This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json) Hash identifier: 52/05z0ItaRwqNZU51FP9Yjmnbr5QYITNPhiaps7B9A= Subject key identifier: 29:78:AA:C8:18:E5:EE:19:E6:98:CE:7C:AC:48:2A:57:6A:9F:C0:DA Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Certificate serial: 019AF68A2C058083C72A87EB599B5123BCEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft Manifest number: 13B8 Signing time: Sun 07 Dec 2025 02:00:41 +0000 Manifest this update: Sun 07 Dec 2025 02:00:41 +0000 Manifest next update: Mon 08 Dec 2025 02:00:41 +0000 Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: tsjBPZEQHQs+S9zloQh6g8ZKy9GWA/u0cT9kgtfLko4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:2c:05:80:83:c7:2a:87:eb:59:9b:51:23:bc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Validity Not Before: Dec 7 02:00:41 2025 GMT Not After : Dec 8 02:00:41 2025 GMT Subject: CN=2978aac818e5ee19e698ce7cac482a576a9fc0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:e5:ed:1a:57:35:51:7c:34:cc:0a:ee:63: 7b:0b:f7:83:31:bd:f0:0b:35:66:17:c3:8a:dc:0e: 90:1c:72:fa:05:24:4e:78:e9:de:84:eb:68:3f:71: 2d:ad:2d:a3:8a:95:3e:ba:8d:25:5f:be:4e:c9:5f: 77:c9:56:39:7c:86:f4:57:b8:c8:52:03:82:63:f2: 63:e2:2c:48:1f:a6:ab:d0:47:13:cc:c8:e7:ce:f9: c9:83:69:4b:fb:de:1c:24:21:11:64:1c:92:4f:83: 8e:e8:f4:0a:29:c6:5f:64:39:e2:ce:11:f4:5b:1b: 3a:56:01:b2:3b:cc:de:ab:86:5a:1a:c8:35:5b:61: 56:4f:26:51:58:d8:ff:5c:1a:d0:88:04:39:69:c9: 19:59:97:0c:4f:7c:a2:24:0f:3e:8a:08:d4:d6:c3: a9:50:56:8e:01:c0:5b:95:55:8b:f2:9d:ab:98:37: 43:1a:f9:e7:f1:05:04:5f:fc:ee:c4:3d:18:90:64: ae:96:ca:be:78:0e:e7:c3:e5:56:62:55:93:0f:dc: 9c:e9:5d:9c:23:58:8d:99:a6:9c:d6:cf:19:a5:47: f4:e3:ee:f1:8a:d7:3b:bf:4e:5a:f7:b8:65:27:88: 4f:27:1f:ad:1d:f3:23:26:24:07:c0:93:23:4d:f3: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:AA:C8:18:E5:EE:19:E6:98:CE:7C:AC:48:2A:57:6A:9F:C0:DA X509v3 Authority Key Identifier: keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:15:74:68:e5:36:e0:0f:55:37:20:fa:56:de:e0:21:dc:b8: a4:bb:0a:be:c5:82:16:d2:03:0a:5f:ea:88:15:e9:eb:f4:cf: be:c9:4f:03:7e:96:3f:b8:71:26:fb:ba:1c:9e:65:ba:47:f2: 63:f7:1b:1f:c8:3e:e8:63:fc:c6:fc:b0:41:e2:49:1e:47:62: 6f:ed:ed:71:27:20:4d:3c:05:35:a0:95:75:52:d1:cd:ec:aa: 0c:bb:57:81:61:fb:a2:87:43:73:2c:57:2f:ad:b1:1d:66:65: 3d:4c:e7:0d:d9:3c:f9:06:89:4c:86:1a:d8:19:61:26:d6:2e: 0f:82:d0:e3:d9:93:69:f4:b0:7f:a7:32:e8:14:b5:2b:6d:4a: 67:98:c7:2a:43:e5:c5:24:02:6e:3a:ad:51:2f:fd:27:68:da: ab:22:38:25:97:68:05:62:ab:94:85:57:39:e7:56:d3:5a:9b: 1a:0c:a9:6d:ed:d6:3d:ea:77:f4:35:65:bc:4a:23:77:d2:1c: d8:e9:4e:f8:0d:05:f5:c9:23:b2:c0:22:1b:30:02:77:be:d3: e4:5c:e2:54:19:37:b9:92:cd:00:2a:5a:b2:3f:14:18:ad:7e: 5a:58:d6:79:5d:60:d5:2a:20:18:22:2c:42:dd:3a:bc:8d:88: 3a:a5:f0:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iiwFgIPHKofrWZtRI7zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDBhNWY0ZThmN2UxM2M3Y2I1MzVjNjRmNzllMjBiM2Yw MWQ2MjQwHhcNMjUxMjA3MDIwMDQxWhcNMjUxMjA4MDIwMDQxWjAzMTEwLwYDVQQD EygyOTc4YWFjODE4ZTVlZTE5ZTY5OGNlN2NhYzQ4MmE1NzZhOWZjMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE7l7RpXNVF8NMwK7mN7C/eDMb3w CzVmF8OK3A6QHHL6BSROeOnehOtoP3EtrS2jipU+uo0lX75OyV93yVY5fIb0V7jI UgOCY/Jj4ixIH6ar0EcTzMjnzvnJg2lL+94cJCERZByST4OO6PQKKcZfZDnizhH0 Wxs6VgGyO8zeq4ZaGsg1W2FWTyZRWNj/XBrQiAQ5ackZWZcMT3yiJA8+igjU1sOp UFaOAcBblVWL8p2rmDdDGvnn8QUEX/zuxD0YkGSulsq+eA7nw+VWYlWTD9yc6V2c I1iNmaac1s8ZpUf04+7xitc7v05a97hlJ4hPJx+tHfMjJiQHwJMjTfMyeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl4qsgY5e4Z5pjOfKxIKldqn8DaMB8GA1UdIwQY MBaAFKrQpfTo9+E8fLU1xk954gs/AdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMt YjdlZjA0MmM4NTdiLzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMtYjdlZjA0MmM4NTdi LzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxV0aOU2 4A9VNyD6Vt7gIdy4pLsKvsWCFtIDCl/qiBXp6/TPvslPA36WP7hxJvu6HJ5lukfy Y/cbH8g+6GP8xvywQeJJHkdib+3tcScgTTwFNaCVdVLRzeyqDLtXgWH7oodDcyxX L62xHWZlPUznDdk8+QaJTIYa2BlhJtYuD4LQ49mTafSwf6cy6BS1K21KZ5jHKkPl xSQCbjqtUS/9J2jaqyI4JZdoBWKrlIVXOedW01qbGgypbe3WPep39DVlvEojd9Ic 2OlO+A0F9ckjssAiGzACd77T5FziVBk3uZLNACpasj8UGK1+WljWeV1g1SogGCIs Qt06vI2IOqXwvg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:23 2025 by rpki-client