This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json) Hash identifier: m43exHOfqPJv/MmSIHXJGjeAsZ4IY9R1KVXEHlpIF7c= Subject key identifier: B1:19:9A:32:3B:BE:2B:FE:5F:E1:EC:72:CF:DD:A6:19:22:95:CE:B6 Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53 Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553 Certificate serial: 019AF276881279EF338E3CB77BB4F90E1E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft Manifest number: 08C6 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: RCDkUDNWd/yKm5TJeMBHqfOoEQRMwa+y4FoZdgvRsvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:88:12:79:ef:33:8e:3c:b7:7b:b4:f9:0e:1e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553 Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=b1199a323bbe2bfe5fe1ec72cfdda6192295ceb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:ab:11:b1:4b:14:dc:e8:ce:79:cb:79:43: 1a:9d:95:d8:3c:23:3c:be:92:a9:38:b6:9f:97:a3: 66:fa:5f:76:3d:46:9a:d2:d9:68:7a:52:d1:00:63: 6a:1b:f6:c2:4e:fe:58:50:aa:a5:ca:80:9e:86:a8: 29:a3:e2:1e:0a:cc:57:00:67:ad:c5:29:cb:4d:98: 97:bd:01:ca:a5:1b:e2:6f:79:e9:4e:fb:d9:cd:20: 1a:2f:c4:80:60:c9:a0:16:8b:c6:c0:8c:f4:89:63: d8:2b:b8:07:1c:68:62:0e:05:de:5f:d1:17:82:d2: 28:25:f6:43:a9:4e:23:c9:48:03:83:5c:9f:ee:9a: ea:66:61:97:77:69:71:bc:54:89:df:d6:0b:d4:6f: 2b:97:85:a6:89:58:fb:d2:d0:29:10:fa:21:c7:10: 27:aa:47:40:0e:8a:01:f3:6f:c7:ca:01:93:5f:c0: 9a:9c:be:63:2b:9e:e7:3e:22:0f:64:a7:d2:fd:e5: 70:84:11:31:b2:be:7c:ad:55:9f:aa:1f:60:23:b2: a1:90:ca:55:dd:67:08:e7:83:5a:a5:57:6b:30:8f: 90:a8:c2:81:56:2b:5f:0d:a8:d6:4f:51:8b:02:8c: b8:23:3b:72:53:e2:59:6d:06:35:65:83:1a:d8:12: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:19:9A:32:3B:BE:2B:FE:5F:E1:EC:72:CF:DD:A6:19:22:95:CE:B6 X509v3 Authority Key Identifier: keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:42:2b:62:9a:73:5f:dc:0b:e9:cd:fb:ae:00:f5:a8:66:96: 71:9e:9b:99:e3:af:38:da:14:88:56:0c:61:99:7b:72:a7:81: 2a:26:16:31:02:a7:1d:9e:95:23:66:ad:7f:e5:30:6d:c1:40: cc:5e:a4:52:e0:da:b0:79:3f:61:2a:83:b2:e3:30:15:78:ee: bc:ae:b9:91:b9:27:c8:a7:72:f2:39:61:45:c3:b0:20:c0:9e: 07:55:26:0c:04:00:40:dc:8c:42:c9:82:f2:76:55:62:29:6b: 7e:19:17:74:24:57:86:cc:9f:bf:b5:4f:ec:de:f2:e5:7c:26: 93:d5:d2:a9:86:ca:88:5b:b5:7e:45:0c:d6:90:72:c1:e7:47: ef:8a:fc:32:ac:21:15:44:90:08:d0:03:5f:7c:f3:0d:97:ed: b9:76:1a:36:6d:a3:0b:07:a2:dd:9f:db:ab:f5:84:2e:63:f4: f3:77:e1:f1:bb:18:d9:e8:23:47:45:bd:21:3e:57:6a:17:65: aa:cc:8f:25:33:48:58:db:83:58:3d:58:2a:5c:2a:e2:1c:a4: d4:8d:30:19:44:5b:2d:2d:a2:d1:a7:ed:04:58:35:88:8c:3d: 8f:1c:5a:5a:31:ae:a5:14:be:48:ef:db:28:90:5c:1e:93:01: 4e:a2:42:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydogSee8zjjy3e7T5Dh5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh NWM1NTMwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EyhiMTE5OWEzMjNiYmUyYmZlNWZlMWVjNzJjZmRkYTYxOTIyOTVjZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZGrEbFLFNzoznnLeUManZXYPCM8 vpKpOLafl6Nm+l92PUaa0tloelLRAGNqG/bCTv5YUKqlyoCehqgpo+IeCsxXAGet xSnLTZiXvQHKpRvib3npTvvZzSAaL8SAYMmgFovGwIz0iWPYK7gHHGhiDgXeX9EX gtIoJfZDqU4jyUgDg1yf7prqZmGXd2lxvFSJ39YL1G8rl4WmiVj70tApEPohxxAn qkdADooB82/HygGTX8CanL5jK57nPiIPZKfS/eVwhBExsr58rVWfqh9gI7KhkMpV 3WcI54NapVdrMI+QqMKBVitfDajWT1GLAoy4IztyU+JZbQY1ZYMa2BJfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEZmjI7viv+X+Hscs/dphkilc62MB8GA1UdIwQY MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEIrYppz X9wL6c37rgD1qGaWcZ6bmeOvONoUiFYMYZl7cqeBKiYWMQKnHZ6VI2atf+UwbcFA zF6kUuDasHk/YSqDsuMwFXjuvK65kbknyKdy8jlhRcOwIMCeB1UmDAQAQNyMQsmC 8nZVYilrfhkXdCRXhsyfv7VP7N7y5Xwmk9XSqYbKiFu1fkUM1pBywedH74r8Mqwh FUSQCNADX3zzDZftuXYaNm2jCwei3Z/bq/WELmP083fh8bsY2egjR0W9IT5Xahdl qsyPJTNIWNuDWD1YKlwq4hyk1I0wGURbLS2i0aftBFg1iIw9jxxaWjGupRS+SO/b KJBcHpMBTqJCmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:52 2025 by rpki-client