This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json) Hash identifier: 7t5RueS+xUmei1ubUZGdIUcb10qbs4lQMTAP7p37gn0= Subject key identifier: 16:44:A3:11:01:FF:63:0D:A3:01:85:73:2E:E4:86:FF:25:61:C3:E2 Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b Certificate serial: 019B19BAFD6F650D96D18F8687696480D264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft Manifest number: 0B62 Signing time: Sat 13 Dec 2025 22:00:43 +0000 Manifest this update: Sat 13 Dec 2025 22:00:43 +0000 Manifest next update: Sun 14 Dec 2025 22:00:43 +0000 Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: NR7H23oIJZoDOZsgbNwQ4EIoG/12gux3NDJuOIPy0S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:fd:6f:65:0d:96:d1:8f:86:87:69:64:80:d2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b Validity Not Before: Dec 13 22:00:43 2025 GMT Not After : Dec 14 22:00:43 2025 GMT Subject: CN=1644a31101ff630da30185732ee486ff2561c3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:4e:ae:34:5c:46:6e:12:00:a7:6f:19:8b: 7a:a6:0c:34:d3:fe:45:2b:93:6f:15:6f:c8:39:14: d4:a5:61:54:4c:29:52:25:f0:2e:96:25:38:71:a5: b3:2c:1e:b6:be:6b:f3:4c:a7:33:08:00:ad:1c:02: b6:d3:18:74:dd:6d:3b:15:85:c4:3c:04:b4:ce:a6: c7:ce:17:8a:a6:d2:2f:9d:26:bc:01:4a:52:b3:be: f3:44:1f:99:a3:c7:6f:db:dd:8f:87:23:a9:ff:06: 80:a3:0d:74:a2:a3:91:26:05:56:5e:e7:40:cd:70: 38:0e:cb:54:11:1f:e9:ad:db:d8:6d:e8:0d:9d:3b: 56:2d:c3:76:02:4a:08:1d:ea:64:f2:2f:82:fb:20: dd:01:ea:a2:80:75:f1:15:c9:6f:30:a9:70:e9:bb: 1c:19:39:66:29:8b:57:5b:48:a7:6e:09:8f:49:fb: aa:f2:7e:ab:ec:71:69:d9:23:b7:2f:a5:d3:a8:4b: 4e:e0:15:92:98:fc:5f:27:71:27:8c:c8:a9:1d:87: c8:39:25:0c:3f:89:bd:45:62:b7:c2:ac:ed:f7:86: c7:53:48:9f:16:fb:ab:87:96:83:ff:97:66:8c:70: 9c:ae:6c:7c:6d:e1:45:e8:b4:b3:cf:cf:ef:db:78: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:A3:11:01:FF:63:0D:A3:01:85:73:2E:E4:86:FF:25:61:C3:E2 X509v3 Authority Key Identifier: keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b1:61:ce:29:2c:ca:1c:19:bf:85:9f:db:88:72:e0:4a:db: 6e:11:0e:4a:46:52:e4:39:ec:f0:97:65:87:eb:33:84:fe:66: 09:bc:8d:4b:c5:b6:37:d4:80:a3:7b:76:55:7c:fe:af:56:e2: 7c:cf:08:42:32:8f:4c:18:62:49:7a:32:7d:1a:4f:07:e2:1d: bc:c4:3d:46:1a:0f:12:7e:d3:5b:e0:dd:a0:4c:d4:02:91:83: 21:08:f3:c1:86:0c:e3:35:d0:05:33:92:33:25:7b:14:f9:cd: ea:64:99:9f:b9:30:05:9b:25:f7:f7:c9:b3:06:f0:48:2a:00: 3e:81:7c:e1:74:f5:05:68:66:5c:43:f7:b7:52:af:88:9a:bc: 2e:01:1f:20:8f:0b:bb:84:8a:c9:dd:da:20:b3:72:d8:85:d9: 55:f5:db:eb:56:c3:50:6f:bd:ef:f8:be:78:58:67:d6:aa:87: f3:95:36:4b:83:ac:c4:6c:a0:01:3b:1b:c9:ba:56:02:2d:11: cf:66:67:7d:a8:a3:97:86:1e:71:88:22:d6:ca:18:09:7c:79: 34:cc:64:67:0d:24:d2:b3:41:39:be:72:93:a2:c4:ba:51:d6: a5:c9:f7:44:02:d7:3c:5d:f7:09:73:f3:4c:58:37:e2:7f:37: 9b:16:e6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuv1vZQ2W0Y+Gh2lkgNJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0 MjJlOGIwHhcNMjUxMjEzMjIwMDQzWhcNMjUxMjE0MjIwMDQzWjAzMTEwLwYDVQQD EygxNjQ0YTMxMTAxZmY2MzBkYTMwMTg1NzMyZWU0ODZmZjI1NjFjM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzNOrjRcRm4SAKdvGYt6pgw00/5F K5NvFW/IORTUpWFUTClSJfAuliU4caWzLB62vmvzTKczCACtHAK20xh03W07FYXE PAS0zqbHzheKptIvnSa8AUpSs77zRB+Zo8dv292PhyOp/waAow10oqORJgVWXudA zXA4DstUER/prdvYbegNnTtWLcN2AkoIHepk8i+C+yDdAeqigHXxFclvMKlw6bsc GTlmKYtXW0inbgmPSfuq8n6r7HFp2SO3L6XTqEtO4BWSmPxfJ3EnjMipHYfIOSUM P4m9RWK3wqzt94bHU0ifFvurh5aD/5dmjHCcrmx8beFF6LSzz8/v23iNvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZEoxEB/2MNowGFcy7khv8lYcPiMB8GA1UdIwQY MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbFhziks yhwZv4Wf24hy4ErbbhEOSkZS5Dns8Jdlh+szhP5mCbyNS8W2N9SAo3t2VXz+r1bi fM8IQjKPTBhiSXoyfRpPB+IdvMQ9RhoPEn7TW+DdoEzUApGDIQjzwYYM4zXQBTOS MyV7FPnN6mSZn7kwBZsl9/fJswbwSCoAPoF84XT1BWhmXEP3t1KviJq8LgEfII8L u4SKyd3aILNy2IXZVfXb61bDUG+97/i+eFhn1qqH85U2S4OsxGygATsbybpWAi0R z2Znfaijl4YecYgi1soYCXx5NMxkZw0k0rNBOb5yk6LEulHWpcn3RALXPF33CXPz TFg34n83mxbmpw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:47 2025 by rpki-client