This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft File: qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json) Hash identifier: 8PTm0TWv2ooBRZfAVWp8HVlkYuBCMh23X3Klw//oH78= Subject key identifier: 85:FC:7C:22:66:E7:CD:AA:C4:7A:8B:5D:8C:EC:19:CD:CD:60:6A:DD Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE Certificate issuer: /CN=a97246fc431933f0b2820ced965c7851180b15ee Certificate serial: 019AF464F30903F5AC8872D5D227407859AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft Manifest number: 0B0B Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: sN/mIzEkCS2CdmzP9YYTBA0l58r73X+ymHuWkhy+TeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f3:09:03:f5:ac:88:72:d5:d2:27:40:78:59:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=85fc7c2266e7cdaac47a8b5d8cec19cdcd606add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:e1:88:6a:94:56:bb:57:1a:d3:60:e5:2a: 12:f0:94:d1:1b:5a:9f:bc:5e:79:45:fd:9e:0e:62: c3:57:ef:66:34:83:fb:fc:0f:8a:1c:79:fd:0f:a2: ca:a7:22:61:3e:21:94:f6:9e:59:42:a7:b0:84:c5: 3e:b1:2b:23:ac:5f:4b:75:4a:0f:3e:66:0e:87:8d: df:97:cd:05:ab:9f:5d:e8:06:ab:69:67:a4:5f:e0: f5:42:d2:bc:41:9a:17:00:2c:5c:67:c6:1b:4c:ed: d3:00:1b:89:b5:73:33:1d:26:36:c3:a4:0d:30:1a: 69:f8:8e:2b:fd:71:aa:93:b7:e5:55:e4:59:d2:f9: 94:04:8f:75:bb:33:7d:ec:bf:4f:48:e6:74:f1:a7: 84:0f:99:07:5b:3b:4f:a9:a8:65:db:92:c1:d1:22: dd:a5:a8:03:33:38:c1:7e:a1:ee:39:cd:d4:23:6f: f5:8f:f3:12:ff:07:51:79:f0:78:48:59:08:b2:9f: 7b:94:f8:80:65:ad:00:4a:35:72:f2:2e:46:ab:b7: 3f:a4:e8:39:90:83:7c:83:7d:bf:21:1d:28:ac:2b: 9a:10:26:01:92:79:88:74:78:c4:19:52:50:05:42: 04:5c:4d:aa:43:ce:98:66:54:7b:6e:e2:cd:a2:1a: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FC:7C:22:66:E7:CD:AA:C4:7A:8B:5D:8C:EC:19:CD:CD:60:6A:DD X509v3 Authority Key Identifier: keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:f3:a2:dd:98:97:c2:01:cb:39:2e:46:3c:19:3e:ee:a6: 47:eb:be:2a:32:61:7c:52:49:1f:69:db:c5:19:5a:0e:e5:38: 03:78:41:b3:7e:2e:21:79:87:c3:d1:46:4a:38:bc:e4:3c:9a: 75:e3:c6:01:7a:f4:22:86:00:1e:05:ec:fb:43:25:95:7c:6e: d6:cb:33:a5:85:1d:f0:69:df:e8:ef:6f:b5:f3:fc:01:eb:f0: d7:5d:09:b0:78:b4:b0:59:55:72:2b:75:56:3f:ff:6c:55:ad: 8b:ef:83:5e:cb:30:30:cb:b1:ed:2f:c5:f3:80:b0:b8:57:11: 47:f4:0c:ab:19:ec:7b:1e:c0:27:8b:be:f7:c3:e5:17:c6:a1: 22:2a:b9:1b:d7:cb:26:30:c1:fc:c4:11:f2:00:41:32:1d:36: 6a:87:8a:ab:80:60:0e:ac:cb:aa:7e:99:e0:ea:d2:c5:b1:b1: 82:7b:61:e1:6d:55:3f:5a:b6:92:ab:b1:da:62:03:0f:18:db: f1:cd:c6:75:25:2e:79:23:b8:e6:3e:4c:09:3c:9a:12:2d:95: 09:9c:80:41:35:a4:a6:e8:52:be:e8:a5:ef:14:ee:47:23:c5: 2c:59:e3:ce:67:70:e0:43:ae:9a:6b:15:83:b0:70:89:a5:85: b2:e3:86:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPMJA/WsiHLV0idAeFmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NzI0NmZjNDMxOTMzZjBiMjgyMGNlZDk2NWM3ODUxMTgw YjE1ZWUwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD Eyg4NWZjN2MyMjY2ZTdjZGFhYzQ3YThiNWQ4Y2VjMTljZGNkNjA2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ7hiGqUVrtXGtNg5SoS8JTRG1qf vF55Rf2eDmLDV+9mNIP7/A+KHHn9D6LKpyJhPiGU9p5ZQqewhMU+sSsjrF9LdUoP PmYOh43fl80Fq59d6AaraWekX+D1QtK8QZoXACxcZ8YbTO3TABuJtXMzHSY2w6QN MBpp+I4r/XGqk7flVeRZ0vmUBI91uzN97L9PSOZ08aeED5kHWztPqahl25LB0SLd pagDMzjBfqHuOc3UI2/1j/MS/wdRefB4SFkIsp97lPiAZa0ASjVy8i5Gq7c/pOg5 kIN8g32/IR0orCuaECYBknmIdHjEGVJQBUIEXE2qQ86YZlR7buLNohr7TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIX8fCJm582qxHqLXYzsGc3NYGrdMB8GA1UdIwQY MBaAFKlyRvxDGTPwsoIM7ZZceFEYCxXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQt Y2FhZDUxNjk0ZTk3LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ODYzMTktZmY1Zi00MTJmLWFhNzQtY2FhZDUxNjk0ZTk3 LzEvcVhKR19FTVpNX0N5Z2d6dGxseDRVUmdMRmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1zzot2Y l8IByzkuRjwZPu6mR+u+KjJhfFJJH2nbxRlaDuU4A3hBs34uIXmHw9FGSji85Dya dePGAXr0IoYAHgXs+0MllXxu1sszpYUd8Gnf6O9vtfP8Aevw110JsHi0sFlVcit1 Vj//bFWti++DXsswMMux7S/F84CwuFcRR/QMqxnsex7AJ4u+98PlF8ahIiq5G9fL JjDB/MQR8gBBMh02aoeKq4BgDqzLqn6Z4OrSxbGxgnth4W1VP1q2kqux2mIDDxjb 8c3GdSUueSO45j5MCTyaEi2VCZyAQTWkpuhSvuil7xTuRyPFLFnjzmdw4EOummsV g7BwiaWFsuOGnw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:04 2025 by rpki-client