This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft File: qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json) Hash identifier: wjTSnMt/ah48SKp4KT9NUpAt4v3ERT3eYkRoBqr86vQ= Subject key identifier: 53:BC:48:CE:96:78:53:F8:F0:74:4C:0A:B8:9F:EF:83:B2:62:5B:D1 Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8 Certificate issuer: /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8 Certificate serial: 019B3D5A1F9584513EB5D9932A466F59A2FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft Manifest number: 048C Signing time: Sat 20 Dec 2025 20:01:15 +0000 Manifest this update: Sat 20 Dec 2025 20:01:15 +0000 Manifest next update: Sun 21 Dec 2025 20:01:15 +0000 Files and hashes: 1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: G27JXE4kEtDLvqbNc0PajnZyfCywh4OOhQfH71lhhz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1f:95:84:51:3e:b5:d9:93:2a:46:6f:59:a2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8 Validity Not Before: Dec 20 20:01:15 2025 GMT Not After : Dec 21 20:01:15 2025 GMT Subject: CN=53bc48ce967853f8f0744c0ab89fef83b2625bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:f5:57:4b:a8:3f:d5:6d:57:25:87:69:fa: 9e:44:5b:57:41:6a:ff:a0:10:5f:36:46:e1:34:71: 1e:8f:94:c7:e8:f3:fe:32:f9:0a:03:07:8e:2e:f1: 45:e3:1c:83:f1:e9:f0:f6:11:8a:a5:6d:ce:a6:82: c6:b8:8f:8e:6c:cc:53:6c:a6:16:5f:a1:ea:32:8d: 3f:a4:aa:c4:4b:d8:f6:71:2e:3e:94:51:11:26:a6: d3:e5:3e:96:bc:f5:64:37:ad:4d:95:e7:e3:11:64: 49:b2:cd:81:b6:23:bd:2f:19:aa:a5:5c:bd:e6:60: f5:e3:04:5a:74:d8:b5:b0:a0:73:6d:dc:06:8e:77: 84:9e:f3:68:b0:45:92:9c:e0:d5:b0:1d:55:41:af: bf:87:a5:f4:21:f1:8e:1c:c8:d5:b9:51:c9:5c:4f: a0:83:5a:11:24:29:80:d2:09:a3:eb:96:34:e1:d7: 38:1f:47:cd:40:cf:02:b4:24:1f:a0:3b:05:78:3e: ce:85:ff:93:2c:bf:57:7e:59:2c:d7:20:1f:bb:4e: 1a:5d:2f:bf:66:c3:be:f6:20:99:86:12:d7:15:4a: 58:c1:1b:44:13:39:95:fd:5a:49:92:91:44:67:01: 92:5b:2c:54:b8:cd:48:41:30:fa:18:bf:70:fa:b8: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:48:CE:96:78:53:F8:F0:74:4C:0A:B8:9F:EF:83:B2:62:5B:D1 X509v3 Authority Key Identifier: keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:e8:e3:a1:9a:5d:17:f8:49:a7:c9:9c:60:02:b5:f2:02: 33:c7:de:e8:f0:1e:d8:66:58:46:8a:37:d5:22:3b:de:75:ec: 2e:13:2a:d1:59:b1:c1:69:f7:49:15:32:04:bd:18:69:cc:15: 17:b5:ae:ea:6b:29:f1:96:71:2d:b3:d7:8e:8e:78:34:f1:af: 39:a1:c4:8a:46:52:a5:00:40:26:4b:2f:6c:f1:ef:f3:e4:81: c1:09:c7:14:a8:6a:55:a2:d6:8e:eb:30:fb:df:89:14:7d:b7: 3a:0f:91:8b:36:a4:75:a8:17:f8:08:c2:e8:d7:bc:53:80:60: 17:58:f0:33:93:7b:68:11:48:94:6d:05:56:05:1b:42:85:df: 04:a3:f4:f8:89:a9:81:31:f4:9b:33:46:1f:1d:1e:2e:a1:c9: b5:e7:a2:da:52:d0:a0:2a:b5:d9:2d:8f:bf:4d:22:c4:b9:0d: 89:33:3a:18:29:38:a6:1e:4f:94:28:58:42:c0:38:ba:e6:c4: 54:34:10:a2:18:cb:81:41:d9:fe:c2:b4:2a:65:c4:98:fc:c0: 54:f6:65:9e:70:21:78:f7:68:d9:3f:9f:f1:1d:16:42:6b:0d: ca:61:a1:7f:db:84:e0:7b:f8:77:5c:56:e7:b2:7d:d9:58:c3: ae:fe:c3:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wh+VhFE+tdmTKkZvWaL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OWRlMzcwMzdhMmYyYWI4ZWRiZjZhYzFkZjFjMjk5OTdj ODg4YzgwHhcNMjUxMjIwMjAwMTE1WhcNMjUxMjIxMjAwMTE1WjAzMTEwLwYDVQQD Eyg1M2JjNDhjZTk2Nzg1M2Y4ZjA3NDRjMGFiODlmZWY4M2IyNjI1YmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweT1V0uoP9VtVyWHafqeRFtXQWr/ oBBfNkbhNHEej5TH6PP+MvkKAweOLvFF4xyD8enw9hGKpW3OpoLGuI+ObMxTbKYW X6HqMo0/pKrES9j2cS4+lFERJqbT5T6WvPVkN61NlefjEWRJss2BtiO9LxmqpVy9 5mD14wRadNi1sKBzbdwGjneEnvNosEWSnODVsB1VQa+/h6X0IfGOHMjVuVHJXE+g g1oRJCmA0gmj65Y04dc4H0fNQM8CtCQfoDsFeD7Ohf+TLL9Xflks1yAfu04aXS+/ ZsO+9iCZhhLXFUpYwRtEEzmV/VpJkpFEZwGSWyxUuM1IQTD6GL9w+rjtXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO8SM6WeFP48HRMCrif74OyYlvRMB8GA1UdIwQY MBaAFKid43A3ovKrjtv2rB3xwpmXyIjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQt ZmZiNjcwN2M2MWIzLzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQtZmZiNjcwN2M2MWIz LzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8bo46Ga XRf4SafJnGACtfICM8fe6PAe2GZYRoo31SI73nXsLhMq0VmxwWn3SRUyBL0YacwV F7Wu6msp8ZZxLbPXjo54NPGvOaHEikZSpQBAJksvbPHv8+SBwQnHFKhqVaLWjusw +9+JFH23Og+RizakdagX+AjC6Ne8U4BgF1jwM5N7aBFIlG0FVgUbQoXfBKP0+Imp gTH0mzNGHx0eLqHJteei2lLQoCq12S2Pv00ixLkNiTM6GCk4ph5PlChYQsA4uubE VDQQohjLgUHZ/sK0KmXEmPzAVPZlnnAhePdo2T+f8R0WQmsNymGhf9uE4Hv4d1xW 57J92VjDrv7DwA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:40 2025 by rpki-client