This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft File: Q5OKPegDvWyR8UrZZ71BQbigKK8.mft (raw, json) Hash identifier: eRJtmSYebNVatndajG6/myGnN9GdVG6H7pGEDKezsiY= Subject key identifier: 32:7E:74:DA:8A:63:F2:2F:CB:BA:D6:DD:0E:A4:67:D4:8B:79:DF:D6 Authority key identifier: 43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF Certificate issuer: /CN=43938a3de803bd6c91f14ad967bd4141b8a028af Certificate serial: 019AF3F80193C853F5A955E7BC3AEDD5F66F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft Manifest number: 1483 Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: Q5OKPegDvWyR8UrZZ71BQbigKK8.crl (hash: ilhedz4NxBvCeBqhJjtEro0X4oat2HwLoGQW3x7SHvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:01:93:c8:53:f5:a9:55:e7:bc:3a:ed:d5:f6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43938a3de803bd6c91f14ad967bd4141b8a028af Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=327e74da8a63f22fcbbad6dd0ea467d48b79dfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:4a:09:7e:00:b6:1f:3b:d3:4f:86:64:30: f1:26:f8:4a:9f:20:12:57:ff:d6:92:c2:2b:de:5a: e0:17:bf:fd:91:a8:95:aa:0d:aa:ef:1d:cd:6e:77: c8:3c:bb:b2:5c:37:8a:6e:18:9f:64:1a:53:c2:0b: 3e:8c:17:0c:45:90:ec:ae:5a:df:0a:92:7d:53:f3: b0:63:e2:31:1a:18:c8:53:ca:e5:7e:db:43:fa:72: 65:b0:d3:df:20:d6:1c:0e:ba:df:05:be:83:7d:58: cd:1f:b8:ce:1f:e0:c0:b6:e7:a8:a1:66:a3:92:fc: 2e:6c:fa:ea:02:7d:f9:16:ed:fc:84:9f:9a:a0:c4: e4:60:58:01:0c:a1:ba:8a:8b:65:d4:94:8a:fa:aa: bf:4a:a6:6d:88:e9:83:33:cf:23:ee:04:d7:9f:2e: 91:38:e0:a3:ac:ed:6b:3f:ac:ef:99:f3:a0:43:f4: 37:60:a2:d5:ee:eb:89:d7:0c:52:cb:bf:a1:48:31: 10:f8:0e:4f:af:c4:82:ae:fe:3c:3c:eb:f5:f3:85: 26:45:f4:0f:cc:27:fd:2d:41:f6:51:c8:d4:79:3e: 17:8a:46:ae:50:77:78:c7:cd:b6:06:75:fe:22:41: 18:ea:79:a5:c1:46:11:23:4c:71:3c:52:8b:36:08: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:74:DA:8A:63:F2:2F:CB:BA:D6:DD:0E:A4:67:D4:8B:79:DF:D6 X509v3 Authority Key Identifier: keyid:43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:c1:b4:9d:9a:25:45:aa:97:86:a5:03:ec:3a:e8:fc:36: 2e:b0:c6:b4:69:1b:d9:9d:e0:ac:21:a3:2d:8b:c1:d0:7e:2c: 7e:dc:b1:06:3a:33:c6:2e:bc:24:eb:5e:99:59:c9:44:70:22: 19:47:4d:e2:d3:ba:1c:36:f6:23:0c:c9:4b:45:1d:6a:be:95: 86:b6:e0:b5:09:dc:99:1f:03:86:70:b1:f6:11:21:18:69:e6: c9:65:20:30:35:c1:b1:a3:80:75:86:cd:d6:78:57:f9:a1:7f: 89:d8:d4:17:29:af:70:e0:36:75:59:40:fd:a8:c0:3f:54:a3: a1:20:aa:76:fe:17:95:55:28:cb:64:b4:20:33:ee:b1:40:b2: 16:1e:29:94:56:b5:9d:8e:3c:8f:1c:c3:f8:0a:a5:8e:8d:b3: 79:5d:32:ad:cf:83:96:bc:e1:ab:02:75:2c:5c:94:42:e9:1b: 0d:32:05:54:37:bd:45:b4:4a:79:c8:81:e6:6e:05:ff:86:c4: 59:a8:15:5d:f4:01:6a:45:99:c9:b2:45:4b:31:23:59:c6:7c: 98:61:8f:3a:a8:4c:88:85:65:7f:42:f1:99:4a:0f:46:0b:bd: 7b:24:d6:45:e1:97:28:c3:fa:55:b9:14:cf:a2:fe:db:4e:a2: f6:76:eb:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AGTyFP1qVXnvDrt1fZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTM4YTNkZTgwM2JkNmM5MWYxNGFkOTY3YmQ0MTQxYjhh MDI4YWYwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD EygzMjdlNzRkYThhNjNmMjJmY2JiYWQ2ZGQwZWE0NjdkNDhiNzlkZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqtKCX4Ath8700+GZDDxJvhKnyAS V//WksIr3lrgF7/9kaiVqg2q7x3NbnfIPLuyXDeKbhifZBpTwgs+jBcMRZDsrlrf CpJ9U/OwY+IxGhjIU8rlfttD+nJlsNPfINYcDrrfBb6DfVjNH7jOH+DAtueooWaj kvwubPrqAn35Fu38hJ+aoMTkYFgBDKG6iotl1JSK+qq/SqZtiOmDM88j7gTXny6R OOCjrO1rP6zvmfOgQ/Q3YKLV7uuJ1wxSy7+hSDEQ+A5Pr8SCrv48POv184UmRfQP zCf9LUH2UcjUeT4XikauUHd4x822BnX+IkEY6nmlwUYRI0xxPFKLNggHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ+dNqKY/Ivy7rW3Q6kZ9SLed/WMB8GA1UdIwQY MBaAFEOTij3oA71skfFK2We9QUG4oCivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVPS1BlZ0R2V3lSOFVyWlo3MUJRYmlnS0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lY2RhMjQtZDdjMy00NDZhLWFmMzYt ZmU1NjM0YzE3Y2M5LzEvUTVPS1BlZ0R2V3lSOFVyWlo3MUJRYmlnS0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lY2RhMjQtZDdjMy00NDZhLWFmMzYtZmU1NjM0YzE3Y2M5 LzEvUTVPS1BlZ0R2V3lSOFVyWlo3MUJRYmlnS0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmL7BtJ2a JUWql4alA+w66Pw2LrDGtGkb2Z3grCGjLYvB0H4sftyxBjozxi68JOtemVnJRHAi GUdN4tO6HDb2IwzJS0Udar6VhrbgtQncmR8DhnCx9hEhGGnmyWUgMDXBsaOAdYbN 1nhX+aF/idjUFymvcOA2dVlA/ajAP1SjoSCqdv4XlVUoy2S0IDPusUCyFh4plFa1 nY48jxzD+Aqljo2zeV0yrc+DlrzhqwJ1LFyUQukbDTIFVDe9RbRKeciB5m4F/4bE WagVXfQBakWZybJFSzEjWcZ8mGGPOqhMiIVlf0LxmUoPRgu9eyTWReGXKMP6VbkU z6L+206i9nbr+A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:42 2025 by rpki-client