This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json) Hash identifier: VR3+AURUqOuo6hkuP+9v6vgqeiAW6s3JV1j2A1b7V1Q= Subject key identifier: 29:C4:2F:C7:88:60:9F:EF:2C:70:0F:1E:61:EF:B0:01:3C:73:D7:28 Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Certificate serial: 019AF38964BB7BBE7ACE6F7825667EB79C97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft Manifest number: 06B1 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: 8mnce7XZOUAVsfECh3C63HvI0RSJX3ZsRgiz5nZas9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:64:bb:7b:be:7a:ce:6f:78:25:66:7e:b7:9c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=29c42fc788609fef2c700f1e61efb0013c73d728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:69:9d:ac:39:81:b6:60:30:b2:aa:2a:9c: 39:58:60:77:b2:cf:43:aa:9a:04:bf:e2:29:82:6b: 46:c9:b6:c3:9e:72:0e:7e:41:4e:c2:d0:50:d4:30: 36:4a:f2:bb:0e:bf:57:1f:6b:cb:a3:cb:22:bd:11: 78:4a:55:35:3b:5a:74:b5:98:ec:76:51:f0:58:e4: 60:e0:85:df:82:e6:d2:73:38:3e:bc:1c:dd:aa:39: e4:89:49:4f:06:55:83:c9:bc:97:06:ae:b8:60:57: 6c:57:d1:4a:0c:1d:4a:3d:7a:1a:81:a1:72:42:47: ae:b4:ff:c9:23:0c:c1:fa:94:b4:53:c8:bb:f7:04: ef:97:11:c3:36:dc:bf:3c:b6:c7:06:75:f4:94:41: b5:ef:66:64:5c:41:00:bf:c9:1a:1f:8e:33:94:ea: c6:6c:97:93:30:d7:ae:6b:88:dd:74:dd:47:92:3c: a4:65:4a:4f:6d:c4:5e:75:79:d5:b4:f9:0d:66:56: e7:4c:2a:1c:28:c4:f0:ef:1d:dd:f2:bd:d2:5a:5b: 97:c9:21:b0:04:bf:29:71:61:f3:45:df:f7:19:66: bf:c5:66:d5:cf:1d:a6:b2:43:be:92:43:b1:78:3a: 42:6e:4d:2c:19:08:85:2c:61:04:07:e0:c5:64:c1: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C4:2F:C7:88:60:9F:EF:2C:70:0F:1E:61:EF:B0:01:3C:73:D7:28 X509v3 Authority Key Identifier: keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:0f:ca:5a:c3:f2:46:88:3b:d9:17:0d:82:5c:6d:33:60: c8:0f:11:ba:f1:22:80:f2:fc:0f:db:8f:fb:96:04:36:af:09: 98:96:51:46:54:24:4f:34:7e:49:93:e9:f2:ca:22:83:ce:2e: bb:8b:95:ef:64:a9:5e:0c:9b:e0:6c:9c:32:1e:41:aa:ca:dc: e6:13:51:aa:d1:62:79:d0:12:29:f5:a5:14:42:73:77:b8:63: 8f:f1:e1:e7:e4:5b:8b:74:ec:8f:29:da:74:1c:da:60:1e:fa: 91:a5:d1:47:3b:c6:17:7e:ad:80:76:f4:18:ee:c2:c9:8b:69: 18:b6:b0:fb:d7:11:ff:dc:f2:48:7f:1b:2d:03:7d:c5:af:42: 26:e4:5f:a1:6f:c4:42:de:6d:75:4a:37:97:8e:25:5b:11:74: 0c:7f:dd:f6:0c:98:02:e0:86:51:3b:a9:2b:1d:5d:83:13:6c: 7c:a8:2d:42:27:97:bd:f6:9b:5a:c1:b7:47:5c:37:f6:2b:7f: 8b:a6:2b:67:6c:3d:6e:4e:30:a7:e8:35:7d:b9:2c:ee:8d:80: 98:50:b8:5b:9a:d4:4e:76:49:a7:ef:24:77:30:28:7a:95:82: d6:73:4e:8f:a6:e4:fa:5f:61:6d:9b:b6:cf:ef:1d:fd:39:14: d3:69:fc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWS7e756zm94JWZ+t5yXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk NjQxNGMwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EygyOWM0MmZjNzg4NjA5ZmVmMmM3MDBmMWU2MWVmYjAwMTNjNzNkNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSBpnaw5gbZgMLKqKpw5WGB3ss9D qpoEv+IpgmtGybbDnnIOfkFOwtBQ1DA2SvK7Dr9XH2vLo8sivRF4SlU1O1p0tZjs dlHwWORg4IXfgubSczg+vBzdqjnkiUlPBlWDybyXBq64YFdsV9FKDB1KPXoagaFy QkeutP/JIwzB+pS0U8i79wTvlxHDNty/PLbHBnX0lEG172ZkXEEAv8kaH44zlOrG bJeTMNeua4jddN1HkjykZUpPbcRedXnVtPkNZlbnTCocKMTw7x3d8r3SWluXySGw BL8pcWHzRd/3GWa/xWbVzx2mskO+kkOxeDpCbk0sGQiFLGEEB+DFZMEmUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnEL8eIYJ/vLHAPHmHvsAE8c9coMB8GA1UdIwQY MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOAPylrD 8kaIO9kXDYJcbTNgyA8RuvEigPL8D9uP+5YENq8JmJZRRlQkTzR+SZPp8soig84u u4uV72SpXgyb4GycMh5Bqsrc5hNRqtFiedASKfWlFEJzd7hjj/Hh5+Rbi3Tsjyna dBzaYB76kaXRRzvGF36tgHb0GO7CyYtpGLaw+9cR/9zySH8bLQN9xa9CJuRfoW/E Qt5tdUo3l44lWxF0DH/d9gyYAuCGUTupKx1dgxNsfKgtQieXvfabWsG3R1w39it/ i6YrZ2w9bk4wp+g1fbks7o2AmFC4W5rUTnZJp+8kdzAoepWC1nNOj6bk+l9hbZu2 z+8d/TkU02n8mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:14 2025 by rpki-client