This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json) Hash identifier: 6ehd7a/fNv96qsqDNyIahAaMetO10XMPbhaD4xnwB8c= Subject key identifier: 07:C7:B3:21:56:BA:76:73:F5:82:E3:42:9E:6D:A9:3C:D3:55:24:D4 Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71 Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71 Certificate serial: 019AF19B90B6F56904375E3A85F893C0FED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: 2zKkJIphnN0fmBSyA9m9063PnrnoopLLqhN9qMWU/QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:90:b6:f5:69:04:37:5e:3a:85:f8:93:c0:fe:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=07c7b32156ba7673f582e3429e6da93cd35524d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:96:fc:18:7b:2e:f3:a5:cd:70:17:00:7b: e8:79:72:5b:36:a1:92:36:87:8a:46:9a:11:22:9b: 66:ec:92:26:10:d4:e9:70:e5:49:1c:b2:e9:d3:02: f3:7e:c5:5c:12:de:35:c9:ef:92:8c:43:b7:13:55: 40:04:c5:83:fc:27:b5:cc:9c:7e:85:38:be:38:5f: 2b:ff:07:20:35:93:b9:4d:b5:89:80:fe:f7:16:f5: ac:e9:5c:ab:a9:de:0b:1c:b8:5d:c6:7d:54:75:57: 1c:0d:fb:e5:0a:d1:03:ea:7b:e4:15:e1:54:3c:73: 22:40:01:cd:4e:d2:0d:1e:58:de:95:a5:61:06:ff: 93:88:0d:68:04:cb:13:2d:02:e6:ce:d4:52:3c:41: d0:2b:88:5f:11:9b:7e:a6:c0:53:3d:b4:d5:bc:4a: 4a:97:af:0f:9e:73:bb:1b:7e:16:dc:ef:e3:53:77: ad:f2:9e:df:bf:ff:bd:57:72:69:68:7d:45:5f:62: 7c:f4:41:59:c3:ed:88:6b:35:32:32:c3:ad:2f:5a: 26:f7:25:77:0c:49:86:c8:38:0b:45:6f:3b:06:8d: a3:59:c9:77:a4:80:d0:fa:7b:3e:f9:2f:21:99:75: 86:1e:a8:7b:2f:8a:3b:1c:75:4c:a7:1b:5b:29:8b: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C7:B3:21:56:BA:76:73:F5:82:E3:42:9E:6D:A9:3C:D3:55:24:D4 X509v3 Authority Key Identifier: keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:14:7a:68:df:58:40:50:2a:2b:d7:8e:06:10:76:02:2d:2d: 6f:b4:5c:97:ac:9a:1f:f5:6b:2e:3f:a0:07:28:d3:ef:c2:63: c1:7c:62:ba:1f:df:7b:ed:6d:44:3e:5d:16:ec:84:ef:38:7f: 18:7d:17:72:d9:38:6b:2d:2d:83:7d:e4:d9:73:a9:80:1e:4b: 5f:9e:0e:52:b8:99:3a:40:ae:3b:b8:38:79:28:d6:16:3c:22: 3d:4c:b7:68:08:bf:90:5e:c5:e9:58:08:df:32:29:1c:9a:ef: 77:22:63:f9:35:86:ea:89:bd:18:47:7f:a5:e0:88:f4:b8:48: 9a:48:2f:6f:0e:06:95:3e:45:95:ee:b7:5c:e0:9f:d2:de:d9: 6c:6f:53:4f:a4:dd:bd:b0:91:30:86:bf:4c:b1:ba:a6:27:d9: d6:c2:69:08:e5:9f:3c:6a:28:91:55:46:e1:6a:05:67:a9:3d: 4f:c5:d1:a6:f9:dd:16:6b:db:20:90:3c:63:53:ee:e8:8a:d3: 30:ca:2e:d9:92:8f:c7:6b:5c:26:a1:8a:4f:cb:33:09:e1:bb: 4d:ef:62:97:29:e8:a4:a4:15:e7:ed:45:22:97:0b:4c:76:8f: 6a:4c:de:38:0a:10:b0:66:93:c9:4e:c5:d3:a1:5c:a6:97:72: ea:2f:d0:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5C29WkEN146hfiTwP7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy ODRiNzEwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EygwN2M3YjMyMTU2YmE3NjczZjU4MmUzNDI5ZTZkYTkzY2QzNTUyNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUCW/Bh7LvOlzXAXAHvoeXJbNqGS NoeKRpoRIptm7JImENTpcOVJHLLp0wLzfsVcEt41ye+SjEO3E1VABMWD/Ce1zJx+ hTi+OF8r/wcgNZO5TbWJgP73FvWs6Vyrqd4LHLhdxn1UdVccDfvlCtED6nvkFeFU PHMiQAHNTtINHljelaVhBv+TiA1oBMsTLQLmztRSPEHQK4hfEZt+psBTPbTVvEpK l68PnnO7G34W3O/jU3et8p7fv/+9V3JpaH1FX2J89EFZw+2IazUyMsOtL1om9yV3 DEmGyDgLRW87Bo2jWcl3pIDQ+ns++S8hmXWGHqh7L4o7HHVMpxtbKYsdoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfHsyFWunZz9YLjQp5tqTzTVSTUMB8GA1UdIwQY MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThR6aN9Y QFAqK9eOBhB2Ai0tb7Rcl6yaH/VrLj+gByjT78JjwXxiuh/fe+1tRD5dFuyE7zh/ GH0Xctk4ay0tg33k2XOpgB5LX54OUriZOkCuO7g4eSjWFjwiPUy3aAi/kF7F6VgI 3zIpHJrvdyJj+TWG6om9GEd/peCI9LhImkgvbw4GlT5Fle63XOCf0t7ZbG9TT6Td vbCRMIa/TLG6pifZ1sJpCOWfPGookVVG4WoFZ6k9T8XRpvndFmvbIJA8Y1Pu6IrT MMou2ZKPx2tcJqGKT8szCeG7Te9ilynopKQV5+1FIpcLTHaPakzeOAoQsGaTyU7F 06Fcppdy6i/QKg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:21 2025 by rpki-client