This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json) Hash identifier: rxGJZEEJM02a6dJzARIXu2nTsRci7II9jN40vnPVCms= Subject key identifier: 8B:36:26:3E:C6:27:B7:20:09:1A:FC:ED:87:1B:4E:7A:E4:77:DC:58 Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Certificate serial: 019B2EFA397095F98097DA06A448D2643C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft Manifest number: 0BDF Signing time: Thu 18 Dec 2025 01:01:49 +0000 Manifest this update: Thu 18 Dec 2025 01:01:49 +0000 Manifest next update: Fri 19 Dec 2025 01:01:49 +0000 Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: VcFLF7Bi/DXipi1Y0/py0hCBDIDZhleb0cyZFYwfq/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:39:70:95:f9:80:97:da:06:a4:48:d2:64:3c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Validity Not Before: Dec 18 01:01:49 2025 GMT Not After : Dec 19 01:01:49 2025 GMT Subject: CN=8b36263ec627b720091afced871b4e7ae477dc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:77:b6:08:1c:aa:0b:23:df:50:66:e8:c6: de:3f:e2:ca:38:5c:0d:21:0a:99:ef:f2:a7:bd:c2: 18:b9:46:e6:15:bc:25:03:58:e4:d9:b4:6b:e2:e5: 5a:2e:d6:c5:e8:dc:93:ae:ee:5b:6f:8b:48:d0:72: fe:b6:fe:2e:46:d3:d6:25:a7:1d:d1:0d:c3:65:20: 72:69:06:41:59:cd:25:cb:9c:84:85:fe:e4:72:34: 35:8e:eb:c3:ba:54:6f:4b:de:15:d7:00:43:10:e2: 03:05:a9:6f:8b:02:e4:d0:bd:9e:11:8c:2c:18:25: 08:32:ae:a2:39:8e:ff:f0:3d:b0:07:1f:c2:fe:cc: 1f:e4:93:75:0a:31:cc:e2:1b:a2:e7:3d:73:ba:e8: 1f:9b:ea:98:8d:84:1c:73:87:49:1c:68:67:6e:af: ca:8b:9a:9a:61:f7:74:54:b1:fc:ca:27:37:22:17: 38:b8:90:86:bf:fd:2e:e6:0c:7c:43:c3:e2:9f:81: a9:e2:f2:83:77:93:14:06:ee:12:cc:0b:89:fa:db: 2c:b5:9c:bd:94:23:13:ea:e6:28:5c:47:52:84:e8: 8e:f5:65:5c:62:bc:2b:9c:77:e0:fb:e6:a0:20:b7: af:20:5d:cd:05:e9:bd:7d:65:da:f4:d4:4c:98:98: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:26:3E:C6:27:B7:20:09:1A:FC:ED:87:1B:4E:7A:E4:77:DC:58 X509v3 Authority Key Identifier: keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e1:8e:01:40:44:55:b8:13:ea:e1:2c:ed:19:e3:f7:0a:c6: cd:31:43:60:ff:45:63:04:30:85:a5:d0:52:9e:6c:ac:9d:05: a6:71:2d:e4:19:35:58:18:9e:61:2d:82:70:76:f7:9f:b5:66: ce:c1:b0:f1:23:e9:0a:e0:82:7d:a2:31:97:dd:fa:af:d8:a8: 94:52:08:b1:b1:a6:2c:33:3b:76:62:14:e0:ea:f2:62:c1:89: 11:8d:53:05:16:0f:2f:ea:56:a1:de:03:e3:d6:c5:90:e9:fd: 5d:fd:b0:04:2e:c0:80:6e:90:6e:2c:a9:30:38:4e:a2:d7:5f: 53:20:0d:04:ea:4f:21:a0:a9:be:05:19:5e:86:f2:6b:5b:7a: db:7e:19:79:d5:09:de:37:1a:ae:70:52:32:a7:49:9d:89:9b: 70:0c:8c:75:9d:37:ef:f8:19:6d:12:e7:80:e6:02:96:19:5d: c2:35:8d:88:26:58:bc:a8:37:0c:d8:66:bd:b0:e2:2f:2d:c2: c4:61:d4:85:59:fc:3a:ec:9a:18:fc:47:a3:c1:5a:88:9a:51: 1d:aa:ed:80:da:07:de:12:e4:7e:55:8a:43:cf:03:e1:2a:04: a0:21:38:5a:86:0b:f6:14:14:c2:14:ba:ec:90:79:2d:58:5c: c6:ca:eb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+jlwlfmAl9oGpEjSZDx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjJjOWVlZTdjNzA2NGZmOTExNTk0ZmU4MzVhMmYxMjVj OGRkNTAwHhcNMjUxMjE4MDEwMTQ5WhcNMjUxMjE5MDEwMTQ5WjAzMTEwLwYDVQQD Eyg4YjM2MjYzZWM2MjdiNzIwMDkxYWZjZWQ4NzFiNGU3YWU0NzdkYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki53tggcqgsj31Bm6MbeP+LKOFwN IQqZ7/KnvcIYuUbmFbwlA1jk2bRr4uVaLtbF6NyTru5bb4tI0HL+tv4uRtPWJacd 0Q3DZSByaQZBWc0ly5yEhf7kcjQ1juvDulRvS94V1wBDEOIDBalviwLk0L2eEYws GCUIMq6iOY7/8D2wBx/C/swf5JN1CjHM4hui5z1zuugfm+qYjYQcc4dJHGhnbq/K i5qaYfd0VLH8yic3Ihc4uJCGv/0u5gx8Q8Pin4Gp4vKDd5MUBu4SzAuJ+tsstZy9 lCMT6uYoXEdShOiO9WVcYrwrnHfg++agILevIF3NBem9fWXa9NRMmJiMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs2Jj7GJ7cgCRr87YcbTnrkd9xYMB8GA1UdIwQY MBaAFKhiye7nxwZP+RFZT+g1ovElyN1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3Njct MWIwMmIxZmM3ZDBkLzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3NjctMWIwMmIxZmM3ZDBk LzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+GOAUBE VbgT6uEs7Rnj9wrGzTFDYP9FYwQwhaXQUp5srJ0FpnEt5Bk1WBieYS2CcHb3n7Vm zsGw8SPpCuCCfaIxl936r9iolFIIsbGmLDM7dmIU4OryYsGJEY1TBRYPL+pWod4D 49bFkOn9Xf2wBC7AgG6QbiypMDhOotdfUyANBOpPIaCpvgUZXobya1t6234ZedUJ 3jcarnBSMqdJnYmbcAyMdZ037/gZbRLngOYClhldwjWNiCZYvKg3DNhmvbDiLy3C xGHUhVn8OuyaGPxHo8FaiJpRHartgNoH3hLkflWKQ88D4SoEoCE4WoYL9hQUwhS6 7JB5LVhcxsrrXQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:40:14 2025 by rpki-client