This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json) Hash identifier: m7DGp352JGYOEJnj7YCC7YEmS1clRcHFyB2Ze0UlTsM= Subject key identifier: 66:B3:A5:37:1C:1F:54:66:6C:74:95:76:4D:B0:EE:97:1F:6A:11:44 Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f Certificate serial: 019AF27738E64544117CA3E1B6E811840739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft Manifest number: 03EA Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: mnFFcKvxg2WKqfsQtU1J5Dy5KfkaKV6UNxIXUblUPqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:38:e6:45:44:11:7c:a3:e1:b6:e8:11:84:07:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=66b3a5371c1f54666c7495764db0ee971f6a1144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:23:1d:85:61:c9:ce:8b:ce:97:ce:ef:05: 9b:c8:03:5b:91:5b:67:21:9e:6a:c6:8b:d7:78:5a: a0:63:c4:9a:a2:fc:2e:e3:fb:0f:99:66:38:e7:0a: 14:aa:c2:b3:48:46:ce:21:8a:88:04:cc:fa:2c:8b: 73:71:f9:9d:ce:61:f4:5c:41:87:5a:44:03:52:dc: 2f:b4:9b:09:ec:62:45:6f:44:b3:f6:25:a3:40:55: 07:86:ab:11:f8:d8:fe:7a:6a:83:b7:77:bf:25:f9: c2:5f:c1:e4:08:af:84:17:e2:51:24:b4:02:b8:0f: cd:08:7c:e1:d3:a9:fa:03:5b:f3:e2:72:eb:3c:87: a9:67:7d:bc:0c:6e:a0:9a:03:87:5e:15:a9:8a:0e: f8:cc:69:5f:9d:7d:27:52:26:eb:04:ab:92:20:64: 34:0f:3e:58:7b:02:09:25:a1:75:4f:60:68:ba:0e: 1b:64:78:de:a4:c9:41:22:46:19:01:ee:78:da:d1: 1c:b1:72:cf:ad:2c:62:97:f6:7b:20:1f:08:9c:07: a1:df:86:c7:5d:e2:b8:54:3e:f4:a9:e7:03:a5:1a: a7:2d:17:14:76:25:4a:bc:bc:79:d3:62:73:fe:a0: 8d:d5:ac:e4:67:9a:59:12:12:c4:dc:1b:14:e2:b7: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:A5:37:1C:1F:54:66:6C:74:95:76:4D:B0:EE:97:1F:6A:11:44 X509v3 Authority Key Identifier: keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ab:e0:45:63:13:20:bf:2b:0e:00:47:f4:53:0f:d4:cd:b9: af:3a:20:41:76:f2:05:7f:98:09:50:4a:d1:c7:b1:8a:89:45: 4b:75:24:26:31:e6:63:be:36:a3:a5:5d:ab:7b:f0:76:1a:63: 68:be:79:92:e7:f6:bb:db:af:80:3d:6e:61:ef:ab:68:1c:9f: 11:94:2b:00:b4:00:40:9b:49:f1:da:1d:fa:a9:47:05:23:9b: 4c:08:84:ab:ec:ae:0d:f7:07:b9:7f:5a:ff:53:1b:91:02:1a: 39:ea:f6:7a:47:35:7e:a6:3f:df:a0:14:e5:02:47:da:f5:bb: 9a:25:af:f2:57:be:ca:87:9d:74:16:93:a0:82:ea:23:4e:63: 94:18:6e:5b:ad:e2:53:ab:8b:45:b7:d3:39:ab:c6:ec:56:55: 88:b0:d1:bc:8c:fc:dc:0b:51:91:1b:be:aa:46:b1:33:72:bf: 81:f8:c4:0a:d4:04:d5:15:f2:33:1c:85:83:4d:12:54:54:98: dc:2c:f1:74:74:27:dc:34:aa:c7:5b:a1:cd:6d:6d:e5:63:1f: cd:6c:a6:f8:4d:42:b8:ed:bd:1c:a3:5c:66:04:9c:ac:68:55: bd:b1:a0:19:af:3b:f5:6f:1e:17:7f:ef:dc:74:51:21:ca:13: 29:a8:4a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzjmRUQRfKPhtugRhAc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmRjMmZiYWFhM2Q0NzU5Njc2YTc5YjhhZmRiNGMyMjVm YzA1NWYwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD Eyg2NmIzYTUzNzFjMWY1NDY2NmM3NDk1NzY0ZGIwZWU5NzFmNmExMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKgjHYVhyc6LzpfO7wWbyANbkVtn IZ5qxovXeFqgY8Saovwu4/sPmWY45woUqsKzSEbOIYqIBMz6LItzcfmdzmH0XEGH WkQDUtwvtJsJ7GJFb0Sz9iWjQFUHhqsR+Nj+emqDt3e/JfnCX8HkCK+EF+JRJLQC uA/NCHzh06n6A1vz4nLrPIepZ328DG6gmgOHXhWpig74zGlfnX0nUibrBKuSIGQ0 Dz5YewIJJaF1T2Boug4bZHjepMlBIkYZAe542tEcsXLPrSxil/Z7IB8InAeh34bH XeK4VD70qecDpRqnLRcUdiVKvLx502Jz/qCN1azkZ5pZEhLE3BsU4rd1gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGazpTccH1RmbHSVdk2w7pcfahFEMB8GA1UdIwQY MBaAFEAtwvuqo9R1lnanm4r9tMIl/AVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYt M2UwMjEzMzdjZWE2LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYtM2UwMjEzMzdjZWE2 LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqvgRWMT IL8rDgBH9FMP1M25rzogQXbyBX+YCVBK0cexiolFS3UkJjHmY742o6Vdq3vwdhpj aL55kuf2u9uvgD1uYe+raByfEZQrALQAQJtJ8dod+qlHBSObTAiEq+yuDfcHuX9a /1MbkQIaOer2ekc1fqY/36AU5QJH2vW7miWv8le+yoeddBaToILqI05jlBhuW63i U6uLRbfTOavG7FZViLDRvIz83AtRkRu+qkaxM3K/gfjECtQE1RXyMxyFg00SVFSY 3CzxdHQn3DSqx1uhzW1t5WMfzWym+E1CuO29HKNcZgScrGhVvbGgGa879W8eF3/v 3HRRIcoTKahKYg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:05 2025 by rpki-client