This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft File: QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json) Hash identifier: CHVubLvR8ZzJhkgeQGFiTV9F1qFYzjkSh7Ixt2ZR4Mw= Subject key identifier: BA:72:00:66:D9:C5:A7:19:9C:CE:62:BA:D2:F7:20:8E:EB:D0:E8:97 Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6 Certificate issuer: /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6 Certificate serial: 019AF12E17D95742786C688C5F5721B1AF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft Manifest number: 027A Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: qdqE2a3+45p1NMS0IJ89IJAKSKagsmhuTf/BkWCyxr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:17:d9:57:42:78:6c:68:8c:5f:57:21:b1:af:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=ba720066d9c5a7199cce62bad2f7208eebd0e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:ce:fa:ca:8f:79:32:28:e2:72:b7:23:10: bf:dc:5c:39:33:83:2b:ff:1a:18:97:36:cf:ea:91: f6:9c:69:1a:e3:84:1a:7f:08:97:9c:64:de:9b:e3: 58:f0:f4:cd:6b:58:80:ee:1b:18:d2:34:28:3a:97: e9:3f:e4:b9:dc:c1:15:fe:c8:3b:f8:05:e6:1b:8f: 3b:5b:68:a4:ac:8b:4f:f7:f1:05:64:d1:8c:7a:27: 40:33:a4:3b:58:04:1f:a7:d2:69:8f:78:89:1c:1d: ec:67:0c:6e:db:f7:33:2e:21:85:5c:2c:11:7c:0e: bb:1b:69:35:b9:4b:36:0f:02:8a:57:e8:a8:aa:fc: 74:ad:e5:f8:1d:01:93:2c:6b:6b:d6:12:d3:81:3a: dd:4e:a2:d2:91:39:01:a8:a2:65:35:93:54:85:fc: f6:ff:a4:00:eb:f9:ec:a5:40:be:e7:27:7f:25:50: dc:30:ec:a8:25:09:c9:ef:0c:cd:96:e7:06:ab:d7: 80:ef:46:e8:de:f4:55:ac:f4:96:f9:19:3d:e4:10: 3d:f0:f6:5f:9a:60:d2:30:5e:fa:9b:36:43:40:80: 0b:93:5e:04:8f:a1:e3:81:57:e6:ac:89:f1:ab:64: 87:ea:94:8d:f5:09:6a:52:5b:fe:d7:31:67:dd:5a: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:00:66:D9:C5:A7:19:9C:CE:62:BA:D2:F7:20:8E:EB:D0:E8:97 X509v3 Authority Key Identifier: keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:34:b4:36:d5:0f:25:b5:34:98:f4:40:79:3c:16:37:66:63: 8f:17:06:ad:42:ed:17:dc:dc:a2:0c:d7:a9:e2:3e:de:2a:ff: 77:23:38:ad:ea:db:a6:9d:06:bf:1b:4f:3f:21:01:e2:9e:a7: 47:40:bb:21:0f:1a:10:45:cb:9f:3a:60:be:79:19:b2:e6:58: b6:9b:75:65:4a:80:30:3e:46:25:83:80:ce:d7:75:78:d6:81: 12:c1:59:e9:c8:56:71:9c:06:43:3a:37:6d:ba:db:c0:d6:bd: e4:71:f8:b3:29:56:af:fa:5d:36:99:fd:5a:dd:51:bd:de:da: 1d:bc:c1:b0:b0:1a:27:99:c3:ce:f5:4e:17:79:f3:e7:f0:c6: 21:0a:59:7a:7e:96:8c:11:ad:ed:fc:2a:41:5c:90:aa:a2:dd: 4c:01:b5:2c:ce:8c:bd:fa:56:5d:c6:ed:a5:12:21:12:bc:92: a7:d9:ed:44:57:1f:3e:1a:7d:b1:5f:9c:c2:31:e0:ef:da:78: 96:a5:cf:47:9a:04:a7:3f:e5:20:5d:14:83:bd:6c:84:36:16: c0:27:ec:00:03:fd:b4:1e:1d:e4:9e:84:af:ee:bc:72:ff:6b: 69:8f:70:86:06:3c:77:62:a5:92:0d:0f:5a:b3:71:26:11:3c: 1a:b4:3d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhfZV0J4bGiMX1chsa9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzI3MjJmNjZmMjdhYzkwNzJmZGM3ZTkzMWY2ZTFhODUx M2NmYzYwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhiYTcyMDA2NmQ5YzVhNzE5OWNjZTYyYmFkMmY3MjA4ZWViZDBlODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2jO+sqPeTIo4nK3IxC/3Fw5M4Mr /xoYlzbP6pH2nGka44QafwiXnGTem+NY8PTNa1iA7hsY0jQoOpfpP+S53MEV/sg7 +AXmG487W2ikrItP9/EFZNGMeidAM6Q7WAQfp9Jpj3iJHB3sZwxu2/czLiGFXCwR fA67G2k1uUs2DwKKV+ioqvx0reX4HQGTLGtr1hLTgTrdTqLSkTkBqKJlNZNUhfz2 /6QA6/nspUC+5yd/JVDcMOyoJQnJ7wzNlucGq9eA70bo3vRVrPSW+Rk95BA98PZf mmDSMF76mzZDQIALk14Ej6HjgVfmrInxq2SH6pSN9QlqUlv+1zFn3VoRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpyAGbZxacZnM5iutL3II7r0OiXMB8GA1UdIwQY MBaAFEEyci9m8nrJBy/cfpMfbhqFE8/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85ODUwNTYtNzQ4Zi00YjkyLWI2ZmUt NTRjMzdjMDJiN2VlLzEvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My85ODUwNTYtNzQ4Zi00YjkyLWI2ZmUtNTRjMzdjMDJiN2Vl LzEvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDS0NtUP JbU0mPRAeTwWN2ZjjxcGrULtF9zcogzXqeI+3ir/dyM4rerbpp0GvxtPPyEB4p6n R0C7IQ8aEEXLnzpgvnkZsuZYtpt1ZUqAMD5GJYOAztd1eNaBEsFZ6chWcZwGQzo3 bbrbwNa95HH4sylWr/pdNpn9Wt1Rvd7aHbzBsLAaJ5nDzvVOF3nz5/DGIQpZen6W jBGt7fwqQVyQqqLdTAG1LM6MvfpWXcbtpRIhErySp9ntRFcfPhp9sV+cwjHg79p4 lqXPR5oEpz/lIF0Ug71shDYWwCfsAAP9tB4d5J6Er+68cv9raY9whgY8d2Klkg0P WrNxJhE8GrQ91A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:36 2025 by rpki-client