This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft File: Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft (raw, json) Hash identifier: NJZ1gmJ/JmjG3F+XNpBFJdn9x287C+uPed/EsyC3L5E= Subject key identifier: 95:6A:AE:1A:0D:40:8C:57:98:A7:95:95:93:25:29:4A:1C:8D:A0:9B Authority key identifier: 43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15 Certificate issuer: /CN=43f687bf383e32045bc027dccaeaadcf36c8e715 Certificate serial: 019AF12E8FD6F42D4A906D95BA646F4353B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft Manifest number: 4D Signing time: Sat 06 Dec 2025 01:02:31 +0000 Manifest this update: Sat 06 Dec 2025 01:02:31 +0000 Manifest next update: Sun 07 Dec 2025 01:02:31 +0000 Files and hashes: 1: Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl (hash: 0xAg3ijRMqDR9PGk2ycLZ4YwpwXBeQdg0OKoLiPk5F0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8f:d6:f4:2d:4a:90:6d:95:ba:64:6f:43:53:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f687bf383e32045bc027dccaeaadcf36c8e715 Validity Not Before: Dec 6 01:02:31 2025 GMT Not After : Dec 7 01:02:31 2025 GMT Subject: CN=956aae1a0d408c5798a795959325294a1c8da09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:8a:c5:91:dd:87:dc:4e:5e:df:e7:b0:1c: f4:cf:89:90:71:af:34:35:20:43:59:d7:39:83:c7: c3:38:86:a9:22:a6:ea:a4:ab:f3:b6:ac:9e:f9:17: f8:cf:fc:1a:21:2b:9e:74:64:3f:4f:32:45:4e:60: da:93:14:0d:22:73:6e:11:27:3c:2d:ae:68:fb:b3: 29:22:c0:66:8f:3a:20:c1:52:45:a7:54:88:ae:18: ee:f9:b9:7a:0c:58:14:f2:61:97:b5:b9:d4:16:5c: 8d:1b:b4:5c:65:e1:30:2b:73:9d:52:26:15:6d:23: 99:41:ab:6c:35:0f:56:86:d1:f7:5d:a4:49:19:33: 59:17:ee:f9:c5:82:f6:e5:7d:91:9f:dc:39:47:08: 7b:c6:dd:f4:64:50:5e:7a:64:1c:a1:f5:a7:74:23: e4:69:de:ac:0e:de:f1:39:1d:df:da:46:ce:bf:91: 74:c5:30:5b:13:29:a0:3d:7a:4c:a7:8b:d6:ae:92: 05:67:30:2b:f9:3b:a6:73:3f:19:7c:d1:29:d6:0f: 4b:69:94:b8:88:29:d2:6b:36:48:2a:71:09:4d:e3: fa:ab:d6:dc:5c:21:a2:e9:5b:6f:34:d4:11:87:40: fd:78:5a:d2:0a:55:6a:cb:2a:ba:f7:98:9e:de:1c: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6A:AE:1A:0D:40:8C:57:98:A7:95:95:93:25:29:4A:1C:8D:A0:9B X509v3 Authority Key Identifier: keyid:43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b9:71:aa:a4:bf:e3:ad:d3:97:16:67:c4:d8:5c:8b:92:d1: 40:72:40:2f:af:8b:de:60:f5:6c:1b:1e:e5:6f:f5:48:85:9e: 2d:1d:00:4b:44:19:f5:ca:1f:b8:3a:10:31:1c:79:c2:6b:9f: 60:24:34:7d:d6:0f:ec:8d:c5:cb:f1:58:01:1e:15:39:52:30: 0d:19:58:2f:c1:f8:ee:70:49:e9:91:35:94:ab:67:59:67:5c: 0c:0d:a6:bb:c1:e9:31:de:0a:c1:5e:e0:37:2d:7a:91:79:38: da:54:f4:3e:78:e6:aa:b8:25:ab:96:76:6b:77:f7:f4:7d:aa: 33:06:3b:ef:81:d4:37:99:7a:65:e9:9c:c4:78:8b:d1:45:f6: 55:ea:00:bb:42:73:1e:78:69:d3:20:41:1c:f8:db:45:11:36: d1:3e:b6:a4:8b:e9:35:11:6c:ca:89:fc:e7:22:ed:a4:9e:2f: 57:e1:1a:89:a4:f4:33:0a:55:86:fc:9e:d1:76:bb:2a:c2:89: 79:dc:6b:3c:2f:b3:e1:77:21:4f:01:87:a2:fa:f9:d7:c6:28: 6f:a4:9f:0f:75:41:35:1e:d0:bd:ca:a2:3d:20:15:50:5c:8f: 93:65:99:64:bc:70:1f:07:79:89:26:2c:30:7c:3b:8e:fb:1a: e9:1c:3a:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLo/W9C1KkG2VumRvQ1O4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjY4N2JmMzgzZTMyMDQ1YmMwMjdkY2NhZWFhZGNmMzZj OGU3MTUwHhcNMjUxMjA2MDEwMjMxWhcNMjUxMjA3MDEwMjMxWjAzMTEwLwYDVQQD Eyg5NTZhYWUxYTBkNDA4YzU3OThhNzk1OTU5MzI1Mjk0YTFjOGRhMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptiKxZHdh9xOXt/nsBz0z4mQca80 NSBDWdc5g8fDOIapIqbqpKvztqye+Rf4z/waISuedGQ/TzJFTmDakxQNInNuESc8 La5o+7MpIsBmjzogwVJFp1SIrhju+bl6DFgU8mGXtbnUFlyNG7RcZeEwK3OdUiYV bSOZQatsNQ9WhtH3XaRJGTNZF+75xYL25X2Rn9w5Rwh7xt30ZFBeemQcofWndCPk ad6sDt7xOR3f2kbOv5F0xTBbEymgPXpMp4vWrpIFZzAr+Tumcz8ZfNEp1g9LaZS4 iCnSazZIKnEJTeP6q9bcXCGi6VtvNNQRh0D9eFrSClVqyyq695ie3hz4pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVqrhoNQIxXmKeVlZMlKUocjaCbMB8GA1UdIwQY MBaAFEP2h784PjIEW8An3Mrqrc82yOcVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9hSHZ6Zy1NZ1Jid0NmY3l1cXR6emJJNXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NTFhMDAtNTk1YS00ZmI4LWFjMmMt OTI2MTYyNmE0OGM1LzEvUV9hSHZ6Zy1NZ1Jid0NmY3l1cXR6emJJNXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NTFhMDAtNTk1YS00ZmI4LWFjMmMtOTI2MTYyNmE0OGM1 LzEvUV9hSHZ6Zy1NZ1Jid0NmY3l1cXR6emJJNXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7lxqqS/ 463TlxZnxNhci5LRQHJAL6+L3mD1bBse5W/1SIWeLR0AS0QZ9cofuDoQMRx5wmuf YCQ0fdYP7I3Fy/FYAR4VOVIwDRlYL8H47nBJ6ZE1lKtnWWdcDA2mu8HpMd4KwV7g Ny16kXk42lT0Pnjmqrglq5Z2a3f39H2qMwY774HUN5l6ZemcxHiL0UX2VeoAu0Jz Hnhp0yBBHPjbRRE20T62pIvpNRFsyon85yLtpJ4vV+EaiaT0MwpVhvye0Xa7KsKJ edxrPC+z4XchTwGHovr518Yob6SfD3VBNR7QvcqiPSAVUFyPk2WZZLxwHwd5iSYs MHw7jvsa6Rw6jA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client