This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json) Hash identifier: qcoG2tiGt80jxex8bYChFELDNW7nMGNHpsb76OJOVWk= Subject key identifier: 9B:1C:3C:43:B7:05:9A:6D:08:DC:1B:1E:F0:1E:B4:B3:96:F4:DC:29 Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523 Certificate serial: 019AF23F6D2E22F5D203C3CEE211EF032E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft Manifest number: 0479 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: AJ+OBzdy05NxlvmlvM71fVEUhgGiFkWAIB0oxp2QmQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6d:2e:22:f5:d2:03:c3:ce:e2:11:ef:03:2e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=9b1c3c43b7059a6d08dc1b1ef01eb4b396f4dc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:a3:78:0a:27:26:d6:4e:2b:e5:34:a0:28: 26:0a:07:68:7f:9b:f9:19:a7:0a:c8:3f:94:e3:98: 39:b1:d8:7d:d0:da:2a:e1:ff:0e:4d:07:0c:1c:e5: db:41:76:11:64:49:2c:4f:95:d0:0d:4a:3e:34:bc: 49:8c:21:a9:38:4e:50:ec:98:46:10:fc:b2:e9:fe: ea:e1:d8:83:b3:d1:a6:da:3a:1d:93:af:50:3c:8b: 4e:81:69:d2:ba:b5:16:6a:27:b8:fb:00:70:65:98: 8b:e6:26:b4:d0:66:56:97:19:bd:93:c2:8f:22:72: 77:0a:8b:f7:b4:e4:de:c8:bb:f9:8c:74:71:e1:78: e2:60:8b:cf:c0:1e:1c:cf:be:ea:b9:3a:92:e3:98: 65:3e:99:ea:ab:72:54:ad:0d:cd:51:ca:5a:5c:85: 2a:18:1d:88:61:8c:ad:2f:f1:a9:21:d6:60:a7:9f: 16:c3:dc:09:25:c7:c4:90:c6:db:80:34:86:b5:d5: 44:92:c5:1b:13:e0:c8:bc:13:a8:6b:c8:f1:ca:b1: 57:2a:31:b6:a0:2e:b3:21:5f:7a:ea:a8:0f:45:ee: 85:c7:b1:c2:fb:bf:80:2a:92:ed:00:e9:34:68:7d: 3b:4c:f1:62:8d:94:37:c3:c7:3c:ef:45:64:ad:ce: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:3C:43:B7:05:9A:6D:08:DC:1B:1E:F0:1E:B4:B3:96:F4:DC:29 X509v3 Authority Key Identifier: keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5e:cf:6a:14:80:dd:a9:0c:39:41:89:46:62:b0:dc:94:bf: ad:20:61:9d:16:3e:80:23:b3:5a:8d:93:78:b6:da:12:71:8f: ce:e7:7e:8e:70:4a:7d:4d:7e:c4:43:92:d3:38:24:a3:21:67: 7d:7f:d2:43:aa:29:59:06:5a:7a:67:2d:99:a2:a5:0d:9b:eb: ad:7c:55:59:b9:4d:ff:cc:71:66:43:8c:c9:69:ff:e6:77:e4: 58:a6:52:0a:15:08:d3:c2:5c:98:f3:66:c4:8c:42:14:ad:58: 23:3e:06:72:83:db:a4:72:c4:30:0d:89:21:e1:41:80:c8:70: 50:39:a8:97:60:41:71:c5:cf:7f:c3:1d:ff:62:aa:e4:cc:21: dc:fd:5b:84:20:0f:3d:bb:d9:bd:d2:5d:4d:aa:74:54:c5:7b: 7e:b2:53:c6:8e:e4:b5:35:41:f1:86:87:ec:8d:d9:6c:f2:14: 7b:73:e9:75:36:be:e8:a8:45:67:3a:14:20:05:fd:50:49:76: 10:1a:62:04:68:61:f9:de:ad:53:a6:b8:b0:d5:8b:92:2f:59: 0e:94:5b:6e:50:11:19:ac:62:7e:80:2b:8f:e4:aa:8a:db:8b: f1:a1:cc:af:e0:66:81:01:c8:c8:38:cc:cc:a8:6c:58:c3:8e: ab:fa:15:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP20uIvXSA8PO4hHvAy5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDhkMDExZWRiOGNkMzNlNjY3Njc4ODBjYTRhYjMwNjFk OWM1MjMwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg5YjFjM2M0M2I3MDU5YTZkMDhkYzFiMWVmMDFlYjRiMzk2ZjRkYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bGjeAonJtZOK+U0oCgmCgdof5v5 GacKyD+U45g5sdh90Noq4f8OTQcMHOXbQXYRZEksT5XQDUo+NLxJjCGpOE5Q7JhG EPyy6f7q4diDs9Gm2jodk69QPItOgWnSurUWaie4+wBwZZiL5ia00GZWlxm9k8KP InJ3Cov3tOTeyLv5jHRx4XjiYIvPwB4cz77quTqS45hlPpnqq3JUrQ3NUcpaXIUq GB2IYYytL/GpIdZgp58Ww9wJJcfEkMbbgDSGtdVEksUbE+DIvBOoa8jxyrFXKjG2 oC6zIV966qgPRe6Fx7HC+7+AKpLtAOk0aH07TPFijZQ3w8c870Vkrc6jVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJscPEO3BZptCNwbHvAetLOW9NwpMB8GA1UdIwQY MBaAFKlI0BHtuM0z5mdniAykqzBh2cUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4Mjgt M2Q1NDlmYmI4MzdmLzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4MjgtM2Q1NDlmYmI4Mzdm LzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG17PahSA 3akMOUGJRmKw3JS/rSBhnRY+gCOzWo2TeLbaEnGPzud+jnBKfU1+xEOS0zgkoyFn fX/SQ6opWQZaemctmaKlDZvrrXxVWblN/8xxZkOMyWn/5nfkWKZSChUI08JcmPNm xIxCFK1YIz4GcoPbpHLEMA2JIeFBgMhwUDmol2BBccXPf8Md/2Kq5Mwh3P1bhCAP PbvZvdJdTap0VMV7frJTxo7ktTVB8YaH7I3ZbPIUe3PpdTa+6KhFZzoUIAX9UEl2 EBpiBGhh+d6tU6a4sNWLki9ZDpRbblARGaxifoArj+SqituL8aHMr+BmgQHIyDjM zKhsWMOOq/oVdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:13 2025 by rpki-client