This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json) Hash identifier: N/pBFPjWKVowHOmDTCBqkXZvf/23ymk3nlQ5l0fMMPw= Subject key identifier: 2E:F3:22:71:A9:71:29:11:F3:48:E5:9C:82:E6:61:A4:88:3A:46:2F Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Certificate serial: 019B217599DE01E93CA400A209F727D53A3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 10:01:53 +0000 Manifest this update: Mon 15 Dec 2025 10:01:53 +0000 Manifest next update: Tue 16 Dec 2025 10:01:53 +0000 Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: HJ5cimYHFeHQgP271NX2tz8s8VUNdBjh7UQG1Fek6XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:99:de:01:e9:3c:a4:00:a2:09:f7:27:d5:3a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Validity Not Before: Dec 15 10:01:53 2025 GMT Not After : Dec 16 10:01:53 2025 GMT Subject: CN=2ef32271a9712911f348e59c82e661a4883a462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:a7:5e:68:01:b7:8e:d3:c1:2f:bd:dc:5d: a3:a1:93:5d:07:08:bc:73:a6:67:dc:85:2d:06:b2: fe:f2:ca:5e:40:75:b1:5b:30:bf:f4:c2:ed:3c:47: f5:ba:c4:a1:29:85:ff:95:87:40:48:97:19:74:76: da:cf:3f:bb:5a:3b:9d:24:15:46:36:aa:eb:c5:59: ee:51:f6:02:7b:8d:e1:43:d9:d8:50:6c:ee:c9:aa: 4e:6c:c9:56:a7:da:44:5d:24:85:42:a8:0f:19:e4: d4:c0:80:d4:76:3b:fd:73:d7:ac:f8:4e:89:ce:7c: c3:d9:28:6d:db:d7:95:52:98:28:07:d6:17:8e:cd: 8c:e9:82:06:9f:a8:47:c1:b5:e1:6b:bf:ba:21:95: c1:1e:c9:33:b0:c7:6c:60:64:f4:01:38:32:e2:25: 1c:24:c5:4a:2e:bd:a8:03:3f:ae:10:bc:90:40:6d: 53:1c:93:32:14:87:90:92:b0:46:51:0f:06:eb:47: 0f:14:f0:34:36:62:61:d3:53:50:ee:4f:68:1b:ee: 2e:bc:9d:98:e2:05:45:ed:44:dd:56:33:6b:2e:32: 86:78:51:c9:9a:da:e7:3a:91:ad:31:04:22:c3:9c: 3f:c6:c8:d3:54:40:0e:93:d0:c3:15:06:b9:e8:77: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F3:22:71:A9:71:29:11:F3:48:E5:9C:82:E6:61:A4:88:3A:46:2F X509v3 Authority Key Identifier: keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f0:2f:61:8d:b1:7a:7d:a3:4f:00:a3:74:de:33:02:01:02: 1d:3f:08:48:4c:43:0b:a9:20:6d:39:be:4c:41:73:0e:af:24: 2c:85:70:b9:03:30:cd:be:47:7d:5e:c3:8f:5a:85:05:a3:b0: ea:af:e3:52:e2:d7:57:ea:a2:f3:e6:9e:4c:cb:54:5a:93:bb: 8d:63:69:23:10:d6:33:db:33:16:8c:16:13:92:2f:e8:47:ca: 80:01:e1:71:14:d2:e6:2c:bb:78:b7:bc:c0:7f:9d:f7:e3:88: 79:29:a7:64:3e:96:b4:3e:e7:a5:a9:43:86:55:0c:c5:52:a9: 8b:a9:94:dc:6c:4a:04:6d:33:f3:59:ce:1d:ed:0f:fc:81:87: fb:af:e8:53:94:95:0b:6e:4e:fc:f9:e3:c2:e7:73:49:77:b0: 5e:d8:02:19:82:d8:91:03:0b:9a:68:92:a6:47:c9:b5:d5:c2: fe:f8:9c:81:44:d3:a4:5e:ea:fa:03:91:de:e2:5e:82:c3:2d: 65:cf:66:af:f0:37:54:6b:dc:e5:68:0a:7a:d2:f3:cd:1f:cd: 52:16:86:42:ce:c2:35:fa:71:6a:0f:6b:5f:9f:bb:7f:2b:f3: 46:d6:4d:b1:41:74:d8:28:46:e4:81:f9:8f:22:4e:bc:aa:86: 19:bd:50:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdZneAek8pACiCfcn1To7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm Yjc3NmYwHhcNMjUxMjE1MTAwMTUzWhcNMjUxMjE2MTAwMTUzWjAzMTEwLwYDVQQD EygyZWYzMjI3MWE5NzEyOTExZjM0OGU1OWM4MmU2NjFhNDg4M2E0NjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9GnXmgBt47TwS+93F2joZNdBwi8 c6Zn3IUtBrL+8speQHWxWzC/9MLtPEf1usShKYX/lYdASJcZdHbazz+7WjudJBVG NqrrxVnuUfYCe43hQ9nYUGzuyapObMlWp9pEXSSFQqgPGeTUwIDUdjv9c9es+E6J znzD2Sht29eVUpgoB9YXjs2M6YIGn6hHwbXha7+6IZXBHskzsMdsYGT0ATgy4iUc JMVKLr2oAz+uELyQQG1THJMyFIeQkrBGUQ8G60cPFPA0NmJh01NQ7k9oG+4uvJ2Y 4gVF7UTdVjNrLjKGeFHJmtrnOpGtMQQiw5w/xsjTVEAOk9DDFQa56HdTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7zInGpcSkR80jlnILmYaSIOkYvMB8GA1UdIwQY MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2 LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPAvYY2x en2jTwCjdN4zAgECHT8ISExDC6kgbTm+TEFzDq8kLIVwuQMwzb5HfV7Dj1qFBaOw 6q/jUuLXV+qi8+aeTMtUWpO7jWNpIxDWM9szFowWE5Iv6EfKgAHhcRTS5iy7eLe8 wH+d9+OIeSmnZD6WtD7npalDhlUMxVKpi6mU3GxKBG0z81nOHe0P/IGH+6/oU5SV C25O/PnjwudzSXewXtgCGYLYkQMLmmiSpkfJtdXC/vicgUTTpF7q+gOR3uJegsMt Zc9mr/A3VGvc5WgKetLzzR/NUhaGQs7CNfpxag9rX5+7fyvzRtZNsUF02ChG5IH5 jyJOvKqGGb1QQQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:50:43 2025 by rpki-client