This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft File: Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json) Hash identifier: nlZ6HbxoCxzMBi/7b1JpGWdXhBSKuSdD93h4FHdoXV4= Subject key identifier: 0E:5F:C1:82:B7:58:C3:6D:30:BD:E1:2C:91:15:8D:E8:50:CA:41:3B Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 Certificate issuer: /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Certificate serial: 019AFCC3557999655048F6610D3CC19B93E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft Manifest number: 0362 Signing time: Mon 08 Dec 2025 07:00:51 +0000 Manifest this update: Mon 08 Dec 2025 07:00:51 +0000 Manifest next update: Tue 09 Dec 2025 07:00:51 +0000 Files and hashes: 1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=) 2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: teQAsoMdJz3W287QO6Sjvv10OtabrZNt/jbxZ3zF5u8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:55:79:99:65:50:48:f6:61:0d:3c:c1:9b:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Validity Not Before: Dec 8 07:00:51 2025 GMT Not After : Dec 9 07:00:51 2025 GMT Subject: CN=0e5fc182b758c36d30bde12c91158de850ca413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:f4:34:f0:b5:c7:ad:27:4d:73:96:fc:d7: f2:a7:4c:55:84:8e:3b:64:bf:5e:ed:c6:1c:5a:02: 4c:08:c1:69:dc:2c:fb:ab:9d:c7:d5:65:50:b2:a0: 55:1a:af:cf:ab:54:d3:bc:09:da:5f:85:d9:e7:8e: ce:e5:84:bd:ec:67:b0:40:ce:0a:bd:f6:4e:6b:3e: 99:57:f6:e5:ef:75:03:87:96:87:28:01:08:20:cf: 52:d7:98:fc:07:66:05:b6:ce:6e:3c:29:83:3f:aa: 48:15:fe:e2:4b:17:9c:8b:2c:cf:1e:26:cc:1c:53: 12:be:32:3b:6d:e6:ce:e5:25:2b:83:42:8a:5c:37: 5f:76:4a:21:a5:bd:52:ba:ab:56:5a:26:b3:d1:fc: ea:e6:68:f8:e9:4c:14:cf:29:f4:60:3c:9f:fd:b7: 03:ab:26:f3:05:ea:5b:7a:01:67:1a:de:cb:e7:60: e2:e5:cd:89:cb:0d:17:9e:9f:95:26:69:7b:9b:92: 9e:71:b2:ae:60:5a:a6:1b:c3:5f:57:dd:64:19:39: bc:2c:95:1b:57:9b:70:2b:b7:60:f7:1b:4a:38:6d: 38:fa:f7:43:af:ee:a1:eb:e9:7c:e9:f9:d4:ff:50: e9:d9:28:7d:27:65:04:ed:bd:1c:dd:f7:80:01:25: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:C1:82:B7:58:C3:6D:30:BD:E1:2C:91:15:8D:E8:50:CA:41:3B X509v3 Authority Key Identifier: keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b0:df:06:c6:f8:47:fd:bd:fd:77:4c:cc:6d:6c:df:c9:41: 5e:bd:27:4e:b4:b9:d0:bf:1b:01:7a:a4:3d:5c:33:6d:a5:d9: 92:13:f7:bd:70:3d:e7:2f:b8:a9:46:f9:c9:ee:05:78:fc:ea: d3:fe:3f:e3:c8:01:9c:b1:c3:54:6c:e6:a0:c1:62:8a:17:af: 0c:a2:7c:12:3d:c9:39:97:87:46:90:37:45:28:e5:22:86:33: c6:4e:b8:1e:7d:41:c1:14:d0:3b:11:b7:ef:b0:70:aa:17:c1: ca:05:2f:a6:76:be:a4:38:57:80:12:b5:87:2c:a9:0b:e7:4b: 05:d3:44:84:50:bb:c3:b6:04:bd:e7:8e:2a:69:88:37:4d:12: 94:2c:fe:d9:a0:02:9a:f5:31:e9:43:bb:11:58:18:1a:7d:ea: 2e:4d:a2:4d:1c:3b:ea:33:60:70:98:3d:d3:5c:9e:9c:34:37: f2:1a:88:ab:ef:7f:c7:bf:61:b8:74:3a:aa:cb:db:63:12:2b: 54:eb:fa:2a:f7:84:5c:2e:92:2e:1f:92:04:08:82:ea:fe:61: 17:ef:88:ea:f9:08:bb:76:cb:83:39:df:74:ec:a2:b0:37:37: 3d:45:f4:0b:bf:fa:ee:e3:ab:1e:c5:4d:7b:27:df:0e:87:b9: a2:10:a6:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w1V5mWVQSPZhDTzBm5PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQ3OTU1NzI1NTQxOWViN2ZkYzZkMGFmMzFmYTcwN2Zk ZmJhYzgwHhcNMjUxMjA4MDcwMDUxWhcNMjUxMjA5MDcwMDUxWjAzMTEwLwYDVQQD EygwZTVmYzE4MmI3NThjMzZkMzBiZGUxMmM5MTE1OGRlODUwY2E0MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gj0NPC1x60nTXOW/Nfyp0xVhI47 ZL9e7cYcWgJMCMFp3Cz7q53H1WVQsqBVGq/Pq1TTvAnaX4XZ547O5YS97GewQM4K vfZOaz6ZV/bl73UDh5aHKAEIIM9S15j8B2YFts5uPCmDP6pIFf7iSxeciyzPHibM HFMSvjI7bebO5SUrg0KKXDdfdkohpb1SuqtWWiaz0fzq5mj46UwUzyn0YDyf/bcD qybzBepbegFnGt7L52Di5c2Jyw0Xnp+VJml7m5KecbKuYFqmG8NfV91kGTm8LJUb V5twK7dg9xtKOG04+vdDr+6h6+l86fnU/1Dp2Sh9J2UE7b0c3feAASXWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5fwYK3WMNtML3hLJEVjehQykE7MB8GA1UdIwQY MBaAFEHdeVVyVUGet/3G0K8x+nB/37rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgt ZDBjNTViMGQ0NjM5LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgtZDBjNTViMGQ0NjM5 LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbDfBsb4 R/29/XdMzG1s38lBXr0nTrS50L8bAXqkPVwzbaXZkhP3vXA95y+4qUb5ye4FePzq 0/4/48gBnLHDVGzmoMFiihevDKJ8Ej3JOZeHRpA3RSjlIoYzxk64Hn1BwRTQOxG3 77BwqhfBygUvpna+pDhXgBK1hyypC+dLBdNEhFC7w7YEveeOKmmIN00SlCz+2aAC mvUx6UO7EVgYGn3qLk2iTRw76jNgcJg901yenDQ38hqIq+9/x79huHQ6qsvbYxIr VOv6KveEXC6SLh+SBAiC6v5hF++I6vkIu3bLgznfdOyisDc3PUX0C7/67uOrHsVN eyffDoe5ohCmSA== -----END CERTIFICATE-----Generated at Mon Dec 8 08:25:21 2025 by rpki-client