This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json) Hash identifier: 9Oze4al3Hdzf7p3918+TEM8lmeSUNFx4/RipRJBukqc= Subject key identifier: 81:CC:5A:93:03:DD:4C:BC:9E:C5:E0:BC:97:91:D8:D8:D2:25:0C:9F Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f Certificate serial: 019AF23FDBF14BFA25C53BE64ECB151C1F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft Manifest number: 12B4 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: XwzEp6sqIoX1V3FGqbGtAMezEpibE9qaV0d2SGz9NDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:db:f1:4b:fa:25:c5:3b:e6:4e:cb:15:1c:1f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=81cc5a9303dd4cbc9ec5e0bc9791d8d8d2250c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:e0:fb:2d:83:f6:01:52:66:4a:84:b2:88: 9c:b8:5b:15:81:d7:aa:35:3a:a1:bb:e2:97:14:48: 0f:a0:31:d1:b5:93:09:bd:66:f8:b1:ed:ef:24:df: e0:ed:c2:e3:ce:47:c4:c9:1b:15:b2:8d:17:96:0c: 73:d2:08:af:48:fb:8a:4a:8d:69:51:85:12:b8:73: 86:a4:7d:10:4b:cb:a0:9d:06:fe:0f:a8:5f:8d:55: ee:d4:2e:d3:26:b8:88:88:a3:e3:9d:d2:b3:3b:c5: f2:c8:e3:58:b8:8c:ba:ba:c8:a9:35:55:9e:bc:19: c8:2c:d7:88:50:33:ab:55:e5:08:42:67:ad:b3:b5: 66:82:d7:50:24:69:56:8c:c3:8b:96:cd:6c:88:4f: 2f:5c:ec:83:96:8d:54:60:7f:ab:20:b4:b5:73:ad: 5d:0d:7e:59:e5:54:91:c5:91:35:fd:e5:36:48:59: 9e:f3:3d:25:4e:25:cd:73:93:ce:dc:ab:7e:a4:ed: 5c:fa:a5:e8:6b:d8:ae:85:c1:c4:c6:aa:b0:81:8f: 8a:6f:9c:4c:0a:4c:78:01:b6:a0:ae:44:6c:38:0b: 68:c9:a7:d9:bf:b2:d2:81:13:a2:b3:a2:e4:ce:d9: 2b:c7:6e:93:14:c7:f7:20:6a:5d:cd:ac:ac:b3:db: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CC:5A:93:03:DD:4C:BC:9E:C5:E0:BC:97:91:D8:D8:D2:25:0C:9F X509v3 Authority Key Identifier: keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bd:1d:12:dc:81:ed:25:4b:44:55:6a:62:ee:9f:ac:6a:f9: 5a:a5:bb:5f:f2:9c:80:93:dd:f8:67:ff:f7:7d:07:ad:aa:63: f4:80:ee:e6:f4:75:44:62:11:5d:8a:d5:85:bf:14:b3:93:7a: 09:db:5f:eb:8e:1b:39:45:a2:b3:30:c4:a9:d4:5b:c4:5c:19: 33:92:a2:8a:fd:b6:fd:fc:ed:1d:8c:63:70:79:29:9c:12:fd: d7:d0:8c:b9:83:b1:01:b1:32:94:8f:58:9b:8a:4a:6b:bf:58: 24:b1:de:3e:f7:ea:82:bf:7a:d1:b9:86:4e:b7:b6:35:3c:70: 90:38:ce:c0:f4:f7:70:58:a8:77:23:a7:1f:53:1d:bb:b3:26: 1a:65:2a:e8:56:b9:53:12:e1:b5:bd:1a:82:a5:47:f0:c0:f2: 0d:5d:7f:e9:7e:3f:df:61:43:6e:ac:e2:ee:80:a9:03:d3:59: 47:4a:0f:d3:e0:61:12:8b:aa:51:b0:df:77:02:ad:21:1d:18: 33:a5:9e:77:df:0e:29:0e:2f:29:17:8f:95:e2:be:c0:27:a9: 51:df:15:07:0f:90:fa:ff:48:81:f6:50:3a:c4:59:75:0b:b7: 7f:c9:d5:7e:69:6f:74:f8:c8:a2:5b:a1:e5:8c:a3:e8:d1:55: fe:00:b1:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9vxS/olxTvmTssVHB+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MjQwZjAyN2E5NDA5MjI5YzU5ZmY2MzBhYTJhODBmOTM3 OGE5M2YwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg4MWNjNWE5MzAzZGQ0Y2JjOWVjNWUwYmM5NzkxZDhkOGQyMjUwYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i/g+y2D9gFSZkqEsoicuFsVgdeq NTqhu+KXFEgPoDHRtZMJvWb4se3vJN/g7cLjzkfEyRsVso0Xlgxz0givSPuKSo1p UYUSuHOGpH0QS8ugnQb+D6hfjVXu1C7TJriIiKPjndKzO8XyyONYuIy6usipNVWe vBnILNeIUDOrVeUIQmets7VmgtdQJGlWjMOLls1siE8vXOyDlo1UYH+rILS1c61d DX5Z5VSRxZE1/eU2SFme8z0lTiXNc5PO3Kt+pO1c+qXoa9iuhcHExqqwgY+Kb5xM Ckx4AbagrkRsOAtoyafZv7LSgROis6Lkztkrx26TFMf3IGpdzayss9vXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHMWpMD3Uy8nsXgvJeR2NjSJQyfMB8GA1UdIwQY MBaAFKkkDwJ6lAkinFn/YwqiqA+TeKk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2Qt M2QxYjNhODZjZTg3LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2QtM2QxYjNhODZjZTg3 LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr0dEtyB 7SVLRFVqYu6frGr5WqW7X/KcgJPd+Gf/930Hrapj9IDu5vR1RGIRXYrVhb8Us5N6 Cdtf644bOUWiszDEqdRbxFwZM5Kiiv22/fztHYxjcHkpnBL919CMuYOxAbEylI9Y m4pKa79YJLHePvfqgr960bmGTre2NTxwkDjOwPT3cFiodyOnH1Mdu7MmGmUq6Fa5 UxLhtb0agqVH8MDyDV1/6X4/32FDbqzi7oCpA9NZR0oP0+BhEouqUbDfdwKtIR0Y M6Wed98OKQ4vKRePleK+wCepUd8VBw+Q+v9IgfZQOsRZdQu3f8nVfmlvdPjIoluh 5Yyj6NFV/gCxJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:47 2025 by rpki-client