This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json) Hash identifier: c0R1nM+sVxM1ipQoXJnGfrjBjqmZnt8sQpJKIML2fek= Subject key identifier: C2:2D:7D:92:7E:40:E5:AA:47:5A:F1:F1:0C:5E:23:31:12:64:DB:FB Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a Certificate serial: 019B5ABFDBB26F6A9DB59252C79C82EE1292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft Manifest number: 0484 Signing time: Fri 26 Dec 2025 13:01:21 +0000 Manifest this update: Fri 26 Dec 2025 13:01:21 +0000 Manifest next update: Sat 27 Dec 2025 13:01:21 +0000 Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: lilEWIuQNosQZnKejsTq6N6BcnYKj0RrxX+ZhnCTS7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:db:b2:6f:6a:9d:b5:92:52:c7:9c:82:ee:12:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a Validity Not Before: Dec 26 13:01:21 2025 GMT Not After : Dec 27 13:01:21 2025 GMT Subject: CN=c22d7d927e40e5aa475af1f10c5e23311264dbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:c2:59:52:6f:f2:37:7f:0f:bb:13:f0:ce: c0:07:f4:9c:30:a2:ed:52:23:8a:9a:18:cb:c9:31: 7e:8e:f3:b7:8d:10:7e:fe:58:cc:2c:b7:12:f8:a3: 76:77:77:0b:d8:07:b4:6e:d2:cb:e2:66:a8:15:6e: c7:38:72:ce:e8:1d:b8:d0:0e:cd:b4:d9:2e:cc:60: f0:c8:e9:0f:35:c5:49:49:0b:f7:63:4b:ac:15:a9: 62:86:31:41:aa:19:79:80:06:92:63:39:f1:65:3d: bf:fb:7f:a9:b1:cf:1c:c2:ca:d1:c5:fa:21:0a:be: 6b:fa:9a:75:3e:22:a6:fd:39:70:c3:b3:a5:d4:de: 3b:c3:4e:5c:b5:4a:90:24:6e:a9:e4:ab:90:60:64: fc:ed:ff:a8:25:b1:74:e6:21:d2:29:06:13:71:29: c8:3f:f3:50:f5:84:0d:2d:13:16:08:dc:4b:0c:da: 52:d6:e7:42:c2:ff:dc:1b:23:1c:6e:a7:dd:1c:81: 7c:fe:40:e5:fa:3d:8e:f3:7d:82:4e:1b:8c:8d:4d: f9:6e:23:b9:99:ff:11:0f:9c:7d:52:f9:6e:0f:97: 17:e0:7c:da:84:4c:ba:ab:bf:c6:20:b6:15:e4:2a: 76:74:df:81:61:f7:01:6d:0d:95:6a:ab:1a:c8:60: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:7D:92:7E:40:E5:AA:47:5A:F1:F1:0C:5E:23:31:12:64:DB:FB X509v3 Authority Key Identifier: keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1f:ce:0c:28:d6:18:57:3d:f9:60:dc:fb:22:ad:91:09:64: 65:95:5a:55:06:d6:72:f6:44:e8:a6:de:81:5e:02:eb:6f:17: 4b:8b:c3:60:95:52:71:fe:c5:26:42:85:cb:d5:57:57:83:c3: 92:38:b4:61:06:3d:68:e1:3a:60:f1:d4:be:4a:d9:58:da:02: ba:96:4d:87:6c:bd:1f:98:81:3d:e2:e5:8a:70:8d:b8:c1:d7: 59:44:db:a3:17:81:e3:8e:9a:74:e4:6d:4d:ba:4a:32:c3:f5: ca:3f:9e:e7:90:8a:70:87:cb:66:e0:27:a7:2e:95:21:e2:59: 3d:2a:ba:6d:b3:04:4f:25:c7:3b:a1:f9:a4:c2:68:b9:b0:a0: 1d:7a:76:10:2d:a7:5e:53:31:00:6c:7e:d8:a5:d9:8f:63:82: 8e:0d:b3:8f:72:7e:62:49:6e:2b:93:83:c6:70:c5:9f:f4:64: eb:fe:4d:e6:31:d5:e9:d4:89:9b:ca:28:77:60:bf:ff:02:ee: 55:57:81:bc:cc:f4:e7:09:db:a0:7d:b1:f0:be:4a:a7:27:ed: 46:10:01:cc:16:a1:ba:05:2d:ce:c3:86:aa:ea:1d:c1:33:32: 48:e9:da:a6:17:89:a5:ab:09:74:e8:a7:17:cb:a4:5c:09:58: c5:8e:1d:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9uyb2qdtZJSx5yC7hKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5 ZDRkOWEwHhcNMjUxMjI2MTMwMTIxWhcNMjUxMjI3MTMwMTIxWjAzMTEwLwYDVQQD EyhjMjJkN2Q5MjdlNDBlNWFhNDc1YWYxZjEwYzVlMjMzMTEyNjRkYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4nCWVJv8jd/D7sT8M7AB/ScMKLt UiOKmhjLyTF+jvO3jRB+/ljMLLcS+KN2d3cL2Ae0btLL4maoFW7HOHLO6B240A7N tNkuzGDwyOkPNcVJSQv3Y0usFalihjFBqhl5gAaSYznxZT2/+3+psc8cwsrRxfoh Cr5r+pp1PiKm/Tlww7Ol1N47w05ctUqQJG6p5KuQYGT87f+oJbF05iHSKQYTcSnI P/NQ9YQNLRMWCNxLDNpS1udCwv/cGyMcbqfdHIF8/kDl+j2O832CThuMjU35biO5 mf8RD5x9UvluD5cX4HzahEy6q7/GILYV5Cp2dN+BYfcBbQ2VaqsayGA3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMItfZJ+QOWqR1rx8QxeIzESZNv7MB8GA1UdIwQY MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0 LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjR/ODCjW GFc9+WDc+yKtkQlkZZVaVQbWcvZE6KbegV4C628XS4vDYJVScf7FJkKFy9VXV4PD kji0YQY9aOE6YPHUvkrZWNoCupZNh2y9H5iBPeLlinCNuMHXWUTboxeB446adORt TbpKMsP1yj+e55CKcIfLZuAnpy6VIeJZPSq6bbMETyXHO6H5pMJoubCgHXp2EC2n XlMxAGx+2KXZj2OCjg2zj3J+YkluK5ODxnDFn/Rk6/5N5jHV6dSJm8ood2C//wLu VVeBvMz05wnboH2x8L5KpyftRhABzBahugUtzsOGquodwTMySOnapheJpasJdOin F8ukXAlYxY4dnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client