This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json) Hash identifier: HzTj6K0g6Bnio14PnKYzRUJ1p/7tJYYy9w48V1Y1ACo= Subject key identifier: E6:69:BE:CD:96:43:F8:68:4A:17:C0:10:99:FF:00:65:B1:3A:18:A2 Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Certificate serial: 019B5486EDFF3B1E9D795D1264CE28B49211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft Manifest number: 122B Signing time: Thu 25 Dec 2025 08:01:27 +0000 Manifest this update: Thu 25 Dec 2025 08:01:27 +0000 Manifest next update: Fri 26 Dec 2025 08:01:27 +0000 Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: lbIW+/lA5lC7obM4flOh2EE1DEzdghNt0k8irIsfEHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:ed:ff:3b:1e:9d:79:5d:12:64:ce:28:b4:92:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Validity Not Before: Dec 25 08:01:27 2025 GMT Not After : Dec 26 08:01:27 2025 GMT Subject: CN=e669becd9643f8684a17c01099ff0065b13a18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:2a:2e:e2:a6:88:56:bb:35:67:26:18:57: 7f:ba:97:47:41:cd:34:a0:5c:5a:f7:69:19:08:83: a4:39:f5:9d:f3:16:8a:3f:3b:e4:89:d6:fe:88:62: c9:68:9e:bd:d1:c9:74:93:02:66:48:90:da:1c:04: 24:a2:cc:0c:64:ff:36:df:64:bf:34:fa:71:21:5d: 05:5e:19:4a:b4:05:ef:0b:4d:e9:d0:cf:24:e0:a8: b4:1a:1b:82:9f:e1:5d:c5:59:de:ee:ba:5a:28:49: f6:df:a5:5d:4d:cc:58:8e:37:6a:a8:21:16:af:8b: 16:c0:da:0c:7e:ab:80:cd:15:c4:06:8b:e2:c9:ae: ee:78:46:d9:fc:54:24:4b:1d:40:94:05:ff:3f:ae: 9e:cb:14:91:ed:eb:38:94:f5:21:ee:6d:b9:3f:9a: ec:a2:43:46:a0:18:03:3a:07:20:50:7d:ab:5c:7f: ae:2c:7e:e8:f4:ea:21:78:5a:77:f1:43:53:39:e8: a4:ca:9d:33:29:26:a8:d8:c6:33:c5:f7:96:aa:62: 7e:a9:f8:c3:ee:a7:d4:50:95:f7:f9:9f:14:d2:61: 53:c7:2f:8f:b3:3d:17:f0:68:f1:7b:95:e4:7b:2f: a4:49:8b:ef:f7:c0:7c:b2:0c:6e:e6:f1:4e:25:96: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:69:BE:CD:96:43:F8:68:4A:17:C0:10:99:FF:00:65:B1:3A:18:A2 X509v3 Authority Key Identifier: keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:09:a2:e8:07:e8:26:f3:f9:b4:10:6e:cb:e1:71:cc:11: ba:9a:0e:9e:28:5c:c0:e4:d1:c2:bb:27:76:49:af:0b:21:75: fd:2f:13:60:40:a5:8c:fd:a4:50:5d:1e:20:3b:b7:49:00:48: ff:b6:74:37:5a:6d:ae:bf:df:6b:62:78:74:58:5a:77:de:91: 58:a3:f8:ef:6e:a6:ac:77:76:ff:ff:56:c0:ea:7a:5d:43:eb: 62:85:26:87:cb:d2:b5:b4:0b:a3:c9:35:c1:2a:0e:0e:16:bc: 7b:ce:19:0a:e0:65:83:0d:3f:d3:bd:49:50:62:5f:af:f8:d8: ba:17:ed:ab:f6:1f:8c:8f:c5:34:eb:62:c6:7c:68:8b:a4:6a: ea:a3:e4:8e:09:8f:7e:dc:0a:25:91:03:7b:b2:6a:f3:eb:14: 78:f1:65:9b:69:d9:2f:63:3d:65:99:4c:48:c0:b6:28:d6:51: 71:b8:f6:7d:ec:2a:98:77:2f:bb:ae:58:1c:37:98:0d:e9:76: 6c:fc:c6:4c:bc:c4:ab:61:58:44:d0:6c:8d:bc:be:f6:ed:d2: 24:89:3b:45:f3:fd:c8:fe:98:ad:65:48:6f:e1:ea:72:8f:8f: 39:f7:f0:1d:26:58:5b:89:e9:91:94:68:7e:9e:ae:d6:c8:37: c6:bf:7e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhu3/Ox6deV0SZM4otJIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMTFjY2QyYmQyMjU0NGFiZTU4NWE3Y2QzZjk0OTExZWEw Yzk0MmEwHhcNMjUxMjI1MDgwMTI3WhcNMjUxMjI2MDgwMTI3WjAzMTEwLwYDVQQD EyhlNjY5YmVjZDk2NDNmODY4NGExN2MwMTA5OWZmMDA2NWIxM2ExOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9sqLuKmiFa7NWcmGFd/updHQc00 oFxa92kZCIOkOfWd8xaKPzvkidb+iGLJaJ690cl0kwJmSJDaHAQkoswMZP8232S/ NPpxIV0FXhlKtAXvC03p0M8k4Ki0GhuCn+FdxVne7rpaKEn236VdTcxYjjdqqCEW r4sWwNoMfquAzRXEBoviya7ueEbZ/FQkSx1AlAX/P66eyxSR7es4lPUh7m25P5rs okNGoBgDOgcgUH2rXH+uLH7o9OoheFp38UNTOeikyp0zKSao2MYzxfeWqmJ+qfjD 7qfUUJX3+Z8U0mFTxy+Psz0X8Gjxe5Xkey+kSYvv98B8sgxu5vFOJZZXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZpvs2WQ/hoShfAEJn/AGWxOhiiMB8GA1UdIwQY MBaAFEMRzNK9IlRKvlhafNP5SRHqDJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYt ZDM3OGJhZjZhYTkyLzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYtZDM3OGJhZjZhYTky LzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj0JougH 6Cbz+bQQbsvhccwRupoOnihcwOTRwrsndkmvCyF1/S8TYECljP2kUF0eIDu3SQBI /7Z0N1ptrr/fa2J4dFhad96RWKP4726mrHd2//9WwOp6XUPrYoUmh8vStbQLo8k1 wSoODha8e84ZCuBlgw0/071JUGJfr/jYuhftq/YfjI/FNOtixnxoi6Rq6qPkjgmP ftwKJZEDe7Jq8+sUePFlm2nZL2M9ZZlMSMC2KNZRcbj2fewqmHcvu65YHDeYDel2 bPzGTLzEq2FYRNBsjby+9u3SJIk7RfP9yP6YrWVIb+Hqco+POffwHSZYW4npkZRo fp6u1sg3xr9+Ag== -----END CERTIFICATE-----Generated at Thu Dec 25 13:11:06 2025 by rpki-client