This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.mft File: RQ9eqXd4ka1M9BKK5zQE8YvWdVU.mft (raw, json) Hash identifier: nd9xpbo8ZPYgULSPCVoz6ryo4nYmps2uy3M2p8JhbTc= Subject key identifier: E3:59:83:F9:B0:EC:4F:58:B6:AF:54:C6:D3:8E:B3:09:04:33:69:F0 Authority key identifier: 45:0F:5E:A9:77:78:91:AD:4C:F4:12:8A:E7:34:04:F1:8B:D6:75:55 Certificate issuer: /CN=450f5ea9777891ad4cf4128ae73404f18bd67555 Certificate serial: 019AF0F5DB11D6D347DE0426379F74CEDA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.mft Manifest number: 74 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: RQ9eqXd4ka1M9BKK5zQE8YvWdVU.crl (hash: 3LSsuOEjzvwScl7HGJYxxujQqJDoAI1FxgtTvfGuvaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.mft rsync://rpki.ripe.net/repository/DEFAULT/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:db:11:d6:d3:47:de:04:26:37:9f:74:ce:da:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450f5ea9777891ad4cf4128ae73404f18bd67555 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=e35983f9b0ec4f58b6af54c6d38eb309043369f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bb:7e:88:12:61:e6:92:bb:5d:79:42:10:0a: 30:c6:57:69:11:78:34:95:7b:0c:d8:1d:6c:e1:7b: 7f:dc:b4:53:f9:47:d6:97:82:37:f8:8e:9e:20:d5: 32:2a:63:d5:95:c2:44:5d:d5:df:cd:f4:5a:0e:7c: bd:d6:95:2e:df:00:0d:6f:b1:6a:a0:c6:c4:0b:dc: 84:a4:70:02:a5:f7:f5:b3:a6:ad:ca:94:6c:25:4e: db:3a:31:20:b4:89:c8:b0:cf:c2:ed:c4:76:64:58: 78:1e:c4:79:9a:52:a1:cf:2a:7d:b5:4d:de:e5:76: ec:d4:a8:c3:df:09:d4:65:82:df:a1:9b:dc:ce:dc: 97:66:88:31:60:6e:fe:5a:94:52:cc:0d:4d:24:c3: 20:a4:7b:57:8a:6e:35:b8:8b:aa:97:4b:16:b2:07: 99:f3:c5:12:38:37:31:58:69:55:3e:91:21:cf:f3: 3d:c9:b9:36:5e:9c:a7:2d:d2:52:1e:14:78:16:e1: 6c:3a:7f:45:c3:83:bf:b8:8c:22:2f:92:7f:3e:f2: 09:2e:36:5d:9b:1f:b1:86:2a:80:57:5c:d0:f2:76: 10:39:24:79:4c:58:75:19:67:45:c6:b0:a9:66:75: b2:61:3a:7d:26:0b:e0:3d:22:1b:36:60:f5:b1:58: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:59:83:F9:B0:EC:4F:58:B6:AF:54:C6:D3:8E:B3:09:04:33:69:F0 X509v3 Authority Key Identifier: keyid:45:0F:5E:A9:77:78:91:AD:4C:F4:12:8A:E7:34:04:F1:8B:D6:75:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0a18f6-0b80-40e9-82ae-8df124cf0ea9/1/RQ9eqXd4ka1M9BKK5zQE8YvWdVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d1:42:8a:72:b4:74:d2:25:1e:e3:ca:20:71:8e:a3:17:a9: 