This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json) Hash identifier: aFPduO3GLhuv06XyvHTQTsRTKi/KxrxD7OI4SnF88iA= Subject key identifier: 0B:64:26:67:1F:AF:AC:57:9D:69:87:A9:FA:AF:E8:41:B8:F0:E5:DD Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f Certificate serial: 019B4B158EC322601F9A70CBB4237877EECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft Manifest number: 12E2 Signing time: Tue 23 Dec 2025 12:01:02 +0000 Manifest this update: Tue 23 Dec 2025 12:01:02 +0000 Manifest next update: Wed 24 Dec 2025 12:01:02 +0000 Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: fJXl9/MMQvarWJuygITspCzRlnfFwtE8q3ThzwPaHpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:8e:c3:22:60:1f:9a:70:cb:b4:23:78:77:ee:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f Validity Not Before: Dec 23 12:01:02 2025 GMT Not After : Dec 24 12:01:02 2025 GMT Subject: CN=0b6426671fafac579d6987a9faafe841b8f0e5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:51:b6:d2:12:7c:2a:ae:0d:74:38:2a:51: 6c:f7:69:70:7d:4f:33:bb:b6:99:0e:eb:2e:97:b1: 2e:c5:e7:5e:57:77:8f:65:6b:17:cf:af:9f:09:1d: 0b:eb:dd:cc:80:e1:6b:99:54:8d:6a:f6:df:82:26: b8:ab:83:0b:34:c7:4b:a8:9e:ff:18:5a:58:96:50: 48:13:28:64:51:60:de:34:c5:75:c6:91:b4:d7:01: 96:1c:39:89:df:33:d9:a2:8f:a6:6c:33:98:65:c7: e5:9a:7b:49:b3:ad:0f:fa:12:88:a2:d6:ee:f5:ec: b0:6a:6a:08:a7:3e:20:50:57:fd:2c:ad:2c:d9:64: 68:d4:6e:35:fd:01:8b:71:c1:a5:57:27:5e:1c:2a: 16:db:f7:25:79:e3:51:57:af:5b:0b:4b:3c:72:0c: 4c:73:48:16:54:9a:4c:2d:d7:76:48:79:e0:86:c4: df:6e:b6:6d:1f:7d:fd:d2:83:3c:3c:e2:0e:12:e1: 57:07:db:bf:38:32:8e:0e:b5:ba:4a:ff:cb:07:d1: fb:11:d4:6f:84:c9:e1:8f:27:cc:9f:71:cb:1b:46: 7f:ab:e3:fb:cc:6c:c1:ce:e8:88:8d:bc:b1:a5:95: be:05:71:b9:d6:54:4c:34:2d:a4:a1:d4:0e:1d:29: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:64:26:67:1F:AF:AC:57:9D:69:87:A9:FA:AF:E8:41:B8:F0:E5:DD X509v3 Authority Key Identifier: keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:e9:7a:59:8d:fc:65:49:24:83:c2:5c:dd:73:6c:18:bd: 63:7b:02:a8:85:84:f2:1d:53:50:69:04:76:b2:1e:b2:a1:44: 2a:d3:fc:fd:83:7a:6d:5a:18:af:df:d4:ba:dd:48:a4:9b:3a: 4c:a4:d2:d6:07:89:9d:06:ed:12:f8:54:fb:c1:87:c9:5e:e1: e2:35:45:a2:f4:6d:fb:ff:7f:d2:e2:5b:b9:74:75:39:cf:c7: 5c:ac:2c:d0:3c:f9:87:1a:e9:ed:09:ae:37:62:97:a3:44:18: 9c:b1:1f:c2:63:ea:3f:20:d1:26:81:3d:ca:1d:c5:86:c1:23: 89:3f:b9:b0:09:9d:b0:41:d1:10:a2:90:87:7a:c9:e3:59:39: 03:01:1c:e5:cc:dd:26:e5:b9:84:69:c9:a0:31:57:52:da:85: e3:6c:01:a2:be:77:b3:f3:5e:07:53:ea:37:01:b0:71:47:00: f0:ba:37:c1:44:ac:22:d1:69:12:39:aa:00:ec:a1:63:14:b9: af:de:eb:77:9d:b9:a3:4c:e0:e1:99:58:ce:61:b5:16:b0:4c: b7:3d:d6:85:8e:79:31:dc:a9:3c:c0:0f:e3:9f:ae:ae:85:23: 4e:05:a5:b1:ec:06:ab:de:f4:b6:bd:ef:f6:72:5a:68:68:2d: 28:0f:4d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFY7DImAfmnDLtCN4d+7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MjQwZjAyN2E5NDA5MjI5YzU5ZmY2MzBhYTJhODBmOTM3 OGE5M2YwHhcNMjUxMjIzMTIwMTAyWhcNMjUxMjI0MTIwMTAyWjAzMTEwLwYDVQQD EygwYjY0MjY2NzFmYWZhYzU3OWQ2OTg3YTlmYWFmZTg0MWI4ZjBlNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpRttISfCquDXQ4KlFs92lwfU8z u7aZDusul7EuxedeV3ePZWsXz6+fCR0L693MgOFrmVSNavbfgia4q4MLNMdLqJ7/ GFpYllBIEyhkUWDeNMV1xpG01wGWHDmJ3zPZoo+mbDOYZcflmntJs60P+hKIotbu 9eywamoIpz4gUFf9LK0s2WRo1G41/QGLccGlVydeHCoW2/cleeNRV69bC0s8cgxM c0gWVJpMLdd2SHnghsTfbrZtH3390oM8POIOEuFXB9u/ODKODrW6Sv/LB9H7EdRv hMnhjyfMn3HLG0Z/q+P7zGzBzuiIjbyxpZW+BXG51lRMNC2kodQOHSlHiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtkJmcfr6xXnWmHqfqv6EG48OXdMB8GA1UdIwQY MBaAFKkkDwJ6lAkinFn/YwqiqA+TeKk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2Qt M2QxYjNhODZjZTg3LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2QtM2QxYjNhODZjZTg3 LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUnpelmN /GVJJIPCXN1zbBi9Y3sCqIWE8h1TUGkEdrIesqFEKtP8/YN6bVoYr9/Uut1IpJs6 TKTS1geJnQbtEvhU+8GHyV7h4jVFovRt+/9/0uJbuXR1Oc/HXKws0Dz5hxrp7Qmu N2KXo0QYnLEfwmPqPyDRJoE9yh3FhsEjiT+5sAmdsEHREKKQh3rJ41k5AwEc5czd JuW5hGnJoDFXUtqF42wBor53s/NeB1PqNwGwcUcA8Lo3wUSsItFpEjmqAOyhYxS5 r97rd525o0zg4ZlYzmG1FrBMtz3WhY55MdypPMAP45+uroUjTgWlsewGq970tr3v 9nJaaGgtKA9NTg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:59:39 2025 by rpki-client