This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json) Hash identifier: sCKQBHuV1xOrh9gIRECWDB6qy1XnkIUFVaj8BpF5XYs= Subject key identifier: 5E:5E:0E:4D:21:0C:CD:92:C8:4F:FD:67:4C:08:10:A1:24:3E:99:35 Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af Certificate serial: 019AF0BF75466A56C90455448DEEF917F5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft Manifest number: 1263 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: C6dkcN0VE+WYdrag1VFU4FvtM2cWW3oSOQHRVfGf49I=) 2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:75:46:6a:56:c9:04:55:44:8d:ee:f9:17:f5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=5e5e0e4d210ccd92c84ffd674c0810a1243e9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:4c:66:ce:5b:f0:38:8c:c6:70:0d:94:b8: da:17:53:40:c7:8d:7e:61:2a:20:e7:a1:e9:4b:90: 5b:6f:a8:7c:4f:9f:2c:f2:26:27:46:a3:56:43:22: 42:fb:e8:18:90:68:f3:73:f3:8c:ca:82:e9:c4:9f: d3:3f:39:02:9c:7a:d2:db:dd:98:8c:55:fa:5a:1b: 44:2a:85:e4:26:1f:24:53:79:b7:de:39:9f:d1:83: 35:80:8b:cb:4e:7e:84:0a:29:68:75:94:63:c8:47: 85:6b:da:67:ea:ec:2b:91:52:9f:73:36:62:a3:c0: a4:31:5d:97:dd:53:09:cd:62:e9:37:e4:0e:40:70: 19:8a:2c:b6:f8:6b:c6:de:0c:1e:1e:ec:6c:24:2d: 08:4d:c1:88:40:86:b7:64:9b:52:13:6b:22:24:49: 0e:f2:96:e5:ca:a9:f7:17:fe:db:66:32:c7:87:d7: 7a:85:91:f6:80:c5:ac:3d:fb:c2:fa:6a:16:7a:8f: 6c:f9:58:58:4e:4d:e9:0a:54:cf:34:58:63:f7:2e: 98:8c:43:32:fa:26:8c:fd:42:4c:2f:3c:a8:d0:3b: c8:6d:22:c7:cb:69:51:4e:e0:f6:23:cf:03:e7:25: 9d:3a:72:1b:10:7e:dc:bb:16:62:de:b9:20:4e:62: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:0E:4D:21:0C:CD:92:C8:4F:FD:67:4C:08:10:A1:24:3E:99:35 X509v3 Authority Key Identifier: keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1c:ad:07:3d:6d:99:3a:c7:21:a1:34:65:29:ab:f1:64:ef: d4:d4:89:5c:d4:53:a4:b7:fb:0b:3d:fa:f7:b5:26:15:fa:12: 73:c0:cc:f8:70:8a:c2:55:29:7d:44:0c:29:e3:c0:b9:d0:78: e9:10:3c:c6:1b:4f:8a:bf:d2:89:4c:30:6a:66:a0:3b:53:77: 49:b3:4e:20:50:11:4f:b3:e2:de:e9:e8:4e:2c:05:71:27:53: 03:95:fa:83:5f:42:67:57:1a:ae:c2:e8:92:94:e4:2d:47:33: e3:06:16:de:1c:f9:19:56:78:34:cf:37:e0:9f:ae:87:c5:17: c8:cd:97:2d:64:ee:29:6a:3c:40:12:5f:19:0d:36:b4:fa:59: ad:ea:00:52:91:90:a8:66:e2:19:e5:df:b2:e2:23:47:95:43: e1:46:fd:fd:1e:f9:9e:fb:b1:61:e6:2b:a3:6d:33:b5:88:26: 24:78:83:b8:2d:3c:62:47:fe:2e:a2:44:54:68:7d:11:d3:d0: 24:8a:89:00:77:0b:f7:bf:66:b6:c1:e6:22:4f:7a:24:f9:5b: 27:5e:a3:25:6c:6b:81:21:88:80:62:1a:b7:16:c8:73:87:fe: b0:a2:b4:87:5e:ca:f1:11:ca:ee:eb:12:d0:94:61:a7:24:f4: 7b:f2:3f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3VGalbJBFVEje75F/XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi MTg1YWYwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD Eyg1ZTVlMGU0ZDIxMGNjZDkyYzg0ZmZkNjc0YzA4MTBhMTI0M2U5OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA1MZs5b8DiMxnANlLjaF1NAx41+ YSog56HpS5Bbb6h8T58s8iYnRqNWQyJC++gYkGjzc/OMyoLpxJ/TPzkCnHrS292Y jFX6WhtEKoXkJh8kU3m33jmf0YM1gIvLTn6ECilodZRjyEeFa9pn6uwrkVKfczZi o8CkMV2X3VMJzWLpN+QOQHAZiiy2+GvG3gweHuxsJC0ITcGIQIa3ZJtSE2siJEkO 8pblyqn3F/7bZjLHh9d6hZH2gMWsPfvC+moWeo9s+VhYTk3pClTPNFhj9y6YjEMy +iaM/UJMLzyo0DvIbSLHy2lRTuD2I88D5yWdOnIbEH7cuxZi3rkgTmLJcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5eDk0hDM2SyE/9Z0wIEKEkPpk1MB8GA1UdIwQY MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt YmY3OGJiODVhNjllLzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxytBz1t mTrHIaE0ZSmr8WTv1NSJXNRTpLf7Cz3697UmFfoSc8DM+HCKwlUpfUQMKePAudB4 6RA8xhtPir/SiUwwamagO1N3SbNOIFART7Pi3unoTiwFcSdTA5X6g19CZ1carsLo kpTkLUcz4wYW3hz5GVZ4NM834J+uh8UXyM2XLWTuKWo8QBJfGQ02tPpZreoAUpGQ qGbiGeXfsuIjR5VD4Ub9/R75nvuxYeYro20ztYgmJHiDuC08Ykf+LqJEVGh9EdPQ JIqJAHcL979mtsHmIk96JPlbJ16jJWxrgSGIgGIatxbIc4f+sKK0h17K8RHK7usS 0JRhpyT0e/I//g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:41 2025 by rpki-client