This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json) Hash identifier: F10R7UELr6Y9N/FBzfFUFT56KbgJexEeu+AlsDzXikk= Subject key identifier: 46:CE:22:8E:8E:59:B3:54:DF:19:BA:33:65:B9:18:34:36:AF:D2:6E Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f Certificate serial: 019B2551B70E31C76A5FDE3C6C3A7EB61D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft Manifest number: 1778 Signing time: Tue 16 Dec 2025 04:01:10 +0000 Manifest this update: Tue 16 Dec 2025 04:01:10 +0000 Manifest next update: Wed 17 Dec 2025 04:01:10 +0000 Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: yiNjl2kyN1NGco/YMaU9/u5pIOshzEsGnyALi+NLf4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:b7:0e:31:c7:6a:5f:de:3c:6c:3a:7e:b6:1d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f Validity Not Before: Dec 16 04:01:10 2025 GMT Not After : Dec 17 04:01:10 2025 GMT Subject: CN=46ce228e8e59b354df19ba3365b9183436afd26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:0c:55:f4:23:84:d6:17:3b:fc:42:13:f3: f9:8f:e1:c1:a3:be:6c:6c:a6:d7:86:bf:fc:fc:49: 3b:52:9c:e2:d1:46:c8:fd:8c:18:e2:d3:c5:fb:97: b5:fc:2c:fc:b0:b0:f0:26:9e:76:62:25:2b:20:96: 72:c9:8a:6e:12:26:dc:0b:ad:55:e4:a5:a9:0a:a0: 34:8d:68:b3:9f:79:cb:c1:45:c2:70:a0:92:ff:74: 3f:01:aa:67:79:8c:ab:8a:d9:11:c9:d8:3c:15:03: d4:db:10:8f:13:20:1f:d8:cd:a9:e6:9d:8f:de:50: 42:1e:25:c0:b6:fc:89:a7:1a:e2:ad:c4:6e:33:26: a0:4a:3c:ff:7a:35:a8:36:50:4a:f3:da:e6:c8:c8: eb:a4:e1:21:37:64:f9:c2:8f:23:17:1b:d0:4d:33: 32:f9:85:6e:6c:ce:d2:3b:40:18:03:98:c2:0e:9d: 9d:5a:55:8c:11:ce:b5:52:35:ba:13:3a:73:d3:1b: 0c:1b:c4:80:dc:93:3f:23:25:33:d7:5d:92:8c:a0: e1:26:f8:b2:bf:ed:30:2a:6f:1b:78:3a:7d:cc:ec: 92:1a:60:c8:4f:4c:62:db:3d:c3:b8:67:71:5f:eb: 5d:53:40:8c:71:8a:e3:d0:4e:65:01:ef:05:75:12: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CE:22:8E:8E:59:B3:54:DF:19:BA:33:65:B9:18:34:36:AF:D2:6E X509v3 Authority Key Identifier: keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ea:6c:68:68:b9:64:58:25:cc:b5:10:d7:51:07:83:93:ad: 48:52:08:b2:6a:52:97:6d:a3:e5:c7:79:f9:aa:4e:cb:3f:2b: 4c:8b:81:89:96:b7:08:13:7a:8f:04:29:04:ff:f1:51:f4:29: 48:eb:a3:0f:c8:c3:6f:d4:fc:3e:19:0e:29:1f:16:82:ed:9c: 66:14:69:9c:6c:fe:3a:fe:7d:74:0b:20:cf:2a:eb:18:b2:45: 04:a9:af:15:74:c7:20:11:fd:96:bd:be:4c:0c:e6:4b:80:78: 23:b9:1b:86:3b:eb:29:16:6d:2a:82:a2:ec:d2:56:2d:60:e6: 63:7d:c8:d2:0c:6c:f9:32:02:5d:6e:84:c1:4b:21:69:c9:26: e9:47:8c:57:3c:ce:35:6a:53:e9:18:c0:a0:b9:cd:28:60:80: 2a:fd:61:c9:40:47:e3:15:18:11:45:dc:96:03:90:80:0c:cf: 32:4f:4a:9f:6f:e9:eb:0e:51:95:a2:99:80:e0:34:bb:0d:2d: aa:6b:2a:1d:29:9f:62:46:3b:e7:08:98:f5:af:0b:4c:18:aa: 74:d7:ff:7a:8c:af:31:26:ba:be:de:cf:f0:11:e7:d9:b5:b5: d4:0f:4f:95:81:61:2d:0b:53:e5:c4:b1:d2:c6:f8:f3:5f:de: a8:2f:df:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUbcOMcdqX948bDp+th02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmE1MzYxMGQ4ZWY2NjRhMTI3NWI3MWFhZWFiYjI4NTEw NGMyNGYwHhcNMjUxMjE2MDQwMTEwWhcNMjUxMjE3MDQwMTEwWjAzMTEwLwYDVQQD Eyg0NmNlMjI4ZThlNTliMzU0ZGYxOWJhMzM2NWI5MTgzNDM2YWZkMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofkMVfQjhNYXO/xCE/P5j+HBo75s bKbXhr/8/Ek7Upzi0UbI/YwY4tPF+5e1/Cz8sLDwJp52YiUrIJZyyYpuEibcC61V 5KWpCqA0jWizn3nLwUXCcKCS/3Q/AapneYyritkRydg8FQPU2xCPEyAf2M2p5p2P 3lBCHiXAtvyJpxrircRuMyagSjz/ejWoNlBK89rmyMjrpOEhN2T5wo8jFxvQTTMy +YVubM7SO0AYA5jCDp2dWlWMEc61UjW6Ezpz0xsMG8SA3JM/IyUz112SjKDhJviy v+0wKm8beDp9zOySGmDIT0xi2z3DuGdxX+tdU0CMcYrj0E5lAe8FdRKv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbOIo6OWbNU3xm6M2W5GDQ2r9JuMB8GA1UdIwQY MBaAFKlqU2ENjvZkoSdbcarquyhRBMJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUt YTIxMTE3NWMwNWUwLzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUtYTIxMTE3NWMwNWUw LzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOpsaGi5 ZFglzLUQ11EHg5OtSFIIsmpSl22j5cd5+apOyz8rTIuBiZa3CBN6jwQpBP/xUfQp SOujD8jDb9T8PhkOKR8Wgu2cZhRpnGz+Ov59dAsgzyrrGLJFBKmvFXTHIBH9lr2+ TAzmS4B4I7kbhjvrKRZtKoKi7NJWLWDmY33I0gxs+TICXW6EwUshackm6UeMVzzO NWpT6RjAoLnNKGCAKv1hyUBH4xUYEUXclgOQgAzPMk9Kn2/p6w5RlaKZgOA0uw0t qmsqHSmfYkY75wiY9a8LTBiqdNf/eoyvMSa6vt7P8BHn2bW11A9PlYFhLQtT5cSx 0sb481/eqC/fXw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:34 2025 by rpki-client