This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json) Hash identifier: h5c1Y/1eO3fmIDWI1als5bfhuTHIEKf69lkx/9NpXZU= Subject key identifier: 35:2B:40:E1:ED:1F:89:52:7A:8F:32:DC:0E:19:1A:99:13:5D:39:1D Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Certificate serial: 019AF540CA6BD8C7315C0E24CFC26EEDE210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft Manifest number: 036F Signing time: Sat 06 Dec 2025 20:00:55 +0000 Manifest this update: Sat 06 Dec 2025 20:00:55 +0000 Manifest next update: Sun 07 Dec 2025 20:00:55 +0000 Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: mKty9Gra7jcpuVoP+FDeZVvF7b7PrOFQrXbmXpauZhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ca:6b:d8:c7:31:5c:0e:24:cf:c2:6e:ed:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Validity Not Before: Dec 6 20:00:55 2025 GMT Not After : Dec 7 20:00:55 2025 GMT Subject: CN=352b40e1ed1f89527a8f32dc0e191a99135d391d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:ce:75:f3:87:87:a7:4b:ed:5c:65:9d:41: 7a:30:64:9e:2e:f1:4c:dd:a6:dd:52:f7:54:89:1b: dc:11:38:69:90:b4:bc:93:a0:23:7a:0f:c1:e9:5c: 30:ec:ed:47:44:99:57:45:53:41:76:15:cd:43:86: 67:ca:fe:42:1d:27:0b:8e:dc:bd:a0:e1:bf:34:ba: 72:31:09:f8:ec:93:8a:23:c4:9f:93:79:a4:2f:44: 34:3d:cb:0f:90:7d:7a:e8:53:fb:36:ff:1c:aa:b0: b8:c8:7c:fb:0c:ee:16:01:5f:56:11:d5:f9:41:6d: aa:ee:03:7f:b6:fb:ca:15:a0:9d:be:74:df:dd:fd: 54:cf:55:76:f1:31:76:5f:4c:3a:3f:7d:a5:55:07: a3:fb:f2:de:e6:1f:88:2b:01:f9:ee:a7:21:48:ab: 3b:6d:c2:bc:10:0d:c7:32:ba:7e:6c:9d:19:5e:ab: fa:5c:9e:13:15:ff:2c:eb:07:39:89:7d:a3:03:93: f9:c2:99:64:ff:39:52:67:48:4b:fa:f7:df:4e:96: 6d:bd:a0:5f:4c:f8:11:9c:9e:6c:10:9b:4b:91:81: e2:7a:f7:ae:ab:4c:ba:9d:d6:c5:df:2f:38:28:94: 4b:57:95:f1:11:ff:18:75:12:99:25:42:dc:48:17: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:40:E1:ED:1F:89:52:7A:8F:32:DC:0E:19:1A:99:13:5D:39:1D X509v3 Authority Key Identifier: keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:ab:9b:4b:26:b0:90:06:5b:17:64:1c:02:30:a4:d6:93: 57:d7:ac:40:63:48:9c:1d:54:f5:0a:73:b5:5b:3e:aa:e3:8d: bb:3d:c1:c4:53:c8:18:86:24:b0:c7:b2:37:60:ac:e7:88:b8: 52:d2:dd:86:da:90:1f:d8:69:66:e9:b4:6c:bb:ce:8a:6d:46: a3:eb:28:5b:0e:f3:2e:2a:3e:ae:f9:35:12:6f:ac:65:f5:51: a6:e0:d6:17:a9:26:61:b4:82:4d:a1:1d:15:9c:f1:2f:c0:65: fe:96:7b:9f:05:ae:9b:5c:66:f0:77:13:49:5d:bf:ae:f8:aa: a9:8e:b8:47:3c:b4:cf:d5:0b:89:eb:6c:ce:1e:95:3f:d7:14: c5:0d:5c:11:7f:5c:59:20:77:8c:95:ce:d6:16:34:a1:3a:b3: a2:0f:6d:2d:c6:a7:8d:8a:9b:f2:b3:77:fa:c4:e2:f9:bb:43: bf:de:a1:9c:37:bb:ee:8f:1e:9e:0d:04:d5:65:73:e2:72:e8: 80:01:f7:09:62:90:82:a8:2c:d6:d7:1b:bf:3c:22:8a:fa:9d: 47:76:a8:66:d6:3f:e0:f3:48:05:da:cd:d0:0e:75:7d:b2:a0: 0c:fc:f3:ae:5a:ce:03:85:44:65:61:52:56:cf:60:cf:07:36: 93:38:be:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMpr2McxXA4kz8Ju7eIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDMzZmUxMWI5OTQ5NTE2YzFmMWRkODE0ZTI0ZTQ3NDUz YTllOTYwHhcNMjUxMjA2MjAwMDU1WhcNMjUxMjA3MjAwMDU1WjAzMTEwLwYDVQQD EygzNTJiNDBlMWVkMWY4OTUyN2E4ZjMyZGMwZTE5MWE5OTEzNWQzOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXrOdfOHh6dL7VxlnUF6MGSeLvFM 3abdUvdUiRvcEThpkLS8k6Ajeg/B6Vww7O1HRJlXRVNBdhXNQ4Znyv5CHScLjty9 oOG/NLpyMQn47JOKI8Sfk3mkL0Q0PcsPkH166FP7Nv8cqrC4yHz7DO4WAV9WEdX5 QW2q7gN/tvvKFaCdvnTf3f1Uz1V28TF2X0w6P32lVQej+/Le5h+IKwH57qchSKs7 bcK8EA3HMrp+bJ0ZXqv6XJ4TFf8s6wc5iX2jA5P5wplk/zlSZ0hL+vffTpZtvaBf TPgRnJ5sEJtLkYHieveuq0y6ndbF3y84KJRLV5XxEf8YdRKZJULcSBdyiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUrQOHtH4lSeo8y3A4ZGpkTXTkdMB8GA1UdIwQY MBaAFKnTP+EbmUlRbB8d2BTiTkdFOp6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDkt NjgwMjA4M2RlMjExLzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDktNjgwMjA4M2RlMjEx LzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxOrm0sm sJAGWxdkHAIwpNaTV9esQGNInB1U9QpztVs+quONuz3BxFPIGIYksMeyN2Cs54i4 UtLdhtqQH9hpZum0bLvOim1Go+soWw7zLio+rvk1Em+sZfVRpuDWF6kmYbSCTaEd FZzxL8Bl/pZ7nwWum1xm8HcTSV2/rviqqY64Rzy0z9ULietszh6VP9cUxQ1cEX9c WSB3jJXO1hY0oTqzog9tLcanjYqb8rN3+sTi+btDv96hnDe77o8eng0E1WVz4nLo gAH3CWKQgqgs1tcbvzwiivqdR3aoZtY/4PNIBdrN0A51fbKgDPzzrlrOA4VEZWFS Vs9gzwc2kzi++g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:44 2025 by rpki-client