This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json) Hash identifier: sjgNEi1LegLf4mTHzxXiOIfOHKTnIPKVfv4lqimasak= Subject key identifier: E5:9D:CF:A1:DA:C8:0A:E3:9E:FA:9B:57:18:DE:47:A0:27:A7:39:F3 Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Certificate serial: 019AF12EBB255DE6385709778578356D3CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft Manifest number: 0CF6 Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: wZciMQ6+Sc2Hefusy5mLFt2RyP9Nki2puqWMuXfooyQ=) 2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bb:25:5d:e6:38:57:09:77:85:78:35:6d:3c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=e59dcfa1dac80ae39efa9b5718de47a027a739f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d8:82:6d:d4:61:8d:ad:c3:9e:51:7e:88:9a: 2d:b0:11:a1:89:f0:72:bd:29:75:63:1b:88:82:b4: 35:6f:32:9e:f4:7f:a5:5c:d4:ea:b3:1d:6c:5a:42: ab:78:31:e3:94:9d:7b:75:f7:4e:f7:6b:ce:94:16: f7:06:fa:29:1a:e7:ca:28:ca:31:cc:4e:6f:f4:a9: 75:ed:af:a8:31:8c:cd:ef:24:df:e7:df:b8:bc:27: 33:0f:86:2f:57:bc:4b:ee:14:93:5f:fd:b8:6a:6e: 09:f0:b8:93:40:3b:98:e0:17:34:6a:be:1d:54:f2: 65:1a:5b:e7:a1:b6:65:69:27:ff:19:cb:2a:59:48: 74:e1:d6:53:1e:c5:a6:50:77:99:76:9f:df:fd:b7: 94:59:8e:ab:79:1f:f7:3f:a9:33:c9:f2:a9:ff:23: 8a:39:66:48:a9:ba:df:80:a1:5a:7e:65:ce:ab:e8: ad:a4:e0:18:6b:06:9c:b6:9a:75:56:7f:ed:6c:10: 4d:27:20:13:f5:74:03:a1:31:44:03:5d:4d:34:08: 65:d7:2b:02:64:88:ee:45:cd:bd:5b:85:dd:de:d2: 2f:ff:54:de:41:d2:46:08:ef:20:a3:70:73:2f:f3: 9b:47:10:8b:da:73:86:8f:7f:c4:4c:fa:79:7a:77: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9D:CF:A1:DA:C8:0A:E3:9E:FA:9B:57:18:DE:47:A0:27:A7:39:F3 X509v3 Authority Key Identifier: keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cb:05:12:1e:23:2c:9a:e6:38:8b:71:d7:e4:1c:22:b6:15: 72:b0:e5:e0:c7:bf:62:08:1f:57:44:77:31:2a:54:45:30:f8: f3:58:6c:dd:e9:09:d9:c3:df:1e:0a:9f:c3:91:bf:32:bb:87: 56:c2:1c:ba:51:86:a2:50:f9:17:14:d7:4e:08:ba:85:8a:8b: 18:ca:82:dd:a1:7f:e8:3c:4e:5e:de:8e:7a:51:51:22:81:a3: 02:06:c0:b0:e4:85:b9:44:ff:a0:bb:c3:f2:03:c0:92:2c:70: 17:75:6b:99:da:80:39:0e:cf:f6:da:20:53:12:d0:4e:5c:b0: bf:d5:a6:38:8e:6b:8b:a4:8e:0c:9c:89:77:bb:e4:e5:90:ed: ea:de:e3:1e:88:7b:e7:d6:ec:67:a7:39:70:e3:e4:8d:53:ca: db:7c:d7:31:71:b5:40:75:41:1e:87:56:61:ef:5d:4c:7b:8c: c0:22:ab:6f:17:5d:c4:01:86:bc:6c:63:6a:93:5b:82:9d:25: 04:10:78:36:c5:96:de:af:44:01:1f:eb:ab:da:f4:af:e5:47: 83:62:a5:16:d9:8e:61:d3:0a:50:d2:2c:44:3e:e4:83:5d:9d: 84:79:59:18:d1:6b:f3:cc:4f:1a:3c:9a:56:02:68:a3:37:a1: 26:b5:6b:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrslXeY4Vwl3hXg1bTzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2 ZDlmZGQwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD EyhlNTlkY2ZhMWRhYzgwYWUzOWVmYTliNTcxOGRlNDdhMDI3YTczOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3diCbdRhja3DnlF+iJotsBGhifBy vSl1YxuIgrQ1bzKe9H+lXNTqsx1sWkKreDHjlJ17dfdO92vOlBb3BvopGufKKMox zE5v9Kl17a+oMYzN7yTf59+4vCczD4YvV7xL7hSTX/24am4J8LiTQDuY4Bc0ar4d VPJlGlvnobZlaSf/GcsqWUh04dZTHsWmUHeZdp/f/beUWY6reR/3P6kzyfKp/yOK OWZIqbrfgKFafmXOq+itpOAYawactpp1Vn/tbBBNJyAT9XQDoTFEA11NNAhl1ysC ZIjuRc29W4Xd3tIv/1TeQdJGCO8go3BzL/ObRxCL2nOGj3/ETPp5encUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWdz6HayArjnvqbVxjeR6AnpznzMB8GA1UdIwQY MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt MjQwZDFmZmQwOWI4LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4 LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHssFEh4j LJrmOItx1+QcIrYVcrDl4Me/YggfV0R3MSpURTD481hs3ekJ2cPfHgqfw5G/MruH VsIculGGolD5FxTXTgi6hYqLGMqC3aF/6DxOXt6OelFRIoGjAgbAsOSFuUT/oLvD 8gPAkixwF3VrmdqAOQ7P9togUxLQTlywv9WmOI5ri6SODJyJd7vk5ZDt6t7jHoh7 59bsZ6c5cOPkjVPK23zXMXG1QHVBHodWYe9dTHuMwCKrbxddxAGGvGxjapNbgp0l BBB4NsWW3q9EAR/rq9r0r+VHg2KlFtmOYdMKUNIsRD7kg12dhHlZGNFr88xPGjya VgJoozehJrVrig== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:07 2025 by rpki-client