This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json) Hash identifier: uJGDNFIepLe5LNjp9/dfbgTXKax8HVywmqNzMpb+TYc= Subject key identifier: AE:EB:D0:60:3B:2D:83:B2:0C:CC:66:ED:15:DD:13:C6:CD:18:99:66 Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9 Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9 Certificate serial: 019AF3F71330D05B0360A4DC67A742A34FA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: 5z04I/jfbzwqJ+d60X84UJQ0yLydGQ4UxiucB1LtKRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:13:30:d0:5b:03:60:a4:dc:67:a7:42:a3:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9 Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=aeebd0603b2d83b20ccc66ed15dd13c6cd189966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:a4:4e:1b:fd:f1:e2:07:96:ee:7b:5a:a0: 50:fd:80:d8:06:52:d8:eb:7b:99:71:5e:3a:c3:81: 21:dc:cc:23:a9:c3:f2:43:bc:b8:7b:fc:57:b9:bd: fb:21:c9:28:9d:5c:c7:17:7c:1a:df:69:5d:13:48: 16:79:63:3c:32:c0:83:d7:ba:2a:90:5e:32:81:d5: 43:e7:cf:0c:d6:83:e4:b6:07:e3:40:98:23:2f:7b: 10:48:e3:68:04:ff:91:c3:4f:1e:7b:83:f6:2e:bd: 30:59:30:48:65:f9:40:c3:65:91:47:21:83:45:bc: 96:03:1f:a8:f7:f6:70:4f:5c:e5:79:df:9d:eb:54: 6c:64:4d:ae:47:73:ab:4e:1a:0b:d6:19:86:c6:29: de:d6:b9:79:cf:ee:af:50:7e:42:23:33:c4:03:ee: de:2b:a1:d8:91:8b:df:ec:42:5f:be:de:2a:ce:08: 1b:0a:37:50:b8:97:53:af:6c:53:29:25:fc:2d:14: d7:31:ee:91:84:26:5c:80:3f:09:92:e4:6c:2d:47: 5b:f9:ff:57:1e:44:34:55:e8:6c:15:8a:0f:cc:29: 9a:c1:0e:71:e2:1e:88:df:c2:05:d9:4d:44:6f:b8: 41:6e:bc:a2:9d:22:1a:1e:91:bf:97:c4:f3:ba:0e: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:D0:60:3B:2D:83:B2:0C:CC:66:ED:15:DD:13:C6:CD:18:99:66 X509v3 Authority Key Identifier: keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a2:63:cf:85:fa:cc:b5:4f:ba:dc:99:cc:e6:a8:84:03:7a: 92:05:fc:46:8c:e6:7b:40:e7:db:12:ad:24:4d:5d:96:b3:fd: b3:b6:f0:02:91:90:93:c2:b8:d2:9c:87:ba:c5:0e:16:cb:87: f9:98:7e:2a:3a:8c:93:6d:5e:85:fe:c8:9f:63:8d:54:2d:2e: ce:3d:89:a8:23:3a:af:75:53:67:8e:f8:48:2c:b5:ee:c9:7a: 7d:d8:70:9a:61:bb:a1:c1:1b:67:d5:8b:39:8b:c4:2f:c5:d3: 1b:a7:54:71:5b:10:d5:6d:2a:27:b4:13:fb:23:7b:f1:c3:c1: 4b:bb:32:c0:6e:00:f2:d0:39:e3:68:a3:3a:6d:4b:90:c8:cf: 83:26:fa:c9:53:d6:fa:e9:ef:84:8a:71:a4:7f:0c:c6:48:d7: 19:a0:0d:77:41:3d:6c:a9:6c:3f:dc:20:89:ea:d0:4c:c6:db: 8f:3e:a1:6f:ab:e4:d3:cc:41:9f:c1:9d:e4:a0:4d:21:7c:16: 11:fc:de:02:8d:5e:75:9e:bd:21:08:c3:8a:02:a9:6d:cb:aa: b3:1e:09:0f:1a:dd:ce:e6:7a:f3:46:c2:fa:dd:e5:1e:9e:8a: ae:1c:8b:48:e1:1b:bc:cf:f5:7f:b4:95:2a:70:18:a7:88:c8: e0:61:62:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xMw0FsDYKTcZ6dCo0+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MWNmMzQ2NDdkN2UwZmJkOTA4NTEwYTgyMjNjOTIzYzc5 MjhmZTkwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD EyhhZWViZDA2MDNiMmQ4M2IyMGNjYzY2ZWQxNWRkMTNjNmNkMTg5OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6ukThv98eIHlu57WqBQ/YDYBlLY 63uZcV46w4Eh3MwjqcPyQ7y4e/xXub37IckonVzHF3wa32ldE0gWeWM8MsCD17oq kF4ygdVD588M1oPktgfjQJgjL3sQSONoBP+Rw08ee4P2Lr0wWTBIZflAw2WRRyGD RbyWAx+o9/ZwT1zled+d61RsZE2uR3OrThoL1hmGxine1rl5z+6vUH5CIzPEA+7e K6HYkYvf7EJfvt4qzggbCjdQuJdTr2xTKSX8LRTXMe6RhCZcgD8JkuRsLUdb+f9X HkQ0VehsFYoPzCmawQ5x4h6I38IF2U1Eb7hBbryinSIaHpG/l8Tzug64CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7r0GA7LYOyDMxm7RXdE8bNGJlmMB8GA1UdIwQY MBaAFKgc80ZH1+D72QhRCoIjySPHko/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYjFjZWYtMWI0NC00ZTgzLWI1ZWEt YmZiMTE5OWJiZWZlLzEvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lYjFjZWYtMWI0NC00ZTgzLWI1ZWEtYmZiMTE5OWJiZWZl LzEvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqJjz4X6 zLVPutyZzOaohAN6kgX8Rozme0Dn2xKtJE1dlrP9s7bwApGQk8K40pyHusUOFsuH +Zh+KjqMk21ehf7In2ONVC0uzj2JqCM6r3VTZ474SCy17sl6fdhwmmG7ocEbZ9WL OYvEL8XTG6dUcVsQ1W0qJ7QT+yN78cPBS7sywG4A8tA542ijOm1LkMjPgyb6yVPW +unvhIpxpH8MxkjXGaANd0E9bKlsP9wgierQTMbbjz6hb6vk08xBn8Gd5KBNIXwW EfzeAo1edZ69IQjDigKpbcuqsx4JDxrdzuZ680bC+t3lHp6KrhyLSOEbvM/1f7SV KnAYp4jI4GFiiA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:24 2025 by rpki-client