This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json) Hash identifier: iLK3pkBwhxPDKyjvciLCepmUhwo3Ja8EkwL5PcmSRGM= Subject key identifier: 79:F9:E2:B9:E6:03:96:58:75:7E:C7:CD:44:FA:D9:C9:9C:9C:44:59 Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Certificate serial: 019AF208D2F900C3DB4C92F1BAFB2D34ED80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft Manifest number: 03FB Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: RDCsUyCasIBOOvMZpKvqyrINkhnYU0Vkvgdrsx2O3lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d2:f9:00:c3:db:4c:92:f1:ba:fb:2d:34:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=79f9e2b9e6039658757ec7cd44fad9c99c9c4459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:07:fb:51:87:40:dd:10:5c:75:ac:79:c2: d1:c7:33:ba:67:d9:8e:75:c8:ce:71:9e:11:44:04: ea:95:43:37:8f:6f:5b:da:69:e2:ee:84:c8:5f:29: 84:41:ea:12:99:d8:63:96:b2:3d:b9:8c:c2:61:88: 03:74:c7:fa:f5:95:89:64:87:2d:04:d0:88:48:31: 05:76:4f:49:64:b2:33:fa:07:c7:77:07:a4:10:c7: 6e:e7:33:e9:7e:d3:d1:1b:b1:5c:05:28:f0:1b:ad: 14:b4:74:59:f3:80:c2:8a:d3:cc:d1:8f:91:76:e3: ae:42:18:5f:01:6b:21:d9:60:f9:7a:d9:42:2d:41: 77:0d:d8:8e:d1:44:a5:39:93:86:49:b1:92:82:91: c2:23:6d:07:cb:33:11:f3:70:49:3c:b0:47:1b:6d: 82:2a:55:95:34:35:c0:55:76:39:4e:84:8a:71:72: d3:27:6d:a7:9c:86:0f:7a:1a:81:71:a9:14:67:f3: b7:cb:67:af:1c:8b:30:29:ff:10:b2:8b:96:d7:18: e4:c2:6b:7e:db:3d:f2:a8:6d:77:8d:12:24:7a:6f: 54:ba:9b:d2:67:1d:07:96:56:b5:03:62:07:a7:a8: 54:da:09:57:bb:11:dd:d2:b7:19:a5:8a:0b:b1:92: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F9:E2:B9:E6:03:96:58:75:7E:C7:CD:44:FA:D9:C9:9C:9C:44:59 X509v3 Authority Key Identifier: keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f9:b9:c4:bd:cb:9b:5c:05:bc:73:18:a8:95:b9:5e:12:2b: 16:4a:2d:a4:b2:f8:88:cc:08:41:6d:89:89:e2:08:b3:fa:5c: e2:cd:b4:e8:4e:77:d8:e4:41:be:06:d3:54:52:89:9b:7a:e4: 6f:db:cd:3c:2a:11:4a:51:6f:16:4c:de:98:15:fa:b9:89:35: 82:5f:eb:dd:ec:08:2a:36:48:31:f0:2f:47:d6:85:4f:4a:37: c3:61:58:7c:31:4e:1c:09:39:c7:b7:78:67:79:6a:2d:f4:2e: 5b:7d:d8:4d:48:70:eb:63:21:aa:ff:d4:18:16:81:2c:c9:07: 51:5e:c2:24:a7:e1:ac:9e:1a:4d:6c:ed:3d:86:bc:a1:b3:bb: bd:73:3a:b3:63:11:93:dc:b3:b8:38:01:71:a7:e9:4c:2a:b2: 14:a5:89:ee:f4:a6:d5:f2:bc:8f:fd:06:aa:2a:ff:52:6d:b6: 47:af:42:6b:2b:b9:6a:61:01:55:83:f2:49:6f:22:80:4e:f0: bb:22:c1:6b:98:71:88:3f:e3:19:53:05:eb:63:35:c0:29:01: 47:f3:3c:7d:ff:c0:00:e7:16:9b:d0:ca:0c:0c:dc:29:e5:da: 1d:eb:3c:41:13:8d:4a:f1:31:94:87:87:17:7f:08:f6:55:f9: 0a:32:8d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNL5AMPbTJLxuvstNO2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWUxZTdlY2QzMGI4MGEyMDA2ZjUzOGZjZTYzYjI0MjBj NTdiZTkwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg3OWY5ZTJiOWU2MDM5NjU4NzU3ZWM3Y2Q0NGZhZDljOTljOWM0NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYsH+1GHQN0QXHWsecLRxzO6Z9mO dcjOcZ4RRATqlUM3j29b2mni7oTIXymEQeoSmdhjlrI9uYzCYYgDdMf69ZWJZIct BNCISDEFdk9JZLIz+gfHdwekEMdu5zPpftPRG7FcBSjwG60UtHRZ84DCitPM0Y+R duOuQhhfAWsh2WD5etlCLUF3DdiO0USlOZOGSbGSgpHCI20HyzMR83BJPLBHG22C KlWVNDXAVXY5ToSKcXLTJ22nnIYPehqBcakUZ/O3y2evHIswKf8QsouW1xjkwmt+ 2z3yqG13jRIkem9UupvSZx0Hlla1A2IHp6hU2glXuxHd0rcZpYoLsZK//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn54rnmA5ZYdX7HzUT62cmcnERZMB8GA1UdIwQY MBaAFEHuHn7NMLgKIAb1OPzmOyQgxXvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMt NTcyODhmN2YzMDg4LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMtNTcyODhmN2YzMDg4 LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvm5xL3L m1wFvHMYqJW5XhIrFkotpLL4iMwIQW2JieIIs/pc4s206E532ORBvgbTVFKJm3rk b9vNPCoRSlFvFkzemBX6uYk1gl/r3ewIKjZIMfAvR9aFT0o3w2FYfDFOHAk5x7d4 Z3lqLfQuW33YTUhw62Mhqv/UGBaBLMkHUV7CJKfhrJ4aTWztPYa8obO7vXM6s2MR k9yzuDgBcafpTCqyFKWJ7vSm1fK8j/0Gqir/Um22R69Cayu5amEBVYPySW8igE7w uyLBa5hxiD/jGVMF62M1wCkBR/M8ff/AAOcWm9DKDAzcKeXaHes8QRONSvExlIeH F38I9lX5CjKNJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:28 2025 by rpki-client