This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json) Hash identifier: Q+ywHPYxDYPHovajh8v1nJTmGmWH6fBBMF8QLeC4qRM= Subject key identifier: 4E:EC:09:B7:47:B2:83:46:F1:23:50:9A:5F:19:62:8A:F7:E6:8A:3E Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5 Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5 Certificate serial: 019AF50A07C3C1F1B66FA7A37BB72F65BCF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft Manifest number: 04F6 Signing time: Sat 06 Dec 2025 19:01:06 +0000 Manifest this update: Sat 06 Dec 2025 19:01:06 +0000 Manifest next update: Sun 07 Dec 2025 19:01:06 +0000 Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: RmY0nb5wCZ9Mb0MIZuV0UT1TPLPNGXSTO495Rpd0dbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:07:c3:c1:f1:b6:6f:a7:a3:7b:b7:2f:65:bc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5 Validity Not Before: Dec 6 19:01:06 2025 GMT Not After : Dec 7 19:01:06 2025 GMT Subject: CN=4eec09b747b28346f123509a5f19628af7e68a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:22:64:21:93:04:e6:44:19:df:c1:4f:18: 62:52:ae:de:10:5c:b2:f4:3f:30:9e:86:72:f3:35: ec:5f:3a:d7:2a:30:4b:a6:cd:dc:54:ca:63:49:6b: 87:c2:00:01:3e:2a:37:7d:16:57:2b:2d:1c:35:d5: 5b:8c:e5:ea:18:81:6a:9d:0f:39:3c:ea:19:41:33: db:6e:33:8f:d0:70:fe:46:72:5d:87:62:8f:5d:81: 8b:6e:ee:71:78:99:35:19:cd:90:18:16:22:8e:4c: 2d:c7:e7:7f:33:5e:70:cc:50:50:a4:e9:cc:6d:97: d9:65:4e:42:a2:8b:95:45:cd:b9:34:ab:31:5c:1f: 08:d7:70:d4:2c:ab:e1:1c:28:d2:f6:53:7e:7b:44: 89:7b:12:32:62:46:7f:f4:39:36:3e:19:58:86:f2: d3:2b:45:f2:7c:a2:15:19:5a:28:f9:2f:1f:d5:11: be:7d:2e:72:8b:9c:83:d1:29:f9:b5:89:df:8b:9c: 4d:f8:c4:db:e9:50:3f:60:7f:65:95:c8:44:44:05: 8b:a3:d1:78:a3:1f:96:02:a1:34:1c:3c:ac:20:92: 6a:e1:88:36:bf:aa:f1:eb:6a:c2:90:52:b8:ea:f8: fb:4e:5e:a6:a2:86:ea:6b:e1:c2:45:41:58:87:b8: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EC:09:B7:47:B2:83:46:F1:23:50:9A:5F:19:62:8A:F7:E6:8A:3E X509v3 Authority Key Identifier: keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:af:0d:aa:20:95:69:bb:b0:80:fb:5a:9e:b1:25:4d:2f: 22:d1:ed:ed:55:9e:63:96:5d:d2:a7:4c:92:77:ce:e0:6c:10: b8:c6:19:64:dd:41:50:57:b3:62:60:25:92:0e:4c:aa:df:60: 49:fe:7b:63:e6:5f:38:4f:e7:c7:9c:4b:f2:86:60:a5:05:ca: 56:e6:62:e8:d6:31:09:85:79:7b:4f:1c:61:9a:cd:82:7f:f9: 36:b0:ea:9b:c5:f1:1b:0a:c5:41:f2:af:e7:7d:c4:80:32:7b: 70:7f:b8:cc:25:87:5a:d9:96:24:61:58:47:9f:6b:ed:9c:09: a7:58:10:0e:eb:e6:10:fc:20:95:ca:87:17:ab:ac:cd:0f:70: 2a:e2:8c:9c:b6:c8:f2:3a:87:79:c1:3d:f7:25:04:83:3a:6e: 1e:95:d0:23:95:7e:1d:87:d3:59:f1:72:a0:1f:55:cc:c1:79: db:c1:8c:ec:c1:64:d0:49:b7:c8:64:d8:b8:97:8e:ef:3e:2d: e7:38:2e:b7:ad:ee:98:c4:04:50:9c:4e:57:c6:50:ea:fc:f9: d5:a7:9d:04:da:aa:d6:3e:b5:7f:a4:d7:97:ba:f2:f9:c8:48: e1:47:3a:80:db:4f:a7:46:43:ba:67:94:eb:05:b1:03:a4:91: a5:f5:01:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgfDwfG2b6eje7cvZbz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWY0YzBhMzcyZDAxNDU1NWY3ZDRkN2M4OWNmOTk2ZjA1 MTQyZjUwHhcNMjUxMjA2MTkwMTA2WhcNMjUxMjA3MTkwMTA2WjAzMTEwLwYDVQQD Eyg0ZWVjMDliNzQ3YjI4MzQ2ZjEyMzUwOWE1ZjE5NjI4YWY3ZTY4YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykUiZCGTBOZEGd/BTxhiUq7eEFyy 9D8wnoZy8zXsXzrXKjBLps3cVMpjSWuHwgABPio3fRZXKy0cNdVbjOXqGIFqnQ85 POoZQTPbbjOP0HD+RnJdh2KPXYGLbu5xeJk1Gc2QGBYijkwtx+d/M15wzFBQpOnM bZfZZU5CoouVRc25NKsxXB8I13DULKvhHCjS9lN+e0SJexIyYkZ/9Dk2PhlYhvLT K0XyfKIVGVoo+S8f1RG+fS5yi5yD0Sn5tYnfi5xN+MTb6VA/YH9llchERAWLo9F4 ox+WAqE0HDysIJJq4Yg2v6rx62rCkFK46vj7Tl6moobqa+HCRUFYh7hrtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7sCbdHsoNG8SNQml8ZYor35oo+MB8GA1UdIwQY MBaAFKivTAo3LQFFVffU18ic+ZbwUUL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYt ZGFiMzhmZDNjNzg2LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYtZGFiMzhmZDNjNzg2 LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheKvDaog lWm7sID7Wp6xJU0vItHt7VWeY5Zd0qdMknfO4GwQuMYZZN1BUFezYmAlkg5Mqt9g Sf57Y+ZfOE/nx5xL8oZgpQXKVuZi6NYxCYV5e08cYZrNgn/5NrDqm8XxGwrFQfKv 533EgDJ7cH+4zCWHWtmWJGFYR59r7ZwJp1gQDuvmEPwglcqHF6uszQ9wKuKMnLbI 8jqHecE99yUEgzpuHpXQI5V+HYfTWfFyoB9VzMF528GM7MFk0Em3yGTYuJeO7z4t 5zgut63umMQEUJxOV8ZQ6vz51aedBNqq1j61f6TXl7ry+chI4Uc6gNtPp0ZDumeU 6wWxA6SRpfUBlA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:48:46 2025 by rpki-client