This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json) Hash identifier: I5kol59N5Yffhm8pGT1EVisBeaCJfOBIZ8stc6HrlZc= Subject key identifier: E5:C5:5E:76:4E:85:79:C5:22:51:7E:B0:FC:1C:39:FB:9D:9F:75:54 Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5 Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5 Certificate serial: 019AF2401D7722D15A056B9CEFD4CB8BE765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft Manifest number: 089C Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: w65vo6kE2RA27wbW591MrIIpgErc7lzPfV/vTf+9H1s=) 2: WM6_PiLJimZu3-ntno5nf1L2TeI.roa (hash: e9e0PlmYtdK9jnTu2i/jKOaMfxsR3gJ7UU2ch7hTNjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1d:77:22:d1:5a:05:6b:9c:ef:d4:cb:8b:e7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=e5c55e764e8579c522517eb0fc1c39fb9d9f7554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:58:b0:ff:37:c8:08:61:3a:d0:75:0e:29:70: 49:3b:e9:d2:0e:62:08:2b:f0:d1:d5:aa:4c:89:6b: cf:f1:63:76:96:a9:01:ba:c8:94:ed:de:65:2c:82: 9d:44:68:84:ec:8c:da:9d:fb:a4:ed:c3:0c:f7:51: f3:25:52:30:2c:9c:7f:3c:22:e6:1c:08:e9:82:1f: f2:da:19:3a:c0:e1:46:a1:cb:dd:4f:4c:6a:82:f0: 9f:5c:09:be:25:0b:c9:af:f5:f7:20:17:a2:88:64: 12:bc:9a:f0:2e:cc:83:78:c8:d0:86:2e:5c:ef:87: 6a:c3:20:dd:93:8a:a9:f3:bf:30:89:90:dc:4e:fc: c2:4a:03:59:61:33:c7:41:7f:89:0c:c3:2d:88:85: 99:f4:22:23:6e:db:13:28:5c:5a:09:ea:be:c3:e2: 64:4b:41:af:a1:8a:3e:04:c0:57:8c:d8:50:a9:51: d0:90:a9:39:29:20:0a:82:70:e0:86:86:34:12:ec: 66:09:09:da:56:5e:bc:c8:63:94:d7:ad:9f:6c:fb: d6:69:45:53:85:9a:d0:75:bd:eb:d4:7e:fd:76:66: b1:e9:db:2c:78:12:a0:49:86:cb:11:86:8a:4d:26: aa:40:04:2f:42:01:79:7d:11:3a:44:5b:fa:07:ff: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C5:5E:76:4E:85:79:C5:22:51:7E:B0:FC:1C:39:FB:9D:9F:75:54 X509v3 Authority Key Identifier: keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5b:85:1f:24:b4:e5:6d:b9:6b:bb:bd:9e:aa:19:8a:d7:4f: 15:e9:bf:b8:03:04:2a:f0:33:cd:86:60:8c:4e:ed:2e:e8:c8: 06:c1:e9:9a:48:24:7a:6f:5b:ee:1a:10:10:70:0c:1c:cc:a5: a2:0e:13:a1:08:7d:43:5f:4e:fe:61:b7:1b:d5:f2:e5:61:ff: d3:f0:13:d1:30:c2:7c:0d:7a:c6:27:f7:b6:a6:8c:a1:b6:c8: 10:6e:dd:02:bc:84:84:9a:e6:43:5a:a7:73:33:08:d3:7d:3c: 06:a7:cf:57:fb:38:2b:7f:2e:c7:b1:fc:02:c7:26:74:23:00: 72:73:18:bb:6c:bf:3e:33:90:12:22:c2:dd:0e:c1:d2:20:16: 8c:0b:cf:eb:b1:3f:29:cd:5f:a1:59:a1:95:3d:c7:5e:6b:4e: da:e9:11:36:22:cd:eb:38:a2:19:a4:c8:b7:b0:01:1c:17:af: 8b:fd:a7:4c:f9:40:da:37:2e:a0:bc:26:2b:fe:96:92:5e:72: b1:90:f6:a2:b7:e8:74:4b:60:6c:8e:9a:57:5b:c7:c1:48:a0: 56:35:29:ef:95:ed:65:78:ad:8c:33:c4:7c:a1:26:21:ab:c2: e8:5a:3d:81:98:12:76:b6:e8:cb:07:dd:ca:76:6c:7f:37:d6: e1:dc:4c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB13ItFaBWuc79TLi+dlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjlhOTY5NTI3NzdmMTA3NDMzODMwM2VjYjY1MDI1YzRl MmI4YjUwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EyhlNWM1NWU3NjRlODU3OWM1MjI1MTdlYjBmYzFjMzlmYjlkOWY3NTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1iw/zfICGE60HUOKXBJO+nSDmII K/DR1apMiWvP8WN2lqkBusiU7d5lLIKdRGiE7Izanfuk7cMM91HzJVIwLJx/PCLm HAjpgh/y2hk6wOFGocvdT0xqgvCfXAm+JQvJr/X3IBeiiGQSvJrwLsyDeMjQhi5c 74dqwyDdk4qp878wiZDcTvzCSgNZYTPHQX+JDMMtiIWZ9CIjbtsTKFxaCeq+w+Jk S0GvoYo+BMBXjNhQqVHQkKk5KSAKgnDghoY0EuxmCQnaVl68yGOU162fbPvWaUVT hZrQdb3r1H79dmax6dsseBKgSYbLEYaKTSaqQAQvQgF5fRE6RFv6B/8G5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXFXnZOhXnFIlF+sPwcOfudn3VUMB8GA1UdIwQY MBaAFEL5qWlSd38QdDODA+y2UCXE4ri1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUt NzdmYTI5MTI5OTRkLzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUtNzdmYTI5MTI5OTRk LzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVuFHyS0 5W25a7u9nqoZitdPFem/uAMEKvAzzYZgjE7tLujIBsHpmkgkem9b7hoQEHAMHMyl og4ToQh9Q19O/mG3G9Xy5WH/0/AT0TDCfA16xif3tqaMobbIEG7dAryEhJrmQ1qn czMI0308BqfPV/s4K38ux7H8AscmdCMAcnMYu2y/PjOQEiLC3Q7B0iAWjAvP67E/ Kc1foVmhlT3HXmtO2ukRNiLN6ziiGaTIt7ABHBevi/2nTPlA2jcuoLwmK/6Wkl5y sZD2orfodEtgbI6aV1vHwUigVjUp75XtZXitjDPEfKEmIavC6Fo9gZgSdrboywfd ynZsfzfW4dxMGA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:07 2025 by rpki-client