This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json) Hash identifier: koMnnot+692b98Hjx5GeJU0JqxF5G6B1GtQHzSCvc4Y= Subject key identifier: 5A:A8:35:CE:1A:3D:CB:AB:4A:23:EE:E8:66:90:88:63:2C:79:86:30 Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b Certificate serial: 019AF12CBB928ABF7B8A1887DFB4C8929768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft Manifest number: 0B4D Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: kyJRSY7XLVNlzbaIhDG+9AxxvWTDlHAz99UwgOHV/8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bb:92:8a:bf:7b:8a:18:87:df:b4:c8:92:97:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=5aa835ce1a3dcbab4a23eee8669088632c798630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:b6:8c:65:da:93:22:b7:03:f3:fb:6a:d8: 9c:be:17:dc:08:c9:be:d4:5a:d0:ef:a8:0e:42:ba: ad:e5:ae:60:b6:19:6f:44:ad:66:b0:80:a0:d8:a4: 10:39:0a:44:48:eb:58:ff:f4:98:d9:c7:9c:2d:f2: a8:13:ba:50:dc:33:4f:cb:db:d0:00:d7:43:ec:92: ed:21:50:b0:7c:e3:d9:f8:e7:ad:ff:f0:3b:cd:a1: a9:fd:f9:c0:70:5c:ab:ce:25:f6:52:c9:e7:dd:55: 52:66:4d:5b:1c:dd:fe:ab:37:36:a1:cc:e1:d5:7f: 37:02:60:d5:bb:fa:a1:36:e3:1b:a8:7c:16:54:06: 27:f4:0d:e0:a9:39:71:06:fe:66:2f:86:36:b8:53: ab:76:00:76:20:a2:f7:44:8c:56:36:0b:0f:0a:58: 07:24:91:3c:24:b8:f9:0f:3d:29:c7:a6:0b:28:de: 79:81:52:fc:32:ae:66:8b:44:68:93:dd:d0:00:d2: ff:a6:cf:14:a0:07:ff:6b:c3:00:2b:d7:e8:6b:e5: 34:89:61:ac:6e:4e:79:ee:b8:4d:f0:34:c8:53:cd: 40:0f:9f:25:c4:f6:2a:c4:58:1a:dc:75:44:b8:aa: ef:32:d1:96:fa:e8:4f:17:d8:40:62:f6:18:2e:df: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:35:CE:1A:3D:CB:AB:4A:23:EE:E8:66:90:88:63:2C:79:86:30 X509v3 Authority Key Identifier: keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:40:d6:41:e6:1b:ee:af:33:5e:3d:21:44:e5:04:96:a5: 9d:30:5b:a8:b3:31:90:cc:bb:e3:c2:d2:0c:17:8f:06:38:dd: 07:eb:be:ef:d2:48:c3:fd:19:95:8f:3d:38:27:ad:fc:c6:28: d1:ed:69:64:0a:a3:97:f1:2b:1f:dc:c7:fb:8c:34:58:80:9a: 46:9c:d5:45:0c:ac:5f:10:1d:c3:09:4b:f8:87:5f:30:ef:cb: 50:20:24:7b:b2:76:52:f9:d3:ee:a2:ee:cc:d8:9c:47:bd:01: 62:09:f6:0a:92:8d:83:4f:bb:34:e2:42:82:b2:3c:01:ad:5e: 66:e4:b9:7d:b4:ea:94:99:73:89:ed:59:c5:38:05:82:59:01: 48:01:f8:a9:f6:bc:61:52:20:4c:53:5f:ae:b1:af:a6:be:ad: e8:e5:4e:8e:3f:fa:d6:5b:ad:bb:c4:c2:38:8a:0c:29:61:ab: 96:42:6c:c4:8c:b5:15:32:ba:2e:7d:d0:17:7e:25:d8:e3:da: 71:d8:2f:f6:99:4b:f8:80:c2:e4:ec:49:dc:88:29:c9:3d:fe: 70:e7:b6:95:19:a0:93:57:c5:24:12:50:88:12:53:ef:02:af: 8b:74:86:7c:ee:34:52:d7:38:ff:2c:d0:86:89:5d:da:30:19: d5:b2:ee:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLuSir97ihiH37TIkpdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0 MjJlOGIwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD Eyg1YWE4MzVjZTFhM2RjYmFiNGEyM2VlZTg2NjkwODg2MzJjNzk4NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfi2jGXakyK3A/P7aticvhfcCMm+ 1FrQ76gOQrqt5a5gthlvRK1msICg2KQQOQpESOtY//SY2cecLfKoE7pQ3DNPy9vQ ANdD7JLtIVCwfOPZ+Oet//A7zaGp/fnAcFyrziX2Usnn3VVSZk1bHN3+qzc2oczh 1X83AmDVu/qhNuMbqHwWVAYn9A3gqTlxBv5mL4Y2uFOrdgB2IKL3RIxWNgsPClgH JJE8JLj5Dz0px6YLKN55gVL8Mq5mi0Rok93QANL/ps8UoAf/a8MAK9foa+U0iWGs bk557rhN8DTIU81AD58lxPYqxFga3HVEuKrvMtGW+uhPF9hAYvYYLt9BAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqoNc4aPcurSiPu6GaQiGMseYYwMB8GA1UdIwQY MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsxA1kHm G+6vM149IUTlBJalnTBbqLMxkMy748LSDBePBjjdB+u+79JIw/0ZlY89OCet/MYo 0e1pZAqjl/ErH9zH+4w0WICaRpzVRQysXxAdwwlL+IdfMO/LUCAke7J2UvnT7qLu zNicR70BYgn2CpKNg0+7NOJCgrI8Aa1eZuS5fbTqlJlzie1ZxTgFglkBSAH4qfa8 YVIgTFNfrrGvpr6t6OVOjj/61lutu8TCOIoMKWGrlkJsxIy1FTK6Ln3QF34l2OPa cdgv9plL+IDC5OxJ3IgpyT3+cOe2lRmgk1fFJBJQiBJT7wKvi3SGfO40Utc4/yzQ hold2jAZ1bLuRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:50 2025 by rpki-client