This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json) Hash identifier: ++2cK7ADKzdMYNWnxG1ISPC+y5CcOflW51mTwH73NFs= Subject key identifier: 0E:9E:7D:D0:B3:7B:AF:CA:26:20:45:6C:52:D3:FA:B9:5B:8C:02:C3 Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af Certificate serial: 019AF12D7CCE00D76490ACD1A5598FAE7A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: SJGgdj/CrWtkF5as+0bPhnkUq38/yDDja/Rx5Al2njA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7c:ce:00:d7:64:90:ac:d1:a5:59:8f:ae:7a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=0e9e7dd0b37bafca2620456c52d3fab95b8c02c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:32:1b:68:22:7e:ba:29:d2:86:ee:25:55: 57:b8:33:49:15:ce:c6:fa:98:02:36:32:fb:d9:2c: 2b:a4:a2:a5:63:92:65:34:be:2c:48:47:40:c0:d5: a5:b3:ce:0b:86:14:be:5e:aa:72:10:9c:bc:42:d9: 47:91:2d:7e:23:fe:5b:2b:61:04:7f:8f:4f:f8:93: b6:d4:91:62:24:66:b9:f1:bc:b7:37:1e:d1:03:1d: f6:9c:1f:9f:fa:e0:6d:e2:f9:21:7c:57:d9:21:d9: 40:f2:46:70:bf:86:bf:e2:15:d6:bb:44:a6:b9:55: 43:c5:31:1c:c0:67:32:72:ad:64:cb:56:ae:77:31: 59:22:23:e2:3f:90:c6:03:84:d8:f8:b8:8b:68:45: 58:b9:3c:a6:be:1e:80:c6:9c:f2:ba:52:5a:5b:a4: 89:7d:f6:83:89:d7:7d:23:d5:b0:c3:0e:92:8d:f8: e7:21:4c:16:9c:a5:cd:c3:4f:86:02:64:fa:23:82: a2:2c:66:3d:90:c7:a7:10:64:d2:e2:b3:72:1e:7b: 47:6e:4b:f8:18:88:b1:44:ce:e6:72:ae:77:4c:d6: 3f:e7:8e:c0:a3:f7:86:14:0f:85:4a:a4:43:af:81: b4:8e:38:0a:7b:11:1e:6c:b7:ca:5f:49:58:32:c4: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9E:7D:D0:B3:7B:AF:CA:26:20:45:6C:52:D3:FA:B9:5B:8C:02:C3 X509v3 Authority Key Identifier: keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bb:23:11:67:db:2c:61:38:a2:e5:42:9c:91:18:80:7d:50: cd:4d:a2:8e:99:e3:05:55:b1:d1:55:0a:08:d7:f4:1a:8b:05: 2d:8a:18:24:4d:37:fa:34:96:7b:ac:03:33:d9:df:06:e3:44: 83:b8:21:51:f3:60:0d:73:92:48:0e:8a:9c:e9:7f:71:85:71: 6f:5e:7d:66:ee:23:0d:65:38:2e:97:1e:73:b1:20:7e:5f:9b: c2:41:b3:c3:6c:d3:10:0a:23:86:92:92:c6:42:8f:60:ef:27: 3f:ef:de:23:20:3a:7e:d1:c8:c2:38:82:3f:dd:1e:4d:68:67: f8:61:61:95:aa:11:45:d7:41:f1:70:2c:68:d8:6e:1e:16:67: 5f:b8:dc:13:c5:7d:81:75:b2:c6:fa:e4:48:20:d3:10:f8:3f: cc:86:c5:49:5c:a7:8d:76:09:28:74:67:5e:cc:eb:e5:c0:6b: 36:29:af:b5:f9:57:e9:0b:7e:f7:64:91:cc:48:7b:bb:7e:e5: 7e:d5:79:15:d4:48:1d:fc:69:49:89:31:d8:67:0f:d9:06:84: aa:82:a5:d7:98:21:8b:f9:ca:17:31:c2:e4:6c:d6:9f:ae:10: 5a:7b:b7:40:59:ff:71:4e:6e:47:43:34:b0:8b:4c:dd:1f:4b: 8a:39:86:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXzOANdkkKzRpVmPrnpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYWRlNmNkOWUwMWFhYTJlMzlkZmY0ODRlNGVkY2U2ZjUw OTkwYWYwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EygwZTllN2RkMGIzN2JhZmNhMjYyMDQ1NmM1MmQzZmFiOTViOGMwMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SgyG2gifrop0obuJVVXuDNJFc7G +pgCNjL72SwrpKKlY5JlNL4sSEdAwNWls84LhhS+XqpyEJy8QtlHkS1+I/5bK2EE f49P+JO21JFiJGa58by3Nx7RAx32nB+f+uBt4vkhfFfZIdlA8kZwv4a/4hXWu0Sm uVVDxTEcwGcycq1ky1audzFZIiPiP5DGA4TY+LiLaEVYuTymvh6AxpzyulJaW6SJ ffaDidd9I9Wwww6SjfjnIUwWnKXNw0+GAmT6I4KiLGY9kMenEGTS4rNyHntHbkv4 GIixRM7mcq53TNY/547Ao/eGFA+FSqRDr4G0jjgKexEebLfKX0lYMsSjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6efdCze6/KJiBFbFLT+rlbjALDMB8GA1UdIwQY MBaAFP6t5s2eAaqi453/SE5O3Ob1CZCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYt OTI3ZWNlNjZmODJiLzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYtOTI3ZWNlNjZmODJi LzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7sjEWfb LGE4ouVCnJEYgH1QzU2ijpnjBVWx0VUKCNf0GosFLYoYJE03+jSWe6wDM9nfBuNE g7ghUfNgDXOSSA6KnOl/cYVxb159Zu4jDWU4Lpcec7Egfl+bwkGzw2zTEAojhpKS xkKPYO8nP+/eIyA6ftHIwjiCP90eTWhn+GFhlaoRRddB8XAsaNhuHhZnX7jcE8V9 gXWyxvrkSCDTEPg/zIbFSVynjXYJKHRnXszr5cBrNimvtflX6Qt+92SRzEh7u37l ftV5FdRIHfxpSYkx2GcP2QaEqoKl15ghi/nKFzHC5GzWn64QWnu3QFn/cU5uR0M0 sItM3R9LijmGow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:06 2025 by rpki-client