This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json) Hash identifier: AH5JUdj6U2s88JrBWrX6oFxEkz64VOGScndEXsj/KN4= Subject key identifier: 20:38:50:40:5F:A1:42:C0:8E:63:BF:77:CF:37:DA:5B:28:92:12:B8 Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0 Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0 Certificate serial: 019AF19ADB94EAF2C8A9F66DA9ED623B272C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft Manifest number: 084A Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=) 2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: GVHKlZNXIN/OBRXQRrKq6SGOay2kYBPsRzepOUiaviE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:db:94:ea:f2:c8:a9:f6:6d:a9:ed:62:3b:27:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=203850405fa142c08e63bf77cf37da5b289212b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:59:fd:55:ed:b9:b6:48:6d:d1:1c:16:bf: 7c:48:e1:bf:e3:b0:4c:2b:12:34:55:c4:28:5d:a2: 62:b0:f9:ee:e8:3c:c0:7d:40:04:6f:c1:1b:2d:a2: 00:9c:6f:e0:ca:b8:c7:17:91:29:71:17:38:f4:15: 3a:2a:db:b5:77:7e:f9:84:3e:9e:2e:fb:fd:9a:90: e5:67:0b:f4:4a:5b:3a:cb:7c:fb:9b:fe:7c:13:a2: 20:6f:97:b0:e2:cc:a4:49:26:76:a7:0c:e4:88:13: d9:61:27:e6:6c:7f:7b:da:2d:dc:a0:f4:d3:32:13: ee:25:54:11:fb:af:36:2d:bc:ab:96:5a:f5:5b:48: 4f:ef:1e:4b:7c:69:3d:3a:0f:7c:b7:0d:6f:bc:1d: 5f:bc:87:bf:cc:b3:37:35:88:26:69:34:b2:6a:63: 35:92:fe:95:d9:c2:6f:c3:d8:1d:30:73:58:07:ee: 77:0b:9b:ef:56:73:b9:03:02:ff:ce:20:71:4f:d7: 6f:7d:fd:79:73:8f:30:37:29:be:ad:ec:93:9a:18: ef:7f:e1:21:84:fa:21:d8:d2:ad:2d:6b:82:75:37: 71:88:ee:5c:ba:07:9a:a9:6b:5c:16:16:fd:9f:28: a6:4d:01:d1:95:d6:d8:ff:2a:f6:71:39:8b:0f:9d: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:50:40:5F:A1:42:C0:8E:63:BF:77:CF:37:DA:5B:28:92:12:B8 X509v3 Authority Key Identifier: keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:44:08:ed:81:2c:d3:5e:9a:cf:dd:a2:7f:4b:fa:fd:e7:14: 82:cf:a9:79:6b:2f:5a:39:d4:e4:65:dd:e5:b8:90:c6:a5:0a: ba:0b:dd:8b:0c:eb:5e:3d:bd:1c:fa:2f:79:64:01:cf:8c:a8: b6:e7:f2:b4:be:88:1e:3e:83:77:24:e1:7f:9d:81:88:32:50: 6c:63:0f:f6:94:69:6d:3b:c1:61:53:48:42:f8:bf:cd:8d:70: 2e:46:5f:01:20:de:1c:42:b9:be:cd:dc:b9:db:99:33:cc:e9: 15:25:a2:86:38:48:33:54:cf:70:20:f7:e6:c0:64:9d:fb:78: 10:0f:02:79:d3:e7:fe:b8:09:b4:d0:51:91:c3:66:0e:54:38: 4d:93:9e:8f:52:59:cc:7a:e3:f4:ea:41:c9:6c:10:88:ab:55: e8:f2:e6:fa:68:95:40:74:56:f5:a8:ad:35:c1:5f:44:c6:00: 3c:74:28:c4:25:1b:1b:c0:86:20:00:48:c2:22:62:5e:7b:b7: 6a:32:f3:68:a4:be:d2:41:51:e7:19:81:91:c9:c0:45:08:0d: 31:bb:77:df:8c:6e:4e:29:e2:6f:5f:cb:9c:28:52:9c:2e:06: d9:18:45:cf:f3:d0:1e:60:b0:7a:4f:f9:b1:d9:6f:95:6a:3c: 65:35:b1:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtuU6vLIqfZtqe1iOycsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Y2FkOWE5NzdiZjhiNmI0MGYwYjhlOTk4ZTU3ODdjNmFl NjQxYzAwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygyMDM4NTA0MDVmYTE0MmMwOGU2M2JmNzdjZjM3ZGE1YjI4OTIxMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/JZ/VXtubZIbdEcFr98SOG/47BM KxI0VcQoXaJisPnu6DzAfUAEb8EbLaIAnG/gyrjHF5EpcRc49BU6Ktu1d375hD6e Lvv9mpDlZwv0Sls6y3z7m/58E6Igb5ew4sykSSZ2pwzkiBPZYSfmbH972i3coPTT MhPuJVQR+682Lbyrllr1W0hP7x5LfGk9Og98tw1vvB1fvIe/zLM3NYgmaTSyamM1 kv6V2cJvw9gdMHNYB+53C5vvVnO5AwL/ziBxT9dvff15c48wNym+reyTmhjvf+Eh hPoh2NKtLWuCdTdxiO5cugeaqWtcFhb9nyimTQHRldbY/yr2cTmLD521VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA4UEBfoULAjmO/d8832lsokhK4MB8GA1UdIwQY MBaAFKnK2al3v4trQPC46ZjleHxq5kHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjct ZGIzZWM3NWZhMjBjLzEvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjctZGIzZWM3NWZhMjBj LzEvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEQI7YEs 016az92if0v6/ecUgs+peWsvWjnU5GXd5biQxqUKugvdiwzrXj29HPoveWQBz4yo tufytL6IHj6DdyThf52BiDJQbGMP9pRpbTvBYVNIQvi/zY1wLkZfASDeHEK5vs3c uduZM8zpFSWihjhIM1TPcCD35sBknft4EA8CedPn/rgJtNBRkcNmDlQ4TZOej1JZ zHrj9OpByWwQiKtV6PLm+miVQHRW9aitNcFfRMYAPHQoxCUbG8CGIABIwiJiXnu3 ajLzaKS+0kFR5xmBkcnARQgNMbt334xuTinib1/LnChSnC4G2RhFz/PQHmCwek/5 sdlvlWo8ZTWxyA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:29 2025 by rpki-client