This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json) Hash identifier: UbQJQPUI8OaHqOxoi9q4Q3fK9avWSIaGqI8VtfJUEeA= Subject key identifier: F1:07:18:5E:FE:95:79:66:6A:E2:8A:0A:98:65:7F:D1:14:86:5E:CA Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193 Certificate serial: 019B6F58807E8027C82129485CA5D16F296F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft Manifest number: 0813 Signing time: Tue 30 Dec 2025 13:00:29 +0000 Manifest this update: Tue 30 Dec 2025 13:00:29 +0000 Manifest next update: Wed 31 Dec 2025 13:00:29 +0000 Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: MmmXcCNC9LH0iK3/N/ExcUr2o2rsf5nZxl5vVsmNoII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:80:7e:80:27:c8:21:29:48:5c:a5:d1:6f:29:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193 Validity Not Before: Dec 30 13:00:29 2025 GMT Not After : Dec 31 13:00:29 2025 GMT Subject: CN=f107185efe9579666ae28a0a98657fd114865eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:cb:f9:33:19:5c:70:8e:29:21:49:dd:fc: 9b:b5:bc:11:6b:91:70:b3:d6:d1:fc:bc:30:72:e3: 02:8e:fd:ec:c3:f8:d3:4a:46:0d:7e:e9:ed:02:a0: 6f:55:d1:5e:c6:2d:db:a9:76:a8:b6:89:b6:42:bd: a7:1c:53:d0:ad:f1:43:cc:ba:1e:27:5d:d8:f8:b1: f3:78:71:a2:2c:20:b4:5c:63:58:ac:1b:55:f1:22: f1:e1:b2:5c:7c:e4:58:0e:dc:73:61:8f:24:7b:86: df:8e:bc:bc:78:fb:78:a0:43:07:a1:23:1d:b7:bb: 07:fa:30:f5:5e:a6:1c:b5:d0:4d:f0:6f:66:c2:61: f1:b3:76:23:cf:27:88:78:f6:a5:54:9e:33:ff:36: d2:68:ec:e2:e6:2d:68:42:18:4c:e0:4f:b6:25:dd: b6:b8:e6:28:a0:fa:25:b9:09:f0:c2:38:cb:ac:49: 44:70:5e:4f:a7:e9:94:b8:a2:1c:e4:25:3d:72:3a: fe:65:28:32:07:4b:52:e3:95:75:08:6f:4d:9e:28: b1:ce:af:b9:db:1b:ea:f4:0e:e6:f6:41:ee:66:cf: 31:71:07:a8:90:6f:1d:4d:25:45:b9:87:4a:4c:87: 4c:c3:90:1c:54:5c:2e:e1:18:65:e6:d0:fa:4f:8e: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:07:18:5E:FE:95:79:66:6A:E2:8A:0A:98:65:7F:D1:14:86:5E:CA X509v3 Authority Key Identifier: keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1a:f8:39:c1:8f:bb:2f:ae:56:b0:eb:ce:54:9c:ec:a8:5e: 19:be:20:20:d8:81:79:7a:87:44:57:b4:d0:66:e7:ac:67:83: 54:2b:54:b1:27:f8:90:f3:b2:c0:5b:6e:51:be:97:4e:67:f9: b2:2f:18:29:03:53:d9:81:9f:7f:a9:fc:27:55:ba:dc:54:12: 6e:d1:08:5f:dc:31:76:e5:fd:2f:36:fe:31:72:1e:17:03:19: 57:ad:70:65:1c:1b:d7:f2:8b:8c:84:74:3b:19:80:46:fb:29: 1c:02:8f:83:59:09:a1:ea:30:7f:ee:2c:3b:0a:ef:5b:af:fb: 12:2c:a9:c0:44:1f:cf:d7:65:a8:3b:ac:68:6b:91:76:d9:82: 15:28:b9:85:f2:c1:36:03:b4:91:e2:66:f9:19:36:2e:9e:cc: 92:21:40:a0:66:10:89:33:7d:62:bd:d0:9e:03:6e:62:b0:b5: 6d:85:63:68:77:fa:c5:7c:c3:86:24:dd:ef:52:df:1d:6a:e2: d3:43:59:26:3d:3b:1f:ba:59:70:9f:b5:ef:09:29:e8:1b:e3: fd:35:8c:ac:8d:81:57:3b:8c:56:3f:a5:88:9a:1c:fc:32:31: d5:7f:2d:35:a7:17:21:ec:5b:4a:2f:ab:97:68:87:c6:08:ff: df:43:f1:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWIB+gCfIISlIXKXRbylvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5 YWIxOTMwHhcNMjUxMjMwMTMwMDI5WhcNMjUxMjMxMTMwMDI5WjAzMTEwLwYDVQQD EyhmMTA3MTg1ZWZlOTU3OTY2NmFlMjhhMGE5ODY1N2ZkMTE0ODY1ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj7L+TMZXHCOKSFJ3fybtbwRa5Fw s9bR/LwwcuMCjv3sw/jTSkYNfuntAqBvVdFexi3bqXaotom2Qr2nHFPQrfFDzLoe J13Y+LHzeHGiLCC0XGNYrBtV8SLx4bJcfORYDtxzYY8ke4bfjry8ePt4oEMHoSMd t7sH+jD1XqYctdBN8G9mwmHxs3YjzyeIePalVJ4z/zbSaOzi5i1oQhhM4E+2Jd22 uOYooPoluQnwwjjLrElEcF5Pp+mUuKIc5CU9cjr+ZSgyB0tS45V1CG9Nniixzq+5 2xvq9A7m9kHuZs8xcQeokG8dTSVFuYdKTIdMw5AcVFwu4Rhl5tD6T45VJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEHGF7+lXlmauKKCphlf9EUhl7KMB8GA1UdIwQY MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBr4OcGP uy+uVrDrzlSc7KheGb4gINiBeXqHRFe00GbnrGeDVCtUsSf4kPOywFtuUb6XTmf5 si8YKQNT2YGff6n8J1W63FQSbtEIX9wxduX9Lzb+MXIeFwMZV61wZRwb1/KLjIR0 OxmARvspHAKPg1kJoeowf+4sOwrvW6/7EiypwEQfz9dlqDusaGuRdtmCFSi5hfLB NgO0keJm+Rk2Lp7MkiFAoGYQiTN9Yr3QngNuYrC1bYVjaHf6xXzDhiTd71LfHWri 00NZJj07H7pZcJ+17wkp6Bvj/TWMrI2BVzuMVj+liJoc/DIx1X8tNacXIexbSi+r l2iHxgj/30PxXw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:55:13 2025 by rpki-client