This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json) Hash identifier: DFvzHu4TfeGc9biVK7pHr01Cjn25OXwG//u1cho0LjI= Subject key identifier: 18:2E:D0:0B:86:04:34:0B:28:42:5B:9C:09:85:52:2B:0A:3F:81:21 Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a Certificate serial: 019AF540C8778C6DD521DDE22CED9B199F64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft Manifest number: 0F01 Signing time: Sat 06 Dec 2025 20:00:54 +0000 Manifest this update: Sat 06 Dec 2025 20:00:54 +0000 Manifest next update: Sun 07 Dec 2025 20:00:54 +0000 Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: YbgtqBM8L/w+3ui+g/IVkIiSN0oZ9kaxYqEbKGZcs70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c8:77:8c:6d:d5:21:dd:e2:2c:ed:9b:19:9f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a Validity Not Before: Dec 6 20:00:54 2025 GMT Not After : Dec 7 20:00:54 2025 GMT Subject: CN=182ed00b8604340b28425b9c0985522b0a3f8121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:cf:ee:c5:15:10:df:96:ef:b0:66:68:8c: c9:16:d9:fb:27:f0:21:13:dc:dd:5c:70:84:f0:0f: 26:73:29:76:e1:b6:d2:2e:ac:ad:20:c9:14:0a:70: eb:bd:e5:99:fd:7b:cc:cc:55:2b:6f:54:ab:d5:77: 80:e6:b5:2c:14:8d:f7:52:6c:fd:14:47:35:28:5f: 7f:17:78:fc:59:da:ce:93:10:b4:0d:09:b9:b0:65: fb:dc:86:73:67:2a:f5:b7:97:83:4c:49:a6:47:b3: 3a:2d:e7:2d:ca:e4:4b:aa:50:dd:1e:cc:78:cb:d0: e2:46:22:83:aa:73:0c:3c:ff:1f:82:7f:7f:10:c9: ad:92:4e:0d:2a:49:1b:0b:3a:1c:85:a7:2a:62:64: c7:69:30:52:ea:fd:16:c7:7e:a9:cd:61:8e:48:46: 23:10:60:8e:3b:6e:e6:5a:51:95:95:89:c0:b0:88: 6b:6b:71:68:b0:70:28:d4:52:1b:87:23:a8:42:0c: 79:e9:39:88:01:a2:51:c5:ca:b0:9b:26:46:3d:7b: 62:17:d1:d5:35:af:19:85:8d:0c:07:5d:83:28:8c: fb:1e:8c:8f:14:c4:eb:a6:54:a5:77:27:a7:e7:07: e7:9d:61:d0:7c:c0:5b:54:a4:b9:1c:35:07:f5:04: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:D0:0B:86:04:34:0B:28:42:5B:9C:09:85:52:2B:0A:3F:81:21 X509v3 Authority Key Identifier: keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:cb:2f:cc:88:62:be:9a:ce:e7:eb:da:dd:bf:3c:56:77: 20:87:16:64:1b:6e:a4:96:ce:3c:9c:ad:77:12:ac:de:13:d5: f0:db:4c:fc:cd:2a:89:f9:e5:e5:1f:dd:90:36:66:d1:63:c8: ad:8f:59:e4:40:19:e5:93:ef:0a:29:94:e1:ac:59:f1:3f:8d: 6d:4d:3e:4c:60:40:54:76:43:05:87:a9:4b:2f:ea:ae:7e:e1: 3e:e7:e9:a6:69:81:49:49:46:0f:ff:76:6d:f1:ad:cf:44:95: 86:1c:5a:6f:e4:9d:73:b9:8b:84:68:db:61:04:c1:e5:c3:66: 20:50:5c:ea:31:5b:31:3e:2e:2a:3c:0e:f8:01:f6:f0:1c:c9: 86:13:d8:82:9c:18:40:99:ba:57:17:6e:a9:3e:4a:d2:64:ee: d6:8e:14:71:06:47:4d:65:4f:fc:b7:0d:10:0b:27:19:18:72: 24:5b:c3:d2:42:b5:74:d5:33:aa:cb:1e:0d:f7:dc:7d:27:1e: 84:80:fe:3a:3a:06:62:5e:f4:f9:7d:02:10:a3:3f:54:cf:68: 62:84:25:31:68:de:ce:1d:a7:85:1a:ae:63:37:ca:b1:cd:10: 2c:d1:bb:cf:88:41:b6:68:19:70:b1:60:e7:e8:24:b8:e7:35: 45:a5:b0:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMh3jG3VId3iLO2bGZ9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTJlZjI3NDcyYTk2MDRiZjYyNmZlYTBlMTg3ZjhkYjYy NDEzNGEwHhcNMjUxMjA2MjAwMDU0WhcNMjUxMjA3MjAwMDU0WjAzMTEwLwYDVQQD EygxODJlZDAwYjg2MDQzNDBiMjg0MjViOWMwOTg1NTIyYjBhM2Y4MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g7P7sUVEN+W77BmaIzJFtn7J/Ah E9zdXHCE8A8mcyl24bbSLqytIMkUCnDrveWZ/XvMzFUrb1Sr1XeA5rUsFI33Umz9 FEc1KF9/F3j8WdrOkxC0DQm5sGX73IZzZyr1t5eDTEmmR7M6LectyuRLqlDdHsx4 y9DiRiKDqnMMPP8fgn9/EMmtkk4NKkkbCzochacqYmTHaTBS6v0Wx36pzWGOSEYj EGCOO27mWlGVlYnAsIhra3FosHAo1FIbhyOoQgx56TmIAaJRxcqwmyZGPXtiF9HV Na8ZhY0MB12DKIz7HoyPFMTrplSldyen5wfnnWHQfMBbVKS5HDUH9QTX9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgu0AuGBDQLKEJbnAmFUisKP4EhMB8GA1UdIwQY MBaAFEOi7ydHKpYEv2Jv6g4Yf422JBNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85MmY2ZmItNjc5MS00YmZkLTllNjgt MjBlMWIyOWMwYzEyLzEvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85MmY2ZmItNjc5MS00YmZkLTllNjgtMjBlMWIyOWMwYzEy LzEvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqjLL8yI Yr6azufr2t2/PFZ3IIcWZBtupJbOPJytdxKs3hPV8NtM/M0qifnl5R/dkDZm0WPI rY9Z5EAZ5ZPvCimU4axZ8T+NbU0+TGBAVHZDBYepSy/qrn7hPufppmmBSUlGD/92 bfGtz0SVhhxab+Sdc7mLhGjbYQTB5cNmIFBc6jFbMT4uKjwO+AH28BzJhhPYgpwY QJm6VxduqT5K0mTu1o4UcQZHTWVP/LcNEAsnGRhyJFvD0kK1dNUzqsseDffcfSce hID+OjoGYl70+X0CEKM/VM9oYoQlMWjezh2nhRquYzfKsc0QLNG7z4hBtmgZcLFg 5+gkuOc1RaWwzw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:14 2025 by rpki-client