This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json) Hash identifier: SVklXUC9be/5IsQ4TS/yCQzl70YBiZ1AhUbekwf1Unc= Subject key identifier: 12:76:64:F0:1D:F2:AC:ED:11:E9:9C:C5:6E:B0:D1:B3:D5:2E:BC:A0 Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43 Certificate serial: 019AF12E347E72966F25CDF6C48197E039F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: kyfyvKE7SetF28IVG/3M0JaH99dCxJlCm1xdbiojRGs=) 2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:34:7e:72:96:6f:25:cd:f6:c4:81:97:e0:39:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=127664f01df2aced11e99cc56eb0d1b3d52ebca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:25:b3:b5:46:5b:5f:62:8b:bc:b9:91:aa: d6:ca:b5:9d:77:35:af:fa:47:ae:f3:3b:57:3c:7c: 85:42:77:12:8e:44:3f:1f:a4:4a:51:4f:5b:19:e1: 67:78:c8:47:64:95:2c:24:2c:f1:4e:dc:7e:28:3a: a3:79:10:88:a9:b3:82:89:5a:d5:de:44:2c:87:a3: a6:84:84:ed:90:ea:64:ce:66:9b:b1:37:f8:a5:b5: 74:4f:c8:c5:86:84:a2:2d:e4:a3:b6:c7:c5:f6:c1: e9:35:b6:f8:c8:03:76:07:8d:09:55:ae:e5:bb:62: 9c:d1:ee:2a:72:59:45:3a:42:9f:fb:af:46:a8:7c: db:d9:45:bd:9b:df:0d:9d:22:fe:0f:97:bd:08:63: 9d:c2:96:39:48:05:d2:18:d6:20:17:ce:63:6a:d6: c5:a5:e2:34:85:ef:be:d2:53:6e:4a:b0:71:cf:a2: 3c:34:82:85:50:f9:36:05:58:26:f2:69:98:79:d5: ef:b4:b9:e8:34:2d:85:83:46:0e:ba:84:93:98:1a: 29:c1:31:96:e8:8e:aa:79:a0:f3:4b:44:5c:6a:65: b7:5f:73:ce:1f:00:42:9b:42:11:76:f9:32:d8:c7: 98:e2:9e:f2:08:ed:2d:7b:00:83:b0:93:cf:45:ef: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:64:F0:1D:F2:AC:ED:11:E9:9C:C5:6E:B0:D1:B3:D5:2E:BC:A0 X509v3 Authority Key Identifier: keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a2:08:ea:6b:91:17:94:05:33:fe:e6:d1:71:a3:63:c5:ef: 56:b6:63:73:8b:78:9c:4a:62:78:a7:24:24:65:90:37:be:e9: 2e:3c:cc:7a:53:eb:64:21:04:40:df:8f:be:61:63:0b:76:b0: 19:89:40:fe:03:2f:9e:69:71:d9:d5:0d:39:55:3d:9e:0d:0e: 98:59:0f:79:83:ab:92:85:df:a9:52:88:c0:f2:72:98:85:ab: 14:81:4e:5d:1f:04:12:74:51:3b:68:40:11:35:0e:83:4e:41: 81:a7:90:99:7c:f7:c0:e0:1e:ba:bb:f0:a0:42:02:13:97:55: a5:7e:8e:08:d8:68:9c:44:45:6e:d8:d0:8a:ec:d7:39:7b:13: 00:87:cb:23:e7:b8:a9:f8:ce:5a:c6:d6:d2:fc:02:8c:a7:c0: 79:e5:66:e4:b1:08:f3:a7:f4:ed:7b:6e:79:da:5b:6a:9f:e6: b4:7b:cc:c0:10:30:04:4e:5f:41:35:e9:2c:27:bb:b3:3b:bc: fa:86:dc:f2:25:78:f8:7a:78:d9:47:6d:f6:76:bd:a0:23:ef: 63:f3:a3:ee:08:e9:04:2c:a9:39:53:34:0e:fd:28:9c:70:9c: 5b:66:4b:20:85:4d:93:ec:2c:fe:03:ab:bf:7a:20:aa:c6:40: f2:6d:83:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjR+cpZvJc32xIGX4Dn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0 MDZkNDMwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD EygxMjc2NjRmMDFkZjJhY2VkMTFlOTljYzU2ZWIwZDFiM2Q1MmViY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNols7VGW19ii7y5karWyrWddzWv +keu8ztXPHyFQncSjkQ/H6RKUU9bGeFneMhHZJUsJCzxTtx+KDqjeRCIqbOCiVrV 3kQsh6OmhITtkOpkzmabsTf4pbV0T8jFhoSiLeSjtsfF9sHpNbb4yAN2B40JVa7l u2Kc0e4qcllFOkKf+69GqHzb2UW9m98NnSL+D5e9CGOdwpY5SAXSGNYgF85jatbF peI0he++0lNuSrBxz6I8NIKFUPk2BVgm8mmYedXvtLnoNC2Fg0YOuoSTmBopwTGW 6I6qeaDzS0RcamW3X3POHwBCm0IRdvky2MeY4p7yCO0tewCDsJPPRe+WHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ2ZPAd8qztEemcxW6w0bPVLrygMB8GA1UdIwQY MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt ZTNlZWNmOWRmYWFkLzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaII6muR F5QFM/7m0XGjY8XvVrZjc4t4nEpieKckJGWQN77pLjzMelPrZCEEQN+PvmFjC3aw GYlA/gMvnmlx2dUNOVU9ng0OmFkPeYOrkoXfqVKIwPJymIWrFIFOXR8EEnRRO2hA ETUOg05BgaeQmXz3wOAeurvwoEICE5dVpX6OCNhonERFbtjQiuzXOXsTAIfLI+e4 qfjOWsbW0vwCjKfAeeVm5LEI86f07Xtuedpbap/mtHvMwBAwBE5fQTXpLCe7szu8 +obc8iV4+Hp42Udt9na9oCPvY/Oj7gjpBCypOVM0Dv0onHCcW2ZLIIVNk+ws/gOr v3ogqsZA8m2DCw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:31 2025 by rpki-client