This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json) Hash identifier: GkPKzUslpgPGNedoMFMSonUqtc3COKyZgDUiLud7hvg= Subject key identifier: FC:EF:AD:32:FB:0B:C5:5A:EE:06:F3:CE:17:95:AE:2C:0C:86:D3:A0 Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97 Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97 Certificate serial: 019AF276F036480D557520D2AC8F0B73FB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft Manifest number: 11FA Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: vAC19sJDdDk0W3ujC+lfmUzlmCcowCAj77p0vZa+os8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f0:36:48:0d:55:75:20:d2:ac:8f:0b:73:fb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=fcefad32fb0bc55aee06f3ce1795ae2c0c86d3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:4a:49:4a:bc:be:9e:67:59:eb:75:02:36: 7d:b3:f8:72:11:8a:8b:56:54:ac:67:7e:99:b2:57: 5c:d1:7c:3d:2d:76:ce:27:54:b4:c5:97:d3:df:68: c5:b6:43:e5:91:84:40:13:ac:87:94:7d:f2:22:06: 97:0d:81:b1:b0:1b:19:f0:98:b0:ee:ef:ef:b7:88: ae:a1:0f:5b:b7:f4:37:0a:6d:e1:f1:16:28:bf:5f: 90:be:16:6b:c0:79:d8:23:f4:b8:2d:dd:2b:86:7d: 61:65:d3:2d:60:06:45:cb:76:50:51:09:91:36:0d: 8f:32:85:2d:0b:75:ba:1b:9f:d3:7c:51:93:76:b1: e6:d4:17:f9:e0:c3:06:94:b8:70:af:e2:8c:9f:b6: ce:5e:9c:a2:e8:38:d3:ab:49:3a:d3:56:77:38:00: 5b:15:32:79:60:1e:67:07:49:c8:22:ed:9b:e2:49: e6:8d:27:37:f8:40:5e:94:08:7f:2f:a0:48:2c:da: 6b:96:92:7f:97:3c:c9:90:01:aa:b5:9b:11:60:86: 15:b4:4d:c4:77:07:25:b6:56:6a:c8:51:c6:ed:ea: 47:c6:04:0d:c5:c1:6c:78:a0:f2:8a:cf:ae:b1:d2: e7:f4:77:3d:3a:c1:2c:ff:37:f7:f3:f8:ca:28:3d: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:AD:32:FB:0B:C5:5A:EE:06:F3:CE:17:95:AE:2C:0C:86:D3:A0 X509v3 Authority Key Identifier: keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4a:7c:8e:6c:74:c9:d9:d8:95:a3:79:3c:a9:70:63:ee:65: 58:c7:6b:db:92:66:0e:b0:b8:89:75:c6:6a:a7:2c:f5:f0:6a: c6:2d:31:49:89:c5:c8:ae:4b:56:8a:7c:37:7c:be:f8:36:63: 9d:2c:c8:3b:4d:b8:ad:8f:1a:e9:fe:d6:18:ce:fd:d8:ad:98: 41:37:7e:db:bc:ff:14:7e:f0:2d:cd:3c:cd:67:65:73:fb:6e: 70:f1:35:b1:28:f9:88:d9:7d:2e:49:a1:35:7e:7a:93:a5:44: 00:95:e1:db:6f:24:f4:94:b8:17:d3:d0:9b:dc:15:c1:00:01: 2c:01:99:ae:ec:6a:bf:61:06:d9:89:a7:f1:66:27:a2:d5:dc: 10:72:32:9c:40:54:b7:63:b3:30:d9:66:57:d6:57:88:cd:3d: 04:be:f2:67:26:fa:1e:54:69:c6:d5:e4:68:94:7c:b8:d2:39: fb:45:88:20:dc:a0:16:a3:ed:66:5c:72:c7:cb:1b:a3:ff:90: 77:31:71:e7:6d:77:af:b3:f5:2a:db:4e:e2:00:50:95:09:ae: 56:1c:bc:e9:44:1e:7f:5e:43:5a:42:fb:93:43:bf:e5:8d:df: 23:d6:9c:cd:d8:bc:9c:5d:cf:04:a8:26:30:c2:6c:00:ab:fa: f6:0b:12:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvA2SA1VdSDSrI8Lc/t3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYTk4NmRhMzVmMTcxMDRlOGIxMTY1MjZmODA2MzE1N2Ex NmRiOTcwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhmY2VmYWQzMmZiMGJjNTVhZWUwNmYzY2UxNzk1YWUyYzBjODZkM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu69KSUq8vp5nWet1AjZ9s/hyEYqL VlSsZ36Zsldc0Xw9LXbOJ1S0xZfT32jFtkPlkYRAE6yHlH3yIgaXDYGxsBsZ8Jiw 7u/vt4iuoQ9bt/Q3Cm3h8RYov1+QvhZrwHnYI/S4Ld0rhn1hZdMtYAZFy3ZQUQmR Ng2PMoUtC3W6G5/TfFGTdrHm1Bf54MMGlLhwr+KMn7bOXpyi6DjTq0k601Z3OABb FTJ5YB5nB0nIIu2b4knmjSc3+EBelAh/L6BILNprlpJ/lzzJkAGqtZsRYIYVtE3E dwcltlZqyFHG7epHxgQNxcFseKDyis+usdLn9Hc9OsEs/zf38/jKKD1ICQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzvrTL7C8Va7gbzzheVriwMhtOgMB8GA1UdIwQY MBaAFMKphto18XEE6LEWUm+AYxV6FtuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjY5M2ItMjhmZC00M2JkLWJhMjUt NTBkMzhiMzczOTEzLzEvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yYjY5M2ItMjhmZC00M2JkLWJhMjUtNTBkMzhiMzczOTEz LzEvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkp8jmx0 ydnYlaN5PKlwY+5lWMdr25JmDrC4iXXGaqcs9fBqxi0xSYnFyK5LVop8N3y++DZj nSzIO024rY8a6f7WGM792K2YQTd+27z/FH7wLc08zWdlc/tucPE1sSj5iNl9Lkmh NX56k6VEAJXh228k9JS4F9PQm9wVwQABLAGZruxqv2EG2Ymn8WYnotXcEHIynEBU t2OzMNlmV9ZXiM09BL7yZyb6HlRpxtXkaJR8uNI5+0WIINygFqPtZlxyx8sbo/+Q dzFx5213r7P1KttO4gBQlQmuVhy86UQef15DWkL7k0O/5Y3fI9aczdi8nF3PBKgm MMJsAKv69gsSbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:50 2025 by rpki-client