This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json) Hash identifier: uEU3c/IyRpmyIWhlG8l0xCSxn+cFjrJww6honrapQhE= Subject key identifier: DD:D5:75:52:B0:79:03:2D:D1:F7:6F:52:AA:A4:77:F7:41:95:1C:BB Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f Certificate serial: 019AF5098EE24A22EAE130EEF6BB7340F78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: qr5TKMBnYqLKBcpTMtbCYnVQhPTU8a8yNAHzuEHiylg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8e:e2:4a:22:ea:e1:30:ee:f6:bb:73:40:f7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=ddd57552b079032dd1f76f52aaa477f741951cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:64:a5:13:a4:16:31:91:44:e8:f6:ba:44: 76:ff:06:30:d0:a3:a5:67:55:d9:87:49:11:db:78: 48:9e:cf:16:b9:d2:41:d9:9c:45:3d:99:76:6f:9f: 2e:38:b3:51:c0:02:48:39:57:b6:e3:87:73:8c:58: df:fb:35:6d:cd:16:9c:a5:d1:45:28:e5:4d:d6:58: ad:ae:a1:31:ac:1f:eb:95:b0:e7:0e:4b:34:49:ed: 68:70:23:39:da:02:0e:c4:1c:c7:dc:0c:75:7e:6e: f1:a5:4c:37:ef:57:e0:0e:8f:0f:0a:81:5c:e2:5e: 49:6d:62:ed:1a:0b:dc:7a:6a:26:9d:66:b3:d2:77: ba:06:57:c5:40:6d:65:7f:0c:83:ec:ec:7b:c3:9b: 39:9f:33:ec:8f:38:49:f0:56:48:42:5f:90:15:3e: d1:35:d2:ce:83:d6:ac:f4:9f:cc:79:8d:01:fd:3a: 3b:22:f6:25:f1:e2:0c:84:69:39:20:cc:74:2d:ea: 11:1b:60:d7:24:6b:9d:90:55:f8:f7:f2:04:ec:3e: e7:2f:ca:ed:e8:89:54:a3:38:a2:a7:c4:a4:2e:0a: 64:a6:16:eb:8d:7a:c8:aa:91:3b:b4:2f:ad:ef:b0: 98:99:07:f6:fd:1f:bf:a0:4b:97:6f:52:f2:15:0a: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D5:75:52:B0:79:03:2D:D1:F7:6F:52:AA:A4:77:F7:41:95:1C:BB X509v3 Authority Key Identifier: keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1f:14:fc:56:07:fa:60:f9:16:2b:dd:30:94:30:aa:9c:68: 84:7f:6c:8a:10:85:43:57:9d:1b:c0:59:28:10:e4:92:d7:96: 4f:4b:af:91:d2:69:6c:53:10:29:7f:be:6a:a8:07:90:46:03: 55:ca:5c:7f:02:f4:d6:fa:ef:9a:aa:70:8b:ef:e6:de:71:7d: dd:0d:64:b4:48:c1:4e:20:34:59:10:b6:cb:36:0f:b8:c8:70: fc:6b:21:d2:ff:7d:d0:38:9c:41:cd:f8:2f:7f:f7:8c:11:21: 36:a2:86:ca:74:26:b7:09:20:55:b9:56:43:28:c0:b1:fe:57: e2:ae:74:d8:7a:98:b2:e9:2d:eb:7e:9e:e2:b4:18:2f:49:61: 17:85:10:f4:40:ff:ac:a8:dd:5a:0a:c5:83:17:c6:6b:22:01: ce:e3:5b:d5:d9:0c:56:cb:48:56:bb:b4:f1:c8:9a:6a:df:ef: d4:cb:5b:24:ad:b6:11:3e:2c:29:98:06:8e:5b:4f:f8:30:ad: 40:45:d2:a8:73:06:1e:95:4a:6e:42:85:d8:27:3f:23:a7:96: a7:56:df:c6:30:8c:f4:09:1e:1b:ff:f0:79:c8:97:1f:da:99: 2b:51:85:38:b4:4b:51:7d:1d:da:87:de:c3:4a:0d:a8:fe:06: 29:79:4f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CY7iSiLq4TDu9rtzQPeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmE1MzYxMGQ4ZWY2NjRhMTI3NWI3MWFhZWFiYjI4NTEw NGMyNGYwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD EyhkZGQ1NzU1MmIwNzkwMzJkZDFmNzZmNTJhYWE0NzdmNzQxOTUxY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ctkpROkFjGRROj2ukR2/wYw0KOl Z1XZh0kR23hIns8WudJB2ZxFPZl2b58uOLNRwAJIOVe244dzjFjf+zVtzRacpdFF KOVN1litrqExrB/rlbDnDks0Se1ocCM52gIOxBzH3Ax1fm7xpUw371fgDo8PCoFc 4l5JbWLtGgvcemomnWaz0ne6BlfFQG1lfwyD7Ox7w5s5nzPsjzhJ8FZIQl+QFT7R NdLOg9as9J/MeY0B/To7IvYl8eIMhGk5IMx0LeoRG2DXJGudkFX49/IE7D7nL8rt 6IlUoziip8SkLgpkphbrjXrIqpE7tC+t77CYmQf2/R+/oEuXb1LyFQrvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3VdVKweQMt0fdvUqqkd/dBlRy7MB8GA1UdIwQY MBaAFKlqU2ENjvZkoSdbcarquyhRBMJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUt YTIxMTE3NWMwNWUwLzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUtYTIxMTE3NWMwNWUw LzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR8U/FYH +mD5FivdMJQwqpxohH9sihCFQ1edG8BZKBDkkteWT0uvkdJpbFMQKX++aqgHkEYD VcpcfwL01vrvmqpwi+/m3nF93Q1ktEjBTiA0WRC2yzYPuMhw/Gsh0v990DicQc34 L3/3jBEhNqKGynQmtwkgVblWQyjAsf5X4q502HqYsukt636e4rQYL0lhF4UQ9ED/ rKjdWgrFgxfGayIBzuNb1dkMVstIVru08ciaat/v1MtbJK22ET4sKZgGjltP+DCt QEXSqHMGHpVKbkKF2Cc/I6eWp1bfxjCM9AkeG//weciXH9qZK1GFOLRLUX0d2ofe w0oNqP4GKXlPEA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:24 2025 by rpki-client