This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft File: qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json) Hash identifier: M8B2JEnP5lSRwFQEugBx4eb+qTUCRMM1F1nKK5Rne6Q= Subject key identifier: 94:47:0B:75:B5:35:73:D9:9B:F5:11:60:E0:A9:AE:C8:22:01:6E:E3 Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb Certificate serial: 019AF19AE5C50A2AC9216584A3A9313C24D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft Manifest number: 0430 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: eXPvEqTFDutFtYphypSMIqs6kIxB/WGbZ3ExQPRvJzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e5:c5:0a:2a:c9:21:65:84:a3:a9:31:3c:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=94470b75b53573d99bf51160e0a9aec822016ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b8:78:b8:b1:13:7d:3d:90:7d:dd:75:3c:66: 04:8c:a5:77:92:49:0b:36:93:20:cd:b2:ae:71:17: d2:c7:8c:36:e9:81:62:87:ef:1d:94:67:14:96:1e: 35:7c:38:0f:ed:b9:6c:12:8b:07:6e:b6:2a:71:25: d8:eb:11:8b:bb:00:a9:c0:18:11:3f:ff:83:7c:f8: ba:b0:73:d1:6b:fc:90:7a:7c:4e:da:6c:e5:60:9d: 35:7e:c8:c3:08:e2:06:dc:5a:61:4b:e9:90:97:6f: 8e:1e:6d:c7:39:42:0e:1c:c6:be:b4:cd:e5:ea:2d: 63:05:e2:23:fd:b3:3a:5f:36:ed:ec:48:38:a2:db: 47:1c:56:19:28:56:f9:47:b9:d8:6e:ea:71:e8:f1: 3f:3e:e1:ed:82:9e:fb:07:76:a9:6a:d7:32:2c:a5: 10:c7:31:f6:cc:44:a9:22:4c:66:57:7e:91:86:62: 7f:1b:3b:ae:03:da:57:47:12:9d:f9:4c:8f:cc:ff: c0:55:b7:73:b3:d4:73:72:ea:d9:0a:15:b3:b6:38: 8e:70:06:b2:7c:ea:a2:26:0e:4a:6e:b3:2a:d1:07: 28:98:4c:8f:a4:47:2e:cc:71:c2:c0:2f:01:99:72: 50:91:fb:52:c9:8f:45:b2:66:83:74:00:ca:6a:7c: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:0B:75:B5:35:73:D9:9B:F5:11:60:E0:A9:AE:C8:22:01:6E:E3 X509v3 Authority Key Identifier: keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:75:0d:8a:8e:16:1b:ed:89:f3:1b:d9:30:f5:8d:58:32:e5: 41:50:c2:8e:5a:c2:65:c2:86:80:54:77:3f:9e:71:13:47:f3: bd:73:06:d4:07:f3:cd:01:12:5b:9f:b1:15:c3:b6:dd:4d:f1: e4:3b:30:9f:30:09:d4:22:aa:ba:d6:67:b5:77:56:ca:fb:d7: 56:f5:51:94:cd:9b:60:34:7e:73:24:62:43:9d:5d:80:fc:40: a1:e0:fd:76:0b:fa:0b:dd:64:54:b1:dd:5e:91:00:81:2b:c9: 86:e7:ab:27:1f:f2:37:08:e8:a1:d7:76:9e:02:ad:dd:08:69: 26:fc:27:0b:f9:16:a1:20:02:9e:c2:70:a5:1e:d7:0a:50:84: b9:48:d7:a4:33:ae:d5:c6:61:89:4d:7d:65:15:54:66:3b:67: 9b:84:f3:8e:af:5f:7b:eb:84:c4:e4:50:83:7b:8b:d7:db:92: 9a:c4:2a:05:e8:5d:38:a7:f2:29:f2:78:50:a8:42:94:2f:d6: df:59:08:49:fb:c4:07:de:c4:3a:45:2f:ce:d9:ad:ca:aa:ed: 24:d2:1d:1f:37:bd:f3:b9:2c:80:b8:50:74:e5:b2:d8:5d:fc: 95:1d:2e:a8:40:33:9b:a2:1d:a9:49:72:d4:37:2f:98:dc:7d: 53:23:39:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuXFCirJIWWEo6kxPCTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMTkwMDA3ODFjMTgzMzY2Y2JhNTU0MTZmZDc1YjU3ZGJh MGU0YmIwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg5NDQ3MGI3NWI1MzU3M2Q5OWJmNTExNjBlMGE5YWVjODIyMDE2ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97h4uLETfT2Qfd11PGYEjKV3kkkL NpMgzbKucRfSx4w26YFih+8dlGcUlh41fDgP7blsEosHbrYqcSXY6xGLuwCpwBgR P/+DfPi6sHPRa/yQenxO2mzlYJ01fsjDCOIG3FphS+mQl2+OHm3HOUIOHMa+tM3l 6i1jBeIj/bM6Xzbt7Eg4ottHHFYZKFb5R7nYbupx6PE/PuHtgp77B3apatcyLKUQ xzH2zESpIkxmV36RhmJ/GzuuA9pXRxKd+UyPzP/AVbdzs9RzcurZChWztjiOcAay fOqiJg5KbrMq0QcomEyPpEcuzHHCwC8BmXJQkftSyY9FsmaDdADKanyLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRHC3W1NXPZm/URYOCprsgiAW7jMB8GA1UdIwQY MBaAFKsZAAeBwYM2bLpVQW/XW1fboOS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMt ZmYyZGZkNjJkMzc2LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMtZmYyZGZkNjJkMzc2 LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHUNio4W G+2J8xvZMPWNWDLlQVDCjlrCZcKGgFR3P55xE0fzvXMG1AfzzQESW5+xFcO23U3x 5DswnzAJ1CKqutZntXdWyvvXVvVRlM2bYDR+cyRiQ51dgPxAoeD9dgv6C91kVLHd XpEAgSvJhuerJx/yNwjoodd2ngKt3QhpJvwnC/kWoSACnsJwpR7XClCEuUjXpDOu 1cZhiU19ZRVUZjtnm4Tzjq9fe+uExORQg3uL19uSmsQqBehdOKfyKfJ4UKhClC/W 31kISfvEB97EOkUvztmtyqrtJNIdHze987ksgLhQdOWy2F38lR0uqEAzm6IdqUly 1DcvmNx9UyM5oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:21 2025 by rpki-client