This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft File: Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft (raw, json) Hash identifier: mLijk2gsZy5prqJr/UlSl7sZpkleSKWRerIsMfqv3GI= Subject key identifier: 63:E8:28:7C:68:7D:A2:C6:D2:FF:43:96:F4:F3:C1:6A:76:73:51:E9 Authority key identifier: 43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0 Certificate issuer: /CN=4362bc90ba442eef19d5e82536523262c5eb72a0 Certificate serial: 019AF2AE080E8645EA2383987AC6A8A4F049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft Manifest number: DB Signing time: Sat 06 Dec 2025 08:01:22 +0000 Manifest this update: Sat 06 Dec 2025 08:01:22 +0000 Manifest next update: Sun 07 Dec 2025 08:01:22 +0000 Files and hashes: 1: Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl (hash: Mr1TqMssCxqh+N6SniBQVZAkCS5L1EG2rQ7m/vhJRPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:08:0e:86:45:ea:23:83:98:7a:c6:a8:a4:f0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4362bc90ba442eef19d5e82536523262c5eb72a0 Validity Not Before: Dec 6 08:01:22 2025 GMT Not After : Dec 7 08:01:22 2025 GMT Subject: CN=63e8287c687da2c6d2ff4396f4f3c16a767351e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:79:0c:07:63:8f:b6:da:ae:ab:23:98:c0: 2a:23:c5:be:54:01:04:cc:cf:30:c0:4e:74:f1:9c: fd:11:70:ec:ed:66:9f:82:38:38:fd:a7:93:ed:30: 0c:3b:46:74:ad:fb:b3:00:c1:18:e8:be:6d:2b:7d: 9d:6d:23:79:5d:6e:98:e8:63:d1:7d:3d:19:2e:2e: 8b:d2:db:d4:1e:8d:15:d5:75:a7:0d:a9:f0:2c:6c: ca:6a:5d:50:52:83:7c:55:36:5d:cd:fa:7b:8e:92: ad:d0:e6:e4:6c:af:10:91:7b:d7:c3:2a:6e:1d:d8: 5c:6f:6f:ad:49:19:89:46:da:6c:74:a4:16:a8:10: b8:b1:d4:b6:02:15:5f:80:82:1d:05:36:83:4b:48: de:29:16:3a:5c:7f:50:73:87:c4:e4:c1:c8:e4:ae: c8:76:fe:de:69:4c:87:1a:97:b3:38:33:ad:36:d9: 03:be:99:ee:d4:27:aa:88:22:1c:07:f1:27:4b:fe: 12:3c:4e:d0:9b:c1:d4:94:5a:63:2b:62:51:62:22: 61:34:d2:d8:52:49:b5:ce:e8:a3:21:84:03:b8:89: 2a:91:25:40:2e:9b:13:d8:35:fd:e5:7e:12:fa:9c: c3:d7:7b:6b:cb:43:9c:ad:fa:65:44:0b:7d:ee:3d: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:28:7C:68:7D:A2:C6:D2:FF:43:96:F4:F3:C1:6A:76:73:51:E9 X509v3 Authority Key Identifier: keyid:43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b1:ba:c9:7d:bb:c3:e1:d8:2a:a7:fa:3f:07:0e:22:15:b2: f8:fc:a0:b2:db:08:98:83:3b:97:80:80:76:9d:66:04:23:89: 3f:e6:f7:a2:67:93:df:46:b7:9e:37:b1:f7:da:f2:1d:6f:43: 09:70:2f:6a:0f:04:16:22:1e:7a:98:54:ca:9a:a5:0e:8d:15: 66:d7:9f:b7:c4:83:cd:dd:3a:b0:73:0e:d6:ab:6d:47:d0:aa: 2a:fb:db:7f:38:bd:39:da:28:96:02:31:6a:1d:a7:3d:70:36: 42:2e:62:ed:ac:9f:9f:0d:d2:90:30:f0:11:bb:ae:d4:e7:a4: 49:52:23:34:2b:71:92:61:d6:d6:ae:e6:62:a0:a3:40:11:7b: bc:f4:70:c2:75:98:34:ad:ff:08:b5:a6:e5:78:b6:8f:83:6c: be:35:b2:b9:75:12:65:b4:f4:a2:53:44:a8:7e:a0:03:ae:3b: ae:be:75:2b:c3:82:2d:b8:fc:00:51:a7:d9:40:ec:07:d7:54: 93:fb:e2:5c:95:af:ea:bf:6a:c6:09:9e:ae:81:21:78:21:94: 3b:97:be:f7:76:bd:a7:94:99:2d:b5:91:39:85:8a:d5:7c:a5: b4:26:e9:c7:22:e9:77:1c:4c:bc:fc:61:7e:96:cb:52:cd:86: 33:91:c6:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrggOhkXqI4OYesaopPBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjJiYzkwYmE0NDJlZWYxOWQ1ZTgyNTM2NTIzMjYyYzVl YjcyYTAwHhcNMjUxMjA2MDgwMTIyWhcNMjUxMjA3MDgwMTIyWjAzMTEwLwYDVQQD Eyg2M2U4Mjg3YzY4N2RhMmM2ZDJmZjQzOTZmNGYzYzE2YTc2NzM1MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRN5DAdjj7barqsjmMAqI8W+VAEE zM8wwE508Zz9EXDs7Wafgjg4/aeT7TAMO0Z0rfuzAMEY6L5tK32dbSN5XW6Y6GPR fT0ZLi6L0tvUHo0V1XWnDanwLGzKal1QUoN8VTZdzfp7jpKt0ObkbK8QkXvXwypu Hdhcb2+tSRmJRtpsdKQWqBC4sdS2AhVfgIIdBTaDS0jeKRY6XH9Qc4fE5MHI5K7I dv7eaUyHGpezODOtNtkDvpnu1CeqiCIcB/EnS/4SPE7Qm8HUlFpjK2JRYiJhNNLY Ukm1zuijIYQDuIkqkSVALpsT2DX95X4S+pzD13try0OcrfplRAt97j2urwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPoKHxofaLG0v9DlvTzwWp2c1HpMB8GA1UdIwQY MBaAFENivJC6RC7vGdXoJTZSMmLF63KgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZDU5YjMtMjNjYy00MGZlLTgwNjQt MzcxZDVjODQyZjJjLzEvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZDU5YjMtMjNjYy00MGZlLTgwNjQtMzcxZDVjODQyZjJj LzEvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7G6yX27 w+HYKqf6PwcOIhWy+PygstsImIM7l4CAdp1mBCOJP+b3omeT30a3njex99ryHW9D CXAvag8EFiIeephUypqlDo0VZteft8SDzd06sHMO1qttR9CqKvvbfzi9OdoolgIx ah2nPXA2Qi5i7ayfnw3SkDDwEbuu1OekSVIjNCtxkmHW1q7mYqCjQBF7vPRwwnWY NK3/CLWm5Xi2j4NsvjWyuXUSZbT0olNEqH6gA647rr51K8OCLbj8AFGn2UDsB9dU k/viXJWv6r9qxgmeroEheCGUO5e+93a9p5SZLbWROYWK1XyltCbpxyLpdxxMvPxh fpbLUs2GM5HG3A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:45 2025 by rpki-client