This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json) Hash identifier: FvMWdy59EU3n5Z74SXKOT/l0mRx4VaMqoOf3AsMe8zI= Subject key identifier: 43:E2:71:08:BF:8F:C3:74:7F:3B:EA:1B:90:08:BB:DD:42:3C:07:98 Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25 Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725 Certificate serial: 019AF1D1EEAA572C54E2DDE06EF63C8F9286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft Manifest number: 16D1 Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: rSA93bJiZ7iz3BR38X6K3g+8lwDilJyvw2Ou2WW/aYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:aa:57:2c:54:e2:dd:e0:6e:f6:3c:8f:92:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=43e27108bf8fc3747f3bea1b9008bbdd423c0798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:75:94:7d:2b:18:76:1b:ac:16:d4:4a:a0: f2:ac:0e:16:18:51:88:80:4a:9a:f8:9f:81:53:92: 0e:53:37:5a:2f:cd:6f:1a:40:d0:2d:8e:18:48:32: 46:b8:8e:8f:48:19:7b:71:3d:8f:79:6a:ff:a5:d4: c8:96:dc:8f:d5:0a:58:38:7b:9f:ee:d6:6c:73:e6: 18:3c:4e:a0:67:bb:d6:9d:0e:7f:bc:76:88:57:78: 9a:86:f7:21:df:e4:08:e7:c0:90:f3:2b:92:69:36: e2:f5:1d:7f:b7:b7:0a:68:73:2c:e2:51:df:b0:9b: ec:de:9e:36:27:76:97:e4:46:3d:25:46:cc:57:8e: e2:2f:8d:82:27:fa:31:ec:4a:ef:a6:20:c5:9d:45: 51:ac:47:78:8e:af:29:8c:c1:6d:22:ac:bc:27:2e: 25:3c:4e:b9:40:5d:b1:fb:3e:4f:69:30:33:37:ec: f5:7d:ac:b6:eb:b8:d8:f0:bd:d8:69:f4:66:37:6f: 9d:62:36:88:3c:35:8a:6a:8b:7c:14:8c:23:ae:f4: 2c:68:54:96:b7:90:a5:b9:2d:dc:3c:55:5e:03:00: 8c:99:57:e9:6a:dd:16:20:60:a6:0f:de:dd:ed:33: 3c:e1:9a:bc:14:37:5d:a8:b1:18:f9:93:b8:7c:2e: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:71:08:BF:8F:C3:74:7F:3B:EA:1B:90:08:BB:DD:42:3C:07:98 X509v3 Authority Key Identifier: keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:02:03:fe:a3:ca:82:80:d0:d6:74:1c:2a:f2:06:57:26:b1: 9d:38:77:45:3b:9e:d2:b6:44:42:76:89:12:28:5f:8a:6c:d4: 73:ec:30:b6:2d:01:9f:7c:d8:38:3c:7b:39:bd:9e:2e:9b:ee: 11:90:9f:26:ca:2e:38:5d:fd:df:82:45:2d:83:11:2a:ed:e1: a9:fc:3f:1f:70:33:b2:4a:1b:59:7b:04:cd:c8:90:25:3b:a4: d5:51:44:a9:58:b2:0f:b7:bc:6b:24:1a:0e:f9:42:f0:59:19: c0:a4:1e:48:0e:30:2f:45:81:47:53:a3:b2:0b:bc:3f:3c:19: 4a:a8:7d:e9:3f:92:5f:d5:01:b1:35:af:95:e4:6c:2f:7f:83: bf:c9:d9:bf:c2:84:66:d3:bd:5c:c5:3a:90:28:6b:c4:92:0c: 95:3e:6a:54:e8:21:88:d7:28:c1:38:e2:78:8b:d3:1f:26:30: cf:2e:a6:93:b4:a0:a5:1f:5e:68:f5:bb:08:ab:7c:9f:08:1f: 96:a6:66:69:22:5e:37:db:da:4b:2a:56:a4:a3:ce:11:05:b2: 1b:7c:01:58:55:bd:94:28:9f:20:8d:46:9e:ff:7e:71:9d:99: c9:8f:d3:8f:53:d6:02:e2:8c:43:9c:1a:1e:b8:5d:17:30:1f: 31:e5:01:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e6qVyxU4t3gbvY8j5KGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiM2E5ZDFmYzk5ZjI1MmYyMjU4ZjY4MmFiM2ZjNTgzNWJk MmY3MjUwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD Eyg0M2UyNzEwOGJmOGZjMzc0N2YzYmVhMWI5MDA4YmJkZDQyM2MwNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfh1lH0rGHYbrBbUSqDyrA4WGFGI gEqa+J+BU5IOUzdaL81vGkDQLY4YSDJGuI6PSBl7cT2PeWr/pdTIltyP1QpYOHuf 7tZsc+YYPE6gZ7vWnQ5/vHaIV3iahvch3+QI58CQ8yuSaTbi9R1/t7cKaHMs4lHf sJvs3p42J3aX5EY9JUbMV47iL42CJ/ox7ErvpiDFnUVRrEd4jq8pjMFtIqy8Jy4l PE65QF2x+z5PaTAzN+z1fay267jY8L3YafRmN2+dYjaIPDWKaot8FIwjrvQsaFSW t5CluS3cPFVeAwCMmVfpat0WIGCmD97d7TM84Zq8FDddqLEY+ZO4fC6QKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPicQi/j8N0fzvqG5AIu91CPAeYMB8GA1UdIwQY MBaAFKs6nR/JnyUvIlj2gqs/xYNb0vclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYt ZTMxNmFhMWYxNmIzLzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYtZTMxNmFhMWYxNmIz LzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQID/qPK goDQ1nQcKvIGVyaxnTh3RTue0rZEQnaJEihfimzUc+wwti0Bn3zYODx7Ob2eLpvu EZCfJsouOF3934JFLYMRKu3hqfw/H3AzskobWXsEzciQJTuk1VFEqViyD7e8ayQa DvlC8FkZwKQeSA4wL0WBR1Ojsgu8PzwZSqh96T+SX9UBsTWvleRsL3+Dv8nZv8KE ZtO9XMU6kChrxJIMlT5qVOghiNcowTjieIvTHyYwzy6mk7SgpR9eaPW7CKt8nwgf lqZmaSJeN9vaSypWpKPOEQWyG3wBWFW9lCifII1Gnv9+cZ2ZyY/Tj1PWAuKMQ5wa HrhdFzAfMeUBEg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:38 2025 by rpki-client