This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json) Hash identifier: Z81xSGG4Rc6oDZw5sBAxSbKYpMWGCMlxjP4t9OfaQDI= Subject key identifier: A3:7D:80:D9:75:0F:E6:8F:47:F6:63:82:FB:D4:C6:76:51:9B:D7:77 Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6 Certificate serial: 019B3BD931E156A0723602EC6BD19BD934BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft Manifest number: 0544 Signing time: Sat 20 Dec 2025 13:00:48 +0000 Manifest this update: Sat 20 Dec 2025 13:00:48 +0000 Manifest next update: Sun 21 Dec 2025 13:00:48 +0000 Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: ScfSNbCKFDT1IahQ8aLP4yYh0pJdsrugHLY32YBYfZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:31:e1:56:a0:72:36:02:ec:6b:d1:9b:d9:34:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6 Validity Not Before: Dec 20 13:00:48 2025 GMT Not After : Dec 21 13:00:48 2025 GMT Subject: CN=a37d80d9750fe68f47f66382fbd4c676519bd777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:c7:28:d1:eb:d8:6c:75:85:1e:2f:e1:2c: 84:b1:b5:ba:66:70:c1:23:10:b3:89:cf:f4:1d:bf: 91:9c:80:0e:33:a3:b9:0a:86:61:3c:08:19:e8:01: 51:7a:b1:0d:7b:a3:a0:c5:d2:e9:1b:ae:5a:fa:76: 2e:2d:d7:fc:56:bd:04:7d:ca:5c:7e:ea:ef:7b:b3: e4:94:a7:83:89:fa:dc:24:80:ca:6b:7f:31:5e:2d: 46:3e:51:d8:99:1b:75:72:42:a9:d1:79:07:0e:d7: 0c:8b:ea:f2:a7:90:bd:7a:7f:d4:ba:f3:8a:fa:af: 69:b7:eb:e1:ba:3c:d1:df:f9:1c:e8:37:16:0b:e5: 3e:dd:82:1a:06:23:40:cc:c2:f1:19:c8:4e:2c:29: 93:a9:e6:45:4d:9f:7c:16:f1:44:ad:51:e7:83:ae: b4:c4:1f:f4:83:f7:2f:d4:bc:90:0e:0a:d4:0c:0e: 78:35:80:84:a7:25:98:02:8f:c5:54:a4:b3:44:d9: 8d:51:45:16:3e:bc:51:49:86:42:25:3a:6c:14:23: b7:07:4e:1e:14:9e:dd:80:43:16:88:2f:c5:40:04: 2c:9f:c2:72:8d:0c:bf:0f:c4:61:71:4f:35:10:2c: 59:ff:f5:06:71:66:cf:6b:7b:9f:3f:58:0d:ce:43: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:80:D9:75:0F:E6:8F:47:F6:63:82:FB:D4:C6:76:51:9B:D7:77 X509v3 Authority Key Identifier: keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5c:80:1f:84:e2:84:f0:25:b3:74:c7:c7:6a:a5:e7:34:3f: f9:11:44:23:bf:02:bf:4b:0b:18:54:1a:58:b8:f7:c0:94:69: 13:1d:e5:52:48:47:10:d2:0f:d3:2f:08:4f:d8:0a:0a:29:f7: f2:48:f1:13:36:2b:7d:19:12:ee:0c:ed:2d:dc:50:15:48:ef: a8:8c:34:c3:a6:f4:4b:89:61:25:c9:d1:c2:a0:31:df:a2:b0: 10:cf:36:5b:80:83:b0:05:bd:43:18:b7:1b:77:3c:bf:93:f6: 33:64:73:3a:d1:55:32:c9:f1:43:3a:ec:5b:c2:e7:60:12:8d: a5:37:57:d6:5f:5a:0e:04:85:08:ec:72:06:b9:20:8d:41:af: 46:82:ef:b1:20:59:5d:30:b4:83:b6:89:6d:bd:e0:b8:57:29: c8:81:b9:6b:64:88:8d:ec:ac:57:06:89:b1:58:e4:61:ce:14: 17:84:54:e1:35:da:aa:27:6c:d1:71:88:89:ac:a6:63:00:25: 83:db:64:c1:3c:c1:78:cf:47:e0:34:23:04:e4:e9:48:fc:32: 38:bb:4f:df:e0:f0:25:76:0a:4f:5f:56:5d:d4:ea:cf:b0:db: b0:b2:04:d6:e3:c1:a5:59:bb:c0:86:bd:7e:76:5f:e8:83:10: 30:78:da:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72THhVqByNgLsa9Gb2TS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMWM1N2UxOTIxZDMxYTM0YWViZDEyZTUwN2ExMzZmZTA0 NTk4YzYwHhcNMjUxMjIwMTMwMDQ4WhcNMjUxMjIxMTMwMDQ4WjAzMTEwLwYDVQQD EyhhMzdkODBkOTc1MGZlNjhmNDdmNjYzODJmYmQ0YzY3NjUxOWJkNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+THKNHr2Gx1hR4v4SyEsbW6ZnDB IxCzic/0Hb+RnIAOM6O5CoZhPAgZ6AFRerENe6OgxdLpG65a+nYuLdf8Vr0Efcpc furve7PklKeDifrcJIDKa38xXi1GPlHYmRt1ckKp0XkHDtcMi+ryp5C9en/UuvOK +q9pt+vhujzR3/kc6DcWC+U+3YIaBiNAzMLxGchOLCmTqeZFTZ98FvFErVHng660 xB/0g/cv1LyQDgrUDA54NYCEpyWYAo/FVKSzRNmNUUUWPrxRSYZCJTpsFCO3B04e FJ7dgEMWiC/FQAQsn8JyjQy/D8RhcU81ECxZ//UGcWbPa3ufP1gNzkO6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN9gNl1D+aPR/ZjgvvUxnZRm9d3MB8GA1UdIwQY MBaAFEMcV+GSHTGjSuvRLlB6E2/gRZjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEt Y2MzNTNlYmFjYmE2LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEtY2MzNTNlYmFjYmE2 LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1yAH4Ti hPAls3THx2ql5zQ/+RFEI78Cv0sLGFQaWLj3wJRpEx3lUkhHENIP0y8IT9gKCin3 8kjxEzYrfRkS7gztLdxQFUjvqIw0w6b0S4lhJcnRwqAx36KwEM82W4CDsAW9Qxi3 G3c8v5P2M2RzOtFVMsnxQzrsW8LnYBKNpTdX1l9aDgSFCOxyBrkgjUGvRoLvsSBZ XTC0g7aJbb3guFcpyIG5a2SIjeysVwaJsVjkYc4UF4RU4TXaqids0XGIiaymYwAl g9tkwTzBeM9H4DQjBOTpSPwyOLtP3+DwJXYKT19WXdTqz7DbsLIE1uPBpVm7wIa9 fnZf6IMQMHja8w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:31:06 2025 by rpki-client