This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft File: q-KqqfiJDkQV40HAd9hnvuJaodE.mft (raw, json) Hash identifier: HOrFQnrTSnuCtQ/L39QdYDFOA9Q2SvLPW2oC/Q4vmOA= Subject key identifier: 92:70:EA:D9:12:23:47:10:19:83:92:0E:E4:D8:EC:8C:2B:CF:55:0A Authority key identifier: AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1 Certificate issuer: /CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1 Certificate serial: 019AF3C017809305B74F215A36F9BB30C0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft Manifest number: 01B9 Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: q-KqqfiJDkQV40HAd9hnvuJaodE.crl (hash: FffNKEYMx8gTEKWP9l7IqkocA16B3K+0pg5QMNyXZ4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:17:80:93:05:b7:4f:21:5a:36:f9:bb:30:c0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1 Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=9270ead9122347101983920ee4d8ec8c2bcf550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:6d:ac:4c:7b:e5:15:ee:05:ca:91:f9:97: ef:da:53:32:90:82:7f:23:77:69:7a:24:10:32:71: b9:07:1b:11:69:25:99:d3:c8:01:e7:e6:07:99:3f: c7:73:19:31:d6:75:3c:1f:f5:cc:94:0c:0d:37:fa: 14:b0:51:44:d8:07:fa:46:5b:9d:95:ae:46:6a:8c: 33:ec:47:b9:2f:7a:bb:c2:14:bc:e4:86:8e:27:8e: 9d:91:9b:88:3a:ec:84:42:6c:55:66:67:dd:c1:92: 47:60:ec:1d:06:43:3f:30:b4:70:49:f2:c2:a9:d9: fc:ee:16:ed:b7:d4:ac:22:42:59:21:b1:9c:73:bb: 52:35:35:b8:4f:ca:46:57:f5:1b:db:cb:6f:25:df: aa:1a:9c:1d:5b:76:ac:1c:a7:bf:7e:af:fc:59:90: 92:18:6c:7d:8c:c8:cd:0a:2b:04:0e:7b:df:e5:a0: da:7a:3b:f5:37:a4:1f:3e:ee:f2:4b:27:3e:4e:0a: e0:4d:f1:ef:d0:dc:12:89:90:09:c5:4f:69:24:c0: 46:0c:27:4c:a8:ad:27:00:f1:17:f5:29:d9:59:9e: 52:4c:8e:08:ea:94:75:90:d0:bc:a5:80:b1:a2:2c: 99:79:93:79:7f:18:17:5a:fb:60:23:0d:fd:61:5c: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:EA:D9:12:23:47:10:19:83:92:0E:E4:D8:EC:8C:2B:CF:55:0A X509v3 Authority Key Identifier: keyid:AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:9e:6a:62:30:cf:59:ab:db:30:82:2b:d0:f7:ca:0b:71: 20:93:fe:58:f3:2e:af:27:35:ce:02:d1:85:e1:20:c1:c0:c1: 33:8f:aa:b4:ec:b0:51:bd:a7:ce:29:f8:e4:33:da:0d:88:98: ad:01:7d:13:d5:94:e4:a6:b5:8b:7f:ad:07:d9:df:ed:bf:ff: 83:7a:f4:5e:aa:c6:fc:95:6f:c2:6b:ad:c2:11:e6:4d:59:35: f1:1d:33:94:38:70:16:7f:fb:76:b7:51:98:64:df:86:ea:f5: 43:d9:92:87:6a:30:69:6b:07:7b:aa:9e:c3:40:6b:12:7f:d7: cb:f0:07:2e:28:ba:3b:14:f4:11:63:ea:43:4c:b2:73:52:e8: fa:4f:89:22:83:be:42:34:f5:a7:37:01:da:f9:fd:27:08:9b: bb:72:e8:20:10:25:33:af:41:0b:fd:7f:93:fd:4e:fb:be:f3: d3:a6:ff:a2:af:58:55:04:7f:94:1d:08:57:58:b0:bb:5a:e8: b7:61:9e:87:16:88:9e:0c:30:fb:e4:82:5b:fb:27:9d:86:eb: e7:21:4e:0f:ae:05:e8:35:86:4a:f7:68:d2:7e:a6:00:c2:dd: 7e:f2:b0:10:b1:46:b5:54:75:70:ce:94:80:fc:9a:18:df:fe: bf:2b:b8:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBeAkwW3TyFaNvm7MMCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZTJhYWE5Zjg4OTBlNDQxNWUzNDFjMDc3ZDg2N2JlZTI1 YWExZDEwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD Eyg5MjcwZWFkOTEyMjM0NzEwMTk4MzkyMGVlNGQ4ZWM4YzJiY2Y1NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVNtrEx75RXuBcqR+Zfv2lMykIJ/ I3dpeiQQMnG5BxsRaSWZ08gB5+YHmT/Hcxkx1nU8H/XMlAwNN/oUsFFE2Af6Rlud la5Gaowz7Ee5L3q7whS85IaOJ46dkZuIOuyEQmxVZmfdwZJHYOwdBkM/MLRwSfLC qdn87hbtt9SsIkJZIbGcc7tSNTW4T8pGV/Ub28tvJd+qGpwdW3asHKe/fq/8WZCS GGx9jMjNCisEDnvf5aDaejv1N6QfPu7ySyc+TgrgTfHv0NwSiZAJxU9pJMBGDCdM qK0nAPEX9SnZWZ5STI4I6pR1kNC8pYCxoiyZeZN5fxgXWvtgIw39YVyXpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJw6tkSI0cQGYOSDuTY7Iwrz1UKMB8GA1UdIwQY MBaAFKviqqn4iQ5EFeNBwHfYZ77iWqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcS1LcXFmaUpEa1FWNDBIQWQ5aG52dUphb2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84N2FiMTYtYjRkZS00Y2NmLWFjNDkt NDYxYTZlY2NmYzQ3LzEvcS1LcXFmaUpEa1FWNDBIQWQ5aG52dUphb2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84N2FiMTYtYjRkZS00Y2NmLWFjNDktNDYxYTZlY2NmYzQ3 LzEvcS1LcXFmaUpEa1FWNDBIQWQ5aG52dUphb2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9KeamIw z1mr2zCCK9D3ygtxIJP+WPMuryc1zgLRheEgwcDBM4+qtOywUb2nzin45DPaDYiY rQF9E9WU5Ka1i3+tB9nf7b//g3r0XqrG/JVvwmutwhHmTVk18R0zlDhwFn/7drdR mGTfhur1Q9mSh2owaWsHe6qew0BrEn/Xy/AHLii6OxT0EWPqQ0yyc1Lo+k+JIoO+ QjT1pzcB2vn9Jwibu3LoIBAlM69BC/1/k/1O+77z06b/oq9YVQR/lB0IV1iwu1ro t2GehxaIngww++SCW/snnYbr5yFOD64F6DWGSvdo0n6mAMLdfvKwELFGtVR1cM6U gPyaGN/+vyu4hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:23 2025 by rpki-client