This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json) Hash identifier: mlOw2pzt85GLAW4SWzVjOqnPCYMhTuv1nTLRQHorv4I= Subject key identifier: 5A:10:3B:05:D3:3E:ED:51:22:7E:D1:8A:DB:18:2E:D8:41:F0:3B:9C Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5 Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5 Certificate serial: 019B23D1802B29DE34BB4834403F39E22FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft Manifest number: 0E93 Signing time: Mon 15 Dec 2025 21:01:30 +0000 Manifest this update: Mon 15 Dec 2025 21:01:30 +0000 Manifest next update: Tue 16 Dec 2025 21:01:30 +0000 Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: wo59VzIgpP8TvQlt9oZrPYJK/3hxhQamOxHHGGO2KEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:80:2b:29:de:34:bb:48:34:40:3f:39:e2:2f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5 Validity Not Before: Dec 15 21:01:30 2025 GMT Not After : Dec 16 21:01:30 2025 GMT Subject: CN=5a103b05d33eed51227ed18adb182ed841f03b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:e4:7f:aa:12:8a:2f:88:01:70:f3:c1:35: 21:4e:4b:e2:f7:9e:96:32:60:69:c3:3d:49:9b:1c: 4b:4d:e3:7d:58:af:cd:2a:45:9b:02:97:99:9a:e4: 1e:5a:23:f5:33:d4:08:37:76:7b:d5:70:a8:a1:49: c2:df:64:eb:ec:a2:1c:a2:8d:92:a5:e3:96:67:61: 30:31:ae:09:13:4f:11:23:2f:34:72:39:c6:37:5c: 1d:82:b5:1a:8e:47:13:27:63:76:bd:63:07:f0:6c: 8b:cf:e3:e3:de:87:6d:57:7f:31:44:47:55:2e:57: 64:e7:22:01:7a:f5:17:4d:a9:8c:9e:22:2d:60:9b: b2:cf:fe:38:e8:4e:bd:d5:db:43:22:df:c2:bc:ef: 8a:4f:6b:34:0e:c3:af:d2:61:e5:cf:82:fe:0b:7b: 87:8f:38:02:45:1e:e1:8f:6a:0b:57:b0:78:20:20: d7:ca:32:66:d3:d9:6a:1f:f9:1f:57:b4:8c:16:93: 97:09:a8:98:7e:b4:87:01:1e:d7:c6:40:1a:6a:56: a0:fa:55:d3:54:43:e2:e8:57:40:77:49:1a:f5:dd: 2f:c9:99:f1:d4:85:e3:78:14:5c:ec:ed:b3:cd:8c: 1a:52:69:88:64:55:b7:ff:91:fa:d0:de:b7:14:ab: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:10:3B:05:D3:3E:ED:51:22:7E:D1:8A:DB:18:2E:D8:41:F0:3B:9C X509v3 Authority Key Identifier: keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d3:68:2c:86:f0:31:37:94:0e:7e:56:45:87:58:13:03:2b: b7:0f:69:c8:ba:89:5a:e2:bd:41:88:14:6c:cf:0d:df:7a:98: 68:06:13:db:24:bf:ee:bf:4e:4f:d7:6d:11:d2:df:07:d2:98: 04:c1:80:f2:d9:03:90:cb:56:d2:65:a4:64:f6:c6:bf:18:07: 8b:1f:58:f5:9d:cf:4b:06:52:55:62:29:6a:f6:17:a0:67:3e: 76:4f:c3:fd:d0:33:83:40:0e:45:bf:15:47:10:d2:c9:15:cc: a1:2c:1a:b4:cd:65:dd:38:14:b3:0e:ab:fb:d9:de:5b:a8:25: e6:83:08:27:25:3a:e0:a3:0a:49:9f:7a:58:73:8a:5d:39:1d: 02:94:71:12:2c:90:dc:d1:82:02:65:09:77:90:23:67:fa:1b: 89:ce:73:09:37:6d:8d:06:b1:5f:0e:a7:95:5c:b6:33:1f:d2: 32:c4:04:0a:05:08:a3:44:34:2b:54:0f:f9:93:5a:69:8d:0e: 7f:7e:c6:fc:7a:0f:bf:ee:1b:07:2e:31:18:1e:b2:41:89:27: 9b:40:3c:6a:eb:b9:ac:ea:1d:1a:cd:b5:e3:6c:36:10:ed:1a: 15:02:86:f4:1b:d0:14:82:bf:c1:ae:f4:47:31:11:3f:d4:69: a6:ad:0f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0YArKd40u0g0QD854i/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMTRhZWY4MDNkNTBkNzAwYmI5ODUyYWU4YmIyYmI0MDky NjE2YTUwHhcNMjUxMjE1MjEwMTMwWhcNMjUxMjE2MjEwMTMwWjAzMTEwLwYDVQQD Eyg1YTEwM2IwNWQzM2VlZDUxMjI3ZWQxOGFkYjE4MmVkODQxZjAzYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYXkf6oSii+IAXDzwTUhTkvi956W MmBpwz1JmxxLTeN9WK/NKkWbApeZmuQeWiP1M9QIN3Z71XCooUnC32Tr7KIcoo2S peOWZ2EwMa4JE08RIy80cjnGN1wdgrUajkcTJ2N2vWMH8GyLz+Pj3odtV38xREdV Lldk5yIBevUXTamMniItYJuyz/446E691dtDIt/CvO+KT2s0DsOv0mHlz4L+C3uH jzgCRR7hj2oLV7B4ICDXyjJm09lqH/kfV7SMFpOXCaiYfrSHAR7XxkAaalag+lXT VEPi6FdAd0ka9d0vyZnx1IXjeBRc7O2zzYwaUmmIZFW3/5H60N63FKt19wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoQOwXTPu1RIn7RitsYLthB8DucMB8GA1UdIwQY MBaAFKsUrvgD1Q1wC7mFKui7K7QJJhalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mMzJjMmEtYzA1NC00MTdkLThlMGMt YzAwYmFjZmZmY2U1LzEvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mMzJjMmEtYzA1NC00MTdkLThlMGMtYzAwYmFjZmZmY2U1 LzEvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtNoLIbw MTeUDn5WRYdYEwMrtw9pyLqJWuK9QYgUbM8N33qYaAYT2yS/7r9OT9dtEdLfB9KY BMGA8tkDkMtW0mWkZPbGvxgHix9Y9Z3PSwZSVWIpavYXoGc+dk/D/dAzg0AORb8V RxDSyRXMoSwatM1l3TgUsw6r+9neW6gl5oMIJyU64KMKSZ96WHOKXTkdApRxEiyQ 3NGCAmUJd5AjZ/obic5zCTdtjQaxXw6nlVy2Mx/SMsQECgUIo0Q0K1QP+ZNaaY0O f37G/HoPv+4bBy4xGB6yQYknm0A8auu5rOodGs2142w2EO0aFQKG9BvQFIK/wa70 RzERP9Rppq0PRw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:29:50 2025 by rpki-client