This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json) Hash identifier: zvUleA7G48uRFFUW8DAzQsDw9t2SowCtGF86ljp2+J4= Subject key identifier: 33:11:AB:AA:73:E5:7D:32:E0:94:80:0F:F0:87:D2:CE:7B:92:7D:AC Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Certificate serial: 019B4091CE8425E48601F478ACD62CBDDBAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft Manifest number: 0195 Signing time: Sun 21 Dec 2025 11:00:55 +0000 Manifest this update: Sun 21 Dec 2025 11:00:55 +0000 Manifest next update: Mon 22 Dec 2025 11:00:55 +0000 Files and hashes: 1: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: u+3wkymmclwxV7C5hMKITab7VEILnqdrJn86ObJB2N8=) 2: ZhWVS_BxzDC-crYvHmP5Jp_0l9w.roa (hash: 2arBDBURi5cw54gyN2A95A3jd2xSCZuw/tiSOf4SzU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ce:84:25:e4:86:01:f4:78:ac:d6:2c:bd:db:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Validity Not Before: Dec 21 11:00:55 2025 GMT Not After : Dec 22 11:00:55 2025 GMT Subject: CN=3311abaa73e57d32e094800ff087d2ce7b927dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:b3:83:03:fb:a1:af:37:f6:4a:e9:9b:96: 00:0d:ca:d6:22:0f:cb:2c:76:2b:e0:61:c7:7e:89: 05:4a:e3:7e:8b:0c:62:90:c7:55:0b:df:b7:14:42: e0:07:e2:72:49:fb:d6:e9:e4:7e:c7:45:e6:d4:e7: 87:49:85:59:d5:af:08:fa:c5:fd:c8:b0:a9:ed:a5: e6:62:9c:7b:a3:e8:10:dd:15:b0:16:1b:eb:65:75: a5:0a:84:f7:65:68:bf:d6:8a:37:2e:85:83:12:e2: fc:e7:a1:5d:d0:fb:74:da:fc:c3:25:12:f0:5a:fa: 5a:7c:07:c0:47:d2:c7:7a:91:a3:00:63:b0:99:f4: 69:9a:45:ab:29:60:d2:57:f9:03:09:1c:01:f0:c1: 85:a5:96:bc:0b:a4:9a:a0:39:3d:77:83:55:e4:8d: ab:dc:af:d7:6d:80:8c:0c:52:b0:95:6d:de:60:cc: a9:02:56:0f:f6:69:44:c3:b4:58:dd:0b:83:6c:d8: e1:3c:cc:97:e6:70:31:87:76:31:31:a3:b7:a5:32: 0f:1f:c6:f7:c7:00:40:82:7b:8b:99:f4:4b:ca:28: 3a:91:af:a5:b5:8f:a9:ed:10:0d:b0:5e:95:e7:e1: 90:d8:29:57:5b:4d:11:51:5c:10:e6:cf:e7:9a:7a: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:AB:AA:73:E5:7D:32:E0:94:80:0F:F0:87:D2:CE:7B:92:7D:AC X509v3 Authority Key Identifier: keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:be:cf:c8:79:88:ce:26:1c:e3:3d:ea:c7:1e:a2:e2:96:75: f7:57:24:57:75:86:64:8e:d2:09:d3:71:cb:49:ac:cd:98:20: f7:d4:b5:30:27:77:17:52:8a:05:e6:0b:21:75:db:7c:82:ef: 63:4b:56:8e:4e:f8:5b:c1:ab:f5:0a:17:9d:03:0f:46:8d:53: 83:11:78:ef:28:31:44:37:06:cc:14:78:60:41:3a:1f:66:6a: 8f:91:1a:a8:bf:8c:35:db:4a:65:5a:b5:15:1a:08:e0:c5:5f: 18:d3:ff:7f:fb:fe:a9:b5:57:c9:34:40:a0:87:8d:ed:c6:6d: d1:df:cb:85:c3:6c:2f:e5:fd:04:9f:e3:3b:55:40:d1:c9:4f: 90:20:eb:2b:f6:af:fc:7b:33:4a:31:43:97:dd:7b:8b:a1:e8: b7:6e:84:f0:50:50:e7:eb:a6:2d:24:0a:77:06:b5:f8:43:dc: d4:57:03:2c:45:21:94:22:7c:d2:46:cb:f9:6d:0b:4f:f2:c6: 25:c3:84:94:37:48:29:17:c3:43:da:ca:73:59:e5:42:b5:0a: 46:7e:1c:9b:7b:2d:f0:78:98:b8:c0:58:37:09:6f:4d:d8:14: 13:3f:ee:57:2c:78:38:25:03:dd:79:9f:b3:44:4b:e1:ca:1e: e2:8e:d0:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkc6EJeSGAfR4rNYsvduvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj MTI2MzcwHhcNMjUxMjIxMTEwMDU1WhcNMjUxMjIyMTEwMDU1WjAzMTEwLwYDVQQD EygzMzExYWJhYTczZTU3ZDMyZTA5NDgwMGZmMDg3ZDJjZTdiOTI3ZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb+zgwP7oa839krpm5YADcrWIg/L LHYr4GHHfokFSuN+iwxikMdVC9+3FELgB+JySfvW6eR+x0Xm1OeHSYVZ1a8I+sX9 yLCp7aXmYpx7o+gQ3RWwFhvrZXWlCoT3ZWi/1oo3LoWDEuL856Fd0Pt02vzDJRLw WvpafAfAR9LHepGjAGOwmfRpmkWrKWDSV/kDCRwB8MGFpZa8C6SaoDk9d4NV5I2r 3K/XbYCMDFKwlW3eYMypAlYP9mlEw7RY3QuDbNjhPMyX5nAxh3YxMaO3pTIPH8b3 xwBAgnuLmfRLyig6ka+ltY+p7RANsF6V5+GQ2ClXW00RUVwQ5s/nmno7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMRq6pz5X0y4JSAD/CH0s57kn2sMB8GA1UdIwQY MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr7PyHmI ziYc4z3qxx6i4pZ191ckV3WGZI7SCdNxy0mszZgg99S1MCd3F1KKBeYLIXXbfILv Y0tWjk74W8Gr9QoXnQMPRo1TgxF47ygxRDcGzBR4YEE6H2Zqj5EaqL+MNdtKZVq1 FRoI4MVfGNP/f/v+qbVXyTRAoIeN7cZt0d/LhcNsL+X9BJ/jO1VA0clPkCDrK/av /HszSjFDl917i6Hot26E8FBQ5+umLSQKdwa1+EPc1FcDLEUhlCJ80kbL+W0LT/LG JcOElDdIKRfDQ9rKc1nlQrUKRn4cm3st8HiYuMBYNwlvTdgUEz/uVyx4OCUD3Xmf s0RL4coe4o7QWw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:33:03 2025 by rpki-client