This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json) Hash identifier: LqpKFjEO8XSOum7Aszv+GRNTQOwsY611CMBpy+75a30= Subject key identifier: B3:C2:E8:9A:01:AE:EA:FC:BD:68:A6:F3:94:F9:3C:2B:D9:16:46:DB Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c Certificate serial: 019AF12E2747425C5758B757B862720B7FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft Manifest number: 125B Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: cRx1fDULmN3J79kFdh/VrH3eWuH5csE6t4Q6kbyVwJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:27:47:42:5c:57:58:b7:57:b8:62:72:0b:7f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=b3c2e89a01aeeafcbd68a6f394f93c2bd91646db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:0a:2f:cb:a5:d1:59:77:ac:1a:5f:98:55: a4:d7:f9:e6:bb:74:9f:3c:bc:7d:98:89:1b:62:36: 4a:cb:51:ea:82:f8:34:9a:77:59:db:61:54:83:74: fb:5f:ed:ff:e5:5b:c8:8d:b0:71:0a:56:cb:a5:9c: f1:1a:b6:0a:4d:53:f7:6e:a0:5b:97:11:7e:dc:72: 76:4c:5c:1c:15:89:24:36:c6:1c:b5:e3:3e:54:7b: 96:97:77:b0:7e:b9:a5:cc:53:f8:31:7d:84:82:a7: 8f:6c:6b:cb:7c:25:93:78:19:8e:3a:a9:37:ff:69: f7:18:fc:60:43:bd:31:71:19:24:47:1c:97:38:d6: 3d:b2:c5:8d:1d:dc:50:f6:b5:a3:42:6d:d2:a8:20: 4a:d1:c7:ae:5d:9e:42:7e:c5:63:3c:41:9b:28:75: 04:38:1a:83:78:22:03:11:f2:31:77:1d:93:ba:6a: dd:70:ae:22:19:a9:e8:a0:fd:9e:60:e1:16:c4:06: 86:3e:de:f8:c0:e4:8d:c2:65:11:6b:f0:85:a8:87: 5a:9b:c2:4c:04:fe:7d:c6:c7:df:66:68:4a:f1:13: 22:a3:55:11:e3:d4:10:22:68:a1:db:80:7f:6a:b2: 81:c1:3a:18:c3:9b:83:bd:e7:ff:dc:89:9b:94:bb: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C2:E8:9A:01:AE:EA:FC:BD:68:A6:F3:94:F9:3C:2B:D9:16:46:DB X509v3 Authority Key Identifier: keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:04:fa:02:df:fc:04:63:ef:44:a2:67:62:ee:1f:f4:b2:39: ef:1a:18:fe:8a:52:0b:a4:b0:be:d0:09:26:14:0a:94:38:a4: 61:02:43:87:56:87:57:24:cd:90:65:26:44:c1:31:1c:db:82: b6:c8:5e:3e:ce:4a:4e:f2:72:68:ed:2c:79:dc:1b:4c:e0:bb: 63:c8:e8:12:d3:e7:02:fb:6a:48:96:d1:45:45:0b:9b:9f:21: 24:05:81:ff:c4:27:92:3d:56:34:8a:21:c5:af:82:f1:99:bd: f2:e6:af:7c:b3:15:26:55:85:32:d2:02:e4:8f:68:5d:32:11: b5:e5:73:90:1c:a5:e5:3d:04:ab:78:e9:86:5d:84:8d:a8:ed: 63:b9:d8:6c:33:5b:58:ef:a8:ce:c5:d2:b6:6d:a7:9b:2e:e9: 54:12:f0:02:30:38:76:cc:e5:7f:ea:13:8a:47:b6:21:45:89: 31:b1:4a:6e:67:c7:ff:7f:a6:c0:4f:4d:86:8a:58:cb:ec:00: 13:c9:f4:f6:f8:0b:68:50:1d:e8:cb:99:2a:bc:c3:a8:1d:d4: 45:b1:51:19:d1:ae:c7:58:8f:1c:a3:51:e4:57:f8:7f:55:62: 6c:ec:aa:e0:65:ee:73:85:29:92:26:1f:74:4a:22:c5:21:ff: 27:d8:58:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLidHQlxXWLdXuGJyC3/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWE2MWI1OGMxZDUyZGU1MjJlMDQxMDA5Y2JmY2QxZjdl NTJiN2MwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EyhiM2MyZTg5YTAxYWVlYWZjYmQ2OGE2ZjM5NGY5M2MyYmQ5MTY0NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsQKL8ul0Vl3rBpfmFWk1/nmu3Sf PLx9mIkbYjZKy1Hqgvg0mndZ22FUg3T7X+3/5VvIjbBxClbLpZzxGrYKTVP3bqBb lxF+3HJ2TFwcFYkkNsYcteM+VHuWl3ewfrmlzFP4MX2EgqePbGvLfCWTeBmOOqk3 /2n3GPxgQ70xcRkkRxyXONY9ssWNHdxQ9rWjQm3SqCBK0ceuXZ5CfsVjPEGbKHUE OBqDeCIDEfIxdx2TumrdcK4iGanooP2eYOEWxAaGPt74wOSNwmURa/CFqIdam8JM BP59xsffZmhK8RMio1UR49QQImih24B/arKBwToYw5uDvef/3ImblLuJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPC6JoBrur8vWim85T5PCvZFkbbMB8GA1UdIwQY MBaAFEBaYbWMHVLeUi4EEAnL/NH35St8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTct ZmUwMTMzY2RhNTM1LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTctZmUwMTMzY2RhNTM1 LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAT6At/8 BGPvRKJnYu4f9LI57xoY/opSC6SwvtAJJhQKlDikYQJDh1aHVyTNkGUmRMExHNuC tshePs5KTvJyaO0sedwbTOC7Y8joEtPnAvtqSJbRRUULm58hJAWB/8Qnkj1WNIoh xa+C8Zm98uavfLMVJlWFMtIC5I9oXTIRteVzkByl5T0Eq3jphl2EjajtY7nYbDNb WO+ozsXStm2nmy7pVBLwAjA4dszlf+oTike2IUWJMbFKbmfH/3+mwE9NhopYy+wA E8n09vgLaFAd6MuZKrzDqB3URbFRGdGux1iPHKNR5Ff4f1VibOyq4GXuc4UpkiYf dEoixSH/J9hYDg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:38 2025 by rpki-client