This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json) Hash identifier: mJl9hm2F8U26GG1yrzH4Rt+S3YgvPULmBqXzyhWIrdY= Subject key identifier: 00:FA:C7:EB:BC:75:D0:74:AE:D4:87:44:FA:6E:37:3B:34:1A:12:29 Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64 Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64 Certificate serial: 019AF27700A317416E5B50C3CCF3F2DF9D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: Tvf/7J2EBvehuew+yBXZmlMQjDbJad+4L0llUECdhEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:00:a3:17:41:6e:5b:50:c3:cc:f3:f2:df:9d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=00fac7ebbc75d074aed48744fa6e373b341a1229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:23:92:92:07:7b:5c:6c:c6:77:df:ea:91: b8:e3:c9:38:04:3b:77:91:4d:c1:5d:61:5a:a1:95: 82:88:8b:ad:45:b5:49:22:6f:08:46:27:e1:88:af: 8f:61:29:75:bb:55:d3:10:93:c8:02:eb:3d:f2:b2: d3:69:0c:6d:3b:e0:e5:24:7e:f1:02:8d:da:9c:fb: ca:ab:65:1a:b4:b5:b0:3c:b4:bd:b2:c4:4e:2a:8b: 42:8f:75:8d:47:09:3b:41:5c:12:d7:51:69:8f:c6: 97:23:31:bf:2e:f6:7a:cc:7e:ec:3c:27:06:16:e9: ac:fd:3e:53:b1:c2:86:72:66:9d:69:e9:0e:ab:71: 0a:56:42:2a:e6:e9:13:27:d0:9b:5e:e6:c4:ce:8d: d8:ab:c1:ae:6f:2c:59:e5:ad:91:c9:1a:da:79:1a: 30:c8:9b:c8:5b:f2:06:28:04:3f:6a:7a:3a:68:1c: a8:b8:66:3a:98:fa:c8:dc:75:20:13:8c:f6:ad:f1: a0:9e:b1:b9:a7:58:51:4d:3b:25:f3:2d:34:31:bb: 1f:2b:b5:34:39:d4:b1:c2:2b:1b:ff:8b:7f:de:15: 75:ec:8c:e0:ed:b2:9f:2d:78:34:df:f0:4b:9f:75: 61:9f:ea:2e:68:ea:c9:48:82:c3:40:fa:fe:38:40: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:C7:EB:BC:75:D0:74:AE:D4:87:44:FA:6E:37:3B:34:1A:12:29 X509v3 Authority Key Identifier: keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2a:6d:57:38:82:7e:0f:48:62:27:ee:90:fe:df:0e:4d:69: 3e:56:15:53:08:b9:0f:d8:cd:22:fc:3e:8f:04:e4:39:13:ab: 84:be:5c:e0:61:b3:a6:eb:59:dd:51:b9:5a:c8:de:6d:f9:b3: 04:62:6d:96:91:97:0b:0c:6c:cf:73:a2:ff:30:a9:c4:6a:25: c8:59:66:f9:c6:94:8a:4d:12:03:55:9b:08:36:55:83:43:a9: 81:31:b8:86:20:70:62:fc:da:7f:d0:2f:2b:e8:52:4d:ff:4a: ef:49:af:76:d2:88:d7:d9:06:dc:90:ab:72:4b:fb:e0:0f:7a: a6:82:25:3c:b2:20:03:b6:b3:58:54:c7:09:cb:20:5c:fe:fa: 05:61:0d:73:ca:9f:b0:28:e7:ba:a9:3f:c0:39:04:18:96:7e: f3:21:b0:11:08:0a:f0:b4:36:0a:2f:ac:57:21:3c:de:53:e3: a9:95:bb:18:d9:fc:2f:d5:7c:a2:9a:b0:f0:10:b1:94:45:41: 74:63:24:ed:39:65:65:fd:56:15:e1:99:81:39:5a:83:ec:c7: 07:95:cb:01:c2:3f:32:1c:84:5f:32:54:b5:fa:87:f9:7b:af: 25:bd:9c:07:56:a4:36:9f:41:a8:1d:a0:ce:88:42:70:50:cb: f9:bc:cd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwCjF0FuW1DDzPPy351WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYTY2NDY2MmRiMzdmYWY5Y2I1MzgwOWY4MTg5ZjY0NTQy YThmNjQwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EygwMGZhYzdlYmJjNzVkMDc0YWVkNDg3NDRmYTZlMzczYjM0MWExMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscAjkpIHe1xsxnff6pG448k4BDt3 kU3BXWFaoZWCiIutRbVJIm8IRifhiK+PYSl1u1XTEJPIAus98rLTaQxtO+DlJH7x Ao3anPvKq2UatLWwPLS9ssROKotCj3WNRwk7QVwS11Fpj8aXIzG/LvZ6zH7sPCcG Fums/T5TscKGcmadaekOq3EKVkIq5ukTJ9CbXubEzo3Yq8GubyxZ5a2RyRraeRow yJvIW/IGKAQ/ano6aByouGY6mPrI3HUgE4z2rfGgnrG5p1hRTTsl8y00MbsfK7U0 OdSxwisb/4t/3hV17Izg7bKfLXg03/BLn3Vhn+ouaOrJSILDQPr+OEB8ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD6x+u8ddB0rtSHRPpuNzs0GhIpMB8GA1UdIwQY MBaAFJqmZGYts3+vnLU4CfgYn2RUKo9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUt OGUyMWM0ZDczODU1LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUtOGUyMWM0ZDczODU1 LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSptVziC fg9IYifukP7fDk1pPlYVUwi5D9jNIvw+jwTkOROrhL5c4GGzputZ3VG5Wsjebfmz BGJtlpGXCwxsz3Oi/zCpxGolyFlm+caUik0SA1WbCDZVg0OpgTG4hiBwYvzaf9Av K+hSTf9K70mvdtKI19kG3JCrckv74A96poIlPLIgA7azWFTHCcsgXP76BWENc8qf sCjnuqk/wDkEGJZ+8yGwEQgK8LQ2Ci+sVyE83lPjqZW7GNn8L9V8opqw8BCxlEVB dGMk7TllZf1WFeGZgTlag+zHB5XLAcI/MhyEXzJUtfqH+XuvJb2cB1akNp9BqB2g zohCcFDL+bzNtA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:35 2025 by rpki-client