This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json) Hash identifier: VOk1FgteXbNamyN8tjky+CA8vk2RNkt/SyTfBGmcoIo= Subject key identifier: 06:A9:00:F3:9A:4B:11:9D:7F:F8:F3:BD:CA:88:E2:1C:49:36:8A:49 Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Certificate serial: 019AF12E261DBD670D6D540AF3CA579E3E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: RI/6TyYMH274Cr6G4Nw89A7SQdhFBhnIgQKx2NCYs3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:26:1d:bd:67:0d:6d:54:0a:f3:ca:57:9e:3e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=06a900f39a4b119d7ff8f3bdca88e21c49368a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:49:99:38:3b:6e:24:6a:04:16:f9:07:6c: cd:c9:de:5c:b1:24:12:8d:25:93:a7:cb:3a:59:9f: 3c:d5:af:04:54:85:36:2a:cd:cb:c8:2c:42:b9:cc: 8a:de:d9:41:ec:8c:fb:5f:f7:43:a0:a5:81:28:26: 66:ab:a1:63:86:e8:e7:8a:7e:58:15:04:02:f5:68: d3:bb:92:62:49:16:ed:63:62:25:28:4b:73:02:f6: 2e:2f:6b:86:11:d0:2c:22:3b:0d:28:fd:87:2e:e9: 9b:0f:1f:ea:5c:14:51:4a:30:9c:6a:90:fe:8f:66: e9:e2:81:c0:bf:d8:43:fe:7a:dc:ef:8b:c1:a8:1d: 8a:9e:e3:b8:81:c9:73:da:d1:e8:19:5b:3b:b6:af: d9:bd:36:5e:b5:01:ec:2f:21:ff:45:71:7d:3e:3f: 5c:86:44:ae:f8:ef:b5:97:6b:5c:95:26:9a:dd:94: 1d:74:e1:88:e8:92:7a:86:bc:1e:5c:cc:f6:44:3d: 85:91:69:64:2c:9f:15:f2:89:db:20:1e:e8:79:d5: 77:5f:b1:b2:73:06:b6:3f:b9:dc:df:2c:ba:e1:c6: 17:bb:d6:b8:d4:2e:69:99:d9:c1:2c:2e:db:13:a3: ca:46:21:d6:30:36:80:66:65:8b:a3:fc:74:b3:80: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:00:F3:9A:4B:11:9D:7F:F8:F3:BD:CA:88:E2:1C:49:36:8A:49 X509v3 Authority Key Identifier: keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f1:fd:9f:02:68:e3:d2:9c:b0:8e:34:e4:4a:5c:32:8b:21: 98:19:e2:7c:57:97:92:75:e3:a3:9e:95:ff:55:7b:3f:88:59: b2:61:e8:a3:48:e3:ed:d0:cc:89:f9:f1:9a:76:10:0f:3c:62: 0e:27:93:eb:44:64:e8:87:4d:a7:9e:a9:f8:fd:60:6a:ee:02: 06:13:ee:50:e9:36:33:71:28:0f:7e:6c:67:f5:e6:ab:fd:1c: 37:d9:37:49:25:a4:0e:5f:a3:af:f6:df:a9:f9:67:cc:be:1f: a2:19:20:f8:9e:77:59:b1:37:8f:47:06:3d:90:cf:4d:8c:68: 9c:38:87:a7:7d:7b:d4:0d:fe:15:e0:2c:19:94:91:e9:f2:90: ef:3d:62:4d:e4:aa:45:65:de:8d:18:7d:5c:07:e8:c7:0d:7d: cb:2b:cd:e8:b0:f0:ff:77:c8:34:2a:c9:7f:d4:32:3e:c5:91: fd:b4:0d:5d:3b:72:82:0c:7a:dc:72:08:90:1c:f1:a2:bc:8a: 46:76:d4:e0:31:16:c1:93:07:a9:14:43:35:81:74:b4:89:66: 2a:90:d6:f3:ed:ab:bd:1b:37:a1:35:97:c0:b9:92:b5:f0:05: 1c:a8:f6:46:df:67:b1:7c:22:16:1a:94:fe:77:50:87:86:b6: 70:81:04:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiYdvWcNbVQK88pXnj4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm Yjc3NmYwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EygwNmE5MDBmMzlhNGIxMTlkN2ZmOGYzYmRjYTg4ZTIxYzQ5MzY4YTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U9JmTg7biRqBBb5B2zNyd5csSQS jSWTp8s6WZ881a8EVIU2Ks3LyCxCucyK3tlB7Iz7X/dDoKWBKCZmq6Fjhujnin5Y FQQC9WjTu5JiSRbtY2IlKEtzAvYuL2uGEdAsIjsNKP2HLumbDx/qXBRRSjCcapD+ j2bp4oHAv9hD/nrc74vBqB2KnuO4gclz2tHoGVs7tq/ZvTZetQHsLyH/RXF9Pj9c hkSu+O+1l2tclSaa3ZQddOGI6JJ6hrweXMz2RD2FkWlkLJ8V8onbIB7oedV3X7Gy cwa2P7nc3yy64cYXu9a41C5pmdnBLC7bE6PKRiHWMDaAZmWLo/x0s4DcqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAapAPOaSxGdf/jzvcqI4hxJNopJMB8GA1UdIwQY MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2 LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvH9nwJo 49KcsI405EpcMoshmBnifFeXknXjo56V/1V7P4hZsmHoo0jj7dDMifnxmnYQDzxi DieT60Rk6IdNp56p+P1gau4CBhPuUOk2M3EoD35sZ/Xmq/0cN9k3SSWkDl+jr/bf qflnzL4fohkg+J53WbE3j0cGPZDPTYxonDiHp3171A3+FeAsGZSR6fKQ7z1iTeSq RWXejRh9XAfoxw19yyvN6LDw/3fINCrJf9QyPsWR/bQNXTtyggx63HIIkBzxoryK RnbU4DEWwZMHqRRDNYF0tIlmKpDW8+2rvRs3oTWXwLmStfAFHKj2Rt9nsXwiFhqU /ndQh4a2cIEEvw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:31 2025 by rpki-client