This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json) Hash identifier: 5sMlpOxWAInhS8bvrfSuQ68ZEUAQ9Ktb0JyGbIpBrjc= Subject key identifier: C1:39:CC:C6:5E:8F:75:AB:0B:14:4E:5E:95:B6:BA:17:34:C3:62:E6 Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9 Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9 Certificate serial: 019AF50B3CA03FCCE3E361716FA17B722004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:02:25 +0000 Manifest this update: Sat 06 Dec 2025 19:02:25 +0000 Manifest next update: Sun 07 Dec 2025 19:02:25 +0000 Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: WDDFvrSynuICj26WxOrVafF8oZgmRvEY3w3v/SF62jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:3c:a0:3f:cc:e3:e3:61:71:6f:a1:7b:72:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9 Validity Not Before: Dec 6 19:02:25 2025 GMT Not After : Dec 7 19:02:25 2025 GMT Subject: CN=c139ccc65e8f75ab0b144e5e95b6ba1734c362e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:54:04:c5:e3:8c:a8:d5:f6:73:d9:af:c3: 7b:6a:74:7f:4a:ce:3c:9b:b1:68:7f:ed:ea:82:7d: 19:3f:3f:c6:5e:3d:08:f0:4a:0a:ab:2e:5d:b2:0a: 1f:13:1f:a4:2d:e5:d1:db:48:18:70:33:70:fe:3b: 70:91:97:bc:88:18:6f:28:4c:a7:b5:ec:98:3e:89: 5d:fa:7c:94:97:0b:08:c3:9a:28:d0:2f:02:b1:a0: d6:1b:54:76:0a:58:60:c7:d2:46:1f:51:d6:a7:50: a3:8c:e4:ab:87:b1:5e:59:8d:fe:b8:e4:c5:24:a2: ec:b0:5e:90:32:0c:79:61:1f:dc:31:07:82:3d:47: 9f:be:ba:02:7a:d4:c2:02:da:7c:92:15:41:15:b5: 7b:d9:97:d2:84:33:e7:3b:06:64:31:4a:7b:99:a3: 4d:e7:86:e6:c7:5e:99:17:7b:69:39:bb:be:a0:25: 2a:18:1d:6e:d4:0d:04:6f:52:36:a6:e3:3c:23:41: cd:dc:23:b4:22:bb:86:8e:f6:d5:44:fa:94:34:2f: 70:44:6b:10:df:1a:e8:40:94:53:2d:7e:e7:5a:06: 14:c0:c8:b6:64:e5:8b:4a:02:a7:71:a9:2b:e0:5a: e3:85:dd:3e:3c:8e:4c:ce:1d:ec:20:ef:a9:08:a4: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:CC:C6:5E:8F:75:AB:0B:14:4E:5E:95:B6:BA:17:34:C3:62:E6 X509v3 Authority Key Identifier: keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:55:2b:af:74:27:6e:d5:3f:79:c6:57:fe:d9:41:c4:2b:62: 07:f3:78:d5:ab:82:ef:78:99:53:93:34:c1:d9:b5:fb:e4:e4: e3:b7:73:92:a1:5f:83:fc:0f:6b:8f:2b:3b:59:16:71:3e:a8: b7:a7:96:7c:4e:42:b2:32:f6:96:6a:2e:5b:53:23:1b:9c:46: 0a:8b:61:87:9d:bc:42:b6:c3:e8:b9:46:48:d6:f2:6d:ad:ab: c2:57:dd:fb:13:ec:58:82:99:81:cd:37:25:18:a8:2c:1d:9d: a5:89:4e:d8:be:0e:92:11:20:36:ab:7a:9f:fc:fd:58:3b:a6: 07:04:79:ee:40:7c:fb:c5:8d:63:a1:73:4e:4a:e5:5d:eb:64: 06:bb:db:13:4a:b1:90:2c:ee:e2:d0:75:2f:f8:be:e3:f5:23: b5:e4:d1:3b:1b:34:5c:fa:19:8e:28:8d:a7:93:cb:20:b6:1c: 2d:82:64:79:00:2c:c2:23:05:5c:67:4e:93:04:92:a0:ee:54: 88:40:3e:68:72:af:c7:84:aa:6e:ca:48:56:e7:80:5d:4c:c9: 0a:ed:d1:4d:9b:ad:ad:c9:f2:34:96:82:37:7c:6a:21:60:f0: 43:99:66:1b:8f:0f:a5:a0:d5:de:3d:0a:61:cc:e5:39:97:61: c9:0d:d4:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzygP8zj42Fxb6F7ciAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NmVlNDUwZGViM2E3MDhhZWU4NWI3ODIzOGZhMzcwZjkw NDU3ZjkwHhcNMjUxMjA2MTkwMjI1WhcNMjUxMjA3MTkwMjI1WjAzMTEwLwYDVQQD EyhjMTM5Y2NjNjVlOGY3NWFiMGIxNDRlNWU5NWI2YmExNzM0YzM2MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIdUBMXjjKjV9nPZr8N7anR/Ss48 m7Fof+3qgn0ZPz/GXj0I8EoKqy5dsgofEx+kLeXR20gYcDNw/jtwkZe8iBhvKEyn teyYPold+nyUlwsIw5oo0C8CsaDWG1R2Clhgx9JGH1HWp1CjjOSrh7FeWY3+uOTF JKLssF6QMgx5YR/cMQeCPUefvroCetTCAtp8khVBFbV72ZfShDPnOwZkMUp7maNN 54bmx16ZF3tpObu+oCUqGB1u1A0Eb1I2puM8I0HN3CO0IruGjvbVRPqUNC9wRGsQ 3xroQJRTLX7nWgYUwMi2ZOWLSgKncakr4Frjhd0+PI5Mzh3sIO+pCKRGMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME5zMZej3WrCxROXpW2uhc0w2LmMB8GA1UdIwQY MBaAFKhu5FDes6cIruhbeCOPo3D5BFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgt YWFjNmIwZTgyNWI5LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgtYWFjNmIwZTgyNWI5 LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlUrr3Qn btU/ecZX/tlBxCtiB/N41auC73iZU5M0wdm1++Tk47dzkqFfg/wPa48rO1kWcT6o t6eWfE5CsjL2lmouW1MjG5xGCothh528QrbD6LlGSNbyba2rwlfd+xPsWIKZgc03 JRioLB2dpYlO2L4OkhEgNqt6n/z9WDumBwR57kB8+8WNY6FzTkrlXetkBrvbE0qx kCzu4tB1L/i+4/UjteTROxs0XPoZjiiNp5PLILYcLYJkeQAswiMFXGdOkwSSoO5U iEA+aHKvx4SqbspIVueAXUzJCu3RTZutrcnyNJaCN3xqIWDwQ5lmG48PpaDV3j0K YczlOZdhyQ3UlA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:35 2025 by rpki-client