This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json) Hash identifier: wKx2hy4XX+PiD+F6fG9EEPaQPnKgqYFYO8PqC/1nQMU= Subject key identifier: 40:2B:5B:4E:65:B4:2C:89:36:99:26:33:C0:22:BA:9F:3D:02:AC:64 Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47 Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47 Certificate serial: 019AF12D13112A139586F5A31183002052DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 3BjpcO9W8RlBIcMs7DGkP3sJgkHYDi2UKmQiC1VSmRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:13:11:2a:13:95:86:f5:a3:11:83:00:20:52:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=402b5b4e65b42c8936992633c022ba9f3d02ac64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:79:e8:65:61:af:8a:a5:86:13:b2:1a:c7: fa:d8:81:05:0b:7b:de:c3:db:9a:46:84:10:e1:5d: f7:2a:92:4c:af:b6:a7:57:da:2d:0c:a5:1a:74:19: 83:8d:91:91:a0:87:86:9a:37:97:44:e4:76:9b:9d: f4:e3:7f:77:cc:8b:a3:6a:46:05:69:92:ec:f7:fe: 72:ff:fb:bb:78:24:b6:e5:6b:db:36:ef:d7:d8:a1: 71:5b:fe:d3:83:2e:2e:55:56:ec:8a:73:e1:ed:51: c0:2a:54:84:ca:90:93:25:60:1d:76:ac:ce:74:eb: c3:20:5e:a7:90:6c:42:eb:b4:4a:ad:8b:85:e3:4c: b9:0b:9b:28:f3:7b:d2:30:7d:27:d8:a8:22:3e:ca: 9d:1f:84:38:bb:fd:32:af:50:fa:bf:8c:70:7c:1e: b5:de:ea:a2:b7:5d:b1:cf:13:16:41:ce:d6:60:64: 8d:8b:c7:1c:f5:d8:fe:70:23:67:f7:36:3d:5b:bf: 05:f8:31:95:8e:47:f1:e4:7e:18:3e:8d:4a:c9:28: 5e:e4:90:44:c8:74:cb:7d:56:ff:1f:14:c8:77:1c: 9a:dd:08:5a:38:b3:9e:ef:10:46:58:2b:eb:bd:42: 5f:f9:59:87:b5:85:21:dd:4e:9c:a7:e9:8a:d5:03: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:5B:4E:65:B4:2C:89:36:99:26:33:C0:22:BA:9F:3D:02:AC:64 X509v3 Authority Key Identifier: keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:1b:68:48:8f:dc:48:1a:4b:19:db:7f:b3:5f:3d:c2:21: b1:f9:63:33:4e:b1:c7:76:33:0e:4a:51:0a:11:e4:dc:cc:bd: b9:f0:9b:12:52:b8:6a:e0:b4:20:aa:a8:b6:d9:a2:08:90:a4: 8f:00:d6:12:50:4c:fd:e4:0f:7f:a6:82:7f:bd:a5:cb:3b:1b: ef:5a:5e:70:f1:1a:fe:2c:ad:2f:bc:0f:18:0e:cb:b8:c5:a2: 8f:f9:20:44:16:00:59:12:65:7c:33:ad:96:25:1d:b1:9c:57: 8e:c2:8c:5d:0a:e8:ea:1f:73:a1:d1:df:05:07:8b:52:40:16: 55:80:bb:73:07:c7:cd:9c:25:1c:00:1e:ca:2a:0a:8f:ba:9d: a4:f3:52:4e:41:44:b8:1c:92:7c:64:b9:48:2d:f3:40:3e:69: 28:5c:dc:be:8d:cd:a4:24:fa:7c:e5:43:3b:be:41:7a:ae:b1: 6b:43:eb:9f:44:a1:bd:5c:09:e9:20:b7:a4:3c:52:b5:60:6c: 28:ee:ea:be:79:ad:21:23:60:22:fa:85:33:e2:8c:bf:e7:0e: 4b:42:85:52:b7:b8:78:58:e9:ab:d3:1e:06:1d:56:c0:dc:13: fc:39:6e:a9:44:98:f7:f5:44:76:b3:67:b5:3d:c0:f0:90:0e: ce:f5:f3:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRMRKhOVhvWjEYMAIFLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYTMyYTZiZWU3YWQxOGQxYThhZTM0MjNlOTFkYzU1OWYy NzZjNDcwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg0MDJiNWI0ZTY1YjQyYzg5MzY5OTI2MzNjMDIyYmE5ZjNkMDJhYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCF56GVhr4qlhhOyGsf62IEFC3ve w9uaRoQQ4V33KpJMr7anV9otDKUadBmDjZGRoIeGmjeXROR2m5304393zIujakYF aZLs9/5y//u7eCS25WvbNu/X2KFxW/7Tgy4uVVbsinPh7VHAKlSEypCTJWAddqzO dOvDIF6nkGxC67RKrYuF40y5C5so83vSMH0n2KgiPsqdH4Q4u/0yr1D6v4xwfB61 3uqit12xzxMWQc7WYGSNi8cc9dj+cCNn9zY9W78F+DGVjkfx5H4YPo1KyShe5JBE yHTLfVb/HxTIdxya3QhaOLOe7xBGWCvrvUJf+VmHtYUh3U6cp+mK1QNSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEArW05ltCyJNpkmM8Aiup89AqxkMB8GA1UdIwQY MBaAFMKjKmvuetGNGorjQj6R3FWfJ2xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEt YzBjMGIzYjMwN2M2LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEtYzBjMGIzYjMwN2M2 LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZQbaEiP 3EgaSxnbf7NfPcIhsfljM06xx3YzDkpRChHk3My9ufCbElK4auC0IKqottmiCJCk jwDWElBM/eQPf6aCf72lyzsb71pecPEa/iytL7wPGA7LuMWij/kgRBYAWRJlfDOt liUdsZxXjsKMXQro6h9zodHfBQeLUkAWVYC7cwfHzZwlHAAeyioKj7qdpPNSTkFE uBySfGS5SC3zQD5pKFzcvo3NpCT6fOVDO75Beq6xa0Prn0ShvVwJ6SC3pDxStWBs KO7qvnmtISNgIvqFM+KMv+cOS0KFUre4eFjpq9MeBh1WwNwT/DluqUSY9/VEdrNn tT3A8JAOzvXzug== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:17 2025 by rpki-client