This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json) Hash identifier: Hwti2Tc0HNPX5TvOVIu+wPhUP2yj2Kq0NOOFbCxq+gk= Subject key identifier: FF:09:54:19:82:3F:C4:E3:6D:74:16:E4:26:03:1D:5D:44:AB:7C:70 Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6 Certificate serial: 019B2B8B289C0459841EECE4965F56F2B80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft Manifest number: 0700 Signing time: Wed 17 Dec 2025 09:01:38 +0000 Manifest this update: Wed 17 Dec 2025 09:01:38 +0000 Manifest next update: Thu 18 Dec 2025 09:01:38 +0000 Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: nnqIPregUoqD/IWVVzGRUu6zcT67WdFAGJ/7TnkI9Js=) 2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:28:9c:04:59:84:1e:ec:e4:96:5f:56:f2:b8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6 Validity Not Before: Dec 17 09:01:38 2025 GMT Not After : Dec 18 09:01:38 2025 GMT Subject: CN=ff095419823fc4e36d7416e426031d5d44ab7c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:35:68:fa:01:cc:3a:2b:fd:01:bc:4c:f3: c3:ca:36:98:e5:8a:a7:f5:b4:68:d7:81:b9:51:97: d9:05:1b:1d:d8:17:4d:55:9e:15:4a:64:66:26:46: 12:6d:fa:75:62:c7:59:f8:22:1b:7d:06:e6:3d:0e: 53:9d:38:0d:b6:8d:88:c9:e7:50:17:20:4c:72:3a: 9b:2f:4a:ce:62:d7:21:44:57:60:1c:c2:16:85:d0: ab:3a:98:4c:52:93:3a:cb:37:a9:62:7b:4b:d1:4f: 9c:ba:dd:96:32:01:f8:6e:9a:26:55:70:f2:5c:d4: e4:48:64:cb:27:e5:01:21:13:c0:1a:19:eb:69:af: 71:b1:f9:f9:d3:d3:cf:f9:4c:a3:cc:4a:2c:16:b5: 3d:81:7b:47:57:ce:1b:e3:35:40:d4:38:c0:7c:05: 86:d0:70:00:9f:07:c0:0b:fe:54:a2:99:1a:e4:68: 81:d2:dc:29:da:b9:1c:8a:00:f9:81:ba:84:28:66: 36:3e:fd:e2:00:5d:97:c5:85:10:87:9b:ea:6b:db: 27:19:c8:0a:2c:6a:87:56:9b:f0:d0:c4:8e:ec:f6: 4d:6f:51:f2:f8:ae:73:64:8e:66:1f:18:1e:2a:bf: c8:5b:b7:15:ce:8c:47:39:f2:33:4e:e4:14:51:8b: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:09:54:19:82:3F:C4:E3:6D:74:16:E4:26:03:1D:5D:44:AB:7C:70 X509v3 Authority Key Identifier: keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ed:57:5a:7d:29:91:22:7d:f9:fb:fc:e4:92:a9:1f:f6:46: eb:ee:c1:48:07:bc:1d:b2:45:87:7d:28:52:71:d6:25:e4:db: a6:14:cd:06:46:a3:c8:42:ac:d4:d0:36:70:7d:13:d6:c0:7b: 46:c9:37:a4:7e:26:2a:fc:c4:43:af:8a:c8:a0:bc:dc:e4:d3: b9:c2:b9:a1:d2:db:ba:c3:f3:b0:14:1a:51:9e:bf:6b:d4:f0: 77:f5:05:95:94:5d:21:09:8f:68:8d:5f:22:73:b1:dd:2a:e5: f0:55:4f:4e:4a:dd:d0:ec:67:93:d7:21:5a:de:69:98:33:4e: e1:d8:79:de:e0:45:bf:72:76:97:08:1b:e1:f2:ca:09:e9:7f: 9d:15:b8:63:a6:c5:33:87:16:ac:07:50:e7:30:eb:2d:66:85: a6:9b:ef:2e:5b:31:34:34:79:79:0e:cc:6c:df:10:98:67:0d: a1:7a:37:9d:16:dc:0c:c1:a5:cf:0e:48:63:a7:5f:28:a2:58: f0:9e:49:af:d0:64:ea:a8:0f:c1:46:7a:b5:33:0f:05:93:9f: a9:fc:6c:07:9f:60:bb:91:86:e7:ae:99:dd:2a:90:0a:a0:86: ca:98:02:54:5d:dc:f0:5b:4a:31:39:a2:07:9d:cd:de:55:42: 1c:4d:55:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriyicBFmEHuzkll9W8rgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk MzA4YTYwHhcNMjUxMjE3MDkwMTM4WhcNMjUxMjE4MDkwMTM4WjAzMTEwLwYDVQQD EyhmZjA5NTQxOTgyM2ZjNGUzNmQ3NDE2ZTQyNjAzMWQ1ZDQ0YWI3YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUw1aPoBzDor/QG8TPPDyjaY5Yqn 9bRo14G5UZfZBRsd2BdNVZ4VSmRmJkYSbfp1YsdZ+CIbfQbmPQ5TnTgNto2IyedQ FyBMcjqbL0rOYtchRFdgHMIWhdCrOphMUpM6yzepYntL0U+cut2WMgH4bpomVXDy XNTkSGTLJ+UBIRPAGhnraa9xsfn509PP+UyjzEosFrU9gXtHV84b4zVA1DjAfAWG 0HAAnwfAC/5Uopka5GiB0twp2rkcigD5gbqEKGY2Pv3iAF2XxYUQh5vqa9snGcgK LGqHVpvw0MSO7PZNb1Hy+K5zZI5mHxgeKr/IW7cVzoxHOfIzTuQUUYtJEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8JVBmCP8TjbXQW5CYDHV1Eq3xwMB8GA1UdIwQY MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt N2I1Zjk4MTU1ZmU2LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2 LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+1XWn0p kSJ9+fv85JKpH/ZG6+7BSAe8HbJFh30oUnHWJeTbphTNBkajyEKs1NA2cH0T1sB7 Rsk3pH4mKvzEQ6+KyKC83OTTucK5odLbusPzsBQaUZ6/a9Twd/UFlZRdIQmPaI1f InOx3Srl8FVPTkrd0Oxnk9chWt5pmDNO4dh53uBFv3J2lwgb4fLKCel/nRW4Y6bF M4cWrAdQ5zDrLWaFppvvLlsxNDR5eQ7MbN8QmGcNoXo3nRbcDMGlzw5IY6dfKKJY 8J5Jr9Bk6qgPwUZ6tTMPBZOfqfxsB59gu5GG566Z3SqQCqCGypgCVF3c8FtKMTmi B53N3lVCHE1V2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:16 2025 by rpki-client