This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json) Hash identifier: /h23RXJIzwhzDjfe1VawyeVrj3i7xN0Vp0rYq+HMfJg= Subject key identifier: F8:4A:CF:DB:59:DD:37:55:A3:6A:19:3C:7B:A8:C4:E9:F9:57:55:FE Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Certificate serial: 019AF0BF4441C38E082727CF5FCC3DD76D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft Manifest number: 0FBD Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: NmJQFbvgnYOJwgF8tNEdxX87EwjfmdCGgbb9GfXiG8A=) 2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:44:41:c3:8e:08:27:27:cf:5f:cc:3d:d7:6d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=f84acfdb59dd3755a36a193c7ba8c4e9f95755fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:5e:17:24:b0:56:57:bf:7f:62:bc:43:84: 82:cc:b6:8a:f6:57:a4:cc:86:ab:54:07:66:87:e3: 58:25:7f:ee:cf:f6:78:b1:f1:09:78:09:18:9d:74: fd:d2:d9:76:72:69:a3:9e:50:95:89:00:48:07:64: 5d:3b:67:58:a3:ec:9c:22:b2:2f:dc:da:0c:c2:5d: b4:16:74:83:70:57:69:d4:81:83:d6:13:59:c2:40: 72:06:94:cd:26:80:36:83:1d:47:9b:2e:37:52:5d: 03:40:06:bd:22:2f:11:39:75:cc:c6:9d:5e:ce:5e: 9a:59:d1:1d:7b:14:bd:84:f9:57:1f:b4:b3:28:1f: f2:8d:d9:9f:fb:e8:5f:0a:5a:ee:dc:c4:7a:59:fe: 5b:b8:a1:62:d6:46:d4:e7:f2:07:68:bf:37:69:78: ab:16:dd:75:01:b4:2a:0d:91:27:d9:62:6b:e7:6c: 20:fe:87:a9:1b:4a:63:5d:af:39:8d:19:6c:7f:1f: 10:b0:6a:df:02:30:52:df:2c:b2:d5:a9:0e:84:8e: 6b:9f:ad:2c:5f:11:a4:01:c4:3f:70:d1:24:cd:6c: 96:8b:2e:2f:8b:10:50:03:2c:b2:df:16:55:1f:46: 97:26:cf:80:12:ba:d5:42:53:4a:55:0b:c9:60:d7: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:CF:DB:59:DD:37:55:A3:6A:19:3C:7B:A8:C4:E9:F9:57:55:FE X509v3 Authority Key Identifier: keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4b:79:81:d3:d8:c5:40:cc:40:0c:b4:22:56:75:cd:d6:0a: 1e:85:9e:8f:42:a9:77:6f:50:ea:96:3a:19:6e:aa:3f:0b:ce: ed:38:4f:af:57:3a:76:81:bb:a2:d7:eb:7a:e6:f1:bc:43:5c: d3:d7:4d:fe:d0:4e:88:2f:11:df:36:2a:81:7d:15:89:c1:dc: c8:d3:23:91:10:8c:d0:21:9b:42:49:a9:bb:f9:b3:b8:8c:69: 51:e2:8e:e4:fc:78:f0:2e:62:8f:df:2c:2e:71:54:2d:4d:cc: fc:9a:0a:73:65:5c:ab:43:08:e2:c4:fe:69:f0:a1:83:61:bf: c4:27:f6:1b:e9:c1:45:63:51:65:be:2f:18:5e:0e:cb:40:d2: a4:66:b4:60:a4:d9:24:5e:bc:a7:c1:bf:35:52:1f:7c:7c:bb: 4b:b8:6a:e6:12:09:d8:9e:ea:45:b8:cf:26:da:06:79:b8:3f: 19:e8:17:6e:8b:1d:96:e9:2d:d9:73:b1:0e:44:fe:48:4d:8e: 08:da:ce:e7:66:71:a4:fe:76:87:42:57:af:fd:6a:26:75:b1: c4:52:4b:ee:55:8d:95:90:e9:ef:1a:bb:9d:bc:bc:c6:09:6b: c9:e4:08:20:3a:56:36:b7:4e:b1:c4:31:92:5f:f9:63:6d:88: 8f:bd:62:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0RBw44IJyfPX8w9121jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz YTRmMGIwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD EyhmODRhY2ZkYjU5ZGQzNzU1YTM2YTE5M2M3YmE4YzRlOWY5NTc1NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJVeFySwVle/f2K8Q4SCzLaK9lek zIarVAdmh+NYJX/uz/Z4sfEJeAkYnXT90tl2cmmjnlCViQBIB2RdO2dYo+ycIrIv 3NoMwl20FnSDcFdp1IGD1hNZwkByBpTNJoA2gx1Hmy43Ul0DQAa9Ii8ROXXMxp1e zl6aWdEdexS9hPlXH7SzKB/yjdmf++hfClru3MR6Wf5buKFi1kbU5/IHaL83aXir Ft11AbQqDZEn2WJr52wg/oepG0pjXa85jRlsfx8QsGrfAjBS3yyy1akOhI5rn60s XxGkAcQ/cNEkzWyWiy4vixBQAyyy3xZVH0aXJs+AErrVQlNKVQvJYNe7VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhKz9tZ3TdVo2oZPHuoxOn5V1X+MB8GA1UdIwQY MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt MmNkMDA5MTBiY2I3LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3 LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEt5gdPY xUDMQAy0IlZ1zdYKHoWej0Kpd29Q6pY6GW6qPwvO7ThPr1c6doG7otfreubxvENc 09dN/tBOiC8R3zYqgX0VicHcyNMjkRCM0CGbQkmpu/mzuIxpUeKO5Px48C5ij98s LnFULU3M/JoKc2Vcq0MI4sT+afChg2G/xCf2G+nBRWNRZb4vGF4Oy0DSpGa0YKTZ JF68p8G/NVIffHy7S7hq5hIJ2J7qRbjPJtoGebg/GegXbosdlukt2XOxDkT+SE2O CNrO52ZxpP52h0JXr/1qJnWxxFJL7lWNlZDp7xq7nby8xglryeQIIDpWNrdOscQx kl/5Y22Ij71iyA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:39 2025 by rpki-client