d6:53:57:c7:27:fb:93:a1: bd:18:81:ea:10:52:1e:e6:35:1f:17:fa:07:22:e0:c8:7b:1b: d2:5e:a7:84:6b:6e:09:d6:9f:61:70:36:8a:e0:8a:89:13:ec: e4:69:56:9a:4a:df:71:4d:f3:75:d0:1d:08:08:8c:9d:7f:15: c0:8e:8a:4c:d8:4d:d5:80:93:99:63:4f:c4:e8:bd:8c:0a:22: 33:50:c3:d6:bb:4d:c7:2e:cd:03:fd:83:c8:2b:11:11:c4:fe: f8:8e:5f:69:3d:34:ee:3a:65:f0:0a:d4:50:87:ac:21:3e:ff: a1:16:09:28:42:9d:38:d5:3c:5c:b1:93:ae:d7:c1:2d:53:41: a8:7e:b6:2e:00:2f:a1:38:00:1c:c0:6c:40:2c:74:9f:44:ef: 9a:ba:5f:28:8c:79:9b:74:04:43:9e:62:4b:80:d3:e8:80:8e: f5:18:21:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqHLeJDZsZLe+f6u3NB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjAwMzAwZWVlZDVhZjVkN2ZjMDlkOGZjMTU4YjY1OTM1 ZWQwNTcwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD Eyg4Zjc0MTg2OGFkOWU0MjczYmMzZDdmMjE0N2E4YzU0MDlmZTgxY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ktUptezaoUvh1pQ9Y31aqGzJRPq LYOtTPSNrdc/TtCOit6JMoUGGGLCwzt1C+eZSZKmdBtVsHtVHcBZtwDSp3a2IcLg habqeH6u3r+gKrgoY0knOpwlVt87TDgD8tBLAEm0ECTbyFU5ScQFIxQeUwJC42Af HdgPKXrPR+hgqOqEo0VygcvfdkXJNtzx+/RYLLrIGMyvH3VNEO2HRcVB6jdUXnQZ meMeXS+y3BVvn+ihsfvvJPYwb5nFDKDWd+RzQtWA2jJt2DSwo2wv3SASJUlvKQht d+KtlxyDz2TcURn3CHoIKKpEm4ic4MdPawiKfEWXMca50iwL7aAuYWCOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI90GGitnkJzvD1/IUeoxUCf6BzZMB8GA1UdIwQY MBaAFEFgAwDu7Vr11/wJ2PwVi2WTXtBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAt N2Q3OWMwNzE3M2Y0LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAtN2Q3OWMwNzE3M2Y0 LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJwmO44u HT1kvprH1sI6zN/k9mK1716mI1WCaND0QvuayVsI3mUAzEVlwabtmj6dT8imO8MC AXWc1pNEHAIg+hyjXT6zAFTD90K8nPDIlnmVdNZTV8cn+5OhvRiB6hBSHuY1Hxf6 ByLgyHsb0l6nhGtuCdafYXA2iuCKiRPs5GlWmkrfcU3zddAdCAiMnX8VwI6KTNhN 1YCTmWNPxOi9jAoiM1DD1rtNxy7NA/2DyCsREcT++I5faT007jpl8ArUUIesIT7/ oRYJKEKdONU8XLGTrtfBLVNBqH62LgAvoTgAHMBsQCx0n0TvmrpfKIx5m3QEQ55i S4DT6ICO9RghZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:58 2025 by rpki-client