This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json) Hash identifier: a0ucNIaGS6jYRftWEWcpR3dfw2wG1UbElxH7w9a75Nw= Subject key identifier: 11:30:CF:16:93:B5:22:48:42:9C:0E:62:B6:B4:51:60:63:B8:B6:DE Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0 Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0 Certificate serial: 019AF2095F6C67A17E1AB523181C4E319C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=) 2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: gtJgrX6pTUH94Y04jfSmxWuXlowUuraxUqSBxNG4dFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5f:6c:67:a1:7e:1a:b5:23:18:1c:4e:31:9c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=1130cf1693b52248429c0e62b6b4516063b8b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:9e:62:08:55:35:24:1e:3d:53:57:a2:dc: 62:ea:b4:06:97:9f:b8:e1:07:70:8f:c6:0b:5d:01: 08:1c:41:28:74:07:ce:f7:fa:a8:5c:05:1c:7e:2c: c2:58:08:db:5d:f4:2e:4b:7f:e5:74:fe:26:fc:c7: fc:f2:1c:fd:51:0b:55:dd:7c:db:1d:63:e6:93:86: 88:96:ba:f8:7f:eb:1f:fb:5d:40:c3:cf:b0:28:a7: 27:9b:6b:91:ec:5e:81:6d:73:6b:98:71:3e:f2:1a: f6:f0:71:f6:4a:7d:68:e7:19:ec:e3:42:31:05:c5: 4f:62:93:aa:38:64:75:43:31:00:bb:ff:37:74:14: b4:8a:27:87:42:46:24:47:88:16:fb:f3:ae:14:06: 18:96:b7:e9:c1:96:da:aa:53:40:4e:ea:28:2c:f4: 37:ef:54:30:76:26:37:40:8b:f8:b8:aa:cf:dc:d0: 27:23:02:cb:b5:64:4b:59:f5:c1:a0:47:0d:1a:45: d6:df:0b:d6:6d:0f:9b:13:7a:d9:11:a3:33:e7:2b: a2:0b:b3:75:0c:1c:1d:4f:f1:23:7a:39:cf:10:f5: 51:ca:aa:d3:8c:d7:07:7e:24:62:0b:d2:9c:08:f0: 19:94:9c:ba:27:69:50:7c:67:18:90:9c:ba:7a:4b: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:30:CF:16:93:B5:22:48:42:9C:0E:62:B6:B4:51:60:63:B8:B6:DE X509v3 Authority Key Identifier: keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e3:bc:db:cc:e0:53:d9:3c:40:d5:c3:f1:e2:fe:4b:b8:51: aa:96:ce:9b:f2:12:a4:17:fc:28:00:9e:74:a7:b6:8f:e7:f9: 46:49:68:e1:dc:7c:e1:23:a0:a8:b3:f8:fb:4b:95:45:aa:04: 71:d0:9f:5d:eb:09:09:38:48:46:b0:30:69:9b:35:cc:1e:da: df:03:5f:73:59:94:a9:95:1b:11:fe:0d:a5:27:e3:eb:25:06: 5e:57:d2:f9:b6:cb:22:68:86:65:7a:d5:e6:b0:4a:9e:c4:02: 07:73:e4:e3:e0:fe:28:18:44:5d:e2:45:ef:37:cb:61:28:b2: c6:13:23:6f:5b:d5:f5:f4:50:be:27:03:ae:34:48:45:0d:40: ce:0a:de:3f:50:b8:b3:fb:a8:97:fe:cd:6a:69:37:73:c0:40: 22:d3:f6:92:e7:13:86:72:5a:3f:e6:97:7a:fe:8c:08:ed:9a: 3f:47:47:d8:cb:39:8f:d5:97:9f:af:e7:f9:f4:6f:26:ae:41: 6a:c8:70:6d:55:b8:e0:51:89:91:74:da:1d:4d:04:4d:20:03: 4b:7d:48:99:97:bb:91:95:4f:12:78:ee:ec:de:64:df:3f:a3: 18:28:e9:73:6d:5c:0b:92:ad:58:e3:6d:8e:b7:44:dc:e0:75: 5f:e9:19:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV9sZ6F+GrUjGBxOMZxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYWZiNDJlMmU2ZmQwOTA1N2ZjYTIxYjk5MDg0ZGFjM2I3 YWYyZDAwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EygxMTMwY2YxNjkzYjUyMjQ4NDI5YzBlNjJiNmI0NTE2MDYzYjhiNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxaeYghVNSQePVNXotxi6rQGl5+4 4Qdwj8YLXQEIHEEodAfO9/qoXAUcfizCWAjbXfQuS3/ldP4m/Mf88hz9UQtV3Xzb HWPmk4aIlrr4f+sf+11Aw8+wKKcnm2uR7F6BbXNrmHE+8hr28HH2Sn1o5xns40Ix BcVPYpOqOGR1QzEAu/83dBS0iieHQkYkR4gW+/OuFAYYlrfpwZbaqlNATuooLPQ3 71QwdiY3QIv4uKrP3NAnIwLLtWRLWfXBoEcNGkXW3wvWbQ+bE3rZEaMz5yuiC7N1 DBwdT/EjejnPEPVRyqrTjNcHfiRiC9KcCPAZlJy6J2lQfGcYkJy6eksh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEwzxaTtSJIQpwOYra0UWBjuLbeMB8GA1UdIwQY MBaAFKuvtC4ub9CQV/yiG5kITaw7evLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84OTg3NTQtZTQ0Ni00YjUxLTk5YTkt ZTU5YmQ0ZjRmNzQwLzEvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84OTg3NTQtZTQ0Ni00YjUxLTk5YTktZTU5YmQ0ZjRmNzQw LzEvcTYtMExpNXYwSkJYX0tJYm1RaE5yRHQ2OHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeO828zg U9k8QNXD8eL+S7hRqpbOm/ISpBf8KACedKe2j+f5Rklo4dx84SOgqLP4+0uVRaoE cdCfXesJCThIRrAwaZs1zB7a3wNfc1mUqZUbEf4NpSfj6yUGXlfS+bbLImiGZXrV 5rBKnsQCB3Pk4+D+KBhEXeJF7zfLYSiyxhMjb1vV9fRQvicDrjRIRQ1AzgreP1C4 s/uol/7Namk3c8BAItP2kucThnJaP+aXev6MCO2aP0dH2Ms5j9WXn6/n+fRvJq5B ashwbVW44FGJkXTaHU0ETSADS31ImZe7kZVPEnju7N5k3z+jGCjpc21cC5KtWONt jrdE3OB1X+kZ0w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:36 2025 by rpki-client