This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json) Hash identifier: V4b3i/QVW1hHUhOaaGwCuXGL7hpjt3ZuTa6pOtR42DQ= Subject key identifier: 92:2D:EC:F3:A6:4C:95:E9:CA:10:76:EB:CC:02:75:2B:1C:32:79:21 Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b Certificate serial: 019B443893EE7C2AC1230CCC35048E1B46B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft Manifest number: 0B78 Signing time: Mon 22 Dec 2025 04:01:57 +0000 Manifest this update: Mon 22 Dec 2025 04:01:57 +0000 Manifest next update: Tue 23 Dec 2025 04:01:57 +0000 Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: wkxIcAt2VTWbGWkPa1yQlJAwJ+mJ4nfyrLDOsCBVmXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:93:ee:7c:2a:c1:23:0c:cc:35:04:8e:1b:46:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b Validity Not Before: Dec 22 04:01:57 2025 GMT Not After : Dec 23 04:01:57 2025 GMT Subject: CN=922decf3a64c95e9ca1076ebcc02752b1c327921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:fc:8e:06:2f:ba:3e:7e:bf:90:82:f0:7e: 08:30:ac:bc:0b:58:57:08:b7:b8:f8:49:b0:ce:28: 9c:b8:59:86:49:a3:33:9d:07:9e:a4:60:26:b1:77: 8d:93:bd:a1:fb:3d:76:21:46:4f:f1:56:4f:29:bd: ed:9e:00:3d:c8:6b:8f:71:ba:b4:1e:b8:88:23:da: b4:37:46:73:d1:83:ac:c1:19:01:ff:90:60:ca:96: dc:96:fe:a9:1e:b0:03:41:28:3b:54:43:b8:6e:d1: bf:dc:c3:ed:db:25:8c:dc:ab:30:5f:a1:7d:a7:05: 1a:7b:ea:a6:20:af:ed:0a:ad:c4:61:ce:ea:7e:40: 3a:bd:cc:6c:e3:ef:75:c2:de:9d:6d:bb:53:8c:6b: 2a:90:5f:a0:e7:7d:44:95:39:dc:1c:e3:34:54:97: 25:4e:27:40:d3:b9:0c:b6:47:93:a2:17:5f:d2:f9: 9e:b9:5c:3a:97:d2:c7:02:d8:1a:35:f3:e2:8e:0f: 29:e4:4c:3e:09:7e:a9:64:4a:22:62:fc:40:fd:de: 6d:3f:b7:06:20:b5:c9:11:45:c8:04:05:ad:63:0d: 31:c3:24:40:40:d5:a0:2e:66:51:36:95:12:ce:59: 54:ed:a5:7a:9a:30:e0:21:c2:df:20:82:b3:fd:c1: f3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2D:EC:F3:A6:4C:95:E9:CA:10:76:EB:CC:02:75:2B:1C:32:79:21 X509v3 Authority Key Identifier: keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:37:ac:62:ef:e3:fe:25:46:7b:77:57:6e:1e:76:2e:d9: 4f:bb:6b:63:1f:3d:2b:de:4a:04:1c:c3:c5:eb:2b:94:17:13: 8d:41:a7:82:b9:74:a7:15:c5:ac:48:0c:9d:a5:74:40:7b:cd: 73:b4:d7:48:8f:55:38:58:9b:ee:d7:fb:ee:15:e6:76:d7:bf: 65:73:a8:5c:12:74:b1:66:b9:28:c7:d5:7d:ff:76:8f:b7:ab: 1d:47:d0:54:48:62:c2:3b:50:45:c7:ea:d8:1a:3c:4d:36:27: 01:07:f8:06:70:d7:32:b7:f7:ec:71:87:d9:4a:5f:c4:91:b1: 3a:28:64:fe:4d:f0:c1:89:3d:5b:f7:bd:a6:27:6b:1b:5b:5c: 00:8d:ba:b4:2b:7e:64:af:c0:8e:92:f1:b3:7f:49:17:cf:23: e8:76:d7:3b:f3:fa:e3:49:a7:4b:8a:7b:19:22:12:60:8e:70: a5:30:72:0d:ab:3c:64:f8:ef:86:c1:ce:6a:3e:4f:86:87:51: f8:af:ee:cc:77:7c:da:06:a5:49:19:6f:27:8b:6e:5e:5e:8d: fc:0e:72:88:9e:e2:23:bc:9a:ae:44:56:c1:34:9d:69:8d:2b: a9:97:6c:a0:c9:65:11:f3:eb:1d:d8:e7:43:7d:23:d2:aa:85: 7f:2d:d8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJPufCrBIwzMNQSOG0a2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0 MjJlOGIwHhcNMjUxMjIyMDQwMTU3WhcNMjUxMjIzMDQwMTU3WjAzMTEwLwYDVQQD Eyg5MjJkZWNmM2E2NGM5NWU5Y2ExMDc2ZWJjYzAyNzUyYjFjMzI3OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcH8jgYvuj5+v5CC8H4IMKy8C1hX CLe4+EmwziicuFmGSaMznQeepGAmsXeNk72h+z12IUZP8VZPKb3tngA9yGuPcbq0 HriII9q0N0Zz0YOswRkB/5Bgypbclv6pHrADQSg7VEO4btG/3MPt2yWM3KswX6F9 pwUae+qmIK/tCq3EYc7qfkA6vcxs4+91wt6dbbtTjGsqkF+g531ElTncHOM0VJcl TidA07kMtkeTohdf0vmeuVw6l9LHAtgaNfPijg8p5Ew+CX6pZEoiYvxA/d5tP7cG ILXJEUXIBAWtYw0xwyRAQNWgLmZRNpUSzllU7aV6mjDgIcLfIIKz/cHzWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIt7POmTJXpyhB268wCdSscMnkhMB8GA1UdIwQY MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5I3rGLv 4/4lRnt3V24edi7ZT7trYx89K95KBBzDxesrlBcTjUGngrl0pxXFrEgMnaV0QHvN c7TXSI9VOFib7tf77hXmdte/ZXOoXBJ0sWa5KMfVff92j7erHUfQVEhiwjtQRcfq 2Bo8TTYnAQf4BnDXMrf37HGH2UpfxJGxOihk/k3wwYk9W/e9pidrG1tcAI26tCt+ ZK/AjpLxs39JF88j6HbXO/P640mnS4p7GSISYI5wpTByDas8ZPjvhsHOaj5PhodR +K/uzHd82galSRlvJ4tuXl6N/A5yiJ7iI7yarkRWwTSdaY0rqZdsoMllEfPrHdjn Q30j0qqFfy3YmA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:27 2025 by rpki-client