This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft File: QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft (raw, json) Hash identifier: o7Mk+sOtNCp++TUw4FAt1ssJGzcio79b7AXIjEwNz98= Subject key identifier: 38:8D:29:09:26:0F:CD:25:D0:4F:CD:4E:D2:C7:6A:3E:7D:B3:45:9A Authority key identifier: 41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C Certificate issuer: /CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c Certificate serial: 019AF12DD11ABC8D530D77A73AEBFB7BBBAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl (hash: 5CIg1VXXLLSEx5LKD2WS9IBMW8esv+5WaKgBLYAbFtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d1:1a:bc:8d:53:0d:77:a7:3a:eb:fb:7b:bb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=388d2909260fcd25d04fcd4ed2c76a3e7db3459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:ba:43:c7:d8:12:61:9e:e8:92:18:c1:fb: fe:97:24:34:f0:74:4b:25:2a:8e:05:49:15:44:8b: c8:c9:11:ab:84:34:22:55:7c:a4:ce:dc:c9:de:3e: cf:7d:86:4f:e6:b4:d8:4f:84:d2:24:f8:90:32:24: 97:66:96:e2:f0:4f:49:2b:48:7f:69:49:78:d6:6e: 1f:72:43:6c:00:9a:97:3f:cd:db:f1:bf:74:ba:18: 9d:c8:0c:e6:cf:68:e7:7b:66:5d:aa:72:8a:87:bd: a6:af:49:90:4c:93:57:85:4c:57:d5:cb:25:59:cb: 7e:b9:f7:b1:14:7e:cd:15:90:54:aa:3f:b3:d1:2f: e7:9e:1c:b4:74:bf:f4:2a:2f:0d:ab:97:4d:89:84: 1f:8f:1e:6f:2b:59:70:68:dd:40:97:48:24:c4:2a: 0d:9d:31:fc:65:1b:d9:97:21:12:79:c6:98:88:b1: be:54:e7:1d:13:02:97:df:aa:a8:59:6a:75:12:13: 2a:f8:f9:3d:a3:4d:c9:23:8d:8b:1a:a5:19:c5:45: 4a:e5:3f:de:06:e5:8f:30:ae:8c:87:56:ed:ec:ce: 99:ff:1c:23:24:ba:0e:05:41:14:fa:ba:b9:ab:2c: 71:15:2d:cd:ec:12:31:9d:f6:c4:f6:d8:67:18:4e: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:29:09:26:0F:CD:25:D0:4F:CD:4E:D2:C7:6A:3E:7D:B3:45:9A X509v3 Authority Key Identifier: keyid:41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f4:5a:a5:e8:99:5b:6e:cc:0d:0e:03:f9:57:d4:b6:91:f8: 3e:18:99:88:07:eb:95:5e:bd:f4:8e:79:71:12:b0:83:08:83: 16:b4:bb:c3:a1:eb:55:59:7d:bf:6d:57:1b:6c:df:24:19:3f: 0c:18:6b:30:f9:2c:40:ec:f0:2f:de:7b:b6:07:b7:38:da:c5: 7c:d2:4b:7d:eb:a1:2d:79:10:86:f8:7f:72:88:07:02:b3:57: 51:6a:2a:10:5e:61:80:c8:ec:29:9d:50:71:4a:7b:5d:0a:b3: ac:b3:c1:f3:c2:6b:7f:ab:81:85:da:45:13:65:52:71:a8:73: 77:83:2e:d3:ed:c0:06:1d:75:f0:09:2f:2a:58:d3:ef:91:b9: b8:46:b1:0b:af:28:32:99:4c:3d:ff:4b:71:55:c0:4a:67:ec: ea:d8:c8:fe:1c:2e:7d:a8:77:0d:76:ba:d6:e7:c6:ce:c9:35: 87:3a:e8:fb:44:91:f3:09:68:2e:55:99:69:8e:3e:d1:7b:60: 66:28:04:fe:49:57:1d:b0:d3:81:00:0b:c4:a8:58:a2:91:1d: 28:62:18:4f:98:83:de:7e:95:5e:57:1f:2b:6b:2b:c9:93:0e: ba:09:58:0a:aa:d1:2c:23:3e:27:9f:9e:f7:4d:c8:bf:07:96: 1c:b1:5c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdEavI1TDXenOuv7e7urMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzg1Y2I1ZmM2YjQwZmRmMTRmNzJhNmQyNWY0MTQzYzE3 YzMxN2MwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EygzODhkMjkwOTI2MGZjZDI1ZDA0ZmNkNGVkMmM3NmEzZTdkYjM0NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BW6Q8fYEmGe6JIYwfv+lyQ08HRL JSqOBUkVRIvIyRGrhDQiVXykztzJ3j7PfYZP5rTYT4TSJPiQMiSXZpbi8E9JK0h/ aUl41m4fckNsAJqXP83b8b90uhidyAzmz2jne2ZdqnKKh72mr0mQTJNXhUxX1csl Wct+ufexFH7NFZBUqj+z0S/nnhy0dL/0Ki8Nq5dNiYQfjx5vK1lwaN1Al0gkxCoN nTH8ZRvZlyESecaYiLG+VOcdEwKX36qoWWp1EhMq+Pk9o03JI42LGqUZxUVK5T/e BuWPMK6Mh1bt7M6Z/xwjJLoOBUEU+rq5qyxxFS3N7BIxnfbE9thnGE4KCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiNKQkmD80l0E/NTtLHaj59s0WaMB8GA1UdIwQY MBaAFEF4XLX8a0D98U9yptJfQUPBfDF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUt ZTQ2ZWM1YjliMDZjLzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUtZTQ2ZWM1YjliMDZj LzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPRapeiZ W27MDQ4D+VfUtpH4PhiZiAfrlV699I55cRKwgwiDFrS7w6HrVVl9v21XG2zfJBk/ DBhrMPksQOzwL957tge3ONrFfNJLfeuhLXkQhvh/cogHArNXUWoqEF5hgMjsKZ1Q cUp7XQqzrLPB88Jrf6uBhdpFE2VScahzd4Mu0+3ABh118AkvKljT75G5uEaxC68o MplMPf9LcVXASmfs6tjI/hwufah3DXa61ufGzsk1hzro+0SR8wloLlWZaY4+0Xtg ZigE/klXHbDTgQALxKhYopEdKGIYT5iD3n6VXlcfK2sryZMOuglYCqrRLCM+J5+e 903IvweWHLFc8A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:13 2025 by rpki-client