This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json) Hash identifier: 0jeAjvj1UyXltv+9JCa46130Tp+ExU2amjCC0w/+RbA= Subject key identifier: F7:91:C5:A0:56:5E:1E:0A:E7:B1:11:DE:D6:7F:BA:E7:E1:46:42:7B Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88 Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88 Certificate serial: 019AF12E7E4071DC73EF60A74D7AD2C9387F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: 4vmW7l+ICZuv8LaPx4ScCmzQhIsNFHiE78iEqcZ/Wq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7e:40:71:dc:73:ef:60:a7:4d:7a:d2:c9:38:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88 Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=f791c5a0565e1e0ae7b111ded67fbae7e146427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:78:96:df:96:d9:10:5b:44:e0:d4:a5:b9: df:eb:1b:80:31:1f:be:1d:d1:21:88:fa:4c:e6:71: 76:1f:5f:f9:88:0a:13:39:29:74:05:dd:6f:68:ef: bd:aa:a4:0e:c8:43:93:22:56:31:2c:6b:12:9f:ae: 3c:a7:69:4d:e1:f8:66:66:ab:b7:44:97:15:40:82: 5e:98:ff:3e:ef:17:54:c0:d6:85:ec:00:12:ff:35: 9a:55:8f:6f:51:de:46:47:ad:14:c1:f8:ff:9e:d7: db:d3:42:6b:01:4b:b2:f8:33:20:ca:3e:18:f0:0c: 29:7c:72:d1:71:42:e0:db:85:b8:ea:c0:ed:6b:6a: d3:90:e7:7d:ba:69:a9:ce:ad:34:4f:b6:6a:8b:48: cd:ed:9c:46:06:0d:d3:70:a6:4b:94:6e:de:97:90: f4:7b:2d:44:ff:6c:96:37:26:a3:6e:14:7e:a8:03: 5e:09:50:2f:86:b8:8d:5b:e2:48:d9:44:5b:33:c3: e4:9b:86:b4:25:22:54:22:6f:04:ca:e8:d1:43:1f: 7b:5b:88:cb:fa:0b:27:29:69:fb:85:57:52:a7:64: df:ad:00:d7:45:22:44:29:3e:81:b6:f9:86:4c:74: 71:82:bd:ee:0b:83:69:99:3c:73:f1:6c:d9:8d:c3: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:C5:A0:56:5E:1E:0A:E7:B1:11:DE:D6:7F:BA:E7:E1:46:42:7B X509v3 Authority Key Identifier: keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:2d:a2:fe:6f:78:f6:27:12:32:cd:98:d9:f3:ef:1f:cc: 13:be:bd:8a:ec:eb:3d:25:5e:2a:6f:1f:0e:6a:48:c9:66:59: 02:51:a3:32:32:50:97:c8:5b:7c:53:10:35:17:c9:0f:0c:31: c3:62:39:16:ac:3a:b6:b9:eb:91:4f:be:9c:7b:a0:25:5f:7d: a9:36:89:0c:e4:02:5f:56:1d:be:3f:16:30:c0:04:e0:3c:5e: 17:f3:01:76:91:69:26:42:24:29:df:9b:11:1d:18:f2:1e:0f: 6a:1b:15:00:46:d3:ed:b3:d0:b4:a8:f2:76:13:59:99:8a:ed: d4:a6:72:9e:42:0c:28:68:ab:f1:9f:b1:1f:b7:b1:08:4d:ab: df:3a:80:9e:d4:21:a8:38:9e:5b:c0:5e:72:80:bb:bb:f9:9f: 2a:31:e8:5e:f5:44:18:28:db:b3:66:0c:84:9b:98:e8:c2:21: 96:d4:83:ed:7a:fa:41:6f:14:ae:2c:1b:dd:35:15:97:56:a3: 17:39:0e:81:94:6b:98:88:3a:f6:8c:39:3d:dc:5f:4f:c8:b7: b3:a6:9c:e8:af:f6:d1:db:97:ed:70:25:9b:ea:6f:3f:48:0e: 9a:06:79:3c:de:ed:25:17:1d:3a:d6:b7:ce:b3:51:8f:1f:ec: 05:ff:25:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn5Acdxz72CnTXrSyTh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWQwYjVhOWU0NDYzODgwMmZjYjQ2ZTkwZmFhM2FkYjUx NmJmODgwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EyhmNzkxYzVhMDU2NWUxZTBhZTdiMTExZGVkNjdmYmFlN2UxNDY0MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJ4lt+W2RBbRODUpbnf6xuAMR++ HdEhiPpM5nF2H1/5iAoTOSl0Bd1vaO+9qqQOyEOTIlYxLGsSn648p2lN4fhmZqu3 RJcVQIJemP8+7xdUwNaF7AAS/zWaVY9vUd5GR60Uwfj/ntfb00JrAUuy+DMgyj4Y 8AwpfHLRcULg24W46sDta2rTkOd9ummpzq00T7Zqi0jN7ZxGBg3TcKZLlG7el5D0 ey1E/2yWNyajbhR+qANeCVAvhriNW+JI2URbM8Pkm4a0JSJUIm8EyujRQx97W4jL +gsnKWn7hVdSp2TfrQDXRSJEKT6BtvmGTHRxgr3uC4NpmTxz8WzZjcOXDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeRxaBWXh4K57ER3tZ/uufhRkJ7MB8GA1UdIwQY MBaAFG6tC1qeRGOIAvy0bpD6o621Fr+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kYWZhMDAtZGYwOC00MDhkLWE4Y2Yt NzI4OWQwMWVkMDU0LzEvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kYWZhMDAtZGYwOC00MDhkLWE4Y2YtNzI4OWQwMWVkMDU0 LzEvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOAtov5v ePYnEjLNmNnz7x/ME769iuzrPSVeKm8fDmpIyWZZAlGjMjJQl8hbfFMQNRfJDwwx w2I5Fqw6trnrkU++nHugJV99qTaJDOQCX1Ydvj8WMMAE4DxeF/MBdpFpJkIkKd+b ER0Y8h4PahsVAEbT7bPQtKjydhNZmYrt1KZynkIMKGir8Z+xH7exCE2r3zqAntQh qDieW8BecoC7u/mfKjHoXvVEGCjbs2YMhJuY6MIhltSD7Xr6QW8Uriwb3TUVl1aj FzkOgZRrmIg69ow5PdxfT8i3s6ac6K/20duX7XAlm+pvP0gOmgZ5PN7tJRcdOta3 zrNRjx/sBf8lyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:56 2025 by rpki-client