This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json) Hash identifier: WT8yWsTcS5RXxlUYs5c/nMVv2Qz7EtWwGhVnd2A41Mw= Subject key identifier: 49:B1:87:80:1B:B1:33:36:E4:15:19:AE:C1:7A:C0:88:1E:6A:E9:37 Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Certificate serial: 019AF31BD637EDF046063C7BC0992F458FE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: sRp+MTdmSLV/8xuAsv6eUe90871MAKSHOcPXMORn8n4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d6:37:ed:f0:46:06:3c:7b:c0:99:2f:45:8f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=49b187801bb13336e41519aec17ac0881e6ae937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:bc:48:41:9b:94:89:a2:42:1b:03:87:05: cb:e4:c7:d2:fb:b7:db:82:a8:33:76:4a:56:97:79: c8:11:ed:51:ea:5b:93:b2:12:dd:8b:97:48:63:ca: 8c:55:b7:1d:f1:2f:c7:ff:1e:80:30:42:1f:a5:ae: 52:e6:40:71:59:87:13:73:21:12:4f:5d:7f:cc:bd: 79:b5:d1:73:f9:e0:e0:bd:50:24:91:b2:e6:f3:69: 90:a9:c0:19:93:3d:5d:42:7e:f1:f0:c6:19:ea:cd: ad:23:15:a9:39:e8:e1:c7:9c:d7:fe:24:d5:dd:3d: 81:fb:2e:95:03:e3:50:1a:17:55:ae:75:84:da:db: 29:9c:cb:d9:fc:67:60:eb:93:ed:69:f7:3e:d3:2a: ca:90:49:b7:bf:85:c5:bc:c2:a1:15:bb:af:1f:a5: ba:76:a1:d3:73:c2:a9:6e:82:a4:bd:1e:31:5d:ba: b7:5f:19:b3:6f:15:fc:5a:97:bd:a1:ef:08:01:52: fe:00:66:80:46:bb:9f:35:5c:de:9c:23:45:34:63: 56:1a:6b:17:25:25:87:e9:f6:09:59:5e:af:cb:4c: 03:1b:63:2e:2a:54:4a:dd:5f:a9:33:9e:10:a6:b7: 44:7f:a0:d4:e6:c9:e6:c7:a2:eb:3c:68:50:0e:4f: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:87:80:1B:B1:33:36:E4:15:19:AE:C1:7A:C0:88:1E:6A:E9:37 X509v3 Authority Key Identifier: keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9c:5d:33:5f:c9:3d:0e:72:89:fb:ea:9f:92:96:44:60:9f: 94:1e:73:74:66:4e:b2:06:6f:01:52:28:ed:b0:ff:13:85:c6: 48:3e:05:90:3e:2c:b8:28:70:8f:3b:de:fc:12:4a:4f:ce:c2: 51:fa:27:11:78:84:44:4e:74:8e:d8:09:de:61:86:89:31:cd: 5b:c5:f2:eb:58:97:8a:92:b5:0c:4a:3d:55:76:60:40:2d:47: 99:42:42:9d:c7:ea:8c:5a:dc:29:f8:49:9a:81:a4:3a:9c:49: 40:31:7f:54:f2:71:52:86:60:10:7c:c1:87:7f:f7:24:78:72: a5:fd:98:e2:6d:8a:93:d9:25:01:57:d4:e4:2e:14:9b:71:fd: ce:de:4d:7d:9e:a8:da:e5:98:39:35:19:e0:6d:9a:b4:5f:a9: 41:f6:d8:82:5c:d9:88:c9:09:26:57:d9:0d:3f:9d:48:53:12: c5:9f:1c:e1:ff:56:21:69:04:ab:e0:6c:2d:67:89:15:51:8f: 1c:7c:b6:08:8c:8c:7a:eb:69:68:73:f4:af:c5:fb:8c:81:d2: 50:8a:5e:40:78:5d:d6:38:3b:31:8d:09:09:95:94:98:4a:ff: f7:38:c5:40:f4:79:18:3c:0f:d5:17:28:71:a9:4e:e4:4d:e6: 51:76:28:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9Y37fBGBjx7wJkvRY/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4 MWFiM2EwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD Eyg0OWIxODc4MDFiYjEzMzM2ZTQxNTE5YWVjMTdhYzA4ODFlNmFlOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwve8SEGblImiQhsDhwXL5MfS+7fb gqgzdkpWl3nIEe1R6luTshLdi5dIY8qMVbcd8S/H/x6AMEIfpa5S5kBxWYcTcyES T11/zL15tdFz+eDgvVAkkbLm82mQqcAZkz1dQn7x8MYZ6s2tIxWpOejhx5zX/iTV 3T2B+y6VA+NQGhdVrnWE2tspnMvZ/Gdg65Ptafc+0yrKkEm3v4XFvMKhFbuvH6W6 dqHTc8KpboKkvR4xXbq3XxmzbxX8Wpe9oe8IAVL+AGaARrufNVzenCNFNGNWGmsX JSWH6fYJWV6vy0wDG2MuKlRK3V+pM54QprdEf6DU5snmx6LrPGhQDk9jxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmxh4AbsTM25BUZrsF6wIgeauk3MB8GA1UdIwQY MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJxdM1/J PQ5yifvqn5KWRGCflB5zdGZOsgZvAVIo7bD/E4XGSD4FkD4suChwjzve/BJKT87C UfonEXiERE50jtgJ3mGGiTHNW8Xy61iXipK1DEo9VXZgQC1HmUJCncfqjFrcKfhJ moGkOpxJQDF/VPJxUoZgEHzBh3/3JHhypf2Y4m2Kk9klAVfU5C4Um3H9zt5NfZ6o 2uWYOTUZ4G2atF+pQfbYglzZiMkJJlfZDT+dSFMSxZ8c4f9WIWkEq+BsLWeJFVGP HHy2CIyMeutpaHP0r8X7jIHSUIpeQHhd1jg7MY0JCZWUmEr/9zjFQPR5GDwP1Rco calO5E3mUXYorw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:37 2025 by rpki-client