This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json) Hash identifier: gICW8+EiSSkwnxXv/wP6k4RpkFPmHvcufumjJ/nJ7c4= Subject key identifier: 8F:D7:75:03:B0:FC:DC:A0:D9:A4:01:BA:ED:C6:2E:0A:CD:00:C0:23 Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Certificate serial: 019AF12CEB7473B61002410FA0234D277F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: R6Aof05H1AxW+WKtZWwSVvCmn3ifGVObk6JKXNx5TKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:eb:74:73:b6:10:02:41:0f:a0:23:4d:27:7f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=8fd77503b0fcdca0d9a401baedc62e0acd00c023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:94:11:86:02:c0:01:b0:2d:bd:6d:46:d7: 6c:7c:48:d0:a3:78:51:57:ec:af:8d:a4:af:88:a8: fd:6b:af:9f:6c:a7:8f:3c:58:5f:0e:db:a7:03:49: 61:fc:55:a7:36:76:56:b2:fc:0f:c3:47:79:47:47: 46:00:1e:74:c5:a3:ad:73:38:39:14:8f:2b:1b:d4: 99:c3:4f:e8:d7:89:af:5f:90:e3:63:a0:44:e0:10: a7:12:b1:e8:d5:0f:c7:52:d9:ac:af:e9:50:4e:31: 64:ea:a5:22:75:eb:ee:d8:58:fe:55:45:79:ce:96: 1c:27:b7:2a:17:a7:5b:65:e1:5e:b4:5b:88:3d:36: 39:cb:31:60:72:dc:74:2b:02:cd:be:06:a0:f1:4e: ea:c4:06:44:49:fc:f8:ea:0d:f0:51:37:af:12:93: c0:36:c2:ce:d9:c3:3d:47:4c:5b:b8:e0:b9:96:65: 21:a5:2c:47:4b:cc:22:d8:6e:cd:dc:e6:82:c7:bd: d8:23:7d:8f:bd:52:2e:32:22:84:b9:5b:e8:d6:14: 9a:44:16:ac:7a:1b:c4:b9:c7:ca:e6:0b:5a:f0:b2: b3:72:71:60:d8:62:34:99:1f:70:6d:13:af:97:fe: cf:84:03:16:2d:da:0d:43:8a:19:9e:0a:57:0b:71: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D7:75:03:B0:FC:DC:A0:D9:A4:01:BA:ED:C6:2E:0A:CD:00:C0:23 X509v3 Authority Key Identifier: keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d6:c9:0e:af:2d:e2:af:21:e8:c4:1f:c6:08:75:ef:90:7b: ee:a3:df:f7:e4:1c:a1:7d:15:89:3c:cf:62:17:d0:67:a4:40: 85:b7:59:8f:89:3d:c0:6b:85:13:e8:4b:60:36:89:05:ce:59: 83:17:85:de:e4:0b:95:85:10:0e:eb:d9:27:e3:10:23:6b:87: 4d:56:7a:34:56:7c:4e:26:f9:18:84:df:f3:6a:5b:91:99:9d: 94:a6:3e:c1:c5:39:6e:62:82:28:6c:1b:78:2d:9d:e5:d9:43: 66:d8:0b:d1:99:1e:e8:d8:09:7e:46:59:6e:89:d7:1c:7f:e8: ee:58:7d:55:5a:93:1e:93:d1:95:5a:40:37:3f:09:1b:91:76: 4b:16:ce:73:a3:d1:5a:15:04:ee:16:58:b4:cd:d4:5a:78:61: 68:40:7f:cc:22:fe:c6:c2:a7:6c:c1:bf:eb:f1:12:05:45:4d: 6e:1f:33:0d:7a:65:25:09:fa:03:dc:3e:8c:c7:b7:78:72:d5: bd:95:ea:ef:9e:21:ca:1a:c5:38:87:2b:8e:f1:1f:50:b9:df: cc:09:b9:42:57:23:f8:c0:07:6a:c7:b5:71:93:34:e6:b0:c7: 31:15:b9:20:a5:5a:10:9f:f5:24:c3:b4:a9:9d:88:7d:14:0e: 71:3b:63:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOt0c7YQAkEPoCNNJ3+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWIzYmY4MzYyNjVmMmFhYjhmOTE5YmU4Y2ZiNmViNzQ3 ZTVmNzgwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD Eyg4ZmQ3NzUwM2IwZmNkY2EwZDlhNDAxYmFlZGM2MmUwYWNkMDBjMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSUEYYCwAGwLb1tRtdsfEjQo3hR V+yvjaSviKj9a6+fbKePPFhfDtunA0lh/FWnNnZWsvwPw0d5R0dGAB50xaOtczg5 FI8rG9SZw0/o14mvX5DjY6BE4BCnErHo1Q/HUtmsr+lQTjFk6qUidevu2Fj+VUV5 zpYcJ7cqF6dbZeFetFuIPTY5yzFgctx0KwLNvgag8U7qxAZESfz46g3wUTevEpPA NsLO2cM9R0xbuOC5lmUhpSxHS8wi2G7N3OaCx73YI32PvVIuMiKEuVvo1hSaRBas ehvEucfK5gta8LKzcnFg2GI0mR9wbROvl/7PhAMWLdoNQ4oZngpXC3GhkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/XdQOw/Nyg2aQBuu3GLgrNAMAjMB8GA1UdIwQY MBaAFEarO/g2Jl8qq4+Rm+jPtut0fl94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMt M2QyODZlODY1MWZjLzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMtM2QyODZlODY1MWZj LzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActbJDq8t 4q8h6MQfxgh175B77qPf9+QcoX0ViTzPYhfQZ6RAhbdZj4k9wGuFE+hLYDaJBc5Z gxeF3uQLlYUQDuvZJ+MQI2uHTVZ6NFZ8Tib5GITf82pbkZmdlKY+wcU5bmKCKGwb eC2d5dlDZtgL0Zke6NgJfkZZbonXHH/o7lh9VVqTHpPRlVpANz8JG5F2SxbOc6PR WhUE7hZYtM3UWnhhaEB/zCL+xsKnbMG/6/ESBUVNbh8zDXplJQn6A9w+jMe3eHLV vZXq754hyhrFOIcrjvEfULnfzAm5Qlcj+MAHase1cZM05rDHMRW5IKVaEJ/1JMO0 qZ2IfRQOcTtjvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:29 2025 by rpki-client