This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json) Hash identifier: t6gRPtUp7OD6fhFVI0s5kY8swx126amV92RaPjdKWCc= Subject key identifier: 94:FE:F0:65:B7:04:EE:3B:0A:07:95:08:17:3C:4D:3E:87:1E:E9:A9 Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d Certificate serial: 019AF23FF4097FCF8689FE226C4CFBA04F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: e8h8kUno+WmHHtcMROvWDHZTbu9h7ofGT9+3xmRLpJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f4:09:7f:cf:86:89:fe:22:6c:4c:fb:a0:4f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=94fef065b704ee3b0a079508173c4d3e871ee9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:fe:0e:e1:c6:6d:60:5c:2b:de:40:b8:0b: f5:a2:a9:48:5d:ce:a4:74:1d:a7:76:76:19:27:2e: c4:93:b9:d5:16:32:e7:fb:c9:21:16:3d:e8:06:6d: 58:e3:29:69:ef:cb:23:78:47:d8:35:25:08:43:0c: 5c:f5:2a:1d:ff:f7:6a:fd:21:d7:c4:91:d7:9d:94: 8c:03:6d:9e:9e:42:08:4e:11:b2:04:4d:17:e5:44: 69:c1:6d:bf:75:25:84:51:09:8f:01:ed:bd:14:01: 4c:9e:c1:98:b4:05:66:23:ac:8d:01:15:3f:85:fc: db:c0:4d:36:67:88:a8:67:79:15:f2:31:56:99:cc: 17:aa:c0:41:3c:f5:a8:02:e2:c5:7b:a7:ed:83:71: 55:bd:08:19:b5:67:56:70:f5:1e:49:d2:95:0e:bb: 54:9b:2e:68:9e:f5:b4:78:5e:fc:2b:f6:df:68:b0: 52:b0:9a:96:ed:b9:1e:f3:35:8c:6e:48:95:18:25: d3:0c:60:92:d6:c3:68:12:1d:b2:9a:47:42:bf:33: 19:1a:44:b8:48:65:d5:c2:c0:cd:25:44:0c:1b:42: 32:f3:5e:d7:e2:7a:07:5d:70:be:d3:0e:43:6d:e7: 45:bf:10:74:b2:76:51:48:63:1e:1f:5d:22:08:57: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:F0:65:B7:04:EE:3B:0A:07:95:08:17:3C:4D:3E:87:1E:E9:A9 X509v3 Authority Key Identifier: keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7a:9c:41:a0:b6:ba:86:c2:19:51:ff:fe:59:21:3e:64:b2: 86:49:73:17:5d:f6:1f:af:c5:76:38:c0:8f:31:3d:be:91:24: 57:fb:19:90:db:88:cd:8f:4a:e6:d7:82:cc:df:7c:14:32:d3: 18:02:5f:40:d7:e9:4a:3e:9d:ba:6c:69:8b:65:c0:24:77:04: b0:ec:6d:5a:04:f7:d6:7f:52:cc:fa:5f:09:f5:2b:a7:70:5c: df:fd:19:11:45:34:4a:7b:5e:88:3c:c8:24:3d:b6:40:71:3b: 8c:9b:eb:ce:0e:54:11:34:c6:33:1c:eb:e2:a2:dc:5c:33:d2: 85:ef:f4:07:b7:e4:3e:a9:25:75:ea:45:4a:00:f9:e7:a5:fc: 01:93:e7:56:6a:54:b9:0d:12:c6:f1:2c:ad:f7:6c:99:bf:7b: 88:84:d2:d8:3f:42:9d:97:9c:e5:f4:fa:93:6c:c0:67:89:4b: 8d:8b:e2:de:ca:54:f2:c2:3e:ee:d7:15:38:af:be:96:74:cb: 12:21:dd:51:94:00:bf:ad:81:c9:37:b0:6d:11:a0:76:9c:7a: 50:b9:94:0e:bc:b8:67:38:3a:26:4a:b6:da:8c:55:3c:3f:93: 22:a9:27:e0:d2:5b:55:63:fa:97:79:ba:f9:0c:e8:90:f6:a4: bd:86:53:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/QJf8+Gif4ibEz7oE9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4 NTA5N2QwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD Eyg5NGZlZjA2NWI3MDRlZTNiMGEwNzk1MDgxNzNjNGQzZTg3MWVlOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp/+DuHGbWBcK95AuAv1oqlIXc6k dB2ndnYZJy7Ek7nVFjLn+8khFj3oBm1Y4ylp78sjeEfYNSUIQwxc9Sod//dq/SHX xJHXnZSMA22enkIIThGyBE0X5URpwW2/dSWEUQmPAe29FAFMnsGYtAVmI6yNARU/ hfzbwE02Z4ioZ3kV8jFWmcwXqsBBPPWoAuLFe6ftg3FVvQgZtWdWcPUeSdKVDrtU my5onvW0eF78K/bfaLBSsJqW7bke8zWMbkiVGCXTDGCS1sNoEh2ymkdCvzMZGkS4 SGXVwsDNJUQMG0Iy817X4noHXXC+0w5DbedFvxB0snZRSGMeH10iCFc3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT+8GW3BO47CgeVCBc8TT6HHumpMB8GA1UdIwQY MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt ZTllMWQ5MWE5ODE2LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2 LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXqcQaC2 uobCGVH//lkhPmSyhklzF132H6/FdjjAjzE9vpEkV/sZkNuIzY9K5teCzN98FDLT GAJfQNfpSj6dumxpi2XAJHcEsOxtWgT31n9SzPpfCfUrp3Bc3/0ZEUU0SnteiDzI JD22QHE7jJvrzg5UETTGMxzr4qLcXDPShe/0B7fkPqkldepFSgD556X8AZPnVmpU uQ0SxvEsrfdsmb97iITS2D9CnZec5fT6k2zAZ4lLjYvi3spU8sI+7tcVOK++lnTL EiHdUZQAv62ByTewbRGgdpx6ULmUDry4Zzg6Jkq22oxVPD+TIqkn4NJbVWP6l3m6 +QzokPakvYZTsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:40 2025 by rpki-client