This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json) Hash identifier: a5CkRVswdFFm3WwUn9Khg0Z9DSLCl3znsUnzKLDEVTI= Subject key identifier: FC:89:3D:6E:C4:9E:00:DE:F5:63:09:D0:7E:B2:41:5D:03:53:F0:55 Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67 Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967 Certificate serial: 019B315643D53CC29F47C53556418438BC55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft Manifest number: 081B Signing time: Thu 18 Dec 2025 12:01:35 +0000 Manifest this update: Thu 18 Dec 2025 12:01:35 +0000 Manifest next update: Fri 19 Dec 2025 12:01:35 +0000 Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: Et2Kb/9zISyJAAy2Fd7mhsma/5R+1MhSeQ/6m1p/YYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:43:d5:3c:c2:9f:47:c5:35:56:41:84:38:bc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967 Validity Not Before: Dec 18 12:01:35 2025 GMT Not After : Dec 19 12:01:35 2025 GMT Subject: CN=fc893d6ec49e00def56309d07eb2415d0353f055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:7d:d5:be:c6:62:8a:88:51:a8:be:6a:db: 92:66:da:6e:bb:c9:a9:a4:80:8c:ff:9e:84:f3:53: 9a:b5:3a:0d:c7:77:9f:b3:ef:1e:b4:fa:eb:82:ba: 28:24:d6:0e:2f:06:03:05:e4:ec:5a:98:16:b7:0c: 60:5d:5d:69:70:57:00:ed:42:c5:cf:e6:85:e4:48: db:ef:e4:fb:cb:c3:e0:2a:44:fc:d3:62:17:e9:9a: 45:19:56:a0:18:9d:8a:12:4c:88:ab:c8:75:64:f7: fa:3d:1c:1d:c0:61:4e:c4:98:58:83:38:5d:42:ea: bf:fe:32:4c:96:5f:57:0b:1e:fe:e6:ae:8e:b5:21: d5:78:42:a1:c1:09:a2:7c:4f:61:d4:a2:89:67:59: 48:3d:00:4c:4a:51:e6:bc:53:46:ed:e8:92:55:68: f3:28:b0:31:60:f8:6c:aa:fe:35:58:84:ff:15:a2: 7b:06:79:bf:c4:61:77:81:1f:a5:49:45:f2:7a:90: 89:ad:77:50:11:83:8c:66:ae:ba:30:6a:f0:d3:f3: f9:1f:30:4c:9f:34:4a:2f:97:33:42:09:99:df:46: 7a:e3:68:de:9f:8f:c5:5a:98:86:be:40:0a:fc:2f: 72:30:75:f5:72:99:16:77:d5:d4:1a:c0:6d:97:44: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:89:3D:6E:C4:9E:00:DE:F5:63:09:D0:7E:B2:41:5D:03:53:F0:55 X509v3 Authority Key Identifier: keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:99:f7:38:3d:87:30:c8:8b:15:cb:62:3d:03:69:87:55:4e: f4:7b:28:fd:ef:9f:bc:a0:8d:e5:1b:72:fa:3a:8a:8b:bc:74: 03:b4:cf:98:1c:72:70:55:95:1b:65:0e:fe:91:89:b5:82:2e: 34:88:af:42:82:8c:07:82:98:a6:93:cd:b8:a1:ff:76:52:7d: e2:e2:9d:72:31:a1:db:ed:84:14:3a:56:53:97:05:e1:70:dc: a9:f0:fb:ee:23:f7:70:bc:e7:7e:61:e9:fd:ed:0b:5f:4f:54: 18:a4:bf:54:4b:45:8d:9e:d4:e8:33:96:0f:d5:14:c9:00:2b: 24:6e:e1:0e:a2:6f:7f:ee:08:69:a3:c7:ed:ab:d4:4f:c8:17: 9c:23:07:50:1d:8d:fc:ea:1e:25:ad:83:3c:91:53:98:14:9c: b9:08:ea:3d:4c:79:0d:78:6d:12:42:46:e2:e7:af:bd:c8:0e: 5f:e0:31:3b:70:46:8c:71:e1:ea:38:3f:a3:a0:9f:e4:c7:78: 4d:6d:6b:93:24:1d:f3:08:46:f0:4c:39:04:4f:77:86:7a:13: 82:f0:6a:9f:cd:27:a8:83:4b:0c:5e:4e:d3:b0:45:64:1c:ac: 99:3c:63:c1:20:18:2a:aa:73:cc:b8:24:8d:59:b9:c6:d6:cc: 3a:23:37:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVkPVPMKfR8U1VkGEOLxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx M2E5NjcwHhcNMjUxMjE4MTIwMTM1WhcNMjUxMjE5MTIwMTM1WjAzMTEwLwYDVQQD EyhmYzg5M2Q2ZWM0OWUwMGRlZjU2MzA5ZDA3ZWIyNDE1ZDAzNTNmMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nZ91b7GYoqIUai+atuSZtpuu8mp pICM/56E81OatToNx3efs+8etPrrgrooJNYOLwYDBeTsWpgWtwxgXV1pcFcA7ULF z+aF5Ejb7+T7y8PgKkT802IX6ZpFGVagGJ2KEkyIq8h1ZPf6PRwdwGFOxJhYgzhd Quq//jJMll9XCx7+5q6OtSHVeEKhwQmifE9h1KKJZ1lIPQBMSlHmvFNG7eiSVWjz KLAxYPhsqv41WIT/FaJ7Bnm/xGF3gR+lSUXyepCJrXdQEYOMZq66MGrw0/P5HzBM nzRKL5czQgmZ30Z642jen4/FWpiGvkAK/C9yMHX1cpkWd9XUGsBtl0QZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyJPW7EngDe9WMJ0H6yQV0DU/BVMB8GA1UdIwQY MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJn3OD2H MMiLFctiPQNph1VO9Hso/e+fvKCN5Rty+jqKi7x0A7TPmBxycFWVG2UO/pGJtYIu NIivQoKMB4KYppPNuKH/dlJ94uKdcjGh2+2EFDpWU5cF4XDcqfD77iP3cLznfmHp /e0LX09UGKS/VEtFjZ7U6DOWD9UUyQArJG7hDqJvf+4IaaPH7avUT8gXnCMHUB2N /OoeJa2DPJFTmBScuQjqPUx5DXhtEkJG4uevvcgOX+AxO3BGjHHh6jg/o6Cf5Md4 TW1rkyQd8whG8Ew5BE93hnoTgvBqn80nqINLDF5O07BFZBysmTxjwSAYKqpzzLgk jVm5xtbMOiM3AQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:06 2025 by rpki-client