This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json) Hash identifier: XC5YrivCiCK5qpG4ezPs/TguPmDG0nfXPHyejDMCzDk= Subject key identifier: 92:3B:38:4A:2D:0E:29:88:8B:53:1D:84:B4:14:78:37:43:00:8D:79 Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e Certificate serial: 019AF509E9005DAD5F9B696AFF2ECD9DFE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:00:58 +0000 Manifest this update: Sat 06 Dec 2025 19:00:58 +0000 Manifest next update: Sun 07 Dec 2025 19:00:58 +0000 Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: 4ukiC23ERlykM6nHLaan3ZmbZuAPflGVU4x7+miMk+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e9:00:5d:ad:5f:9b:69:6a:ff:2e:cd:9d:fe:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e Validity Not Before: Dec 6 19:00:58 2025 GMT Not After : Dec 7 19:00:58 2025 GMT Subject: CN=923b384a2d0e29888b531d84b414783743008d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:87:82:95:c1:de:f6:1e:95:b9:47:87:e0: 91:29:9c:19:08:d4:61:2e:21:d9:90:15:68:23:b2: bf:0d:24:bc:a1:0e:ff:73:60:63:98:45:b3:53:59: 93:22:cc:e6:25:3c:1c:59:7f:8d:45:1d:4a:56:4d: cd:7b:50:a8:e0:15:61:5a:29:4c:63:9e:24:00:b6: f8:9b:ce:99:97:94:83:2d:c1:52:4a:62:3f:18:25: 92:12:60:8a:c8:ce:cb:fc:af:b9:c8:8e:f5:cf:64: 46:ca:e7:26:fe:0a:7b:b6:ba:51:7b:d4:a7:5f:c2: 51:d6:80:0a:1e:b6:73:d2:5e:21:c1:46:d7:75:c7: 5b:75:cc:9c:f5:5d:63:40:36:bd:50:96:fb:93:d5: b1:6c:b6:ed:32:40:81:17:33:bd:ee:c1:52:5b:e5: ef:98:7f:14:a9:f5:1a:29:41:15:c8:a2:31:0a:96: b0:0a:29:a3:c3:6e:77:46:b4:ba:43:45:08:f3:b1: 49:97:da:db:69:b0:1e:3f:ec:7b:ca:40:d6:b8:b5: 41:e2:9b:66:fd:7d:b6:be:4d:68:95:d2:e4:a1:69: 68:0d:54:48:a5:65:e8:70:24:fe:96:61:93:e0:21: 2f:51:f0:93:45:37:d6:c3:24:9c:ee:e3:23:fe:3a: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:38:4A:2D:0E:29:88:8B:53:1D:84:B4:14:78:37:43:00:8D:79 X509v3 Authority Key Identifier: keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:b0:ba:b5:d3:b7:c7:27:22:a2:9e:88:8a:69:6e:77:64: dc:24:2e:66:e9:a1:3e:a6:9d:77:c1:63:1c:97:d5:33:92:11: f2:24:b7:4f:ae:0f:d0:6a:72:56:1c:24:e3:91:eb:fd:65:50: 57:2c:cd:c4:ca:da:36:8e:a2:e2:b0:8f:83:22:f6:53:49:2e: 2b:f3:05:ea:7a:cd:7d:b3:f7:47:98:24:1a:b1:66:5f:12:c6: f3:e9:e7:07:7d:c3:ec:90:81:93:a9:92:83:df:59:db:2a:54: 24:9e:7f:fc:40:30:fc:6b:8e:ed:f4:21:69:e3:5c:0b:ce:bd: 7d:78:4b:c9:a1:c3:79:4f:93:24:28:14:27:d0:a3:a9:f7:9f: 07:cb:17:46:75:40:1f:aa:07:08:88:b7:b8:fc:f5:48:e1:10: 53:72:14:09:a4:c3:95:70:17:b1:5b:e3:60:2b:e6:89:bb:8a: e0:aa:34:ee:cd:cd:9d:e0:ac:a3:08:63:0e:25:8f:f9:f9:3b: 8b:df:20:48:07:14:25:6d:82:dd:9b:30:c4:e0:2c:96:eb:2a: 25:74:bf:fe:f2:0f:ae:c7:42:1a:1c:d0:09:54:38:c9:ca:47: b1:8e:74:5d:89:16:0b:87:04:d5:8b:0c:0b:66:96:fd:55:f8: c4:ee:8f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CekAXa1fm2lq/y7Nnf46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWQ3ZjdkODM4NDg1YTE5ZTAwMjc5OTY4YTliOTg2ODNh NGM1NmUwHhcNMjUxMjA2MTkwMDU4WhcNMjUxMjA3MTkwMDU4WjAzMTEwLwYDVQQD Eyg5MjNiMzg0YTJkMGUyOTg4OGI1MzFkODRiNDE0NzgzNzQzMDA4ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgaHgpXB3vYelblHh+CRKZwZCNRh LiHZkBVoI7K/DSS8oQ7/c2BjmEWzU1mTIszmJTwcWX+NRR1KVk3Ne1Co4BVhWilM Y54kALb4m86Zl5SDLcFSSmI/GCWSEmCKyM7L/K+5yI71z2RGyucm/gp7trpRe9Sn X8JR1oAKHrZz0l4hwUbXdcdbdcyc9V1jQDa9UJb7k9WxbLbtMkCBFzO97sFSW+Xv mH8UqfUaKUEVyKIxCpawCimjw253RrS6Q0UI87FJl9rbabAeP+x7ykDWuLVB4ptm /X22vk1oldLkoWloDVRIpWXocCT+lmGT4CEvUfCTRTfWwySc7uMj/jq+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI7OEotDimIi1MdhLQUeDdDAI15MB8GA1UdIwQY MBaAFDKtf32DhIWhngAnmWipuYaDpMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmIt OTRjNGU0ZWJjZDQxLzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmItOTRjNGU0ZWJjZDQx LzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvuwurXT t8cnIqKeiIppbndk3CQuZumhPqadd8FjHJfVM5IR8iS3T64P0GpyVhwk45Hr/WVQ VyzNxMraNo6i4rCPgyL2U0kuK/MF6nrNfbP3R5gkGrFmXxLG8+nnB33D7JCBk6mS g99Z2ypUJJ5//EAw/GuO7fQhaeNcC869fXhLyaHDeU+TJCgUJ9CjqfefB8sXRnVA H6oHCIi3uPz1SOEQU3IUCaTDlXAXsVvjYCvmibuK4Ko07s3NneCsowhjDiWP+fk7 i98gSAcUJW2C3ZswxOAslusqJXS//vIPrsdCGhzQCVQ4ycpHsY50XYkWC4cE1YsM C2aW/VX4xO6PXw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:22 2025 by rpki-client