This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json) Hash identifier: 65CAq2HMtKykziLXmyfdNj0qHVQAfPzGdJzF6AbtMjA= Subject key identifier: 19:DF:87:D4:C6:A3:05:FA:A7:9D:3C:CC:51:D8:86:29:BE:76:39:E9 Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f Certificate serial: 019B3BD9B389E12E537102A9B8032472E1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft Manifest number: 0410 Signing time: Sat 20 Dec 2025 13:01:21 +0000 Manifest this update: Sat 20 Dec 2025 13:01:21 +0000 Manifest next update: Sun 21 Dec 2025 13:01:21 +0000 Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: WF8mAh/CVI/vdW/FMym/7AJB1leMNmZR1YXQTzyHFPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b3:89:e1:2e:53:71:02:a9:b8:03:24:72:e1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f Validity Not Before: Dec 20 13:01:21 2025 GMT Not After : Dec 21 13:01:21 2025 GMT Subject: CN=19df87d4c6a305faa79d3ccc51d88629be7639e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:4b:7c:ba:b0:0c:1e:9d:e9:0b:5f:10:00: ea:79:33:4e:e9:a2:7b:73:ad:9a:7a:68:61:60:ec: 1c:30:f0:a6:71:63:a9:ef:ff:a9:f7:07:29:e5:59: ad:25:33:fa:8f:55:5b:cd:cb:1d:23:b7:ec:2c:41: 72:07:c9:81:c7:53:bf:c8:26:65:4e:93:0b:f0:1a: c9:c3:97:5b:b1:2f:33:5f:95:08:63:a3:f6:15:99: a6:1c:5c:66:fc:38:02:89:93:50:96:00:bf:6a:92: af:28:41:e1:ea:05:1a:5d:f7:76:2d:47:df:83:78: 91:02:bb:48:25:73:fc:49:e0:c6:ee:7f:0c:21:69: 94:d6:59:3f:84:b7:02:96:eb:36:da:ad:f8:93:81: 4c:7e:7a:1b:b4:e6:da:9b:a8:9e:79:a8:1c:91:07: 71:02:75:b8:72:99:67:d0:71:74:33:40:99:93:32: 6c:7a:f5:27:74:06:45:83:c0:c5:ad:81:59:6b:fb: d2:e8:c2:64:b5:61:69:57:7d:85:2a:50:1b:ec:27: 91:13:b4:d4:73:f9:db:66:32:63:ed:72:eb:55:c8: 92:77:5a:4e:fe:67:24:97:04:a2:e5:58:44:c8:03: 3c:10:b1:6a:7f:0e:37:44:b1:43:c3:7e:85:8c:48: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:87:D4:C6:A3:05:FA:A7:9D:3C:CC:51:D8:86:29:BE:76:39:E9 X509v3 Authority Key Identifier: keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:14:2d:8b:c5:e0:a1:62:fb:6c:d0:4c:af:da:bd:89:d6: d0:5a:3b:29:63:19:f2:2d:55:34:b3:24:70:75:f5:fe:8b:b4: 14:c1:58:cf:aa:06:18:f8:72:06:52:2c:c7:9b:a0:67:fb:51: 5c:53:67:59:3d:10:b0:6d:e4:74:41:02:48:6d:78:b1:58:46: ce:38:22:46:1c:55:59:10:9e:cf:97:fa:24:97:e5:ae:3d:06: 3d:ef:fc:0c:af:7e:f6:b7:12:07:f3:0f:4e:b4:84:fc:51:d9: 5e:ad:aa:0c:fa:0a:6c:a9:14:68:03:4b:8f:c3:fb:2f:15:d0: f1:41:59:8a:63:eb:0b:8f:ba:4f:cf:ca:02:05:43:1d:9b:95: ae:2c:c3:6e:fc:e2:03:3c:2b:d2:1b:75:88:9b:14:7a:72:1d: e3:db:bc:b9:5e:ae:9e:a0:94:18:09:07:73:a1:d4:c1:07:90: 88:9a:93:16:c5:3f:d9:e4:81:21:28:88:a3:54:5c:91:40:7e: 76:23:2f:5c:ae:6e:ac:cc:f2:c8:66:a2:ff:d9:1e:d7:11:04: a4:79:68:c6:b9:42:5f:cd:90:34:ab:2c:46:7f:89:9d:8a:2f: 08:3f:8e:82:20:e0:74:2a:32:b8:ae:f7:60:91:ef:96:5b:2d: 48:2e:0f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bOJ4S5TcQKpuAMkcuGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmRjMmZiYWFhM2Q0NzU5Njc2YTc5YjhhZmRiNGMyMjVm YzA1NWYwHhcNMjUxMjIwMTMwMTIxWhcNMjUxMjIxMTMwMTIxWjAzMTEwLwYDVQQD EygxOWRmODdkNGM2YTMwNWZhYTc5ZDNjY2M1MWQ4ODYyOWJlNzYzOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGpLfLqwDB6d6QtfEADqeTNO6aJ7 c62aemhhYOwcMPCmcWOp7/+p9wcp5VmtJTP6j1VbzcsdI7fsLEFyB8mBx1O/yCZl TpML8BrJw5dbsS8zX5UIY6P2FZmmHFxm/DgCiZNQlgC/apKvKEHh6gUaXfd2LUff g3iRArtIJXP8SeDG7n8MIWmU1lk/hLcClus22q34k4FMfnobtObam6ieeagckQdx AnW4cpln0HF0M0CZkzJsevUndAZFg8DFrYFZa/vS6MJktWFpV32FKlAb7CeRE7TU c/nbZjJj7XLrVciSd1pO/mcklwSi5VhEyAM8ELFqfw43RLFDw36FjEibmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnfh9TGowX6p508zFHYhim+djnpMB8GA1UdIwQY MBaAFEAtwvuqo9R1lnanm4r9tMIl/AVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYt M2UwMjEzMzdjZWE2LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYtM2UwMjEzMzdjZWE2 LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV4ULYvF 4KFi+2zQTK/avYnW0Fo7KWMZ8i1VNLMkcHX1/ou0FMFYz6oGGPhyBlIsx5ugZ/tR XFNnWT0QsG3kdEECSG14sVhGzjgiRhxVWRCez5f6JJflrj0GPe/8DK9+9rcSB/MP TrSE/FHZXq2qDPoKbKkUaANLj8P7LxXQ8UFZimPrC4+6T8/KAgVDHZuVrizDbvzi Azwr0ht1iJsUenId49u8uV6unqCUGAkHc6HUwQeQiJqTFsU/2eSBISiIo1RckUB+ diMvXK5urMzyyGai/9ke1xEEpHloxrlCX82QNKssRn+JnYovCD+OgiDgdCoyuK73 YJHvllstSC4P+A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:52 2025 by rpki-client