This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json) Hash identifier: XBOpYN3O1VtEfO7itApNFMcoEiF3Bu0l50IPmoIWqwA= Subject key identifier: F5:BB:BD:6F:F4:68:63:37:09:DC:84:5E:3D:4A:25:77:F6:86:8D:6E Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd Certificate serial: 019AF1D221D1A7AC2F43AB36E6909C3B3058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft Manifest number: 0A07 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: lz/ctueGL/tTIskCM7GFO0clJ0Qf6ZTpFrPI0SLBwzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:21:d1:a7:ac:2f:43:ab:36:e6:90:9c:3b:30:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=f5bbbd6ff468633709dc845e3d4a2577f6868d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:2c:7c:b9:ef:87:bf:23:de:34:e6:b0:ac: b9:83:f8:07:8d:cc:b9:29:ed:89:b5:75:71:04:f8: ba:04:f0:32:8c:9a:1e:97:28:98:b8:23:64:ab:d9: 7a:b1:d5:31:68:38:83:63:9f:1a:98:a5:69:22:4a: 33:ef:46:e7:6a:ff:6d:73:48:5a:b1:ea:66:46:d8: c2:ff:dd:5b:55:44:88:a5:56:52:2f:bc:a7:83:28: ca:b0:e2:2c:b1:3b:95:bf:89:5e:e4:e3:37:2e:e4: 7a:05:9c:c3:13:ee:fa:a6:e7:ea:4c:91:0f:ed:e5: c5:12:ea:72:1c:a0:68:d2:84:6f:96:44:1d:dd:ed: 3c:8d:f9:a3:a7:55:cc:9b:35:9c:f1:77:e1:b5:99: c8:f6:1e:e0:c1:4a:24:f4:a0:73:dd:c1:2e:3f:85: 67:16:fa:94:2e:d3:66:cd:45:d8:83:e5:70:38:12: 25:20:be:71:f6:23:f9:ee:53:ff:e8:6d:4b:5b:a4: b6:11:e1:3f:9b:18:0d:65:d0:31:5d:16:9d:39:cf: d9:11:25:b6:de:01:9e:be:93:02:ba:08:ef:09:3b: 18:fc:4b:94:e7:71:64:12:d3:b1:8a:0c:42:80:a2: 0a:3e:04:d7:7c:30:26:73:20:a9:a6:38:60:f2:cb: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:BD:6F:F4:68:63:37:09:DC:84:5E:3D:4A:25:77:F6:86:8D:6E X509v3 Authority Key Identifier: keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f1:d4:20:17:26:87:8d:13:0f:24:b6:38:33:e2:3d:0b:e3: 91:7e:a3:5d:ae:81:13:e3:c8:04:e6:34:d0:32:9b:ee:e4:de: 0b:22:53:72:f9:c7:fb:8c:6f:1b:b8:92:06:fe:8b:de:a1:03: 1f:58:bd:93:ca:50:e0:0c:95:50:12:88:55:70:ea:9b:3a:fd: 39:f8:15:d7:40:0e:d1:90:cb:bf:e2:d5:71:12:ea:76:78:4c: b2:f1:25:c0:60:07:c6:6b:7a:d0:6b:d9:dc:c8:db:79:35:1e: 87:86:90:39:d7:1f:4d:32:47:3f:c1:67:12:5d:24:03:fe:ba: 34:46:68:46:74:1b:26:0f:4e:7c:58:3e:ab:e6:e5:67:f5:7e: 63:69:a6:dc:55:b9:7b:fd:ee:21:ed:7f:33:39:4a:7a:1f:8b: 20:de:78:ae:7d:65:c3:15:85:e6:83:42:aa:d0:15:5f:ea:a7: 45:13:98:ef:da:7f:e6:40:8c:29:19:4a:51:4f:4b:09:4f:da: 12:5a:25:96:ab:04:1d:67:b5:a0:b4:e6:7f:f7:35:ca:20:e6: 37:b9:49:bd:aa:4f:99:47:ed:9a:c2:07:94:71:04:0b:0b:dc: 9f:fc:2d:0e:a2:6d:3d:87:f7:ef:ae:c2:4e:70:e3:51:e8:36: 31:66:d2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iHRp6wvQ6s25pCcOzBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMmI3OTQyNjg5MmVkMWRhN2IyZTYxODY3NzBjZmIwNGFl NjAzY2QwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EyhmNWJiYmQ2ZmY0Njg2MzM3MDlkYzg0NWUzZDRhMjU3N2Y2ODY4ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj44sfLnvh78j3jTmsKy5g/gHjcy5 Ke2JtXVxBPi6BPAyjJoelyiYuCNkq9l6sdUxaDiDY58amKVpIkoz70bnav9tc0ha sepmRtjC/91bVUSIpVZSL7yngyjKsOIssTuVv4le5OM3LuR6BZzDE+76pufqTJEP 7eXFEupyHKBo0oRvlkQd3e08jfmjp1XMmzWc8XfhtZnI9h7gwUok9KBz3cEuP4Vn FvqULtNmzUXYg+VwOBIlIL5x9iP57lP/6G1LW6S2EeE/mxgNZdAxXRadOc/ZESW2 3gGevpMCugjvCTsY/EuU53FkEtOxigxCgKIKPgTXfDAmcyCppjhg8stLbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW7vW/0aGM3CdyEXj1KJXf2ho1uMB8GA1UdIwQY MBaAFKsreUJoku0dp7LmGGdwz7BK5gPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAt ZTU0NTM3MDdhNThlLzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAtZTU0NTM3MDdhNThl LzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/HUIBcm h40TDyS2ODPiPQvjkX6jXa6BE+PIBOY00DKb7uTeCyJTcvnH+4xvG7iSBv6L3qED H1i9k8pQ4AyVUBKIVXDqmzr9OfgV10AO0ZDLv+LVcRLqdnhMsvElwGAHxmt60GvZ 3MjbeTUeh4aQOdcfTTJHP8FnEl0kA/66NEZoRnQbJg9OfFg+q+blZ/V+Y2mm3FW5 e/3uIe1/MzlKeh+LIN54rn1lwxWF5oNCqtAVX+qnRROY79p/5kCMKRlKUU9LCU/a ElollqsEHWe1oLTmf/c1yiDmN7lJvapPmUftmsIHlHEECwvcn/wtDqJtPYf3767C TnDjUeg2MWbSLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:21 2025 by rpki-client