This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json) Hash identifier: aTD1mQ1Q1COmrFm539llkvxLYzpEZUKDEOvEGAdrCHw= Subject key identifier: CA:4B:18:09:6A:60:CD:B7:A6:84:E1:56:C7:A5:CA:9D:3E:47:D2:38 Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Certificate serial: 019B2EFA0559DC60AF4DB5808B038109B9CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 01:01:35 +0000 Manifest this update: Thu 18 Dec 2025 01:01:35 +0000 Manifest next update: Fri 19 Dec 2025 01:01:35 +0000 Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: 55jfO7A63kw9ziw5P1gWzpeDypUNQzTLCskFPgwPvUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:05:59:dc:60:af:4d:b5:80:8b:03:81:09:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Validity Not Before: Dec 18 01:01:35 2025 GMT Not After : Dec 19 01:01:35 2025 GMT Subject: CN=ca4b18096a60cdb7a684e156c7a5ca9d3e47d238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:17:f0:1c:a6:23:e5:b7:4d:68:da:ff:d3: f8:d3:b0:37:0c:37:4f:14:af:61:ec:61:55:0c:21: 85:7e:82:a3:64:14:ee:df:d9:2c:8a:b3:71:15:6a: ca:bd:a1:16:c4:0b:9a:d9:47:c6:e0:db:91:9f:72: 0e:cf:46:6e:7d:51:8e:e9:a6:2a:9e:a6:3d:f7:45: c8:bd:e4:e4:25:42:9c:89:f7:89:66:85:eb:02:a5: b5:33:df:5b:7e:9c:5c:58:57:ee:1a:7d:68:15:ae: 62:46:7c:2d:d9:f4:c6:a1:a3:d2:1e:2f:a9:06:e5: 19:7e:07:5c:36:33:32:a5:a7:6d:98:55:27:7d:dd: c0:a2:f9:72:76:f4:33:c5:8d:01:4c:4c:6d:a2:8a: e0:5b:62:cf:5a:52:8a:70:6e:6c:ef:fe:51:75:6b: b5:21:ab:18:f0:66:47:e7:8f:91:63:65:d0:0b:49: 04:75:6b:1a:33:c7:12:a2:11:db:59:65:e7:a5:c9: 69:2b:40:8b:40:d8:43:50:86:0e:99:96:0a:02:36: 76:8a:f7:e6:7a:09:55:84:d0:e3:f1:ae:f2:40:cc: d2:2b:e2:4a:ac:e3:b4:84:44:40:48:26:50:ee:15: 39:37:4b:7a:16:28:5b:50:33:a5:29:ad:26:8c:94: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:18:09:6A:60:CD:B7:A6:84:E1:56:C7:A5:CA:9D:3E:47:D2:38 X509v3 Authority Key Identifier: keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f2:c6:e2:9a:e4:82:0b:5e:f3:bc:4a:36:13:9f:3d:d5:04: 30:85:b2:aa:34:7c:37:45:7c:4a:6e:e4:a0:bb:20:6c:f1:6b: 2d:72:0f:9e:ec:2e:82:a3:e6:16:fb:13:f3:3c:05:17:bb:98: 04:cb:20:27:14:62:d6:f0:82:ef:df:fa:dc:c0:d7:99:08:2b: de:cb:f9:1e:1a:f1:a3:5e:28:38:4a:03:04:75:35:0d:de:a1: da:34:b8:32:8c:1d:25:df:16:98:79:38:29:2a:39:a1:c1:3d: 89:88:3f:c1:c2:3c:a0:fc:c6:e7:ad:c7:41:01:37:8f:40:90: c8:4e:17:24:36:70:c7:0d:93:47:8f:5e:80:6d:57:2a:3d:48: 48:a1:2f:11:ab:19:4a:82:2c:4b:7d:c0:b3:0a:2a:f4:2c:c7: 86:f7:7a:b7:af:f4:d6:2b:87:ac:e6:67:36:df:5f:dc:67:f7: a2:81:07:72:37:d2:b7:5d:fc:e7:f2:59:87:a8:67:c8:c5:36: 7f:d8:07:b4:a7:b1:b8:f4:d1:d4:3c:0e:75:1f:14:99:7d:ee: 2e:95:8f:af:c9:a9:f8:e4:46:8b:1a:a6:61:cf:0b:05:1a:e8: 51:7f:e9:87:3f:36:5e:94:2d:8b:24:cc:e7:a2:fe:08:26:d1: a5:0a:11:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+gVZ3GCvTbWAiwOBCbnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm Yjc3NmYwHhcNMjUxMjE4MDEwMTM1WhcNMjUxMjE5MDEwMTM1WjAzMTEwLwYDVQQD EyhjYTRiMTgwOTZhNjBjZGI3YTY4NGUxNTZjN2E1Y2E5ZDNlNDdkMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IsX8BymI+W3TWja/9P407A3DDdP FK9h7GFVDCGFfoKjZBTu39ksirNxFWrKvaEWxAua2UfG4NuRn3IOz0ZufVGO6aYq nqY990XIveTkJUKcifeJZoXrAqW1M99bfpxcWFfuGn1oFa5iRnwt2fTGoaPSHi+p BuUZfgdcNjMypadtmFUnfd3AovlydvQzxY0BTExtoorgW2LPWlKKcG5s7/5RdWu1 IasY8GZH54+RY2XQC0kEdWsaM8cSohHbWWXnpclpK0CLQNhDUIYOmZYKAjZ2ivfm eglVhNDj8a7yQMzSK+JKrOO0hERASCZQ7hU5N0t6FihbUDOlKa0mjJQQiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpLGAlqYM23poThVselyp0+R9I4MB8GA1UdIwQY MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2 LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvLG4prk ggte87xKNhOfPdUEMIWyqjR8N0V8Sm7koLsgbPFrLXIPnuwugqPmFvsT8zwFF7uY BMsgJxRi1vCC79/63MDXmQgr3sv5Hhrxo14oOEoDBHU1Dd6h2jS4MowdJd8WmHk4 KSo5ocE9iYg/wcI8oPzG563HQQE3j0CQyE4XJDZwxw2TR49egG1XKj1ISKEvEasZ SoIsS33Aswoq9CzHhvd6t6/01iuHrOZnNt9f3Gf3ooEHcjfSt1385/JZh6hnyMU2 f9gHtKexuPTR1DwOdR8UmX3uLpWPr8mp+ORGixqmYc8LBRroUX/phz82XpQtiyTM 56L+CCbRpQoRlA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:55 2025 by rpki-client