This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json) Hash identifier: NgFft3vCbRVUj19DVHoVJG1+HXqopxA0dlHzaxpj/VQ= Subject key identifier: BC:E9:D4:F9:11:7F:7E:B3:93:F8:E9:1B:36:E1:A1:56:33:F0:0B:6F Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b Certificate serial: 019AF276AA73F9FEBA9F0D09AE354BF7828A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: wbpW3n/q03+jPI3YhEouVRZw6aVRufIA8QyeaEspbVw=) 2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:aa:73:f9:fe:ba:9f:0d:09:ae:35:4b:f7:82:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=bce9d4f9117f7eb393f8e91b36e1a15633f00b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:cc:7a:2d:d2:f5:79:c0:30:99:c7:a4:37: 4a:67:0d:fa:77:71:29:ac:89:6c:be:fd:1f:1b:c2: c0:38:ca:3a:42:d7:dd:de:3c:c0:b7:ec:9b:8b:0d: 77:5d:6c:c3:ee:b8:c5:a4:9e:90:3d:fa:6a:6e:d5: a7:19:23:ef:79:ab:21:b2:47:bd:a0:37:f1:05:c2: 7a:8f:f8:e6:6a:f6:b4:0b:b8:45:0e:a9:0a:98:60: fc:47:34:b7:f1:22:a9:98:5f:1e:8f:19:d2:42:5c: 61:c2:52:d4:d2:b5:b8:c7:2c:b8:fe:1e:43:a1:60: b5:89:e4:75:e6:de:ac:bf:cd:ef:ee:65:7c:77:36: 58:73:1b:19:c6:98:48:7d:ed:86:b9:26:1f:c9:04: e1:af:3f:2c:f8:34:3b:b1:f8:39:8a:0a:ba:9f:67: 33:71:cf:e4:7d:d1:29:85:4f:7b:34:6f:c8:d1:96: 2b:0f:80:3f:94:a0:34:7d:26:8c:ad:1e:be:0d:fc: ce:bf:18:d1:74:30:83:78:08:54:d1:ac:4b:5d:59: 4a:68:91:22:22:31:65:af:2b:bd:d8:0d:46:d6:1c: 37:14:b6:e3:8d:7c:0c:1a:f1:2d:c4:95:73:3e:bb: 1b:5c:04:72:68:b3:eb:3e:ba:5d:09:b2:0f:92:70: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E9:D4:F9:11:7F:7E:B3:93:F8:E9:1B:36:E1:A1:56:33:F0:0B:6F X509v3 Authority Key Identifier: keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:70:ee:20:e9:b1:f0:39:36:dc:cb:90:11:c0:66:cf:83:47: 39:65:ee:89:47:cb:bf:e6:3b:33:aa:65:00:08:94:ef:05:a3: 66:f3:d8:76:07:e5:f4:05:ec:3e:11:4a:bc:05:6f:be:53:55: e1:d3:7c:fe:d8:f1:d6:e2:4a:30:ac:71:4c:ee:08:8f:71:3c: 01:2e:36:c1:58:13:10:19:44:7c:3d:4f:2d:37:dc:e6:54:05: 3c:99:e6:46:b6:23:3d:41:a1:52:ad:26:cd:6b:23:b1:f8:48: 6d:1b:82:9d:2c:f9:03:cd:e9:52:d6:0a:1e:7d:ce:a6:51:7c: 25:1b:da:34:89:bb:f5:b8:4f:69:f7:14:23:d9:80:23:b0:dd: d6:5c:ba:5e:dc:a1:db:82:d7:77:9a:5f:6b:b3:9e:d8:f3:00: be:90:0b:6a:1a:4a:fb:3b:6c:2a:7b:8f:43:e4:30:ae:6e:5a: 78:ff:a3:29:71:41:b9:9a:93:a8:2e:64:b5:ee:d1:27:12:3a: 27:7b:4a:6c:fd:0f:de:52:a7:86:47:2d:2e:58:c4:a7:6f:a6: c6:4a:66:64:bc:1f:c4:39:01:20:7b:66:76:3a:c2:72:3d:70: 8a:65:70:d2:19:6a:2c:9f:78:53:01:4c:4c:78:0a:46:b1:0a: 76:0a:8c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqpz+f66nw0JrjVL94KKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl ZDEzOWIwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EyhiY2U5ZDRmOTExN2Y3ZWIzOTNmOGU5MWIzNmUxYTE1NjMzZjAwYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzfMei3S9XnAMJnHpDdKZw36d3Ep rIlsvv0fG8LAOMo6Qtfd3jzAt+ybiw13XWzD7rjFpJ6QPfpqbtWnGSPveashske9 oDfxBcJ6j/jmava0C7hFDqkKmGD8RzS38SKpmF8ejxnSQlxhwlLU0rW4xyy4/h5D oWC1ieR15t6sv83v7mV8dzZYcxsZxphIfe2GuSYfyQThrz8s+DQ7sfg5igq6n2cz cc/kfdEphU97NG/I0ZYrD4A/lKA0fSaMrR6+DfzOvxjRdDCDeAhU0axLXVlKaJEi IjFlryu92A1G1hw3FLbjjXwMGvEtxJVzPrsbXARyaLPrPrpdCbIPknADuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzp1PkRf36zk/jpGzbhoVYz8AtvMB8GA1UdIwQY MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHDuIOmx 8Dk23MuQEcBmz4NHOWXuiUfLv+Y7M6plAAiU7wWjZvPYdgfl9AXsPhFKvAVvvlNV 4dN8/tjx1uJKMKxxTO4Ij3E8AS42wVgTEBlEfD1PLTfc5lQFPJnmRrYjPUGhUq0m zWsjsfhIbRuCnSz5A83pUtYKHn3OplF8JRvaNIm79bhPafcUI9mAI7Dd1ly6Xtyh 24LXd5pfa7Oe2PMAvpALahpK+ztsKnuPQ+Qwrm5aeP+jKXFBuZqTqC5kte7RJxI6 J3tKbP0P3lKnhkctLljEp2+mxkpmZLwfxDkBIHtmdjrCcj1wimVw0hlqLJ94UwFM THgKRrEKdgqM3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:18 2025 by rpki-client