This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json) Hash identifier: a0k1k/bR3GMZUSpugbdrulbSwe6IakSir8apDZLoGTU= Subject key identifier: BC:E1:AE:F9:8F:48:95:E0:2F:24:23:F0:E8:1B:C7:DB:95:3E:B1:0B Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Certificate serial: 019AF6F860062C15D8D845F8D1203B09FE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft Manifest number: 0937 Signing time: Sun 07 Dec 2025 04:01:03 +0000 Manifest this update: Sun 07 Dec 2025 04:01:03 +0000 Manifest next update: Mon 08 Dec 2025 04:01:03 +0000 Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: ijozYtLILF0OfhyRgcH73scgWv3M7gDuSFSB2iWvP70=) 2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:60:06:2c:15:d8:d8:45:f8:d1:20:3b:09:fe:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Validity Not Before: Dec 7 04:01:03 2025 GMT Not After : Dec 8 04:01:03 2025 GMT Subject: CN=bce1aef98f4895e02f2423f0e81bc7db953eb10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1c:60:89:c5:8b:9f:f4:47:b8:5c:00:28:d5: 08:4e:68:2c:9f:c6:b5:3d:c6:c7:05:58:6f:c0:80: e7:e6:ce:73:92:c5:62:cb:7c:6a:09:e0:87:14:95: 02:51:db:af:fa:2b:88:d0:4b:ed:63:04:d4:db:39: ff:54:17:02:d5:64:4d:22:19:13:76:67:18:93:5a: 6a:68:9b:87:db:03:37:c9:8f:dc:ef:f1:92:ed:f6: db:03:80:7d:d7:2e:08:c6:9c:9b:b9:0c:e5:90:ae: 86:fa:f0:ae:b7:60:17:a2:75:e4:f0:55:f2:68:f4: ab:fe:8d:aa:79:59:de:6f:e8:3e:8b:cd:91:66:09: 85:05:af:22:a7:44:aa:7d:0e:ab:2e:8e:9d:aa:21: 2d:ee:70:c3:04:c8:4a:68:68:2f:d1:34:2a:be:a6: 37:ea:7c:6b:67:f3:29:02:6e:db:cc:fd:19:53:fa: f3:71:ad:d1:e4:9e:8f:fd:10:45:45:76:1e:a7:cd: cf:28:5e:a7:27:79:c8:90:70:ba:50:fa:43:fd:47: bf:85:42:ff:8c:d8:c9:57:2a:41:2a:44:42:32:91: 89:9b:45:d7:2f:39:91:d6:09:3c:ae:3f:e0:c3:9a: 9b:5b:32:cf:64:50:3d:df:2c:ef:88:0c:86:3e:60: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:AE:F9:8F:48:95:E0:2F:24:23:F0:E8:1B:C7:DB:95:3E:B1:0B X509v3 Authority Key Identifier: keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b6:61:91:37:1b:7f:34:c7:cb:c3:2f:65:94:61:e5:88:38: a6:83:9a:1f:e6:15:8c:04:20:8c:c8:b8:a4:c9:9e:b0:ab:25: b1:2e:eb:f2:3a:a6:f3:fc:e9:9d:f2:12:ee:f5:b4:17:33:71: 29:33:82:df:fc:fc:2b:18:6f:d1:da:a9:32:35:8c:2f:99:2f: 34:ad:f5:81:16:ad:95:35:81:b9:35:06:6a:67:50:4e:4c:98: 09:c0:ab:22:61:f0:75:8b:05:cf:51:3d:bf:47:d8:ac:a7:86: bb:a4:d2:36:af:cd:3c:d6:0e:dc:ad:cf:79:9d:90:05:55:0f: 20:9b:c7:8d:e4:e6:36:05:55:38:1f:79:72:64:c3:75:08:9a: 1e:4d:0e:80:a8:4f:6c:62:a9:64:a6:96:b6:8b:48:d0:88:3a: 78:76:53:a2:46:ce:f8:cd:65:ab:2d:1a:50:a2:87:04:8e:a5: f5:5b:c6:63:3f:4c:29:7c:28:14:56:4a:6d:f3:1c:78:e3:be: 64:c1:00:47:c5:e1:f3:0a:2f:ef:a9:7d:25:b2:21:84:75:6e: e1:e4:7a:9f:fc:21:48:bd:a2:5b:9f:ff:d1:d5:2f:34:e3:3e: 93:e8:40:b2:5f:d2:96:3f:6e:7d:f4:6c:86:06:38:18:49:81: b3:d5:f5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+GAGLBXY2EX40SA7Cf5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw ZDlkNDUwHhcNMjUxMjA3MDQwMTAzWhcNMjUxMjA4MDQwMTAzWjAzMTEwLwYDVQQD EyhiY2UxYWVmOThmNDg5NWUwMmYyNDIzZjBlODFiYzdkYjk1M2ViMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BxgicWLn/RHuFwAKNUITmgsn8a1 PcbHBVhvwIDn5s5zksViy3xqCeCHFJUCUduv+iuI0EvtYwTU2zn/VBcC1WRNIhkT dmcYk1pqaJuH2wM3yY/c7/GS7fbbA4B91y4IxpybuQzlkK6G+vCut2AXonXk8FXy aPSr/o2qeVneb+g+i82RZgmFBa8ip0SqfQ6rLo6dqiEt7nDDBMhKaGgv0TQqvqY3 6nxrZ/MpAm7bzP0ZU/rzca3R5J6P/RBFRXYep83PKF6nJ3nIkHC6UPpD/Ue/hUL/ jNjJVypBKkRCMpGJm0XXLzmR1gk8rj/gw5qbWzLPZFA93yzviAyGPmB4KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzhrvmPSJXgLyQj8Ogbx9uVPrELMB8GA1UdIwQY MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7ZhkTcb fzTHy8MvZZRh5Yg4poOaH+YVjAQgjMi4pMmesKslsS7r8jqm8/zpnfIS7vW0FzNx KTOC3/z8Kxhv0dqpMjWML5kvNK31gRatlTWBuTUGamdQTkyYCcCrImHwdYsFz1E9 v0fYrKeGu6TSNq/NPNYO3K3PeZ2QBVUPIJvHjeTmNgVVOB95cmTDdQiaHk0OgKhP bGKpZKaWtotI0Ig6eHZTokbO+M1lqy0aUKKHBI6l9VvGYz9MKXwoFFZKbfMceOO+ ZMEAR8Xh8wov76l9JbIhhHVu4eR6n/whSL2iW5//0dUvNOM+k+hAsl/Slj9uffRs hgY4GEmBs9X1hQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:01:11 2025 by rpki-client