This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft File: _QwhhAzBSt9SamgcB25mxDQxWCw.mft (raw, json) Hash identifier: h03gCdbO3hWqNRqC11I705UodoGQ7PlwdrjIUI7ZLmY= Subject key identifier: 0A:59:D9:90:6D:55:FE:C6:D4:1E:DD:CB:4D:67:18:0D:52:E5:C5:22 Authority key identifier: FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C Certificate issuer: /CN=fd0c21840cc14adf526a681c076e66c43431582c Certificate serial: 019AF16468EC632C9FC25E9EFBA7B230C87E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft Manifest number: 7B Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: _QwhhAzBSt9SamgcB25mxDQxWCw.crl (hash: MdeuYwxIy9Bt1gZVKUANaVd6WW7RNtj2qwxndQkayMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:68:ec:63:2c:9f:c2:5e:9e:fb:a7:b2:30:c8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c21840cc14adf526a681c076e66c43431582c Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=0a59d9906d55fec6d41eddcb4d67180d52e5c522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:cc:19:15:9e:da:0d:63:8b:ec:04:bf:06: dc:93:7f:00:6c:56:14:e9:7b:d4:31:10:07:8f:59: c1:b4:2f:bf:c6:7d:6c:1c:d3:cc:b8:e9:dc:8d:44: f5:2e:66:ac:af:5b:6e:f0:50:da:38:1d:c5:b9:3b: 3d:6f:06:ec:e8:4d:8f:d7:4a:11:9b:4f:62:c6:de: 76:49:28:df:d2:82:32:7b:52:58:97:cd:6f:ae:25: fa:a3:4e:df:41:f2:1d:72:31:ef:6b:5d:22:73:be: 4b:45:b8:ab:12:b1:03:50:d6:56:24:8f:c2:ea:91: 6f:09:12:6b:53:eb:6e:1a:a0:59:0f:98:37:7b:97: 67:bf:71:47:fe:fa:fa:7e:d4:70:b5:f8:82:9b:d7: 88:a4:db:e2:82:f5:da:3a:c5:33:ba:3f:15:0b:8c: 96:87:89:cb:5e:3f:d2:0a:da:41:58:62:f6:0c:86: ad:6e:56:c0:88:11:58:1c:4d:49:ac:54:a0:b7:23: 5d:52:de:99:b6:3e:3e:f8:e1:66:4e:37:d9:9c:10: 3e:27:dd:81:91:a5:da:b5:f2:96:88:60:fa:2f:b0: 9c:cd:22:4c:c1:0f:f7:70:72:3a:34:41:9b:2d:f8: 6b:eb:40:cd:08:6d:1c:5c:d9:9e:23:d3:1d:3e:dd: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:59:D9:90:6D:55:FE:C6:D4:1E:DD:CB:4D:67:18:0D:52:E5:C5:22 X509v3 Authority Key Identifier: keyid:FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f4:d9:aa:85:4a:33:65:52:3a:92:f6:4d:12:f7:cf:f8:4c: e2:98:ea:8c:9a:20:53:5a:23:bc:91:ce:99:b3:48:c3:a4:f4: d7:12:59:76:3c:e2:ee:5e:3b:a1:c0:ec:86:b3:87:95:2c:7e: bf:a0:5e:9a:8c:f1:12:12:d6:51:23:72:3a:5c:b9:db:dc:09: 07:eb:82:81:53:49:10:fd:9a:54:8b:bd:1e:11:ab:ee:87:81: cf:7e:98:fe:ca:5d:bb:f5:d5:b1:15:cd:60:49:9f:f9:d1:21: 07:67:94:b7:5d:ca:b0:d5:a3:10:e5:f5:65:27:4f:a4:98:22: 6d:71:00:78:b9:d9:0b:98:30:b5:5e:1c:11:c9:aa:7d:be:78: 07:64:1a:bb:b7:bb:e8:c6:d0:5f:99:93:d1:6d:98:18:37:c6: 57:6b:c6:7e:40:c8:bf:79:29:0c:3f:55:6e:ba:29:9d:c0:0d: e3:b1:15:f5:e3:27:1e:33:e2:67:fe:e2:0d:bd:1e:ba:d9:d4: 69:2c:89:78:ac:7d:37:f1:33:c7:5b:01:ca:aa:48:8b:7d:65: 0c:09:70:03:79:19:f9:a9:49:dc:ef:82:de:a5:ba:24:23:d0: 1f:23:c6:1c:a5:52:40:11:89:6c:df:6c:cf:68:6f:85:89:c0: 7a:ff:de:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGjsYyyfwl6e+6eyMMh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGMyMTg0MGNjMTRhZGY1MjZhNjgxYzA3NmU2NmM0MzQz MTU4MmMwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygwYTU5ZDk5MDZkNTVmZWM2ZDQxZWRkY2I0ZDY3MTgwZDUyZTVjNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKnMGRWe2g1ji+wEvwbck38AbFYU 6XvUMRAHj1nBtC+/xn1sHNPMuOncjUT1Lmasr1tu8FDaOB3FuTs9bwbs6E2P10oR m09ixt52SSjf0oIye1JYl81vriX6o07fQfIdcjHva10ic75LRbirErEDUNZWJI/C 6pFvCRJrU+tuGqBZD5g3e5dnv3FH/vr6ftRwtfiCm9eIpNvigvXaOsUzuj8VC4yW h4nLXj/SCtpBWGL2DIatblbAiBFYHE1JrFSgtyNdUt6Ztj4++OFmTjfZnBA+J92B kaXatfKWiGD6L7CczSJMwQ/3cHI6NEGbLfhr60DNCG0cXNmeI9MdPt2FrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApZ2ZBtVf7G1B7dy01nGA1S5cUiMB8GA1UdIwQY MBaAFP0MIYQMwUrfUmpoHAduZsQ0MVgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zMGJkMTItZGU4Yy00OTJmLThhMTYt ZWU5NjFkYTk3MmRjLzEvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zMGJkMTItZGU4Yy00OTJmLThhMTYtZWU5NjFkYTk3MmRj LzEvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfTZqoVK M2VSOpL2TRL3z/hM4pjqjJogU1ojvJHOmbNIw6T01xJZdjzi7l47ocDshrOHlSx+ v6BemozxEhLWUSNyOly529wJB+uCgVNJEP2aVIu9HhGr7oeBz36Y/spdu/XVsRXN YEmf+dEhB2eUt13KsNWjEOX1ZSdPpJgibXEAeLnZC5gwtV4cEcmqfb54B2Qau7e7 6MbQX5mT0W2YGDfGV2vGfkDIv3kpDD9VbropncAN47EV9eMnHjPiZ/7iDb0eutnU aSyJeKx9N/Ezx1sByqpIi31lDAlwA3kZ+alJ3O+C3qW6JCPQHyPGHKVSQBGJbN9s z2hvhYnAev/erg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:25 2025 by rpki-client