This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json) Hash identifier: 2HYEK4n5D4vNoTElbr/k8YP11v/1iwI7fpc92hI5qa4= Subject key identifier: 5E:63:3A:4A:55:9C:95:2E:39:B5:5E:ED:4B:99:AA:D5:2C:07:19:32 Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592 Certificate serial: 019AF31C14CD40100DB9A1FD87DCCD5516C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: PHwq/J4VeZ0+p8CX3BTfvARlusyA3dmeVATnqWQo2/g=) 2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:14:cd:40:10:0d:b9:a1:fd:87:dc:cd:55:16:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=5e633a4a559c952e39b55eed4b99aad52c071932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:1f:6f:26:e7:cb:fa:38:ad:d5:36:86:81: 53:34:95:c9:87:12:93:e9:ef:e0:f2:3f:88:80:fa: 76:7b:4f:f7:77:40:2e:81:7e:c2:ed:03:b7:64:6d: 56:e1:f1:07:f3:ae:9d:38:56:2c:51:b6:b4:3f:ea: 27:9d:20:51:d9:96:11:37:6f:2e:40:e6:f3:a4:69: 15:97:67:59:03:8c:b4:c8:88:c5:fa:cc:40:e2:f4: 0e:08:5a:ca:bd:4f:5e:c1:3e:61:32:d6:4d:5c:2e: 5d:ac:38:74:46:50:04:6d:52:5f:29:e4:8b:a9:db: eb:c5:a2:a7:03:98:08:3c:fa:ac:11:39:1e:4a:e1: 9f:2b:71:60:6a:de:da:22:fb:6b:56:7c:e0:e2:e0: 1d:11:36:55:02:22:df:80:e6:fe:b4:55:9f:c0:0b: ac:13:08:c5:ee:4a:47:82:f4:f2:28:7d:b7:39:33: a5:cd:b7:65:a2:ae:92:72:29:46:aa:15:3a:1f:4b: 62:43:88:b4:43:0b:25:82:c6:a4:4d:f5:f1:88:1f: 99:ce:76:88:42:40:32:78:1f:b4:4e:02:fc:f6:9e: d0:d4:20:ca:27:a9:d9:79:4b:9b:33:a0:d5:86:82: 6b:07:67:f7:f7:6d:62:fa:93:11:75:e6:0b:d0:eb: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:3A:4A:55:9C:95:2E:39:B5:5E:ED:4B:99:AA:D5:2C:07:19:32 X509v3 Authority Key Identifier: keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a0:af:89:b5:f9:70:73:a9:f4:cc:e9:75:83:00:d8:93:d5: ed:c8:58:09:96:51:96:ca:02:02:63:6c:89:fe:a3:e3:2a:90: 95:3c:ca:f7:0c:bc:d5:d6:9e:b3:74:92:13:74:c4:e3:7c:4d: a1:fd:de:64:b1:f3:a5:20:f6:95:99:7c:bd:9e:05:00:61:59: 37:c7:8c:9d:9c:eb:07:92:41:fd:16:43:93:28:ee:30:40:ef: d8:69:75:0c:a5:61:3c:92:f0:6a:de:2e:5d:c8:6f:5f:81:2d: 60:b3:45:02:30:9c:0f:81:36:39:34:e5:91:de:1d:f8:0b:e0: 80:cc:8e:a0:a3:23:e1:09:79:fd:4b:d7:73:be:e8:7c:f7:5e: 06:3b:32:23:3d:5e:7f:28:c9:1c:ed:6e:7c:82:3f:f8:04:df: 93:ae:6d:db:f0:b7:70:38:5b:51:d7:70:93:8c:e4:79:04:13: cb:26:41:8a:e3:aa:f3:f5:5d:1d:12:4c:38:57:82:c0:0d:53: e4:24:37:2f:70:9f:12:f3:d2:1e:9d:c5:de:6b:26:26:5e:39: f3:aa:cf:72:72:cb:19:41:6c:a3:f1:4b:d9:44:55:fe:1f:0f: b0:9e:ee:b5:3d:85:a8:d4:92:d7:20:00:95:89:b2:39:e8:ec: d2:c5:5e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBTNQBANuaH9h9zNVRbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzA5NTkwMTE2MjdkZGQwZDA1N2Q3MzFlOGZhNWE1MTAy OTY1OTIwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD Eyg1ZTYzM2E0YTU1OWM5NTJlMzliNTVlZWQ0Yjk5YWFkNTJjMDcxOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf8fbybny/o4rdU2hoFTNJXJhxKT 6e/g8j+IgPp2e0/3d0AugX7C7QO3ZG1W4fEH866dOFYsUba0P+onnSBR2ZYRN28u QObzpGkVl2dZA4y0yIjF+sxA4vQOCFrKvU9ewT5hMtZNXC5drDh0RlAEbVJfKeSL qdvrxaKnA5gIPPqsETkeSuGfK3Fgat7aIvtrVnzg4uAdETZVAiLfgOb+tFWfwAus EwjF7kpHgvTyKH23OTOlzbdloq6ScilGqhU6H0tiQ4i0QwslgsakTfXxiB+ZznaI QkAyeB+0TgL89p7Q1CDKJ6nZeUubM6DVhoJrB2f3921i+pMRdeYL0Otv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5jOkpVnJUuObVe7UuZqtUsBxkyMB8GA1UdIwQY MBaAFELAlZARYn3dDQV9cx6PpaUQKWWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgt MjQ4YjU5YzM2OTZiLzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgtMjQ4YjU5YzM2OTZi LzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6CvibX5 cHOp9MzpdYMA2JPV7chYCZZRlsoCAmNsif6j4yqQlTzK9wy81daes3SSE3TE43xN of3eZLHzpSD2lZl8vZ4FAGFZN8eMnZzrB5JB/RZDkyjuMEDv2Gl1DKVhPJLwat4u XchvX4EtYLNFAjCcD4E2OTTlkd4d+AvggMyOoKMj4Ql5/UvXc77ofPdeBjsyIz1e fyjJHO1ufII/+ATfk65t2/C3cDhbUddwk4zkeQQTyyZBiuOq8/VdHRJMOFeCwA1T 5CQ3L3CfEvPSHp3F3msmJl4586rPcnLLGUFso/FL2URV/h8PsJ7utT2FqNSS1yAA lYmyOejs0sVerQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:28 2025 by rpki-client