This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json) Hash identifier: sWGC72BJk9jMzGTPT/ZdsotYWIPvdWbrtgxzjK4MI14= Subject key identifier: EA:34:9C:1B:6C:89:90:D7:EC:07:45:44:E8:95:6D:D5:E6:00:04:C1 Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6 Certificate serial: 019AF4651BB7565C94098DED768264E67F5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft Manifest number: 051F Signing time: Sat 06 Dec 2025 16:00:58 +0000 Manifest this update: Sat 06 Dec 2025 16:00:58 +0000 Manifest next update: Sun 07 Dec 2025 16:00:58 +0000 Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: 9ElfZ99Yz7EZ7z5Tfk+n4j5Und+vJ3qcujuL/VS1Qcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1b:b7:56:5c:94:09:8d:ed:76:82:64:e6:7f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6 Validity Not Before: Dec 6 16:00:58 2025 GMT Not After : Dec 7 16:00:58 2025 GMT Subject: CN=ea349c1b6c8990d7ec074544e8956dd5e60004c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:fb:52:c8:e9:d7:89:5a:3a:a0:ba:bc:66: cc:52:dd:5c:b0:b5:27:88:83:90:95:d8:da:a0:98: 36:c8:6a:65:33:d2:d7:99:77:33:ea:9d:88:04:a9: 3f:4a:dc:f5:eb:9d:d0:b5:96:fc:b1:c7:77:5f:5c: 1d:f3:a7:dc:46:fe:8c:32:41:99:c7:e7:b5:f0:21: 4f:d9:f5:94:ae:68:37:20:f6:d8:06:16:0a:02:32: dd:bf:c1:1c:30:2d:44:df:46:27:4e:13:92:ec:e3: ef:2d:66:10:14:6f:15:0e:9b:db:94:6f:45:cd:5c: 1d:09:30:ba:17:a7:2b:d9:84:0e:52:fb:ce:1b:3a: 07:eb:a8:22:3d:06:15:f8:f9:5e:0d:54:33:d1:55: 8b:9c:35:13:dc:48:fb:01:34:d9:67:1f:ed:50:53: eb:a7:ce:10:70:31:25:1d:a0:ef:16:d9:95:84:f6: 3a:8b:8d:11:e7:7f:f2:eb:af:f1:37:c6:97:fe:36: cf:20:1b:4c:9a:82:60:bc:19:d7:93:b7:41:cb:59: 84:8a:6d:2e:ef:47:64:3f:d3:8e:fd:d9:63:c2:f5: 04:e5:6e:1b:ae:23:c4:2d:b8:ec:1f:22:fd:32:fd: f7:a4:5f:be:35:0d:a5:b9:9a:21:e3:02:8e:97:16: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:34:9C:1B:6C:89:90:D7:EC:07:45:44:E8:95:6D:D5:E6:00:04:C1 X509v3 Authority Key Identifier: keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:13:b9:7f:12:1b:f0:f3:f2:fc:26:f2:99:a2:6e:ae:90:24: 54:f1:be:00:43:40:88:5f:b7:26:4f:58:e1:c4:4f:00:0d:38: 00:99:62:ee:94:33:d0:59:2b:4c:c9:44:63:78:b4:33:5d:d3: 03:5b:01:72:f4:a2:d4:0f:31:18:2a:8b:53:d4:48:c5:6e:c8: 3d:1c:87:4d:97:f6:dc:7f:21:08:df:14:05:fa:d0:ea:ed:62: ed:6f:65:4c:b2:fe:41:c1:36:3a:04:02:d8:fe:7f:b4:e9:f7: 90:df:07:40:f3:ff:6c:e9:bf:1f:8c:7a:06:ff:e5:ed:6b:f7: 1a:b4:6c:b3:04:3e:5e:09:64:d1:77:5b:54:5d:aa:d9:90:02: 98:2c:6c:e7:88:09:0e:07:c2:f7:5e:d0:5a:71:9b:d5:e3:51: dd:b3:73:4a:0c:90:78:19:99:4f:bc:28:09:28:0f:84:ca:e4: 0a:b8:80:e2:5b:39:83:93:3f:b2:de:32:79:63:2d:d4:63:b1: 25:77:1a:c4:c4:35:37:9e:ed:37:dc:96:b2:9d:5d:b2:8e:15: 7b:b9:f2:47:09:13:2b:a5:6a:0c:81:59:ba:ba:06:a0:1d:52: f1:ae:5b:3a:9c:69:a8:95:27:7a:4e:1c:8e:e9:6f:fe:fe:30: c3:53:c8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRu3VlyUCY3tdoJk5n9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMWM1N2UxOTIxZDMxYTM0YWViZDEyZTUwN2ExMzZmZTA0 NTk4YzYwHhcNMjUxMjA2MTYwMDU4WhcNMjUxMjA3MTYwMDU4WjAzMTEwLwYDVQQD EyhlYTM0OWMxYjZjODk5MGQ3ZWMwNzQ1NDRlODk1NmRkNWU2MDAwNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI/7Usjp14laOqC6vGbMUt1csLUn iIOQldjaoJg2yGplM9LXmXcz6p2IBKk/Stz1653QtZb8scd3X1wd86fcRv6MMkGZ x+e18CFP2fWUrmg3IPbYBhYKAjLdv8EcMC1E30YnThOS7OPvLWYQFG8VDpvblG9F zVwdCTC6F6cr2YQOUvvOGzoH66giPQYV+PleDVQz0VWLnDUT3Ej7ATTZZx/tUFPr p84QcDElHaDvFtmVhPY6i40R53/y66/xN8aX/jbPIBtMmoJgvBnXk7dBy1mEim0u 70dkP9OO/dljwvUE5W4briPELbjsHyL9Mv33pF++NQ2luZoh4wKOlxZCyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo0nBtsiZDX7AdFROiVbdXmAATBMB8GA1UdIwQY MBaAFEMcV+GSHTGjSuvRLlB6E2/gRZjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEt Y2MzNTNlYmFjYmE2LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEtY2MzNTNlYmFjYmE2 LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShO5fxIb 8PPy/CbymaJurpAkVPG+AENAiF+3Jk9Y4cRPAA04AJli7pQz0FkrTMlEY3i0M13T A1sBcvSi1A8xGCqLU9RIxW7IPRyHTZf23H8hCN8UBfrQ6u1i7W9lTLL+QcE2OgQC 2P5/tOn3kN8HQPP/bOm/H4x6Bv/l7Wv3GrRsswQ+Xglk0XdbVF2q2ZACmCxs54gJ DgfC917QWnGb1eNR3bNzSgyQeBmZT7woCSgPhMrkCriA4ls5g5M/st4yeWMt1GOx JXcaxMQ1N57tN9yWsp1dso4Ve7nyRwkTK6VqDIFZuroGoB1S8a5bOpxpqJUnek4c julv/v4ww1PIhw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:17 2025 by rpki-client