This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json) Hash identifier: 4z1Qqt3u6oq5Nh5nwHm/ezDo9HCXzCMjf8jz/2n8XWc= Subject key identifier: E7:CF:23:DF:F7:B3:BB:01:86:24:A3:CE:3B:34:32:25:80:D9:2A:CF Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b Certificate serial: 019AF3527E72BC12719DB9ACDC255219D703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: joIifz3PT53HK6Dv+Iee22Z2yKgA02jhxKP0OMfO4eo=) 2: rFCa92sZ57rbSlpDFnJkYc6lQas.roa (hash: F4iKR691e2AK34cFxmtOhRMANb+mE4me/fLCv0E4c8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7e:72:bc:12:71:9d:b9:ac:dc:25:52:19:d7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=e7cf23dff7b3bb018624a3ce3b34322580d92acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:b4:50:77:e5:6e:b4:33:c9:02:76:49:68: 0a:98:77:27:4b:5a:d5:be:de:f8:f4:17:4b:b0:74: ab:11:70:02:79:1a:be:53:99:fb:89:33:4c:9a:e1: cd:86:35:2b:5a:8c:07:f4:a4:44:7c:55:46:12:27: 58:53:e3:63:fa:30:2c:56:9d:59:a5:92:48:e8:3a: 21:d5:e5:85:8b:f5:ca:b1:89:24:3d:cc:70:e4:4e: 9a:9a:d7:7e:b7:f6:58:8a:96:ad:ec:28:f1:19:56: da:01:56:1e:ba:99:8e:b5:29:1c:9c:63:cd:33:94: fe:98:07:00:93:75:50:15:bf:4e:cf:d7:6c:b8:63: 64:fd:f2:0d:13:98:59:f3:23:10:cd:c8:da:45:b7: e3:c3:62:9b:d9:2f:43:e8:88:d3:8b:73:1a:86:59: bd:dc:68:d9:c5:c2:98:41:1b:fc:3b:4e:c7:92:6a: 10:66:79:6a:fe:43:a1:dc:75:fa:dc:ba:aa:34:0b: ce:7e:ad:d3:0f:bd:32:e2:61:90:de:e7:ec:9c:30: 0e:89:60:22:52:9f:fc:ca:26:10:ad:ea:9d:bd:6f: 5f:24:7f:10:cd:99:70:46:c8:82:41:cd:16:8c:16: ae:b4:5d:aa:31:68:24:50:f6:27:1c:9b:be:49:74: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:23:DF:F7:B3:BB:01:86:24:A3:CE:3B:34:32:25:80:D9:2A:CF X509v3 Authority Key Identifier: keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:76:f9:35:12:f0:0a:86:53:fc:00:07:c3:ef:4e:2a:c3:50: eb:52:35:ce:d9:c4:31:c0:8e:a6:e3:32:d7:92:f6:b8:c5:7c: ee:68:24:58:dd:26:4f:7a:45:e6:27:83:59:89:78:db:7d:ec: 21:b9:bf:e2:89:e3:12:85:93:55:3f:86:02:03:b3:2d:8c:11: 68:4a:33:b8:d1:37:a6:ce:d1:e5:ca:da:00:2d:9f:f5:52:b2: 19:b6:93:a9:9b:9a:5e:87:4e:67:aa:f5:ee:17:76:a2:d2:ff: e9:c7:3f:02:9a:b1:6b:d2:3a:d4:53:41:48:e3:b0:0c:6a:3a: a8:8f:66:f6:67:e9:7c:96:74:81:15:fd:67:db:de:78:c1:c4: 67:bb:fe:f4:b3:07:28:42:ab:0d:b3:ea:d3:12:ef:f9:19:01: 69:3c:81:69:c8:2e:01:7b:d7:b6:60:e4:11:5c:87:a4:b8:34: e8:61:b5:ca:ef:53:04:14:51:bb:ba:b1:50:96:8f:2b:d7:e8: 3f:e7:da:e7:1f:dc:b9:67:42:19:65:97:a4:09:fe:4f:0e:fe: cc:dd:2d:5e:29:d9:2b:bb:33:43:1f:ae:5d:ce:99:79:a7:67: 63:62:46:b7:a1:ba:f3:c0:70:46:ab:5c:84:58:e2:a0:45:0d: b6:f7:ce:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUn5yvBJxnbms3CVSGdcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYjc4NjE2ZjNiMzllZDQ4MjBkMDRjZTA5OGVhN2MyMDY1 NTMxNGIwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD EyhlN2NmMjNkZmY3YjNiYjAxODYyNGEzY2UzYjM0MzIyNTgwZDkyYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurO0UHflbrQzyQJ2SWgKmHcnS1rV vt749BdLsHSrEXACeRq+U5n7iTNMmuHNhjUrWowH9KREfFVGEidYU+Nj+jAsVp1Z pZJI6Doh1eWFi/XKsYkkPcxw5E6amtd+t/ZYipat7CjxGVbaAVYeupmOtSkcnGPN M5T+mAcAk3VQFb9Oz9dsuGNk/fINE5hZ8yMQzcjaRbfjw2Kb2S9D6IjTi3Mahlm9 3GjZxcKYQRv8O07HkmoQZnlq/kOh3HX63LqqNAvOfq3TD70y4mGQ3ufsnDAOiWAi Up/8yiYQreqdvW9fJH8QzZlwRsiCQc0WjBautF2qMWgkUPYnHJu+SXTgDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfPI9/3s7sBhiSjzjs0MiWA2SrPMB8GA1UdIwQY MBaAFKq3hhbzs57Ugg0EzgmOp8IGVTFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYt ZWJhYTZmZjdkODg2LzEvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYtZWJhYTZmZjdkODg2 LzEvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXb5NRLw CoZT/AAHw+9OKsNQ61I1ztnEMcCOpuMy15L2uMV87mgkWN0mT3pF5ieDWYl4233s Ibm/4onjEoWTVT+GAgOzLYwRaEozuNE3ps7R5craAC2f9VKyGbaTqZuaXodOZ6r1 7hd2otL/6cc/Apqxa9I61FNBSOOwDGo6qI9m9mfpfJZ0gRX9Z9veeMHEZ7v+9LMH KEKrDbPq0xLv+RkBaTyBacguAXvXtmDkEVyHpLg06GG1yu9TBBRRu7qxUJaPK9fo P+fa5x/cuWdCGWWXpAn+Tw7+zN0tXinZK7szQx+uXc6ZeadnY2JGt6G688BwRqtc hFjioEUNtvfO1g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:46 2025 by rpki-client