This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json) Hash identifier: EeuFtGUMYrG8+uy8PA8Pz2aEaE/m8FPN8dO+DlPUW90= Subject key identifier: D6:85:B6:D1:CD:9B:A5:3C:3D:1C:20:39:EC:9A:43:D2:27:E9:ED:3A Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0 Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0 Certificate serial: 019AF2090A90118AB0DD420308B0EF4875F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft Manifest number: 13F2 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: XKIGZXW6UxDI6y4vmpIus1NFfNgSN8GJCpFhkrt6VbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0a:90:11:8a:b0:dd:42:03:08:b0:ef:48:75:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=d685b6d1cd9ba53c3d1c2039ec9a43d227e9ed3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:46:06:45:52:bf:6d:bb:f3:66:18:b9:fa: 22:af:80:71:9a:cc:f1:6a:c4:5f:38:52:aa:ad:00: a7:0b:4d:21:e3:fe:d1:97:13:16:90:c5:d1:09:b9: c9:ae:28:5e:86:16:5f:e4:6a:9d:2d:70:1f:48:2a: 21:a9:49:77:7e:86:4b:b9:ae:b9:1b:9e:70:49:5a: 6e:78:0e:93:0a:83:ef:a2:5e:1a:64:e8:5a:7d:33: 4f:89:e4:34:50:e3:11:aa:3c:00:61:b0:0f:4c:85: f5:f7:4f:de:31:f0:0c:8e:d3:d2:94:e3:83:c3:76: 70:08:93:7d:5e:a5:1d:45:f0:13:d6:53:8a:0f:45: 5f:6a:23:4d:8f:99:c8:79:4a:d2:f1:26:4b:fa:ba: 82:cf:9f:8b:84:b2:a0:58:ce:06:0a:94:78:dc:d7: a6:56:d2:90:9c:42:1e:0c:38:71:7f:bf:70:ec:c3: e6:28:9f:65:78:8f:f6:b1:21:6e:bc:42:51:22:96: dd:a5:cc:3b:8f:2e:df:47:7b:65:fa:ad:2c:97:a8: 89:bd:6d:51:64:cd:69:8e:73:bc:ef:e0:04:53:18: 5f:ef:1b:1b:6f:fa:a0:1a:40:bf:48:de:a8:a7:0c: 89:04:7c:ea:ba:fe:41:63:3a:5a:6b:a6:c9:46:a8: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:B6:D1:CD:9B:A5:3C:3D:1C:20:39:EC:9A:43:D2:27:E9:ED:3A X509v3 Authority Key Identifier: keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c9:19:06:2c:2f:0b:50:eb:4e:0a:d2:cb:31:11:11:29:02: 56:03:de:a1:88:11:b2:f3:cf:3e:13:bf:5e:c7:22:e0:a0:fb: 5a:c1:cb:2f:9f:03:81:03:41:f2:a6:d5:76:93:e4:76:d9:d5: f7:9e:2a:13:a9:d7:08:dd:fe:42:8d:1c:27:56:51:45:75:8e: 4e:a4:4f:8c:b0:a7:b3:f7:c0:b1:30:86:6f:9b:2c:13:a2:5d: 89:69:ca:71:c6:6a:d3:ca:77:5c:24:ac:42:b4:64:45:f7:46: e7:f4:63:eb:23:98:52:2c:51:59:a9:1c:fc:92:88:06:f8:8d: ca:52:c0:22:48:be:1e:10:4b:7b:3a:4f:7d:3c:7c:5a:d2:90: cb:cd:4b:db:75:bc:31:7b:6f:73:5f:b8:80:45:64:d7:b2:7a: d6:20:01:9b:55:73:37:3a:00:23:38:5a:27:df:eb:4e:9d:bd: 28:8c:a3:6a:7f:c0:d9:53:c2:84:15:cd:7c:b4:ca:df:eb:f0: a7:5f:02:f3:d7:98:3d:1b:93:58:92:69:7e:53:5a:e9:39:13: 66:56:b5:6e:6c:fa:ab:e7:78:27:6f:37:eb:3f:0b:31:27:95: d1:a4:d9:18:cd:46:d0:4a:24:b1:46:5e:fb:ce:18:39:50:9f: 32:1d:60:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQqQEYqw3UIDCLDvSHX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MDcyM2VhMTI1NTRkNTJmNDY3M2ExYTQ4Nzg5ZjNkMDVh Nzg5YTAwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhkNjg1YjZkMWNkOWJhNTNjM2QxYzIwMzllYzlhNDNkMjI3ZTllZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNtGBkVSv22782YYufoir4Bxmszx asRfOFKqrQCnC00h4/7RlxMWkMXRCbnJrihehhZf5GqdLXAfSCohqUl3foZLua65 G55wSVpueA6TCoPvol4aZOhafTNPieQ0UOMRqjwAYbAPTIX190/eMfAMjtPSlOOD w3ZwCJN9XqUdRfAT1lOKD0VfaiNNj5nIeUrS8SZL+rqCz5+LhLKgWM4GCpR43Nem VtKQnEIeDDhxf79w7MPmKJ9leI/2sSFuvEJRIpbdpcw7jy7fR3tl+q0sl6iJvW1R ZM1pjnO87+AEUxhf7xsbb/qgGkC/SN6opwyJBHzquv5BYzpaa6bJRqgQxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaFttHNm6U8PRwgOeyaQ9In6e06MB8GA1UdIwQY MBaAFKkHI+oSVU1S9Gc6Gkh4nz0Fp4mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMt Yjc3NGMzZWE5ZGJiLzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMtYjc3NGMzZWE5ZGJi LzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8kZBiwv C1DrTgrSyzERESkCVgPeoYgRsvPPPhO/Xsci4KD7WsHLL58DgQNB8qbVdpPkdtnV 954qE6nXCN3+Qo0cJ1ZRRXWOTqRPjLCns/fAsTCGb5ssE6JdiWnKccZq08p3XCSs QrRkRfdG5/Rj6yOYUixRWakc/JKIBviNylLAIki+HhBLezpPfTx8WtKQy81L23W8 MXtvc1+4gEVk17J61iABm1VzNzoAIzhaJ9/rTp29KIyjan/A2VPChBXNfLTK3+vw p18C89eYPRuTWJJpflNa6TkTZla1bmz6q+d4J2836z8LMSeV0aTZGM1G0EoksUZe +84YOVCfMh1g+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:55 2025 by rpki-client