This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json) Hash identifier: 5zyRQ3ieTBHvdQKFRrIstAFG8yJ2U6i87X11JLONzVk= Subject key identifier: 03:50:9D:29:20:86:AD:EE:7C:D3:0E:C2:18:38:F9:C0:92:E6:2B:1A Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Certificate serial: 019AF35295582A967856B0FCEA15032F33A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft Manifest number: 016D Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: RqfXSQhiNr8OqymJyhDnbyVOZmbS3c6u1aNVrKkkNgk=) 2: ZhWVS_BxzDC-crYvHmP5Jp_0l9w.roa (hash: 2arBDBURi5cw54gyN2A95A3jd2xSCZuw/tiSOf4SzU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:95:58:2a:96:78:56:b0:fc:ea:15:03:2f:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=03509d292086adee7cd30ec21838f9c092e62b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:73:7d:12:e7:3f:b1:f4:4e:b9:5e:64:ba: 4d:d6:24:e9:4a:88:54:ed:39:e0:22:d8:5c:e4:83: b5:a7:d5:7d:9e:2e:b5:62:59:fa:06:54:77:0e:ed: 9f:e9:d3:8b:bf:a3:b4:32:fb:4e:48:4e:fd:f6:fc: 9f:37:af:f2:a5:45:af:0f:ca:af:1b:22:f1:bb:5f: 6c:af:64:38:9b:3a:cc:04:ab:11:4d:28:7c:11:c8: 1c:12:d8:f7:6f:2e:33:ec:19:17:6b:ff:21:d0:f3: d8:45:32:0c:1d:50:9e:ef:49:45:fd:da:bf:e5:91: b6:20:14:5a:b0:e8:3f:7d:62:4a:04:52:5f:c7:24: 0e:fd:57:64:b3:17:10:06:eb:99:a8:08:c7:b4:35: 90:19:43:31:b4:2b:5d:f8:64:b2:1d:61:7e:1e:85: 48:eb:11:6d:4b:6c:b2:c2:06:91:6b:ee:53:63:df: f4:f5:31:6e:4f:e9:b0:de:b9:77:79:52:88:94:3f: 5a:3d:b7:17:83:6f:fe:87:92:93:d7:bf:12:96:df: 74:e5:00:63:7b:94:be:45:c9:32:65:ab:38:05:8b: 6b:83:7f:20:c4:81:22:da:e9:65:a4:9c:14:67:92: cb:46:eb:55:9f:36:0a:44:db:f0:3a:28:8c:03:47: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:9D:29:20:86:AD:EE:7C:D3:0E:C2:18:38:F9:C0:92:E6:2B:1A X509v3 Authority Key Identifier: keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9f:6b:fe:c5:42:96:a5:46:2f:08:1b:17:b6:2c:65:97:2b: 1f:fd:a9:96:64:51:94:10:99:96:e2:97:30:57:f0:48:6b:5e: 46:7d:5d:21:a8:74:ee:16:91:85:6c:a7:d1:44:30:eb:0e:47: 0b:be:07:30:7a:6a:50:f1:6e:99:83:c4:89:38:8a:73:44:cb: 0b:8c:2e:af:44:4f:d8:eb:c0:c4:87:bb:dc:a2:42:ae:85:3c: d4:d6:08:a6:29:8a:16:84:7e:92:bc:8f:ca:18:af:94:ae:69: f3:dc:46:73:d5:d1:94:1a:7b:cb:bf:38:10:81:11:6d:ec:8a: 94:a4:3d:dc:fb:74:8c:bc:30:90:6b:8a:d4:59:38:19:a2:2c: 2e:30:c8:93:e5:b2:f0:9f:62:f6:8f:73:25:03:6f:34:71:8c: 57:18:f5:a2:e5:49:0b:3e:95:2e:fe:39:d2:0c:23:e6:f9:00: cc:be:ec:8c:f2:bd:00:6c:d3:94:1c:34:1f:12:27:ec:6c:9b: 13:aa:05:13:68:8d:82:1d:93:d1:ac:6b:6e:60:f8:51:39:e2: 89:45:a8:7d:6b:f1:ae:f7:6c:c8:36:d5:b7:30:7f:67:59:f1: 49:ca:18:ef:1d:e2:2d:a1:b6:e8:70:ce:22:92:ae:8b:7f:b2: 55:76:d7:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpVYKpZ4VrD86hUDLzOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj MTI2MzcwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD EygwMzUwOWQyOTIwODZhZGVlN2NkMzBlYzIxODM4ZjljMDkyZTYyYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOpzfRLnP7H0TrleZLpN1iTpSohU 7TngIthc5IO1p9V9ni61Yln6BlR3Du2f6dOLv6O0MvtOSE799vyfN6/ypUWvD8qv GyLxu19sr2Q4mzrMBKsRTSh8EcgcEtj3by4z7BkXa/8h0PPYRTIMHVCe70lF/dq/ 5ZG2IBRasOg/fWJKBFJfxyQO/VdksxcQBuuZqAjHtDWQGUMxtCtd+GSyHWF+HoVI 6xFtS2yywgaRa+5TY9/09TFuT+mw3rl3eVKIlD9aPbcXg2/+h5KT178Slt905QBj e5S+RckyZas4BYtrg38gxIEi2ullpJwUZ5LLRutVnzYKRNvwOiiMA0f4pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANQnSkghq3ufNMOwhg4+cCS5isaMB8GA1UdIwQY MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU59r/sVC lqVGLwgbF7YsZZcrH/2plmRRlBCZluKXMFfwSGteRn1dIah07haRhWyn0UQw6w5H C74HMHpqUPFumYPEiTiKc0TLC4wur0RP2OvAxIe73KJCroU81NYIpimKFoR+kryP yhivlK5p89xGc9XRlBp7y784EIERbeyKlKQ93Pt0jLwwkGuK1Fk4GaIsLjDIk+Wy 8J9i9o9zJQNvNHGMVxj1ouVJCz6VLv450gwj5vkAzL7sjPK9AGzTlBw0HxIn7Gyb E6oFE2iNgh2T0axrbmD4UTniiUWofWvxrvdsyDbVtzB/Z1nxScoY7x3iLaG26HDO IpKui3+yVXbX0w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:45 2025 by rpki-client