This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json) Hash identifier: smEb0IVdCU00natSD7ALTVyAWwdqfq8nzEL6h4or0Bw= Subject key identifier: 71:67:06:B2:8A:CE:35:A7:24:62:64:A9:FD:50:FA:C1:74:A8:EE:1C Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Certificate serial: 019B1B04E8D75C3FA8FAAE6584C82034887E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft Manifest number: 05C2 Signing time: Sun 14 Dec 2025 04:01:04 +0000 Manifest this update: Sun 14 Dec 2025 04:01:04 +0000 Manifest next update: Mon 15 Dec 2025 04:01:04 +0000 Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=) 2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: sipydHAqZY/PLMKPfvHbSFUwx8nqjgojmk39bx2cUL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:e8:d7:5c:3f:a8:fa:ae:65:84:c8:20:34:88:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Validity Not Before: Dec 14 04:01:04 2025 GMT Not After : Dec 15 04:01:04 2025 GMT Subject: CN=716706b28ace35a7246264a9fd50fac174a8ee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:6b:d9:ed:b8:85:05:c5:1e:70:53:71:e9: 18:20:b0:03:e9:a9:bd:1e:57:54:c7:54:0c:90:86: 17:3b:0f:bb:95:c9:cf:b3:eb:6a:c3:d1:6f:95:f6: e2:29:ba:10:c0:b9:6b:8e:5c:0b:97:fe:84:e9:ad: 68:4e:a3:b1:06:ca:04:00:35:06:e2:f5:5b:72:fb: 05:6e:1a:82:9f:c0:28:1c:f9:dd:5a:ff:8a:ed:48: df:c2:98:25:0d:7d:1a:38:1a:cb:41:20:a6:ed:d0: 6b:f8:7e:e7:4d:87:1c:f1:67:4e:11:f4:a5:e6:ea: 9c:38:43:5b:ac:c0:99:f4:1d:a9:7e:1e:92:71:ce: d9:12:72:13:36:f2:1e:a6:a7:e6:c2:71:b0:f8:4d: fa:01:3a:32:72:58:94:a9:49:6c:d5:8f:60:59:b6: 3e:ed:c4:ab:c9:5e:0e:52:93:c8:a2:37:f8:7f:19: 27:95:3c:6a:f8:67:4c:0f:07:22:e8:0e:30:cd:83: 75:1d:d5:5f:cf:bd:ec:b9:38:b1:f9:3b:5f:03:42: 2d:c0:0f:21:4f:91:ff:60:87:83:0d:43:46:eb:50: 2a:4c:ea:11:f2:1e:0c:15:c3:ae:72:9a:ea:82:8e: c2:d4:f8:69:4c:3d:69:e4:1a:92:63:28:79:a8:ce: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:67:06:B2:8A:CE:35:A7:24:62:64:A9:FD:50:FA:C1:74:A8:EE:1C X509v3 Authority Key Identifier: keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:8a:dd:8a:9b:da:47:89:ee:72:ee:c0:35:6b:5e:d0:34: 80:db:ce:ab:57:8f:4b:dd:2d:04:ab:7c:9a:b7:0b:20:c1:27: c6:30:dd:d6:bb:15:e1:0e:f7:78:fa:24:35:d5:f5:7c:aa:ae: 79:e5:02:34:70:92:95:49:f5:b7:5d:54:bd:14:cb:c0:6c:b0: 7e:ea:12:4b:aa:bd:99:10:08:d3:39:7f:09:db:14:0b:ea:b7: 0a:b3:83:6a:20:53:06:7d:45:65:ab:13:57:57:0e:00:fc:e2: 50:63:56:7d:2f:d0:bc:7f:cb:81:49:c2:89:dd:1a:b3:12:9d: 83:14:aa:c0:53:14:11:e7:30:f8:2e:cf:20:30:13:10:5c:2e: 29:a0:04:e0:95:2d:89:62:a1:68:97:73:e3:5a:23:f4:40:a2: b0:68:1b:2c:2b:52:45:1c:fe:74:b5:2f:04:a6:11:02:66:74: 35:8b:11:c4:fe:10:b9:3a:30:f3:d9:13:c9:d6:95:79:b1:ff: 5e:ae:08:0e:08:f4:7a:f7:97:68:63:82:18:71:1d:38:1a:63: ff:9a:11:b7:50:d1:db:3e:b9:e6:50:a0:82:b0:34:a4:8b:53: a1:bd:71:6e:f6:fa:83:a2:53:e2:21:24:27:f9:0b:45:34:f7: 14:ad:cb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBOjXXD+o+q5lhMggNIh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj NmRjODgwHhcNMjUxMjE0MDQwMTA0WhcNMjUxMjE1MDQwMTA0WjAzMTEwLwYDVQQD Eyg3MTY3MDZiMjhhY2UzNWE3MjQ2MjY0YTlmZDUwZmFjMTc0YThlZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxlr2e24hQXFHnBTcekYILAD6am9 HldUx1QMkIYXOw+7lcnPs+tqw9FvlfbiKboQwLlrjlwLl/6E6a1oTqOxBsoEADUG 4vVbcvsFbhqCn8AoHPndWv+K7UjfwpglDX0aOBrLQSCm7dBr+H7nTYcc8WdOEfSl 5uqcOENbrMCZ9B2pfh6Scc7ZEnITNvIepqfmwnGw+E36AToycliUqUls1Y9gWbY+ 7cSryV4OUpPIojf4fxknlTxq+GdMDwci6A4wzYN1HdVfz73suTix+TtfA0ItwA8h T5H/YIeDDUNG61AqTOoR8h4MFcOucprqgo7C1PhpTD1p5BqSYyh5qM5xGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFnBrKKzjWnJGJkqf1Q+sF0qO4cMB8GA1UdIwQY MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt YTljNWVlZDg1YmE3LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3 LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/yK3Yqb 2keJ7nLuwDVrXtA0gNvOq1ePS90tBKt8mrcLIMEnxjDd1rsV4Q73ePokNdX1fKqu eeUCNHCSlUn1t11UvRTLwGywfuoSS6q9mRAI0zl/CdsUC+q3CrODaiBTBn1FZasT V1cOAPziUGNWfS/QvH/LgUnCid0asxKdgxSqwFMUEecw+C7PIDATEFwuKaAE4JUt iWKhaJdz41oj9ECisGgbLCtSRRz+dLUvBKYRAmZ0NYsRxP4QuTow89kTydaVebH/ Xq4IDgj0eveXaGOCGHEdOBpj/5oRt1DR2z655lCggrA0pItTob1xbvb6g6JT4iEk J/kLRTT3FK3LRw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:25 2025 by rpki-client