This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json) Hash identifier: r52/kyCOKnd0D/XhkWdzLqcTPDL5n+e+NQMMzgmHulI= Subject key identifier: 9A:D8:63:53:58:23:D6:47:C7:47:7A:6C:68:63:D8:6B:0E:F7:54:F3 Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Certificate serial: 019AF209AE33C4597CBD96101DF524FCDE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft Manifest number: 11F8 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: T7gy9DKOyqe4AQiMN4FeRHB4505ZNbk3AzP2NMdoBeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ae:33:c4:59:7c:bd:96:10:1d:f5:24:fc:de:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=9ad863535823d647c7477a6c6863d86b0ef754f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d0:e2:2d:4c:c6:3f:19:11:de:5c:2a:b6:d4: d5:b8:ff:36:61:eb:47:9e:71:ce:1b:00:7c:bc:e9: 8e:7d:1f:96:b8:ec:31:3d:4f:e9:76:f3:48:39:40: 07:01:95:61:c1:04:bb:c8:c9:d0:23:72:37:ce:4c: 16:5e:19:4b:cd:a1:81:94:f0:e3:54:df:ea:f6:2d: 7a:97:c0:75:be:df:aa:45:4e:7a:f6:0a:93:d3:8e: 68:c5:17:21:00:5a:69:91:06:20:d7:01:cb:f0:47: 93:86:29:9f:e3:a3:2a:31:c3:14:1c:0e:d4:10:c3: 26:ff:86:0b:c9:20:4c:ca:fd:75:f4:f6:57:82:ce: 4f:8f:1c:17:10:3a:7c:b3:f2:58:58:3b:33:cf:6f: bd:93:b8:f7:d5:e2:4a:4a:4d:16:da:a9:a8:ae:39: dd:79:52:9c:d2:9e:c0:c8:19:b5:81:3f:3c:45:c5: 03:f2:0c:04:4a:97:6a:ed:86:ba:b8:81:82:9f:ce: 91:2c:a8:3d:16:d7:72:6e:67:34:32:78:4e:14:8f: 83:92:e4:84:f9:eb:70:58:f2:3c:b4:fe:3f:e7:d6: 00:b6:1e:2f:f6:cf:a3:60:cd:28:d6:78:d5:55:2d: 04:a9:8c:e2:06:1e:66:51:ff:8f:60:bc:c7:7b:fc: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:63:53:58:23:D6:47:C7:47:7A:6C:68:63:D8:6B:0E:F7:54:F3 X509v3 Authority Key Identifier: keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:48:51:45:ec:50:d0:82:27:ce:d8:a0:3c:d6:bc:0c:4a: 88:a6:0c:12:ee:23:c4:47:67:cc:15:7a:1b:0c:06:9d:d8:44: 4c:3d:82:07:35:11:1f:61:b3:42:b7:33:86:8c:ca:04:9e:ce: b3:ce:d1:e8:21:91:fa:d2:2e:5b:99:f1:aa:3a:b4:40:76:50: c2:55:dd:7e:87:98:8b:06:1c:f0:cf:7f:5a:b6:e8:78:17:b3: bf:fe:ba:98:49:28:2c:fb:13:b7:f0:10:87:13:22:b3:8f:fb: 63:d0:bf:d1:a5:12:1e:eb:9a:7d:27:51:41:10:ff:40:83:68: e4:7f:9a:53:83:63:66:4d:83:38:17:68:2b:d1:db:9c:d6:b4: 6b:e0:33:4e:00:96:b3:5e:63:0f:cf:c8:50:a1:b0:d6:20:4e: 29:14:c2:41:62:08:54:46:c6:2a:05:a2:f8:76:21:99:1f:62: 0a:7d:28:84:13:53:77:23:4b:91:ce:05:8a:98:fa:29:12:cf: 60:ab:1e:71:83:d4:66:e9:19:58:d0:80:1d:8a:71:8c:54:e7: 93:e0:67:0f:d6:86:f4:d2:20:87:2e:fc:80:df:11:b6:48:a9: 4c:a6:e5:e0:c2:df:cc:84:e8:10:04:e1:ea:84:76:e0:81:c1: ad:c9:86:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa4zxFl8vZYQHfUk/N5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMTFjY2QyYmQyMjU0NGFiZTU4NWE3Y2QzZjk0OTExZWEw Yzk0MmEwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg5YWQ4NjM1MzU4MjNkNjQ3Yzc0NzdhNmM2ODYzZDg2YjBlZjc1NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktDiLUzGPxkR3lwqttTVuP82YetH nnHOGwB8vOmOfR+WuOwxPU/pdvNIOUAHAZVhwQS7yMnQI3I3zkwWXhlLzaGBlPDj VN/q9i16l8B1vt+qRU569gqT045oxRchAFppkQYg1wHL8EeThimf46MqMcMUHA7U EMMm/4YLySBMyv119PZXgs5PjxwXEDp8s/JYWDszz2+9k7j31eJKSk0W2qmorjnd eVKc0p7AyBm1gT88RcUD8gwESpdq7Ya6uIGCn86RLKg9Ftdybmc0MnhOFI+DkuSE +etwWPI8tP4/59YAth4v9s+jYM0o1njVVS0EqYziBh5mUf+PYLzHe/y34wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrYY1NYI9ZHx0d6bGhj2GsO91TzMB8GA1UdIwQY MBaAFEMRzNK9IlRKvlhafNP5SRHqDJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYt ZDM3OGJhZjZhYTkyLzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYtZDM3OGJhZjZhYTky LzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADlIUUXs UNCCJ87YoDzWvAxKiKYMEu4jxEdnzBV6GwwGndhETD2CBzURH2GzQrczhozKBJ7O s87R6CGR+tIuW5nxqjq0QHZQwlXdfoeYiwYc8M9/WrboeBezv/66mEkoLPsTt/AQ hxMis4/7Y9C/0aUSHuuafSdRQRD/QINo5H+aU4NjZk2DOBdoK9HbnNa0a+AzTgCW s15jD8/IUKGw1iBOKRTCQWIIVEbGKgWi+HYhmR9iCn0ohBNTdyNLkc4Fipj6KRLP YKsecYPUZukZWNCAHYpxjFTnk+BnD9aG9NIghy78gN8RtkipTKbl4MLfzIToEATh 6oR24IHBrcmGrg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:41 2025 by rpki-client