This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json) Hash identifier: LAywqGdfIKCBx1glTqXCBTdvmvPD+JJptUjiLY5Fdco= Subject key identifier: CE:BC:AB:0A:79:E7:02:C6:0C:1D:4A:98:D5:5C:67:71:07:0A:61:42 Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Certificate serial: 019AF1D1A6CDA8BFD43F1D0EC294A463C24E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft Manifest number: 0330 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: fVoAVBRW4yOP8G1AGpnuKIprju90+AQfjKvOUJIVZXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a6:cd:a8:bf:d4:3f:1d:0e:c2:94:a4:63:c2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=cebcab0a79e702c60c1d4a98d55c6771070a6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:57:f6:4b:f4:df:55:08:3c:48:1b:42:f1: 06:a9:04:38:21:69:af:00:a8:a9:44:d3:e5:52:54: b4:d2:b6:ae:c6:de:e0:16:c0:f3:e5:7c:67:29:fb: b8:ed:95:bb:7a:d3:cf:ed:20:ff:50:fd:92:87:c2: 74:df:1c:0b:6a:4e:07:ff:bf:7e:50:c6:fa:69:08: 67:6c:db:a5:0e:2b:95:db:37:06:ac:a2:e1:6b:a7: b3:8f:26:3a:45:5d:46:3e:06:d0:ba:8a:4d:45:0e: ac:79:52:cd:97:57:82:90:74:87:ab:51:e2:71:9a: 58:27:32:27:71:2f:21:a4:56:fc:6d:e6:07:22:c2: b1:ce:da:24:f6:61:f2:e7:26:eb:ae:f3:97:c9:5e: b7:54:58:11:de:bc:a7:fd:4f:1c:29:ab:db:76:0c: fc:72:bb:9d:75:f5:4d:ef:ca:42:96:ab:d4:36:67: a7:2a:f0:31:b0:24:f3:b3:cc:e5:fe:52:7d:1a:0f: 25:f5:10:d1:91:aa:98:61:e3:20:b5:d5:95:e6:b6: e6:bf:15:11:cd:2a:4a:83:61:c7:30:2d:f4:be:f8: 36:2d:06:2a:68:37:48:7f:13:f9:b0:a2:09:ed:ed: 86:c1:93:3f:1c:3f:73:18:c7:d4:b1:e0:59:8e:09: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:AB:0A:79:E7:02:C6:0C:1D:4A:98:D5:5C:67:71:07:0A:61:42 X509v3 Authority Key Identifier: keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:54:66:64:34:5c:34:0f:c6:a8:06:e1:8a:cc:74:3c:f2:62: 7a:df:ca:58:b6:24:d0:5f:9c:21:3e:6c:0e:23:84:6f:72:7d: a8:50:0a:a5:15:e8:97:ee:08:5e:8a:dd:9b:14:ac:63:90:79: 35:47:18:67:03:72:42:60:1e:c1:d6:8c:ec:a4:9b:9a:12:f6: 90:13:e0:45:b6:a9:3e:17:54:d8:6e:53:29:51:c6:6f:db:e7: a5:5f:b6:c0:bd:6f:48:a2:59:9b:45:ca:71:b7:39:b1:b4:f3: 9f:ad:ad:12:02:7b:6a:cc:ea:5d:0b:f7:88:58:79:9b:ed:dd: c4:95:98:7e:db:11:3e:5a:74:cd:95:2a:d0:61:c8:a2:34:bc: fc:6e:79:b6:eb:b2:d3:c6:1c:4a:7a:c1:f1:3b:55:a5:90:c7: 1d:a4:1e:2a:40:78:b2:99:55:d3:fb:16:30:eb:32:97:6c:22: b5:9d:88:ee:5b:bc:b8:a7:38:69:38:48:34:6e:7b:00:04:44: 2d:96:a7:f2:de:5d:6d:36:7d:7f:88:fa:e6:5c:7e:34:2f:99: 80:59:9a:da:5e:59:58:f1:f4:5f:ed:67:44:75:2d:07:aa:59: 8f:08:ad:d0:6a:d2:de:8c:c7:91:b3:14:27:a3:bc:0b:d6:69: 6a:7b:08:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0abNqL/UPx0OwpSkY8JOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm NjUxNDcwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EyhjZWJjYWIwYTc5ZTcwMmM2MGMxZDRhOThkNTVjNjc3MTA3MGE2MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM5X9kv031UIPEgbQvEGqQQ4IWmv AKipRNPlUlS00rauxt7gFsDz5XxnKfu47ZW7etPP7SD/UP2Sh8J03xwLak4H/79+ UMb6aQhnbNulDiuV2zcGrKLha6ezjyY6RV1GPgbQuopNRQ6seVLNl1eCkHSHq1Hi cZpYJzIncS8hpFb8beYHIsKxztok9mHy5ybrrvOXyV63VFgR3ryn/U8cKavbdgz8 cruddfVN78pClqvUNmenKvAxsCTzs8zl/lJ9Gg8l9RDRkaqYYeMgtdWV5rbmvxUR zSpKg2HHMC30vvg2LQYqaDdIfxP5sKIJ7e2GwZM/HD9zGMfUseBZjgkhBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM68qwp55wLGDB1KmNVcZ3EHCmFCMB8GA1UdIwQY MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlRmZDRc NA/GqAbhisx0PPJiet/KWLYk0F+cIT5sDiOEb3J9qFAKpRXol+4IXordmxSsY5B5 NUcYZwNyQmAewdaM7KSbmhL2kBPgRbapPhdU2G5TKVHGb9vnpV+2wL1vSKJZm0XK cbc5sbTzn62tEgJ7aszqXQv3iFh5m+3dxJWYftsRPlp0zZUq0GHIojS8/G55tuuy 08YcSnrB8TtVpZDHHaQeKkB4splV0/sWMOsyl2witZ2I7lu8uKc4aThING57AARE LZan8t5dbTZ9f4j65lx+NC+ZgFma2l5ZWPH0X+1nRHUtB6pZjwit0GrS3ozHkbMU J6O8C9ZpansIPg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:39 2025 by rpki-client