This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft File: QTsVW4BGJkf4WUaogk0in-6q--Y.mft (raw, json) Hash identifier: 4pG7w9Ul+euRdg4MOpBFBf9JICO8DPy8m09+soTPljc= Subject key identifier: 71:0B:01:F9:87:8C:E1:A9:E3:46:47:79:C0:DF:8A:C1:32:0F:75:4F Authority key identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6 Certificate issuer: /CN=413b155b80462647f85946a8824d229feeaafbe6 Certificate serial: 019AF3F806C3509A4B65B2678A81B0A4F809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft Manifest number: 02E4 Signing time: Sat 06 Dec 2025 14:01:49 +0000 Manifest this update: Sat 06 Dec 2025 14:01:49 +0000 Manifest next update: Sun 07 Dec 2025 14:01:49 +0000 Files and hashes: 1: QTsVW4BGJkf4WUaogk0in-6q--Y.crl (hash: tR+nJqjL1nJJK5KEpUpCOZsFhGcISI5RF8eJs9o90/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:06:c3:50:9a:4b:65:b2:67:8a:81:b0:a4:f8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=413b155b80462647f85946a8824d229feeaafbe6 Validity Not Before: Dec 6 14:01:49 2025 GMT Not After : Dec 7 14:01:49 2025 GMT Subject: CN=710b01f9878ce1a9e3464779c0df8ac1320f754f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:91:bd:e5:88:bd:f4:e9:db:68:09:e7:da: 86:84:a0:69:ee:b1:4e:54:58:43:93:56:fb:f0:c4: fe:8d:1e:52:ac:0e:9e:a7:ec:1f:15:22:ad:ba:09: 17:78:50:07:fd:4b:b3:88:29:57:b3:08:db:0a:60: 19:2a:51:5c:96:d3:f3:bb:d3:73:e5:3a:6a:44:c9: 09:c9:f9:d2:a3:a7:a8:0c:d9:d8:f2:0c:30:96:b4: 36:82:ec:56:6e:2c:f5:7c:10:6b:8c:51:29:4d:95: a0:e5:63:c6:ec:24:20:35:e5:ba:8f:49:0e:5a:e2: bc:d4:27:33:6c:47:eb:1a:c8:c8:28:54:d4:a3:ef: 3a:24:e6:0e:33:2f:24:4b:a3:f6:0f:40:f9:d7:a9: ef:a0:20:7c:d7:8b:1b:e9:32:61:17:a2:b9:72:49: bd:69:f7:e6:3e:41:86:11:60:d0:4e:a7:2d:6a:76: d1:48:84:5c:a2:6f:bc:5f:2b:83:cc:7c:43:45:41: b6:47:92:6c:51:9b:e3:ca:07:b1:5d:3e:91:01:af: 27:89:51:6f:60:fa:c7:93:d4:ae:b1:a9:25:65:25: fc:fc:42:a6:73:c7:d6:de:45:ba:4b:54:0f:9d:95: 38:13:11:66:05:ba:73:b1:07:ce:14:3d:b8:e8:25: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:01:F9:87:8C:E1:A9:E3:46:47:79:C0:DF:8A:C1:32:0F:75:4F X509v3 Authority Key Identifier: keyid:41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:18:b5:e6:64:24:e2:58:e1:84:37:48:fc:6f:d9:be:f3:80: f8:8d:10:2a:2d:71:af:3b:50:67:ce:70:17:92:6e:ce:19:ed: f3:66:61:45:8f:fa:1a:1f:3e:ec:6c:c9:ec:84:47:5f:e1:b8: 6b:76:a6:91:aa:d4:70:ad:76:a2:81:5f:6c:40:5a:82:29:0d: 8d:9a:e7:32:24:87:ab:c3:bf:22:2f:d6:cf:c2:b1:45:f1:07: 06:37:3d:8b:05:06:e6:4d:ea:12:15:fa:1d:a5:e4:9f:d8:e6: 16:ea:21:42:2b:af:29:98:7d:ed:0c:fc:22:3c:9d:c1:8f:b2: c1:0d:9d:dc:44:4f:08:67:2d:1a:76:91:0a:d1:f0:0a:50:8f: 88:e4:50:c0:4f:4c:b7:b9:9a:47:ab:4d:d8:10:2c:61:23:67: 0e:cf:6c:77:49:0b:06:24:7e:02:8d:22:3a:12:5a:0e:47:a3: 70:a6:5d:c9:9e:ee:34:6c:97:ae:25:ee:cf:14:a9:6b:fc:62: 61:93:94:3e:21:b8:48:b8:a0:da:6f:a3:7a:c7:fd:33:da:18: 06:69:af:94:72:bd:0c:f5:20:29:8a:d8:7c:f8:21:c3:6a:dd: 81:cd:43:93:fc:5f:86:28:96:c7:ef:6c:65:43:59:2c:40:da: 29:33:f2:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AbDUJpLZbJnioGwpPgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxM2IxNTViODA0NjI2NDdmODU5NDZhODgyNGQyMjlmZWVh YWZiZTYwHhcNMjUxMjA2MTQwMTQ5WhcNMjUxMjA3MTQwMTQ5WjAzMTEwLwYDVQQD Eyg3MTBiMDFmOTg3OGNlMWE5ZTM0NjQ3NzljMGRmOGFjMTMyMGY3NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy6RveWIvfTp22gJ59qGhKBp7rFO VFhDk1b78MT+jR5SrA6ep+wfFSKtugkXeFAH/UuziClXswjbCmAZKlFcltPzu9Nz 5TpqRMkJyfnSo6eoDNnY8gwwlrQ2guxWbiz1fBBrjFEpTZWg5WPG7CQgNeW6j0kO WuK81CczbEfrGsjIKFTUo+86JOYOMy8kS6P2D0D516nvoCB814sb6TJhF6K5ckm9 affmPkGGEWDQTqctanbRSIRcom+8XyuDzHxDRUG2R5JsUZvjygexXT6RAa8niVFv YPrHk9SusaklZSX8/EKmc8fW3kW6S1QPnZU4ExFmBbpzsQfOFD246CXnWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHELAfmHjOGp40ZHecDfisEyD3VPMB8GA1UdIwQY MBaAFEE7FVuARiZH+FlGqIJNIp/uqvvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUt NGEyNTFjYmVjNzkxLzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUtNGEyNTFjYmVjNzkx LzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhi15mQk 4ljhhDdI/G/ZvvOA+I0QKi1xrztQZ85wF5Juzhnt82ZhRY/6Gh8+7GzJ7IRHX+G4 a3amkarUcK12ooFfbEBagikNjZrnMiSHq8O/Ii/Wz8KxRfEHBjc9iwUG5k3qEhX6 HaXkn9jmFuohQiuvKZh97Qz8IjydwY+ywQ2d3ERPCGctGnaRCtHwClCPiORQwE9M t7maR6tN2BAsYSNnDs9sd0kLBiR+Ao0iOhJaDkejcKZdyZ7uNGyXriXuzxSpa/xi YZOUPiG4SLig2m+jesf9M9oYBmmvlHK9DPUgKYrYfPghw2rdgc1Dk/xfhiiWx+9s ZUNZLEDaKTPy2w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:51 2025 by rpki-client