This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json) Hash identifier: zNQ5XdSgRUSopy9hCfKhUhSEfxVJzeBZ1Qb3v7iCkn8= Subject key identifier: 35:B9:5C:67:15:B5:F4:F2:1A:66:ED:3C:F5:1B:0C:46:35:F9:29:FA Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf Certificate serial: 019AF352BFCCFA37574EEE3821F16686F2DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:17 +0000 Manifest this update: Sat 06 Dec 2025 11:01:17 +0000 Manifest next update: Sun 07 Dec 2025 11:01:17 +0000 Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: adLLucUCkE4wkc6CUmuRgmVHx3Fgi0j5ZpyFKIoDYn4=) 2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:bf:cc:fa:37:57:4e:ee:38:21:f1:66:86:f2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf Validity Not Before: Dec 6 11:01:17 2025 GMT Not After : Dec 7 11:01:17 2025 GMT Subject: CN=35b95c6715b5f4f21a66ed3cf51b0c4635f929fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:82:88:e6:67:e3:ab:1c:bb:c9:bb:68:b0: 32:a4:f8:80:9f:87:e1:f4:8b:48:03:43:c0:09:5b: dc:5a:0c:e3:2d:75:ff:2b:00:bf:92:cd:c0:92:2a: 02:7b:5f:94:f2:3b:4d:79:8d:9b:4c:65:8d:cf:c3: 62:db:4b:58:1e:68:fd:93:b1:73:f4:03:5c:fa:03: 1f:13:b5:c9:84:0c:7f:f0:6e:5c:a1:da:7e:d0:2a: 01:32:92:0c:b2:a4:c8:12:c8:cf:02:52:c5:13:b5: ac:d4:5c:25:c2:56:4e:7a:c6:16:7b:b4:d4:a1:dd: b3:12:09:41:d5:ba:5f:fc:e2:93:35:7b:03:df:d4: 10:59:f4:67:f5:9b:9d:3d:8c:80:09:57:39:4a:8c: 64:e1:b8:74:24:bf:79:e7:ad:6a:c3:41:46:ca:44: 18:c7:f0:c1:d3:82:2d:0e:12:cd:81:15:8b:3b:7a: 2b:11:dc:47:80:28:e3:6f:82:8d:4e:bc:10:4c:7f: 01:75:54:28:31:7e:df:6f:48:8f:bf:71:af:b3:ea: 74:aa:2c:83:b2:32:a3:85:b2:d9:f1:4f:da:f5:bc: fa:d4:11:c0:9e:e5:12:2b:da:a7:95:2f:e3:2d:ce: d6:87:5f:4a:ee:c0:34:0f:c8:50:d8:76:38:08:e3: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:5C:67:15:B5:F4:F2:1A:66:ED:3C:F5:1B:0C:46:35:F9:29:FA X509v3 Authority Key Identifier: keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b1:c0:fa:a2:d3:c0:e4:54:e6:f0:b2:b6:2c:4e:bd:f0:35: e5:7e:b3:e4:be:dc:cd:fd:34:6b:a7:bf:5c:2d:13:ec:7c:f9: f5:49:b7:ab:c9:e5:b7:24:44:cf:d3:c2:ab:51:05:0c:75:23: f0:32:19:ba:82:3f:c7:03:b1:a4:42:19:36:28:72:e0:54:4f: b5:51:db:39:b6:fe:db:f0:b8:4b:4a:20:98:d0:6b:35:28:0b: fc:9c:a3:1c:c2:f9:1a:8f:b2:f7:e7:6d:8a:78:ef:3b:9f:01: 73:4d:b4:7c:7e:e7:50:dd:04:ce:36:21:25:22:9a:9b:dd:96: e3:0e:22:0c:25:90:18:c6:4b:ee:be:6b:38:03:f5:9a:be:d8: 85:35:4b:f6:50:f9:8b:a0:2e:a5:81:7e:e4:b5:7b:ef:f2:9e: de:65:78:49:4b:58:8c:01:ed:a3:c6:02:34:ab:83:c3:14:9d: 24:15:cb:bd:08:b3:55:e7:71:77:de:03:60:f0:e2:05:38:02: 09:39:e3:7b:73:71:76:3a:c7:45:90:e3:62:31:e3:9a:98:e8: b5:0a:12:6f:d6:3a:c6:b4:4e:23:8f:2c:24:e6:21:a4:97:f1: 55:32:c1:92:a9:e6:93:f6:2b:c6:18:7d:74:12:2c:0e:1e:a6: 05:25:ee:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUr/M+jdXTu44IfFmhvLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjkwZTIzOTBlOTBiYmQ4ZGU0MDIxOGFkMjIxZTA5M2Jj Y2VjYmYwHhcNMjUxMjA2MTEwMTE3WhcNMjUxMjA3MTEwMTE3WjAzMTEwLwYDVQQD EygzNWI5NWM2NzE1YjVmNGYyMWE2NmVkM2NmNTFiMGM0NjM1ZjkyOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKSCiOZn46scu8m7aLAypPiAn4fh 9ItIA0PACVvcWgzjLXX/KwC/ks3AkioCe1+U8jtNeY2bTGWNz8Ni20tYHmj9k7Fz 9ANc+gMfE7XJhAx/8G5codp+0CoBMpIMsqTIEsjPAlLFE7Ws1FwlwlZOesYWe7TU od2zEglB1bpf/OKTNXsD39QQWfRn9ZudPYyACVc5Soxk4bh0JL95561qw0FGykQY x/DB04ItDhLNgRWLO3orEdxHgCjjb4KNTrwQTH8BdVQoMX7fb0iPv3Gvs+p0qiyD sjKjhbLZ8U/a9bz61BHAnuUSK9qnlS/jLc7Wh19K7sA0D8hQ2HY4COO6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW5XGcVtfTyGmbtPPUbDEY1+Sn6MB8GA1UdIwQY MBaAFEFpDiOQ6Qu9jeQCGK0iHgk7zOy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUt MzM4NWQ5YmYxZDgwLzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUtMzM4NWQ5YmYxZDgw LzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbHA+qLT wORU5vCytixOvfA15X6z5L7czf00a6e/XC0T7Hz59Um3q8nltyREz9PCq1EFDHUj 8DIZuoI/xwOxpEIZNihy4FRPtVHbObb+2/C4S0ogmNBrNSgL/JyjHML5Go+y9+dt injvO58Bc020fH7nUN0EzjYhJSKam92W4w4iDCWQGMZL7r5rOAP1mr7YhTVL9lD5 i6AupYF+5LV77/Ke3mV4SUtYjAHto8YCNKuDwxSdJBXLvQizVedxd94DYPDiBTgC CTnje3NxdjrHRZDjYjHjmpjotQoSb9Y6xrROI48sJOYhpJfxVTLBkqnmk/Yrxhh9 dBIsDh6mBSXuhw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:05 2025 by rpki-client