This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json) Hash identifier: 0P1kO9rytSHujINRP2uqmc56mAUelNFvW8nxBuwB1sw= Subject key identifier: 09:DA:F9:66:18:98:4B:CE:19:8B:93:A2:FB:63:40:BA:29:B8:37:95 Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6 Certificate serial: 019AF389D34D50064EEA0AFEFA0276ED9F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft Manifest number: 06E3 Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: VbN7A1IPhePCX+8y+BVN9sMFBnAarpAKeKMh1E3uxhM=) 2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d3:4d:50:06:4e:ea:0a:fe:fa:02:76:ed:9f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6 Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=09daf96618984bce198b93a2fb6340ba29b83795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:ca:e5:e4:07:a6:e6:2c:9b:23:c1:19:51: a3:88:7f:26:2e:f2:ed:43:57:6c:da:85:d8:7d:6f: dd:22:88:27:ce:89:3e:b8:d6:7f:59:8e:8f:6b:d6: 0d:62:e8:99:35:92:44:d1:d7:17:95:14:72:f2:a3: 95:36:56:21:23:a2:44:ca:09:e8:09:b1:c5:dc:0c: 7c:f8:85:dc:e5:4f:a3:1b:65:38:a0:ee:6c:01:31: b0:32:41:7e:71:d6:3c:19:3a:9d:f0:e6:d7:da:18: f9:c2:50:f3:78:4f:4d:62:28:63:38:bd:af:9b:90: dd:72:58:a0:c0:69:3e:0f:48:c3:26:11:35:97:4e: 16:29:39:46:08:84:3d:bf:8f:77:d1:3b:54:c2:1f: ba:a8:2d:03:43:5a:2a:02:54:f9:6a:13:34:b9:73: 8c:b1:73:e7:15:3e:35:09:c6:81:9e:6d:11:67:7f: 60:25:4d:0a:75:2d:60:8a:fa:fe:eb:0e:dd:cf:b5: a4:5e:a9:29:29:6b:2f:cd:9f:19:e0:6a:32:9e:b9: d4:24:cd:7f:31:8c:9a:33:86:2a:67:ee:5d:9c:97: ed:1f:d8:58:a9:04:6a:b2:15:3c:03:c7:47:12:9b: 7f:2d:76:4d:f3:a3:ea:ce:04:a1:93:93:2f:f8:24: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:F9:66:18:98:4B:CE:19:8B:93:A2:FB:63:40:BA:29:B8:37:95 X509v3 Authority Key Identifier: keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:80:c0:63:d9:be:9c:19:dc:92:d2:37:d9:21:17:9d:54:3c: 3b:71:c2:a7:88:56:04:84:b2:ee:3b:c4:f2:60:f5:98:2d:c8: c1:87:61:32:31:e1:75:3d:19:a2:ba:ac:b1:5a:f3:7e:d4:5b: ff:01:9b:81:dc:c5:09:a3:cc:2e:ec:0f:fa:8f:68:12:de:7f: 21:ae:36:0a:68:7a:86:a1:53:93:69:6f:de:81:42:3f:2f:ce: a5:d5:31:48:18:7f:7a:5c:32:4f:6b:ff:51:96:c6:74:dc:74: 2c:46:5d:c9:b2:d9:d7:dc:37:ea:cf:f5:43:59:33:27:ce:ea: 75:25:e1:7f:78:00:94:5a:09:47:30:f8:1e:74:1f:48:33:b2: 6c:56:75:f9:72:25:80:19:e0:cb:40:8e:da:96:bc:1f:69:84: f8:df:82:0d:98:44:a8:52:10:c9:84:7d:df:15:0b:12:c3:69: 58:ee:04:46:73:e5:04:30:c2:a9:c3:f0:f5:c2:51:25:d6:29: 5d:65:a9:29:ff:d9:21:4f:2b:6c:8b:74:c7:27:7e:0c:47:4f: e3:bf:a6:46:6d:cf:45:03:ea:64:24:14:e4:9b:44:99:f2:49: aa:e3:88:9d:10:cd:18:00:da:07:fe:c1:b5:9c:8e:cc:3e:a4: 2b:0a:55:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidNNUAZO6gr++gJ27Z9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk MzA4YTYwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EygwOWRhZjk2NjE4OTg0YmNlMTk4YjkzYTJmYjYzNDBiYTI5YjgzNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIfK5eQHpuYsmyPBGVGjiH8mLvLt Q1ds2oXYfW/dIognzok+uNZ/WY6Pa9YNYuiZNZJE0dcXlRRy8qOVNlYhI6JEygno CbHF3Ax8+IXc5U+jG2U4oO5sATGwMkF+cdY8GTqd8ObX2hj5wlDzeE9NYihjOL2v m5DdcligwGk+D0jDJhE1l04WKTlGCIQ9v4930TtUwh+6qC0DQ1oqAlT5ahM0uXOM sXPnFT41CcaBnm0RZ39gJU0KdS1givr+6w7dz7WkXqkpKWsvzZ8Z4GoynrnUJM1/ MYyaM4YqZ+5dnJftH9hYqQRqshU8A8dHEpt/LXZN86PqzgShk5Mv+CRhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAna+WYYmEvOGYuTovtjQLopuDeVMB8GA1UdIwQY MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt N2I1Zjk4MTU1ZmU2LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2 LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIDAY9m+ nBncktI32SEXnVQ8O3HCp4hWBISy7jvE8mD1mC3IwYdhMjHhdT0ZorqssVrzftRb /wGbgdzFCaPMLuwP+o9oEt5/Ia42Cmh6hqFTk2lv3oFCPy/OpdUxSBh/elwyT2v/ UZbGdNx0LEZdybLZ19w36s/1Q1kzJ87qdSXhf3gAlFoJRzD4HnQfSDOybFZ1+XIl gBngy0CO2pa8H2mE+N+CDZhEqFIQyYR93xULEsNpWO4ERnPlBDDCqcPw9cJRJdYp XWWpKf/ZIU8rbIt0xyd+DEdP47+mRm3PRQPqZCQU5JtEmfJJquOInRDNGADaB/7B tZyOzD6kKwpVeA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:36 2025 by rpki-client