This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json) Hash identifier: gvX7XvQlv2TmvBo4XuVVZv0IqNXEYr6QJLQC3svMBVk= Subject key identifier: A3:66:35:33:62:26:EA:A5:0F:04:AA:75:56:86:99:26:33:6A:22:69 Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad Certificate serial: 019AF276A9B6AA23FD6C6A12523DC0EB7ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft Manifest number: 0A3E Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: g3OgMnUaGgqMn9OWeqCEmE+JFqUoXbBwugvLNmsspCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a9:b6:aa:23:fd:6c:6a:12:52:3d:c0:eb:7e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=a36635336226eaa50f04aa7556869926336a2269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:82:28:06:f3:95:0d:ce:ba:fe:cd:d4:c6: b7:42:45:18:b1:0d:d9:1b:17:8f:8b:50:7b:9c:63: ca:33:c0:d8:f3:32:e3:9b:87:6e:09:91:75:eb:63: 32:9c:e7:13:27:aa:d5:5a:f9:a9:a7:c0:fd:f3:ba: 5a:41:df:1d:33:26:38:6b:14:87:0f:b6:40:b0:f1: 0e:7d:8f:2a:fa:86:96:4c:c0:2c:2d:81:e0:3b:34: 64:22:21:5e:84:29:18:86:7b:d8:04:66:50:f1:a9: a2:a4:69:08:9e:a0:eb:9e:25:38:bd:8c:3f:88:cb: 67:0f:7d:35:45:35:50:0e:05:f0:46:4d:1d:62:1f: 4f:81:39:63:c1:2c:e9:d6:21:aa:eb:42:eb:64:5a: 8a:b5:15:ad:11:ca:f3:d1:49:84:79:a3:ea:01:02: 8d:f1:8e:4c:bd:aa:f4:3d:ab:2c:02:23:74:ef:ad: 42:0e:64:b5:6f:97:e5:76:21:46:6b:26:6e:a5:e7: ce:cf:40:bb:ff:74:be:36:5c:92:e1:77:bf:10:a9: b3:df:4d:10:9b:50:82:b4:57:9a:11:5f:7a:3b:25: 28:e5:c3:2d:1a:e7:2c:d9:f4:a7:48:5b:f7:bb:56: d4:ec:69:93:02:a2:86:9e:b6:70:b9:e3:7b:70:a3: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:35:33:62:26:EA:A5:0F:04:AA:75:56:86:99:26:33:6A:22:69 X509v3 Authority Key Identifier: keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6a:da:7a:4d:8c:c5:0d:af:23:f5:f2:d5:e3:90:1d:df:9d: 6b:97:80:0d:e1:a9:2b:94:27:20:50:03:63:5d:43:f4:54:ea: b3:58:45:35:15:cf:03:73:a5:91:16:ba:de:31:e0:e7:44:33: 8b:89:20:9a:b3:f0:8f:44:d4:93:b6:c2:7e:c5:d0:cc:34:9c: c2:cb:9d:58:96:ac:9e:65:44:5b:5d:2e:cc:32:24:6a:e6:18: ee:de:31:e2:35:18:a4:94:bf:d5:66:36:c5:53:b0:21:3a:bf: 64:19:2e:b4:ac:70:0f:c9:b9:54:c2:ff:49:31:5d:65:c3:65: 18:6d:b4:d6:0e:eb:07:b8:ef:5f:3f:8f:fa:31:42:26:b7:47: 6e:bf:a0:be:94:21:04:7b:e3:4a:1d:23:fc:3d:79:4c:96:c5: 14:55:f3:c7:a8:42:3e:df:7e:d6:44:63:4c:3f:14:d5:1e:36: d9:32:4f:8d:db:e4:b0:85:9d:5a:02:45:5b:aa:76:00:01:18: 02:21:62:5d:de:06:d0:75:99:3e:6b:67:9e:38:a9:88:d1:4a: b6:f5:6f:1e:0c:3d:1c:ee:8c:14:8c:45:72:ac:6e:28:b4:8d: 83:28:86:94:cf:f1:1a:14:90:d0:24:03:ac:09:ed:46:3f:40: 3f:d2:7a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqm2qiP9bGoSUj3A637MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OTNlYjA2YWJiOThkNGEyNTVjZmIyYjMyM2E2NWYzYzRm NzFiYWQwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EyhhMzY2MzUzMzYyMjZlYWE1MGYwNGFhNzU1Njg2OTkyNjMzNmEyMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5GCKAbzlQ3Ouv7N1Ma3QkUYsQ3Z GxePi1B7nGPKM8DY8zLjm4duCZF162MynOcTJ6rVWvmpp8D987paQd8dMyY4axSH D7ZAsPEOfY8q+oaWTMAsLYHgOzRkIiFehCkYhnvYBGZQ8amipGkInqDrniU4vYw/ iMtnD301RTVQDgXwRk0dYh9PgTljwSzp1iGq60LrZFqKtRWtEcrz0UmEeaPqAQKN 8Y5Mvar0PassAiN0761CDmS1b5fldiFGayZupefOz0C7/3S+NlyS4Xe/EKmz300Q m1CCtFeaEV96OyUo5cMtGucs2fSnSFv3u1bU7GmTAqKGnrZwueN7cKOrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNmNTNiJuqlDwSqdVaGmSYzaiJpMB8GA1UdIwQY MBaAFKmT6waruY1KJVz7KzI6ZfPE9xutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTct NTY1ZTc4ZGQwMTdkLzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTctNTY1ZTc4ZGQwMTdk LzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWraek2M xQ2vI/Xy1eOQHd+da5eADeGpK5QnIFADY11D9FTqs1hFNRXPA3OlkRa63jHg50Qz i4kgmrPwj0TUk7bCfsXQzDScwsudWJasnmVEW10uzDIkauYY7t4x4jUYpJS/1WY2 xVOwITq/ZBkutKxwD8m5VML/STFdZcNlGG201g7rB7jvXz+P+jFCJrdHbr+gvpQh BHvjSh0j/D15TJbFFFXzx6hCPt9+1kRjTD8U1R422TJPjdvksIWdWgJFW6p2AAEY AiFiXd4G0HWZPmtnnjipiNFKtvVvHgw9HO6MFIxFcqxuKLSNgyiGlM/xGhSQ0CQD rAntRj9AP9J6DA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:09 2025 by rpki-client