This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json) Hash identifier: /rDh0J1e3BJvqcv8xaERsEN2kQ7ILh/J1PQfbp/KKkw= Subject key identifier: C9:3B:A4:0A:FB:A8:2F:97:CB:CD:F4:85:DF:C9:DD:2C:5E:31:22:5A Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A Certificate issuer: /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a Certificate serial: 019AF50AD3BCB45345CAF283447EC1A02B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft Manifest number: 1094 Signing time: Sat 06 Dec 2025 19:01:58 +0000 Manifest this update: Sat 06 Dec 2025 19:01:58 +0000 Manifest next update: Sun 07 Dec 2025 19:01:58 +0000 Files and hashes: 1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: UFRaZgIPc4JweX4hRynDtaWO0dF3MppBqvoTT+prRug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d3:bc:b4:53:45:ca:f2:83:44:7e:c1:a0:2b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a Validity Not Before: Dec 6 19:01:58 2025 GMT Not After : Dec 7 19:01:58 2025 GMT Subject: CN=c93ba40afba82f97cbcdf485dfc9dd2c5e31225a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:4e:47:b4:c5:be:43:5b:78:2e:b3:9f:77: 97:12:34:91:73:2b:7f:d6:0f:2a:4a:de:10:63:c5: 77:b1:74:9b:25:12:c2:09:43:91:b0:3a:c8:c0:e6: 6c:71:56:0f:20:5e:6b:95:1f:83:a8:5a:21:21:63: 4f:f4:c8:d8:34:16:bc:ce:6c:3f:93:25:2c:b0:6a: 78:9c:57:ad:af:74:54:09:de:71:95:35:5b:76:d5: b5:3e:eb:d0:b2:0a:c3:e2:97:87:75:06:f1:4c:20: 76:0b:9a:43:a3:af:a6:fc:23:6c:d0:4a:c9:60:19: b5:b2:ee:f2:6c:ee:ce:92:11:36:0b:87:e3:79:ec: 31:46:b8:50:4c:db:ca:c6:74:da:68:67:95:f9:bb: fc:75:52:ce:44:24:b9:66:f8:57:37:c8:58:66:82: 9e:99:5c:6e:21:e8:07:8b:51:be:9b:c7:12:8e:51: b3:ab:ea:85:04:7a:5c:c7:13:1a:08:d9:bf:41:4e: 00:c1:11:5f:88:c6:9c:e5:5a:96:4a:7e:39:9e:ce: fe:7d:de:fe:e3:31:f5:91:1c:82:5e:51:63:e6:db: 3f:03:5f:93:89:3b:e6:88:6c:2b:5a:da:1e:48:95: 09:7b:ad:0f:9a:b4:ca:40:e4:a0:a6:49:2d:dd:67: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:A4:0A:FB:A8:2F:97:CB:CD:F4:85:DF:C9:DD:2C:5E:31:22:5A X509v3 Authority Key Identifier: keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9d:4f:41:53:34:dc:e5:47:04:9f:e9:31:1b:af:62:af:c7: 2e:57:ef:a5:46:ee:0c:14:29:b3:bd:14:8d:9c:71:3d:e3:30: 04:5b:db:d6:21:80:8b:c4:b4:aa:8a:38:8a:45:42:16:7c:f6: 71:d7:9e:01:61:1c:dd:c1:70:0f:19:e4:30:5d:2e:4c:06:64: 32:98:c8:1d:40:68:81:11:f3:d2:d7:0c:3d:de:a8:14:13:43: 35:a2:82:a8:19:0c:40:5f:99:18:a9:b2:ad:d6:c5:26:f2:58: c0:02:b1:c2:7a:db:1e:36:d3:0b:6a:ac:c7:23:fe:7d:2a:38: 6d:0a:68:a1:0f:cd:19:2a:66:f7:d1:8c:af:20:10:43:e9:83: f3:c3:8f:47:94:db:0e:8d:2a:83:5d:cb:a1:4c:c1:94:0c:46: fa:91:53:d9:c1:45:2d:a3:49:82:ae:ac:ae:fc:fe:ca:9b:c8: fe:4b:82:05:fd:8b:23:84:be:bd:21:fe:ad:f1:79:1a:3e:f5: eb:a9:21:d1:b5:fb:73:76:98:0b:cd:54:78:54:de:c1:15:3c: d9:88:36:00:ee:8b:79:33:c8:ea:21:12:46:88:27:2d:6b:86: 9e:cd:9f:42:5b:da:a8:e8:d0:da:61:c3:e0:3a:12:f5:c5:08: 3e:15:51:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtO8tFNFyvKDRH7BoCtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDM3YTlmZTU2MjVlZGEwMTA4MWViMmU5MDdjZmQ5YjVh NWRjOWEwHhcNMjUxMjA2MTkwMTU4WhcNMjUxMjA3MTkwMTU4WjAzMTEwLwYDVQQD EyhjOTNiYTQwYWZiYTgyZjk3Y2JjZGY0ODVkZmM5ZGQyYzVlMzEyMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PtOR7TFvkNbeC6zn3eXEjSRcyt/ 1g8qSt4QY8V3sXSbJRLCCUORsDrIwOZscVYPIF5rlR+DqFohIWNP9MjYNBa8zmw/ kyUssGp4nFetr3RUCd5xlTVbdtW1PuvQsgrD4peHdQbxTCB2C5pDo6+m/CNs0ErJ YBm1su7ybO7OkhE2C4fjeewxRrhQTNvKxnTaaGeV+bv8dVLORCS5ZvhXN8hYZoKe mVxuIegHi1G+m8cSjlGzq+qFBHpcxxMaCNm/QU4AwRFfiMac5VqWSn45ns7+fd7+ 4zH1kRyCXlFj5ts/A1+TiTvmiGwrWtoeSJUJe60PmrTKQOSgpkkt3WfGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk7pAr7qC+Xy830hd/J3SxeMSJaMB8GA1UdIwQY MBaAFFkDep/lYl7aAQgesukHz9m1pdyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEt YTU1ZmZhZTJlYmQwLzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEtYTU1ZmZhZTJlYmQw LzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ1PQVM0 3OVHBJ/pMRuvYq/HLlfvpUbuDBQps70UjZxxPeMwBFvb1iGAi8S0qoo4ikVCFnz2 cdeeAWEc3cFwDxnkMF0uTAZkMpjIHUBogRHz0tcMPd6oFBNDNaKCqBkMQF+ZGKmy rdbFJvJYwAKxwnrbHjbTC2qsxyP+fSo4bQpooQ/NGSpm99GMryAQQ+mD88OPR5Tb Do0qg13LoUzBlAxG+pFT2cFFLaNJgq6srvz+ypvI/kuCBf2LI4S+vSH+rfF5Gj71 66kh0bX7c3aYC81UeFTewRU82Yg2AO6LeTPI6iESRognLWuGns2fQlvaqOjQ2mHD 4DoS9cUIPhVRug== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:49 2025 by rpki-client