This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json) Hash identifier: C+LYwsH26hPn0utUCHNYzG6+dHZ0Ceju3x1OkrWrocs= Subject key identifier: CB:4A:84:E3:2C:5A:71:BA:49:16:82:92:33:8F:B0:D2:04:F0:05:78 Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34 Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734 Certificate serial: 019AF68A68DA73B6EDB19DA25E12C575843A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft Manifest number: 0425 Signing time: Sun 07 Dec 2025 02:00:57 +0000 Manifest this update: Sun 07 Dec 2025 02:00:57 +0000 Manifest next update: Mon 08 Dec 2025 02:00:57 +0000 Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: WMlund0yO6wed0zVvc6DqfBsDL3xKX1H1IfkULL7yuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:68:da:73:b6:ed:b1:9d:a2:5e:12:c5:75:84:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734 Validity Not Before: Dec 7 02:00:57 2025 GMT Not After : Dec 8 02:00:57 2025 GMT Subject: CN=cb4a84e32c5a71ba49168292338fb0d204f00578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:c5:a7:30:cc:75:ec:ba:c7:c6:b6:76:9c: 07:5e:82:60:bc:4c:4a:a4:35:b6:73:d4:19:84:83: 04:47:9d:6e:52:d4:bf:a6:65:86:19:91:98:15:7c: e4:0e:12:9f:29:0f:6e:1f:c0:59:4a:f3:11:4f:64: 52:97:9b:c5:90:da:69:16:76:8d:39:1c:86:86:fb: 7c:2e:a2:09:e1:b8:c4:21:24:14:82:1a:7c:6e:2f: 32:4c:cb:39:ee:bf:22:b9:12:95:0e:42:e4:a0:db: 0d:0e:16:d5:da:d5:83:2e:5d:4b:af:8e:a9:12:ac: 80:51:2b:0f:44:5a:60:64:41:cb:7c:47:f2:46:0e: c3:19:6b:02:d1:3d:ba:2b:3a:b3:06:3e:94:b4:39: 95:24:78:e0:1f:27:bb:83:6e:15:b1:68:b1:19:84: fd:1f:41:33:15:b7:de:10:67:d6:9c:ff:d3:40:11: 8a:3c:a6:1e:af:57:e8:fa:e3:98:fa:94:3d:2f:e3: 60:9e:dd:7e:fe:05:1a:84:70:78:6c:1e:a4:22:bc: bb:f1:e7:bb:e5:1c:6d:95:29:33:52:8e:aa:34:91: 33:f2:d0:7d:29:28:e0:73:06:f9:1e:ac:95:86:36: 40:88:55:b4:61:61:ef:c7:6e:cc:3a:c2:22:2a:0d: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4A:84:E3:2C:5A:71:BA:49:16:82:92:33:8F:B0:D2:04:F0:05:78 X509v3 Authority Key Identifier: keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:83:be:2e:83:b4:b1:ec:ae:67:0c:e6:54:81:3c:a5:b7:8e: 41:68:e2:ea:94:32:c8:b4:2d:cc:b9:87:68:78:ad:4d:88:b8: 36:d4:eb:38:46:f4:51:a7:9e:c9:1c:8f:a5:ad:4d:2f:af:97: d5:dc:57:55:77:b2:9f:b7:06:10:5e:d6:ea:6d:3a:71:05:21: b2:2d:e9:45:bc:d3:0e:52:a2:a4:a2:c1:88:13:f6:c3:87:f9: 27:fc:b0:0b:39:da:d4:a7:81:18:97:33:3f:d2:e7:3e:9e:10: eb:0b:66:5a:b8:49:db:ce:26:e7:75:d9:00:90:ed:5f:91:09: c3:a9:ea:36:b1:e6:2c:47:94:a6:cb:6e:c8:a4:6c:a9:0b:64: 5b:67:59:13:f4:e6:73:e3:c0:16:70:7e:ed:2e:bf:8f:45:5f: 9b:0d:72:96:a9:7a:07:06:58:f4:3b:ac:b5:61:50:94:32:e2: e6:ad:d6:a3:48:e1:72:e1:26:c8:81:f6:e3:81:4f:60:02:a1: 8c:9a:eb:10:20:ac:7e:7e:4b:d1:86:21:a8:2d:61:af:dc:0a: 76:32:3e:93:bf:3d:83:1f:6b:f2:8d:d0:d2:5e:66:56:95:dd: 94:e3:ce:5b:30:45:2b:7e:f9:9f:c4:f8:d7:2a:02:94:fa:72: 68:53:f4:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2imjac7btsZ2iXhLFdYQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmZkNjU5ODUxYTM0YmI3N2MzMjEzY2E0YmY3NzI1MTFl MDg3MzQwHhcNMjUxMjA3MDIwMDU3WhcNMjUxMjA4MDIwMDU3WjAzMTEwLwYDVQQD EyhjYjRhODRlMzJjNWE3MWJhNDkxNjgyOTIzMzhmYjBkMjA0ZjAwNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBjFpzDMdey6x8a2dpwHXoJgvExK pDW2c9QZhIMER51uUtS/pmWGGZGYFXzkDhKfKQ9uH8BZSvMRT2RSl5vFkNppFnaN ORyGhvt8LqIJ4bjEISQUghp8bi8yTMs57r8iuRKVDkLkoNsNDhbV2tWDLl1Lr46p EqyAUSsPRFpgZEHLfEfyRg7DGWsC0T26KzqzBj6UtDmVJHjgHye7g24VsWixGYT9 H0EzFbfeEGfWnP/TQBGKPKYer1fo+uOY+pQ9L+Ngnt1+/gUahHB4bB6kIry78ee7 5RxtlSkzUo6qNJEz8tB9KSjgcwb5HqyVhjZAiFW0YWHvx27MOsIiKg1NhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtKhOMsWnG6SRaCkjOPsNIE8AV4MB8GA1UdIwQY MBaAFKlv1lmFGjS7d8MhPKS/dyUR4Ic0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2Ut YzJjY2UzNWI3MDE1LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2UtYzJjY2UzNWI3MDE1 LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYO+LoO0 seyuZwzmVIE8pbeOQWji6pQyyLQtzLmHaHitTYi4NtTrOEb0UaeeyRyPpa1NL6+X 1dxXVXeyn7cGEF7W6m06cQUhsi3pRbzTDlKipKLBiBP2w4f5J/ywCzna1KeBGJcz P9LnPp4Q6wtmWrhJ284m53XZAJDtX5EJw6nqNrHmLEeUpstuyKRsqQtkW2dZE/Tm c+PAFnB+7S6/j0Vfmw1ylql6BwZY9DustWFQlDLi5q3Wo0jhcuEmyIH244FPYAKh jJrrECCsfn5L0YYhqC1hr9wKdjI+k789gx9r8o3Q0l5mVpXdlOPOWzBFK375n8T4 1yoClPpyaFP0xQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:11 2025 by rpki-client