This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json) Hash identifier: dFIv42Y5Q76XCgE3MuZIw8cIGbF4oVbsl/eu60RSj/0= Subject key identifier: 34:62:81:0D:E9:A0:15:AC:57:E4:3F:F3:15:00:0F:CD:FD:AF:29:48 Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2 Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2 Certificate serial: 019AF12DDF3664C34EBEAF00839426CA8A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft Manifest number: 09FD Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: hrJCIwAGRqb09S3rZbmxNELbG1XTidhEjKIJuptaOWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:df:36:64:c3:4e:be:af:00:83:94:26:ca:8a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2 Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=3462810de9a015ac57e43ff315000fcdfdaf2948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:b1:3b:99:fe:91:12:3a:13:8c:0c:c6:b9: 6c:f4:44:fe:4e:72:3a:c7:6a:aa:4d:1b:be:4e:14: a3:45:59:f8:ad:83:07:b8:cf:e1:56:b0:14:60:5e: 08:c5:af:f4:b2:04:2a:d9:b5:ab:db:5c:df:94:ee: b4:53:86:90:83:8b:6c:b5:ec:16:c1:f1:ab:9f:e6: 40:ce:60:c2:53:dc:f3:cc:2b:a3:43:01:0b:92:6f: 1a:2f:92:37:5b:9c:bb:c5:85:e7:60:76:2c:d5:fc: 7d:f0:15:b9:3a:99:2c:ce:6b:2f:43:90:e9:2a:07: 1b:44:c7:a2:90:21:2f:9e:6c:e7:bb:c0:c4:aa:7c: 61:7a:73:9f:6f:90:45:6f:9d:17:c3:fa:ca:3d:62: 40:49:03:cc:d9:13:ef:c3:5f:15:ed:d9:d2:ec:16: f2:76:57:24:19:80:8d:90:5f:cf:a9:4f:a6:cd:02: a6:0a:38:fd:84:59:1c:de:87:d3:27:26:be:da:5e: 77:5d:c1:5e:ff:68:b3:64:80:28:fa:ea:5a:9d:cb: f8:09:62:49:07:4a:07:f5:5a:07:0a:44:20:f0:5f: 0c:76:f3:8a:af:cd:a7:7a:07:d7:1c:eb:d7:a4:5d: 91:79:e0:11:46:47:30:39:b0:59:5d:2f:34:d9:9e: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:81:0D:E9:A0:15:AC:57:E4:3F:F3:15:00:0F:CD:FD:AF:29:48 X509v3 Authority Key Identifier: keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:35:44:64:52:f3:4f:0a:14:f9:ee:33:a1:8e:51:09:b0:92: 24:0c:85:70:5d:b0:e9:bf:7d:c7:f0:48:21:0b:1f:ba:a0:68: 5a:5d:08:3b:e1:d9:46:77:9b:f1:36:6f:8f:34:78:2d:1b:f9: 0d:cf:7b:b2:21:cd:25:6b:26:b6:5a:30:0f:f7:93:99:a7:0b: 63:36:8d:8f:48:b7:e5:ae:f8:75:7e:6b:a2:c8:4d:04:cc:8a: ae:8c:fa:0c:40:58:01:cd:34:a9:e4:90:e8:73:35:d5:d1:c3: 8c:c5:6c:37:01:7d:9f:c2:4b:c6:fe:19:2d:a6:93:cb:2d:47: 7d:f6:a4:e8:cd:a0:fd:e5:47:f7:90:30:6d:9b:53:ef:05:81: 40:d9:c1:4d:a1:1a:d7:56:45:6d:15:54:64:30:ed:ab:cd:9a: b2:fb:3a:a5:0e:da:c8:8d:9b:cc:d5:4a:10:85:6a:fe:e2:66: 8c:0f:c1:33:bc:c7:39:e8:f6:19:5b:a9:85:76:d4:20:9e:ab: 74:5d:1d:00:34:31:aa:59:22:23:cd:17:32:e8:40:89:c4:8d: 77:49:c3:ea:51:10:1c:b3:25:78:a3:09:d5:9d:ed:17:90:c0: b4:a5:8a:fb:b9:31:32:6a:a1:bb:e0:58:02:c2:83:bf:e0:d4: 95:18:7d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLd82ZMNOvq8Ag5QmyoonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNWMxYWQ4ZGQ3OTIyYTQ1YTJjYzc0ODFlZmUwMWRkNDMz MDA2YzIwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD EygzNDYyODEwZGU5YTAxNWFjNTdlNDNmZjMxNTAwMGZjZGZkYWYyOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPGxO5n+kRI6E4wMxrls9ET+TnI6 x2qqTRu+ThSjRVn4rYMHuM/hVrAUYF4Ixa/0sgQq2bWr21zflO60U4aQg4tstewW wfGrn+ZAzmDCU9zzzCujQwELkm8aL5I3W5y7xYXnYHYs1fx98BW5OpkszmsvQ5Dp KgcbRMeikCEvnmznu8DEqnxhenOfb5BFb50Xw/rKPWJASQPM2RPvw18V7dnS7Bby dlckGYCNkF/PqU+mzQKmCjj9hFkc3ofTJya+2l53XcFe/2izZIAo+upancv4CWJJ B0oH9VoHCkQg8F8MdvOKr82negfXHOvXpF2ReeARRkcwObBZXS802Z4bIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRigQ3poBWsV+Q/8xUAD839rylIMB8GA1UdIwQY MBaAFKtcGtjdeSKkWizHSB7+Ad1DMAbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYt Y2JhOGM4YTU0NTNlLzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYtY2JhOGM4YTU0NTNl LzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzVEZFLz TwoU+e4zoY5RCbCSJAyFcF2w6b99x/BIIQsfuqBoWl0IO+HZRneb8TZvjzR4LRv5 Dc97siHNJWsmtlowD/eTmacLYzaNj0i35a74dX5roshNBMyKroz6DEBYAc00qeSQ 6HM11dHDjMVsNwF9n8JLxv4ZLaaTyy1Hffak6M2g/eVH95AwbZtT7wWBQNnBTaEa 11ZFbRVUZDDtq82asvs6pQ7ayI2bzNVKEIVq/uJmjA/BM7zHOej2GVuphXbUIJ6r dF0dADQxqlkiI80XMuhAicSNd0nD6lEQHLMleKMJ1Z3tF5DAtKWK+7kxMmqhu+BY AsKDv+DUlRh9XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:57 2025 by rpki-client