This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json) Hash identifier: 6POqNXlZAF/Q2xecw1j4AzqP6hTVr2hQdijQtbcN4Qc= Subject key identifier: CF:34:2C:74:BB:1E:03:67:D0:34:E4:38:8B:DE:BF:4A:09:03:E1:05 Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4 Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4 Certificate serial: 019B315635B19DB15746BFB36B24DA21EB62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft Manifest number: 1004 Signing time: Thu 18 Dec 2025 12:01:31 +0000 Manifest this update: Thu 18 Dec 2025 12:01:31 +0000 Manifest next update: Fri 19 Dec 2025 12:01:31 +0000 Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: zKE5zXBurTgq9borJf70sWhhmc616mik1CPvCxnzx6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:35:b1:9d:b1:57:46:bf:b3:6b:24:da:21:eb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4 Validity Not Before: Dec 18 12:01:31 2025 GMT Not After : Dec 19 12:01:31 2025 GMT Subject: CN=cf342c74bb1e0367d034e4388bdebf4a0903e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:f9:20:80:b3:e2:0b:81:26:c9:ef:0a:57: 59:fe:dd:f5:e1:ed:bb:8c:f2:a9:0d:38:5b:1b:d7: aa:7c:a0:09:de:cc:cf:6c:bb:d4:12:06:46:38:ec: c4:7b:78:de:5b:1a:ef:e7:39:38:1a:d8:34:52:2f: e6:1b:77:21:99:66:d0:e1:c1:f9:ef:fe:c8:82:7e: 18:85:d7:cb:ba:c3:db:ca:bb:d4:a3:7d:85:54:58: 2d:e3:be:82:bd:c0:ac:6f:c7:75:28:90:7a:d1:c2: 43:98:07:e4:f0:3e:35:11:7f:b6:7a:6e:6e:44:17: e9:5b:4d:b2:cc:ca:71:1e:65:08:de:31:00:66:f0: b0:b8:70:4a:1c:a6:7e:2a:55:a8:df:45:9a:4d:a0: c5:32:7e:ed:b7:c7:d8:96:e6:22:0a:03:27:7d:d2: 67:b5:94:d3:35:90:ba:b8:ea:ca:43:68:2f:0d:da: 5d:27:8a:4b:ff:b0:7e:b7:33:04:13:5b:d2:b2:86: 01:75:26:7f:bb:b0:5e:d5:d8:ae:27:57:47:54:4f: 96:63:fe:f8:7a:8e:33:f0:ad:84:5a:03:cb:70:7a: aa:e7:45:22:26:8b:5e:d6:0f:f0:38:8d:68:8f:0d: 9b:e2:49:48:1e:b6:f0:a5:3e:ad:b7:0b:68:c7:ac: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:34:2C:74:BB:1E:03:67:D0:34:E4:38:8B:DE:BF:4A:09:03:E1:05 X509v3 Authority Key Identifier: keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:82:a8:bb:08:69:ad:8f:62:61:34:78:48:06:65:59:ff:42: ff:a5:03:f1:75:fc:2f:d1:4a:17:ac:a1:70:36:01:03:cb:ce: 08:1f:06:ae:e8:58:2f:ec:14:4b:69:2a:d3:3b:40:79:a1:87: 82:da:8f:a2:4d:b3:08:51:37:3e:d7:6c:17:42:bd:d1:21:e1: 0c:77:f1:31:e7:ab:55:8d:8e:f4:e3:2d:be:e1:4e:d5:50:f1: 5c:c0:c4:73:6b:37:47:2c:de:c9:20:57:bc:86:27:71:c5:cb: dc:b4:34:11:42:42:50:0a:fe:44:09:13:8d:cb:35:5a:94:ea: 89:d2:df:45:39:c3:a1:e4:62:77:04:9a:32:c4:44:47:42:9a: 9b:0f:d3:12:9d:53:f5:e7:84:a3:5f:6b:88:14:f7:c7:bb:01: 92:c3:5d:8a:da:d4:a8:c6:56:2c:92:e2:a6:9d:17:7b:ee:18: ce:ab:f4:65:8d:3e:5a:a4:0a:64:0f:4b:3b:bd:26:bc:11:95: d1:8a:b7:a6:05:14:da:c8:0e:d6:76:a4:7b:bb:f9:ce:00:eb: b5:71:3b:4f:4a:5e:24:54:d5:e0:6b:71:51:1b:ed:1f:8e:51: 96:04:84:bf:dd:04:d3:12:b2:a3:f3:e1:28:f9:8b:8e:3c:c0: 67:45:8b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVjWxnbFXRr+zayTaIetiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMmE3MDc5MzhiYTYyZmUxOWU2NDc0ZGFjNzg3ZGYzZjhj ZmRlZTQwHhcNMjUxMjE4MTIwMTMxWhcNMjUxMjE5MTIwMTMxWjAzMTEwLwYDVQQD EyhjZjM0MmM3NGJiMWUwMzY3ZDAzNGU0Mzg4YmRlYmY0YTA5MDNlMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaX5IICz4guBJsnvCldZ/t314e27 jPKpDThbG9eqfKAJ3szPbLvUEgZGOOzEe3jeWxrv5zk4Gtg0Ui/mG3chmWbQ4cH5 7/7Ign4YhdfLusPbyrvUo32FVFgt476CvcCsb8d1KJB60cJDmAfk8D41EX+2em5u RBfpW02yzMpxHmUI3jEAZvCwuHBKHKZ+KlWo30WaTaDFMn7tt8fYluYiCgMnfdJn tZTTNZC6uOrKQ2gvDdpdJ4pL/7B+tzMEE1vSsoYBdSZ/u7Be1diuJ1dHVE+WY/74 eo4z8K2EWgPLcHqq50UiJote1g/wOI1ojw2b4klIHrbwpT6ttwtox6yHdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM80LHS7HgNn0DTkOIvev0oJA+EFMB8GA1UdIwQY MBaAFKoqcHk4umL+GeZHTax4ffP4z97kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMt ZDcxNmY0MDY4MTM5LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMtZDcxNmY0MDY4MTM5 LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYKouwhp rY9iYTR4SAZlWf9C/6UD8XX8L9FKF6yhcDYBA8vOCB8GruhYL+wUS2kq0ztAeaGH gtqPok2zCFE3PtdsF0K90SHhDHfxMeerVY2O9OMtvuFO1VDxXMDEc2s3RyzeySBX vIYnccXL3LQ0EUJCUAr+RAkTjcs1WpTqidLfRTnDoeRidwSaMsRER0Kamw/TEp1T 9eeEo19riBT3x7sBksNditrUqMZWLJLipp0Xe+4Yzqv0ZY0+WqQKZA9LO70mvBGV 0Yq3pgUU2sgO1nake7v5zgDrtXE7T0peJFTV4GtxURvtH45RlgSEv90E0xKyo/Ph KPmLjjzAZ0WLyQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:26 2025 by rpki-client