04:a9:21:4e:f5:54:0b:6e:1e:07:c3:16:d1:21:85:09:de:9e: c3:84:4f:2a:69:d9:f3:9d:61:d6:51:dc:d0:b4:87:2c:86:bb: fe:cc:fa:95:d0:3c:9f:d7:34:7b:e4:f9:ef:3a:9d:8c:94:72: 5a:57:a5:82:bd:2e:09:6a:30:fd:03:cd:7e:b8:0c:d1:c9:97: 73:bb:7e:b3:84:6e:5b:19:82:cf:35:60:eb:0e:57:72:b1:cd: 08:36:30:a7:e6:bf:ba:24:55:ef:20:4b:2f:61:aa:60:71:df: 33:0a:2f:6b:db:06:dc:c0:f1:65:c3:60:30:55:96:ed:12:2b: 52:2e:1b:dc:3a:51:0a:ba:2b:9b:38:d3:cd:36:10:7a:d7:f9: d3:d0:09:7a:08:d1:6e:40:e8:33:c8:28:b0:eb:20:4a:b4:fb: 11:eb:ad:68:8c:4c:19:96:a2:bc:ce:5f:31:b2:7e:a1:be:80: 31:bd:35:6e:4e:3c:e1:73:cd:c9:5d:70:65:f3:aa:ed:70:d6: 3b:9f:df:b8:bd:16:8f:d1:0b:a0:77:67:75:23:97:f8:83:51: e7:63:ff:5b:7c:49:15:bc:ba:78:7c:99:4b:2c:e9:14:58:2c: 7b:39:ca:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dsR1tNH3gQmN590ztoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGY1ZWE5Nzc3ODkxYWQ0Y2Y0MTI4YWU3MzQwNGYxOGJk Njc1NTUwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EyhlMzU5ODNmOWIwZWM0ZjU4YjZhZjU0YzZkMzhlYjMwOTA0MzM2OWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLt+iBJh5pK7XXlCEAowxldpEXg0 lXsM2B1s4Xt/3LRT+UfWl4I3+I6eINUyKmPVlcJEXdXfzfRaDny91pUu3wANb7Fq oMbEC9yEpHACpff1s6atypRsJU7bOjEgtInIsM/C7cR2ZFh4HsR5mlKhzyp9tU3e 5Xbs1KjD3wnUZYLfoZvcztyXZogxYG7+WpRSzA1NJMMgpHtXim41uIuql0sWsgeZ 88USODcxWGlVPpEhz/M9ybk2XpynLdJSHhR4FuFsOn9Fw4O/uIwiL5J/PvIJLjZd mx+xhiqAV1zQ8nYQOSR5TFh1GWdFxrCpZnWyYTp9JgvgPSIbNmD1sVjn7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONZg/mw7E9Ytq9UxtOOswkEM2nwMB8GA1UdIwQY MBaAFEUPXql3eJGtTPQSiuc0BPGL1nVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlE5ZXFYZDRrYTFNOUJLSzV6UUU4WXZXZFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wYTE4ZjYtMGI4MC00MGU5LTgyYWUt OGRmMTI0Y2YwZWE5LzEvUlE5ZXFYZDRrYTFNOUJLSzV6UUU4WXZXZFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wYTE4ZjYtMGI4MC00MGU5LTgyYWUtOGRmMTI0Y2YwZWE5 LzEvUlE5ZXFYZDRrYTFNOUJLSzV6UUU4WXZXZFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdFCinK0 dNIlHuPKIHGOoxepBKkhTvVUC24eB8MW0SGFCd6ew4RPKmnZ851h1lHc0LSHLIa7 /sz6ldA8n9c0e+T57zqdjJRyWlelgr0uCWow/QPNfrgM0cmXc7t+s4RuWxmCzzVg 6w5XcrHNCDYwp+a/uiRV7yBLL2GqYHHfMwova9sG3MDxZcNgMFWW7RIrUi4b3DpR CrormzjTzTYQetf509AJegjRbkDoM8gosOsgSrT7EeutaIxMGZaivM5fMbJ+ob6A Mb01bk484XPNyV1wZfOq7XDWO5/fuL0Wj9ELoHdndSOX+INR52P/W3xJFby6eHyZ SyzpFFgseznKFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:20 2025 by rpki-client