This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json) Hash identifier: 47c52J+YcYD5fpTH9p0LkzSc8kjZz/h1+TWCY8XxWEg= Subject key identifier: 1F:6B:B1:36:F0:DB:1B:4E:05:1E:0F:DC:98:65:1E:93:92:67:17:42 Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe Certificate serial: 019AF20918129B64A165E50C564509C52BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: kNc4GNkPMwK8tGAdMtNZiiTDNuoi3jwpiXepNaAvDS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:18:12:9b:64:a1:65:e5:0c:56:45:09:c5:2b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=1f6bb136f0db1b4e051e0fdc98651e9392671742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:07:09:d2:a3:4e:47:3c:16:df:c0:7d:38: 8c:56:14:21:57:4c:f7:7b:95:ad:fa:d1:2c:68:eb: a8:13:de:72:b2:a9:b5:0c:89:df:db:9f:ee:da:16: ee:b3:6a:9e:2d:ab:f4:5a:8f:d5:a1:0d:ae:c5:17: b0:42:99:6a:f8:49:1d:29:24:01:69:b0:9a:8c:ba: 78:09:2c:be:e7:c1:dc:d7:2f:02:77:dc:81:26:71: a7:dc:ec:9e:0a:dd:1c:a8:94:75:ab:80:e8:af:56: 41:a8:7b:15:be:d0:c8:da:03:28:f3:a8:11:b9:ff: d8:a5:85:38:56:fe:03:2f:99:42:55:fe:d1:1b:66: c0:8c:4e:2a:11:1e:ba:16:65:20:0f:cc:ca:7c:56: be:b1:ad:83:df:cf:af:7d:cc:d1:bf:32:10:21:3c: d2:41:7b:81:9b:50:bb:bd:38:cc:96:50:82:3b:c3: 93:75:e6:1e:bc:30:16:a7:58:54:13:2e:68:f3:57: 57:52:cb:be:b2:b6:2c:bb:4a:99:78:24:c3:af:92: e0:16:f9:9e:11:9b:ff:4f:29:00:30:2a:12:ee:b5: 9c:31:55:eb:f8:36:7b:89:be:31:b0:6c:28:09:48: 41:1a:27:7e:20:11:47:47:af:61:94:9d:f6:c8:e2: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6B:B1:36:F0:DB:1B:4E:05:1E:0F:DC:98:65:1E:93:92:67:17:42 X509v3 Authority Key Identifier: keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e4:76:2f:e7:59:93:6b:82:45:b2:d2:09:e0:e7:71:db:5f: a3:7e:c5:6f:a5:ed:31:e5:aa:f1:9c:e8:8d:4c:0f:fc:01:29: 31:02:d6:f7:41:9e:ed:72:2e:41:9a:e4:c5:ea:e7:0b:53:36: 72:a7:12:ce:54:86:50:f3:22:e7:89:01:84:32:28:0b:a7:a2: 39:c0:80:93:e4:c6:27:ed:14:15:ed:66:d3:33:af:3c:13:70: fd:bc:35:ed:e5:aa:2b:2e:34:96:00:93:22:d9:48:81:a6:95: 03:88:d6:1c:c5:ad:f1:49:3e:0d:57:74:15:64:3b:f2:d3:9d: 04:1e:08:96:99:bc:28:df:a0:e8:6b:f0:36:73:ea:08:05:e2: 0d:33:01:7d:f0:9c:37:98:19:9f:fa:fc:18:18:c1:ce:5e:b9: 84:b4:44:51:0d:c5:5e:5d:06:ab:f2:e3:6f:86:da:19:6b:b3: a4:eb:40:a0:0a:c8:44:90:21:43:95:d4:b3:83:15:ae:1e:f3: 19:4d:56:4c:7d:82:bf:dd:e6:47:9e:f9:d8:71:30:b7:a9:8e: 9a:dc:53:60:5f:b2:4a:22:ac:bd:18:fb:ad:93:b8:55:f7:c8: c7:3e:eb:0d:6d:74:5b:ba:8e:c4:fe:3e:6b:80:c6:32:76:bd: 38:ab:ce:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRgSm2ShZeUMVkUJxSunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzE2ZWVjYTZhZmVhODQ0Y2E0Njg4MjU4Y2UzMzAwZDJh MzkzZmUwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD EygxZjZiYjEzNmYwZGIxYjRlMDUxZTBmZGM5ODY1MWU5MzkyNjcxNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CEHCdKjTkc8Ft/AfTiMVhQhV0z3 e5Wt+tEsaOuoE95ysqm1DInf25/u2hbus2qeLav0Wo/VoQ2uxRewQplq+EkdKSQB abCajLp4CSy+58Hc1y8Cd9yBJnGn3OyeCt0cqJR1q4Dor1ZBqHsVvtDI2gMo86gR uf/YpYU4Vv4DL5lCVf7RG2bAjE4qER66FmUgD8zKfFa+sa2D38+vfczRvzIQITzS QXuBm1C7vTjMllCCO8OTdeYevDAWp1hUEy5o81dXUsu+srYsu0qZeCTDr5LgFvme EZv/TykAMCoS7rWcMVXr+DZ7ib4xsGwoCUhBGid+IBFHR69hlJ32yOIFaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9rsTbw2xtOBR4P3JhlHpOSZxdCMB8GA1UdIwQY MBaAFEPBbuymr+qETKRogljOMwDSo5P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUt YjM5NzdmNjQ0N2IzLzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUtYjM5NzdmNjQ0N2Iz LzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeR2L+dZ k2uCRbLSCeDncdtfo37Fb6XtMeWq8ZzojUwP/AEpMQLW90Ge7XIuQZrkxernC1M2 cqcSzlSGUPMi54kBhDIoC6eiOcCAk+TGJ+0UFe1m0zOvPBNw/bw17eWqKy40lgCT ItlIgaaVA4jWHMWt8Uk+DVd0FWQ78tOdBB4Ilpm8KN+g6GvwNnPqCAXiDTMBffCc N5gZn/r8GBjBzl65hLREUQ3FXl0Gq/Ljb4baGWuzpOtAoArIRJAhQ5XUs4MVrh7z GU1WTH2Cv93mR5752HEwt6mOmtxTYF+ySiKsvRj7rZO4VffIxz7rDW10W7qOxP4+ a4DGMna9OKvOmw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:30 2025 by rpki-client