This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json) Hash identifier: P+RbeBWhrQGIJHvnrWTxOyIVZzWocE/EvwIPMf5TJjo= Subject key identifier: 06:7C:8C:8D:D4:AE:E4:E6:70:94:9D:E6:3D:36:01:07:3C:5E:AD:B7 Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Certificate serial: 019AF31C2DD5B7297D2FE5F0D69A88B7B733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft Manifest number: 0BC0 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: iLIZPGXnQeGcaXbqJ9xkX3lUWmrqWanbBZos2IoQqv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2d:d5:b7:29:7d:2f:e5:f0:d6:9a:88:b7:b7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=067c8c8dd4aee4e670949de63d3601073c5eadb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:08:c7:a5:45:a1:c5:47:f5:12:1c:f2:7c: c6:02:4c:ee:f3:00:5e:ba:e9:a3:2e:63:b7:32:92: 40:37:e9:dc:af:9d:8a:13:5f:b4:d3:c5:24:fc:61: 62:bf:34:a3:14:82:99:df:2d:06:c8:1a:1d:37:3a: de:73:42:4a:0d:cf:a1:14:b8:5e:c8:8f:1a:a8:6e: 0e:f9:d8:39:44:50:b0:a9:c7:72:21:18:a9:47:49: 7f:0f:09:a6:4b:81:08:1d:6a:f3:69:5c:06:27:59: 34:32:13:9f:e1:1f:09:7d:77:22:fb:45:3e:07:c7: f4:0d:b7:c0:ec:37:1d:a6:95:e0:f4:07:ed:30:c3: 5a:37:80:e1:5f:35:65:cd:f8:f3:ec:93:5c:b7:0a: 59:6b:cc:ae:ca:b0:94:56:98:7b:de:1f:93:91:30: f8:d7:85:ce:10:23:f1:eb:0f:77:b9:55:33:cf:d4: 1f:7a:24:23:62:83:98:b6:0b:45:34:78:80:71:b4: 01:94:dd:dd:52:c8:2c:8b:31:a4:de:50:4f:aa:85: 89:1e:61:b1:30:3d:b8:f3:1c:94:36:9b:a5:d4:d4: ff:82:d9:cd:0c:01:ff:c9:1d:f3:ff:20:8f:02:3e: 44:f4:b2:7b:6e:11:49:e6:3e:5e:a9:72:47:43:11: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:8C:8D:D4:AE:E4:E6:70:94:9D:E6:3D:36:01:07:3C:5E:AD:B7 X509v3 Authority Key Identifier: keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:81:6d:26:2b:f4:7b:32:af:e0:90:6b:0c:11:ba:35:52:d8: 0e:bc:2e:56:ed:f4:1a:e8:78:31:c8:be:d2:47:1b:33:fd:0b: a7:8a:d4:09:8a:b2:e1:12:b5:fa:71:6e:2b:95:26:74:29:40: a6:5d:f4:7b:0b:9f:18:52:91:3b:77:50:69:3d:89:8a:16:79: a1:4c:ce:47:d7:0b:23:ea:c6:af:22:a0:db:0a:66:ba:7c:c4: 77:12:55:74:67:69:e9:45:5b:84:89:b4:9a:60:d8:9a:b3:62: 03:13:9c:96:a9:63:46:94:e8:ae:37:d8:3b:01:6c:fe:00:10: 5d:81:fe:96:99:db:1f:61:aa:cb:04:dc:9b:6a:40:00:b1:f6: fb:78:28:f0:6b:9a:ac:06:89:c0:c8:06:79:a6:7f:eb:30:a6: ba:e4:4b:8e:93:b6:e2:40:68:1f:2c:ff:c6:ff:fc:91:a3:60: 01:28:c2:c2:09:c9:c9:61:80:35:aa:a8:01:66:ba:c7:db:6f: c7:7c:76:88:6d:06:47:2e:3a:37:73:0f:c7:97:76:f7:2e:47: 5d:48:b2:2e:74:5f:61:b1:42:63:0e:9f:32:f3:81:56:dc:a7: fc:33:76:1a:7a:82:f0:77:8e:3b:7b:fb:e7:f2:19:b3:e4:e4: 28:ef:5c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC3Vtyl9L+Xw1pqIt7czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjJjOWVlZTdjNzA2NGZmOTExNTk0ZmU4MzVhMmYxMjVj OGRkNTAwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EygwNjdjOGM4ZGQ0YWVlNGU2NzA5NDlkZTYzZDM2MDEwNzNjNWVhZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohgIx6VFocVH9RIc8nzGAkzu8wBe uumjLmO3MpJAN+ncr52KE1+008Uk/GFivzSjFIKZ3y0GyBodNzrec0JKDc+hFLhe yI8aqG4O+dg5RFCwqcdyIRipR0l/DwmmS4EIHWrzaVwGJ1k0MhOf4R8JfXci+0U+ B8f0DbfA7DcdppXg9AftMMNaN4DhXzVlzfjz7JNctwpZa8yuyrCUVph73h+TkTD4 14XOECPx6w93uVUzz9QfeiQjYoOYtgtFNHiAcbQBlN3dUsgsizGk3lBPqoWJHmGx MD248xyUNpul1NT/gtnNDAH/yR3z/yCPAj5E9LJ7bhFJ5j5eqXJHQxF/mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ8jI3UruTmcJSd5j02AQc8Xq23MB8GA1UdIwQY MBaAFKhiye7nxwZP+RFZT+g1ovElyN1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3Njct MWIwMmIxZmM3ZDBkLzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3NjctMWIwMmIxZmM3ZDBk LzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIFtJiv0 ezKv4JBrDBG6NVLYDrwuVu30Guh4Mci+0kcbM/0Lp4rUCYqy4RK1+nFuK5UmdClA pl30ewufGFKRO3dQaT2JihZ5oUzOR9cLI+rGryKg2wpmunzEdxJVdGdp6UVbhIm0 mmDYmrNiAxOclqljRpTorjfYOwFs/gAQXYH+lpnbH2GqywTcm2pAALH2+3go8Gua rAaJwMgGeaZ/6zCmuuRLjpO24kBoHyz/xv/8kaNgASjCwgnJyWGANaqoAWa6x9tv x3x2iG0GRy46N3MPx5d29y5HXUiyLnRfYbFCYw6fMvOBVtyn/DN2GnqC8HeOO3v7 5/IZs+TkKO9cpA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:30 2025 by rpki-client