This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json) Hash identifier: 0zfF2hkOBXg467++D/Ki8fWeYvXPatsEndsBTQV3RQU= Subject key identifier: 86:CF:77:A2:0B:53:D4:29:D6:53:5C:85:E3:B1:8A:4A:95:66:68:6D Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c Certificate serial: 019AF31D211AB44A4AE35890DAE9FD536006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: W2nT3KX/f5zhjQ/jZyG7ymLUKhaE0ZgPZvMFoOI+cBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:21:1a:b4:4a:4a:e3:58:90:da:e9:fd:53:60:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=86cf77a20b53d429d6535c85e3b18a4a9566686d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:05:a3:59:40:a2:85:0f:a0:2f:af:4e:5f: b3:16:b4:59:31:1f:f0:e7:20:e3:71:5d:8e:10:aa: 0f:22:56:56:96:13:6a:c4:d3:ed:a8:bf:b1:99:91: 9b:ad:4c:5f:fe:0a:ba:25:58:59:af:6e:f4:60:77: 00:4d:5d:c5:d1:4f:da:bc:76:3b:ad:87:5d:d5:23: b8:b9:fb:24:e1:b5:cb:63:3e:79:4c:a2:fa:13:86: a0:26:d0:91:0e:ff:23:6c:20:aa:16:2f:1d:66:9b: 90:7e:a0:6f:e5:06:6a:8b:96:64:c8:6d:e8:16:34: 61:2e:de:b3:f6:26:4e:ae:54:5a:03:d6:ff:80:89: a9:23:16:af:30:7a:bb:4c:9a:8e:1a:5d:68:9d:b8: 64:6c:50:15:d8:c7:7f:80:80:1b:a6:3b:5c:36:ec: 6b:23:5f:41:88:69:80:f8:69:80:39:38:dd:39:1c: 84:92:45:ac:5d:79:0c:a7:85:bc:ab:02:00:be:30: 1a:86:e7:bb:c2:b9:6a:ff:56:2a:82:65:c8:b2:90: 5d:33:3d:b8:e8:3b:a3:e5:86:30:8f:45:45:45:86: 4d:da:cf:d5:1d:13:f3:42:fe:af:cc:b4:cc:b3:5d: 7c:df:fc:9a:b4:3a:0c:ae:cf:9b:dd:7f:2f:fd:7d: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CF:77:A2:0B:53:D4:29:D6:53:5C:85:E3:B1:8A:4A:95:66:68:6D X509v3 Authority Key Identifier: keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8f:78:10:c5:33:04:19:a2:c5:fe:fd:46:e7:fa:b3:4b:96: c2:d8:16:3f:78:85:ab:e1:b2:a5:fa:10:83:a5:4d:6b:f9:b6: 74:cf:2d:ec:3b:7e:10:53:59:9b:c2:e7:64:cf:97:7a:15:ef: 14:83:23:f1:14:0d:f8:a7:ef:c1:7a:f0:77:d8:f6:33:b8:ae: 13:f8:a4:6f:f7:5d:dd:4b:a8:02:4b:0a:37:57:47:f2:2c:d2: 34:04:7b:8b:14:12:c8:aa:58:97:e6:a6:ea:e9:4e:41:e2:34: 7a:ee:97:f6:4a:97:32:49:35:9a:dc:1d:b8:cb:6c:d4:7a:6d: 8f:fa:51:2c:8d:e4:4f:dd:bf:29:12:e8:1d:ff:de:65:d3:fc: cc:99:64:fd:d8:a6:6a:f3:33:e0:9e:03:25:b0:bd:0c:24:8e: be:53:54:9e:8e:d2:c3:0d:11:dc:2b:73:42:1f:34:da:35:27: 14:7c:2a:fa:c4:a0:29:0f:fa:26:92:cb:31:49:d9:6b:23:65: b8:76:12:3f:30:fa:70:a3:45:43:02:30:6f:c4:a2:95:49:a1: f3:ce:f2:97:10:3c:97:9b:fc:a6:d9:48:7e:47:59:e5:68:27: 2b:4e:b7:a2:01:d7:d0:2d:77:11:da:80:23:90:36:06:71:e6: f0:0c:62:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSEatEpK41iQ2un9U2AGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYTQxZGQyZDUyNzVmYjZhNTk2YjI2MWEwMjdjYzhkN2Y5 ZjM0NmMwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD Eyg4NmNmNzdhMjBiNTNkNDI5ZDY1MzVjODVlM2IxOGE0YTk1NjY2ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqakFo1lAooUPoC+vTl+zFrRZMR/w 5yDjcV2OEKoPIlZWlhNqxNPtqL+xmZGbrUxf/gq6JVhZr270YHcATV3F0U/avHY7 rYdd1SO4ufsk4bXLYz55TKL6E4agJtCRDv8jbCCqFi8dZpuQfqBv5QZqi5ZkyG3o FjRhLt6z9iZOrlRaA9b/gImpIxavMHq7TJqOGl1onbhkbFAV2Md/gIAbpjtcNuxr I19BiGmA+GmAOTjdORyEkkWsXXkMp4W8qwIAvjAahue7wrlq/1YqgmXIspBdMz24 6Duj5YYwj0VFRYZN2s/VHRPzQv6vzLTMs1183/yatDoMrs+b3X8v/X2zeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbPd6ILU9Qp1lNcheOxikqVZmhtMB8GA1UdIwQY MBaAFH6kHdLVJ1+2pZayYaAnzI1/nzRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYt ZTBkOTkyOWI4ZDAxLzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYtZTBkOTkyOWI4ZDAx LzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY94EMUz BBmixf79Ruf6s0uWwtgWP3iFq+GypfoQg6VNa/m2dM8t7Dt+EFNZm8LnZM+XehXv FIMj8RQN+KfvwXrwd9j2M7iuE/ikb/dd3UuoAksKN1dH8izSNAR7ixQSyKpYl+am 6ulOQeI0eu6X9kqXMkk1mtwduMts1Hptj/pRLI3kT92/KRLoHf/eZdP8zJlk/dim avMz4J4DJbC9DCSOvlNUno7Sww0R3CtzQh802jUnFHwq+sSgKQ/6JpLLMUnZayNl uHYSPzD6cKNFQwIwb8SilUmh887ylxA8l5v8ptlIfkdZ5WgnK063ogHX0C13EdqA I5A2BnHm8AxiIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:17 2025 by rpki-client