This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json) Hash identifier: 6tYvfNqfh1H89qDYAHZl1w0q49LtMgjfNMFDle2tfnk= Subject key identifier: 4A:91:73:72:A4:10:6D:F3:DA:0F:B3:12:0B:B8:E9:67:5F:D3:15:C1 Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Certificate serial: 019AF088B087454A85B18AA43FC0C916AEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft Manifest number: 159D Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: 7gS6ILbqP93AVyITdQfRVKAmAzjCGJTB1toRHVqqtbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b0:87:45:4a:85:b1:8a:a4:3f:c0:c9:16:ae:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=4a917372a4106df3da0fb3120bb8e9675fd315c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:1f:e2:77:df:23:c1:92:3d:b6:53:16:32: 1e:73:49:dd:b0:28:29:bf:fd:66:27:f5:2c:78:07: c2:94:5c:f8:de:05:21:a9:64:28:2c:e9:97:a4:35: 71:aa:ed:2b:91:b3:59:28:56:e9:35:d0:77:31:41: 3a:ed:fe:8e:7b:59:2c:6a:cd:a0:5e:30:2c:05:a4: 5c:82:78:2e:a6:1e:62:de:06:c5:4e:f9:56:4b:f4: c1:91:27:e0:3b:67:38:11:41:04:fa:9e:fa:a2:7b: bf:c7:40:00:db:e8:9e:dd:73:c9:02:0d:62:89:12: b5:c5:89:0c:24:29:31:a1:6f:dd:0e:e4:8b:03:6d: e0:dd:0a:cc:f9:2f:94:51:93:28:55:c7:6d:c3:5d: 11:09:ea:2b:4a:ce:57:35:af:7f:1c:68:ee:1c:0e: 18:a5:48:b2:11:42:cd:72:c0:8c:41:57:15:68:b2: 2e:e0:a7:c1:0a:15:8b:0d:4a:b3:a6:8c:b5:3e:92: 09:f4:e4:7f:53:36:23:5c:d1:05:bd:4a:d6:08:f4: 33:55:37:3b:b6:e5:93:cf:e8:26:9c:45:b4:37:47: bf:80:b3:4f:a2:53:88:20:a4:d9:a0:83:4a:b8:50: 79:eb:45:03:66:8e:fe:38:27:3c:71:ee:1a:71:0b: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:73:72:A4:10:6D:F3:DA:0F:B3:12:0B:B8:E9:67:5F:D3:15:C1 X509v3 Authority Key Identifier: keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:41:0a:cf:b5:1c:9d:71:37:88:78:75:1c:e3:75:63:54:ed: 26:43:3b:48:fe:6c:e7:35:a4:bf:e4:5c:82:3f:9c:80:60:6a: 22:2e:e1:eb:5c:79:11:4f:6d:c2:5d:f8:42:a5:5b:65:46:dc: f6:f3:0c:2c:c3:14:d5:7f:bb:0f:d0:78:c5:ad:55:a6:96:a1: bd:bf:f1:97:5c:66:39:76:a6:e9:a1:33:c6:92:6e:2c:07:14: 29:3f:5b:8c:96:6e:24:0a:cb:33:f7:11:50:c1:89:68:22:cb: c4:53:b6:89:da:68:95:24:44:d9:c3:4f:88:3f:f2:16:7b:8e: d3:13:a7:9e:f3:0b:3e:ee:78:10:a1:9b:3d:a4:c9:cd:cc:e4: 4a:3f:d8:f9:1d:da:c9:8a:56:12:bd:c0:89:45:f1:cc:9c:51: 9a:89:4e:b6:0b:4d:db:0e:96:d6:32:e9:95:74:98:7d:0d:f8: 11:ea:06:f6:b2:f2:c2:db:a4:96:b3:8b:a6:56:cd:ca:46:a4: e2:77:c0:7d:13:40:94:06:b1:c9:49:e8:ff:05:50:8f:12:a2: 20:b8:28:c8:35:ef:b5:96:18:ab:e5:91:32:fc:b9:12:e1:fe: b1:b4:9d:ce:83:7f:19:41:ee:fd:f5:c1:32:18:d3:db:0e:ac: ef:ad:ff:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLCHRUqFsYqkP8DJFq6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmVhNzU4ZTQxNTU5NGE4MDM3ZmZkYjc5OGY2YmI5MThj MTVlNjQwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD Eyg0YTkxNzM3MmE0MTA2ZGYzZGEwZmIzMTIwYmI4ZTk2NzVmZDMxNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/of4nffI8GSPbZTFjIec0ndsCgp v/1mJ/UseAfClFz43gUhqWQoLOmXpDVxqu0rkbNZKFbpNdB3MUE67f6Oe1ksas2g XjAsBaRcgnguph5i3gbFTvlWS/TBkSfgO2c4EUEE+p76onu/x0AA2+ie3XPJAg1i iRK1xYkMJCkxoW/dDuSLA23g3QrM+S+UUZMoVcdtw10RCeorSs5XNa9/HGjuHA4Y pUiyEULNcsCMQVcVaLIu4KfBChWLDUqzpoy1PpIJ9OR/UzYjXNEFvUrWCPQzVTc7 tuWTz+gmnEW0N0e/gLNPolOIIKTZoINKuFB560UDZo7+OCc8ce4acQsA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqRc3KkEG3z2g+zEgu46Wdf0xXBMB8GA1UdIwQY MBaAFKkup1jkFVlKgDf/23mPa7kYwV5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYt OTU4NmQ4NDAxMzRlLzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYtOTU4NmQ4NDAxMzRl LzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEEKz7Uc nXE3iHh1HON1Y1TtJkM7SP5s5zWkv+Rcgj+cgGBqIi7h61x5EU9twl34QqVbZUbc 9vMMLMMU1X+7D9B4xa1Vppahvb/xl1xmOXam6aEzxpJuLAcUKT9bjJZuJArLM/cR UMGJaCLLxFO2idpolSRE2cNPiD/yFnuO0xOnnvMLPu54EKGbPaTJzczkSj/Y+R3a yYpWEr3AiUXxzJxRmolOtgtN2w6W1jLplXSYfQ34EeoG9rLywtuklrOLplbNykak 4nfAfRNAlAaxyUno/wVQjxKiILgoyDXvtZYYq+WRMvy5EuH+sbSdzoN/GUHu/fXB MhjT2w6s763/mg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:09 2025 by rpki-client