This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json) Hash identifier: xvGn0mxFC+dgJ4ZdFtksCs+JZXNk7dzDkAO+n/ELoxI= Subject key identifier: A0:67:3F:C0:09:36:2D:06:1B:1D:02:0F:B5:4F:A0:C5:68:4C:CF:C4 Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e Certificate serial: 019AF1D238AAD78A7E0EEC351A025A1B7828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft Manifest number: 1290 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: 29Fbyqa3xR2F2zSRDokIwgmDRN/KR/KmMff8TG11uXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:38:aa:d7:8a:7e:0e:ec:35:1a:02:5a:1b:78:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=a0673fc009362d061b1d020fb54fa0c5684ccfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:2a:ac:51:f1:57:0b:b3:3f:61:00:ed:b4: 6d:11:e9:26:8c:0c:89:99:63:cc:ac:c8:d7:19:7a: ea:f3:a8:85:d1:ab:dd:24:fb:03:94:5d:77:d7:67: 82:d8:a6:64:91:38:e9:ef:db:63:e4:ee:13:19:d7: 47:e6:2c:77:e3:d3:5c:23:a8:6e:39:99:3a:07:81: 73:c0:a5:3b:56:27:94:48:4c:28:7a:1a:36:37:54: 90:56:78:d2:bf:cc:8b:88:c0:04:06:1d:4b:eb:a6: 45:6c:14:eb:29:41:96:4c:3c:8c:92:23:b2:de:28: 37:a8:63:11:be:48:fb:8b:19:c9:fd:0e:a4:fb:d5: ce:6c:f0:05:93:c6:fc:e1:ee:6b:7f:c1:d2:e2:ba: f7:6a:0c:e4:04:f5:77:c8:1f:95:87:04:78:8e:8a: 0d:e8:ac:2a:05:f7:ca:32:66:e8:ba:13:76:c0:ad: bf:82:c1:e7:1a:4c:de:01:22:ed:28:3e:36:4a:c2: 9f:5d:9e:02:8b:af:b0:bb:3f:95:f3:3f:54:38:53: 1a:c1:04:26:81:38:c5:0d:2d:3c:7a:d5:b4:d5:e0: a1:20:18:9c:24:89:a3:01:2b:b9:03:cc:33:95:3a: d9:3b:ef:9a:07:5f:aa:75:c3:5e:25:56:71:f5:5c: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:3F:C0:09:36:2D:06:1B:1D:02:0F:B5:4F:A0:C5:68:4C:CF:C4 X509v3 Authority Key Identifier: keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:be:c4:dd:a9:2c:19:a0:19:8c:80:c8:e8:21:44:70:db:ca: 16:bd:3b:6c:49:da:1d:5f:99:41:50:11:c7:58:b5:fa:41:ec: 0c:f0:25:fc:50:59:9a:d5:32:dc:cd:e0:2f:c2:b1:8d:d5:3b: e8:33:be:10:26:da:d5:5b:96:fa:f1:6f:ca:22:e2:24:54:22: 6a:02:61:82:1c:69:2b:00:65:fe:de:5b:fb:5d:b5:81:6f:62: 3b:66:56:55:49:6f:8e:d3:42:9e:9d:ba:71:f4:e1:a0:43:05: ea:23:dc:90:42:4a:9b:6b:eb:1e:a8:0d:f7:77:e1:cd:11:14: c8:d6:0c:4c:19:c8:f6:ac:f7:be:fd:64:a3:40:ab:2c:d4:ee: c7:bb:14:a9:39:ac:bb:79:bf:a5:fc:90:3c:f1:b3:ac:15:44: 5f:92:99:e9:0f:73:95:a0:a1:87:96:4c:57:0e:a5:09:d9:56: 1b:fa:62:9f:bf:01:09:d7:68:6a:ec:0e:43:9d:04:14:2a:79: 84:f1:53:62:9a:c5:63:3c:b1:f3:4b:6b:53:b4:04:ff:f2:74: 02:8c:a7:07:95:26:da:72:12:35:2b:8c:80:26:c2:b8:da:2b: 4b:a3:27:41:0e:9f:b3:76:e3:5c:78:f0:38:4b:88:f7:80:79: 95:01:39:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jiq14p+Duw1GgJaG3goMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2E5NWQ2ZjkxYjY3NmI5ZDcxYWI4YWUxMTQxOTQxOGRl M2MzMGUwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhhMDY3M2ZjMDA5MzYyZDA2MWIxZDAyMGZiNTRmYTBjNTY4NGNjZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7YqrFHxVwuzP2EA7bRtEekmjAyJ mWPMrMjXGXrq86iF0avdJPsDlF1312eC2KZkkTjp79tj5O4TGddH5ix349NcI6hu OZk6B4FzwKU7VieUSEwoeho2N1SQVnjSv8yLiMAEBh1L66ZFbBTrKUGWTDyMkiOy 3ig3qGMRvkj7ixnJ/Q6k+9XObPAFk8b84e5rf8HS4rr3agzkBPV3yB+VhwR4jooN 6KwqBffKMmbouhN2wK2/gsHnGkzeASLtKD42SsKfXZ4Ci6+wuz+V8z9UOFMawQQm gTjFDS08etW01eChIBicJImjASu5A8wzlTrZO++aB1+qdcNeJVZx9VwboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBnP8AJNi0GGx0CD7VPoMVoTM/EMB8GA1UdIwQY MBaAFEJ6ldb5G2drnXGriuEUGUGN48MOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYt Y2U3YTUxYWEzMzE0LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYtY2U3YTUxYWEzMzE0 LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb7E3aks GaAZjIDI6CFEcNvKFr07bEnaHV+ZQVARx1i1+kHsDPAl/FBZmtUy3M3gL8KxjdU7 6DO+ECba1VuW+vFvyiLiJFQiagJhghxpKwBl/t5b+121gW9iO2ZWVUlvjtNCnp26 cfThoEMF6iPckEJKm2vrHqgN93fhzREUyNYMTBnI9qz3vv1ko0CrLNTux7sUqTms u3m/pfyQPPGzrBVEX5KZ6Q9zlaChh5ZMVw6lCdlWG/pin78BCddoauwOQ50EFCp5 hPFTYprFYzyx80trU7QE//J0AoynB5Um2nISNSuMgCbCuNorS6MnQQ6fs3bjXHjw OEuI94B5lQE51A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:37 2025 by rpki-client