This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json) Hash identifier: q2bXscbz3i9Km+Y9KxGt2EG0Fr/e3UEN9tIFIRaFtEY= Subject key identifier: 7B:EC:CD:7A:10:8C:20:78:F0:B3:57:9C:79:A6:6F:6B:84:38:CC:1E Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Certificate serial: 019B3A901E636F3CE275E93E245F9DBA14A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft Manifest number: 1717 Signing time: Sat 20 Dec 2025 07:01:21 +0000 Manifest this update: Sat 20 Dec 2025 07:01:21 +0000 Manifest next update: Sun 21 Dec 2025 07:01:21 +0000 Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: A1H+7E7y+GjeobCUpzkwU33howuB4EEzkLFd02GMSs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:1e:63:6f:3c:e2:75:e9:3e:24:5f:9d:ba:14:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Validity Not Before: Dec 20 07:01:21 2025 GMT Not After : Dec 21 07:01:21 2025 GMT Subject: CN=7beccd7a108c2078f0b3579c79a66f6b8438cc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:87:c5:8a:a2:1f:bf:9d:2c:bd:20:27:11: 67:37:c7:5d:43:cd:f8:d1:54:12:cf:ee:c4:a0:0c: cf:22:f1:e7:55:6e:e7:7d:66:16:94:f6:36:f1:03: 0c:13:06:48:d1:72:a8:bb:7e:53:bd:05:d1:df:fc: c0:ce:46:bd:85:37:3d:60:ba:ed:0d:51:14:f6:b9: 24:73:f7:09:9a:90:fc:eb:7a:e1:21:18:7b:1c:00: cb:70:72:40:eb:a5:7f:9b:2b:0a:39:d8:05:01:a2: cb:c1:e8:f9:9e:3c:a0:76:87:1b:98:04:a7:4b:99: 66:51:c3:5c:f1:71:4e:af:a8:07:b6:ae:da:cb:0f: ac:eb:ee:c4:a2:be:59:ad:3d:03:aa:d4:9f:18:5e: be:a9:76:65:3c:c0:3f:7c:fe:d4:2c:28:5d:76:43: 89:75:3d:f1:a5:16:54:e9:11:aa:56:3d:03:64:d8: 1f:ec:3d:5f:6a:18:ea:b6:f5:f0:5e:08:ce:5f:48: b2:ff:18:fd:3a:aa:a6:62:86:b3:34:95:ba:53:9a: 82:d2:5c:d9:49:f7:e6:85:c9:55:40:49:a9:89:00: d5:23:73:83:61:e0:3e:c4:3c:25:45:96:14:00:8a: 8a:b6:1a:32:8d:66:73:e3:1d:64:13:a7:ee:96:5d: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EC:CD:7A:10:8C:20:78:F0:B3:57:9C:79:A6:6F:6B:84:38:CC:1E X509v3 Authority Key Identifier: keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d4:c0:32:da:f7:1e:06:d6:ce:b8:7e:c4:ca:db:07:f5:95: 04:04:b8:67:47:30:1d:28:ec:e7:78:ce:10:ef:c4:34:7e:23: a3:82:29:29:03:12:e3:1e:e6:fc:39:ac:4a:4c:2d:19:f1:5b: ed:55:ec:5a:c9:7b:33:7e:b2:72:a8:fc:aa:0e:e2:48:b2:ba: 7a:5b:c5:37:37:06:93:5d:0c:3b:75:c2:08:34:99:12:da:6f: 27:40:2c:6c:60:f6:6f:1a:13:d3:05:3b:8d:0b:af:fc:c2:98: 1f:68:23:4c:a0:b3:40:17:42:eb:8a:9f:f2:e9:3d:1d:8b:83: 78:fa:c1:94:71:62:74:ff:9d:e5:87:05:50:53:4e:17:71:eb: 86:fb:95:e4:58:21:9d:d0:7d:a1:5b:57:9f:ff:43:2c:10:46: ca:50:1d:32:fb:f9:8b:91:40:e7:a9:e3:2d:ca:e2:84:c9:fd: c3:f0:ab:91:71:96:cc:cc:05:52:96:66:81:4e:a0:ab:56:b8: 3b:2f:66:ff:b1:95:91:d4:3b:1f:63:8f:bc:08:e9:b1:24:d7: 2b:3c:a8:47:69:90:50:91:c5:ae:06:5a:c0:28:81:ca:56:fe: 27:ab:73:1b:0a:de:32:80:f0:37:da:ac:26:5d:1e:75:57:3e: a5:91:62:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kB5jbzzidek+JF+duhShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4 MWFiM2EwHhcNMjUxMjIwMDcwMTIxWhcNMjUxMjIxMDcwMTIxWjAzMTEwLwYDVQQD Eyg3YmVjY2Q3YTEwOGMyMDc4ZjBiMzU3OWM3OWE2NmY2Yjg0MzhjYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3aHxYqiH7+dLL0gJxFnN8ddQ834 0VQSz+7EoAzPIvHnVW7nfWYWlPY28QMMEwZI0XKou35TvQXR3/zAzka9hTc9YLrt DVEU9rkkc/cJmpD863rhIRh7HADLcHJA66V/mysKOdgFAaLLwej5njygdocbmASn S5lmUcNc8XFOr6gHtq7ayw+s6+7Eor5ZrT0DqtSfGF6+qXZlPMA/fP7ULChddkOJ dT3xpRZU6RGqVj0DZNgf7D1fahjqtvXwXgjOX0iy/xj9OqqmYoazNJW6U5qC0lzZ SffmhclVQEmpiQDVI3ODYeA+xDwlRZYUAIqKthoyjWZz4x1kE6full1v3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvszXoQjCB48LNXnHmmb2uEOMweMB8GA1UdIwQY MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNTAMtr3 HgbWzrh+xMrbB/WVBAS4Z0cwHSjs53jOEO/ENH4jo4IpKQMS4x7m/DmsSkwtGfFb 7VXsWsl7M36ycqj8qg7iSLK6elvFNzcGk10MO3XCCDSZEtpvJ0AsbGD2bxoT0wU7 jQuv/MKYH2gjTKCzQBdC64qf8uk9HYuDePrBlHFidP+d5YcFUFNOF3HrhvuV5Fgh ndB9oVtXn/9DLBBGylAdMvv5i5FA56njLcrihMn9w/CrkXGWzMwFUpZmgU6gq1a4 Oy9m/7GVkdQ7H2OPvAjpsSTXKzyoR2mQUJHFrgZawCiBylb+J6tzGwreMoDwN9qs Jl0edVc+pZFikg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:50:49 2025 by rpki-client