This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json) Hash identifier: koDvwM1zjzhLaOY/dx+DV4tcQyQWyRMV5YmPg2gVw0g= Subject key identifier: 46:99:BB:4A:5E:C9:20:8D:D9:BC:F2:37:73:0B:4B:AF:DB:1B:85:A0 Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7 Certificate serial: 019AF12DB814E6F32F9E918681C4A9407CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: sHy4Pj5TBU1T2wKG9g1qVj6UQLWb1wjR2k8mclkYw0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b8:14:e6:f3:2f:9e:91:86:81:c4:a9:40:7c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a3517606989eb352f699976f219faec8e350e7 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=4699bb4a5ec9208dd9bcf237730b4bafdb1b85a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:61:73:a4:c6:00:35:9a:61:54:69:e5:37: 85:1a:3d:90:28:76:b7:36:0f:b3:24:9b:93:ff:42: 83:f0:f7:16:78:c1:39:28:b9:aa:fa:ba:8e:e3:a0: 78:7f:7d:43:32:5c:b3:c9:e5:15:a5:3e:73:2b:34: 9d:f0:a6:f6:0e:4f:c5:d2:e7:c7:cc:dd:f3:e6:4e: 9e:75:5f:83:f5:44:1a:6a:99:83:13:35:ed:1b:a5: 4c:3f:03:7e:32:e0:c5:cf:cd:f4:ae:f9:31:43:04: d2:33:b5:d0:1e:82:ce:9f:ef:23:70:9f:b5:5e:2d: 88:a5:c8:52:8c:b3:fa:72:2b:63:71:93:4d:a4:7e: 67:99:a2:da:39:82:f7:b3:64:26:a3:35:a6:4c:37: eb:a5:41:86:18:40:4b:31:81:49:02:b3:a8:ee:83: 47:6f:0b:12:0c:1c:5d:e2:40:a0:ed:40:61:36:90: 94:cd:70:08:3a:63:86:38:f1:e9:f8:79:75:10:e0: 96:32:0a:6a:47:ad:8d:45:31:27:49:9e:39:41:f4: 23:51:a1:fd:15:d1:06:5d:81:4b:c0:1f:76:83:cc: 09:62:9e:1a:cb:e6:f0:5c:aa:b5:3a:ae:ca:8c:fc: 94:3f:3b:70:c6:c1:d3:7f:40:3b:a1:77:d1:a3:a3: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:99:BB:4A:5E:C9:20:8D:D9:BC:F2:37:73:0B:4B:AF:DB:1B:85:A0 X509v3 Authority Key Identifier: keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:19:c1:1d:ac:09:04:b8:7a:8e:8d:f0:50:bd:63:2c:b4:ff: a8:9d:1c:17:64:24:ca:d9:50:3a:55:5e:c2:58:7c:3b:b0:92: 35:32:bb:6b:94:fc:fe:68:c5:a0:10:5d:82:ab:38:6f:22:3a: 02:9f:1f:ec:6a:84:17:59:b1:1e:73:28:a0:90:e5:eb:0a:62: ef:44:cb:59:fd:98:0a:22:a2:a9:48:50:77:b7:4d:93:7d:4f: b1:5a:16:e6:63:00:b1:21:28:95:38:8d:b1:b5:90:8b:0b:1a: 5d:55:94:ca:a4:ce:3c:bb:4e:6a:e5:75:9b:04:6e:24:ee:8a: 2f:47:62:64:16:27:7c:d5:b5:db:4a:04:b0:43:0e:29:af:0b: e2:f2:2f:6d:d1:b0:d6:ff:a2:42:a7:56:ed:bc:85:dd:1d:8b: f8:54:1e:5e:a2:b6:cd:0e:9b:e7:d1:50:c2:b7:56:48:2e:c1: 24:41:48:ed:d1:90:4d:a7:e1:b0:c5:e7:1f:31:35:d0:b2:ae: cf:94:84:58:83:bc:c6:a4:7d:d1:45:33:ea:e6:fd:7e:13:bd: f7:cd:6a:ec:12:d0:c8:d5:bf:9b:1d:38:44:6d:e4:e5:57:ad: 72:fa:f5:d0:84:67:85:53:ab:c5:fd:d9:b6:7a:18:b5:85:ff: 1a:bc:71:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbgU5vMvnpGGgcSpQHzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl MzUwZTcwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD Eyg0Njk5YmI0YTVlYzkyMDhkZDliY2YyMzc3MzBiNGJhZmRiMWI4NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IFhc6TGADWaYVRp5TeFGj2QKHa3 Ng+zJJuT/0KD8PcWeME5KLmq+rqO46B4f31DMlyzyeUVpT5zKzSd8Kb2Dk/F0ufH zN3z5k6edV+D9UQaapmDEzXtG6VMPwN+MuDFz830rvkxQwTSM7XQHoLOn+8jcJ+1 Xi2IpchSjLP6citjcZNNpH5nmaLaOYL3s2QmozWmTDfrpUGGGEBLMYFJArOo7oNH bwsSDBxd4kCg7UBhNpCUzXAIOmOGOPHp+Hl1EOCWMgpqR62NRTEnSZ45QfQjUaH9 FdEGXYFLwB92g8wJYp4ay+bwXKq1Oq7KjPyUPztwxsHTf0A7oXfRo6N1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaZu0peySCN2bzyN3MLS6/bG4WgMB8GA1UdIwQY MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2 LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhnBHawJ BLh6jo3wUL1jLLT/qJ0cF2QkytlQOlVewlh8O7CSNTK7a5T8/mjFoBBdgqs4byI6 Ap8f7GqEF1mxHnMooJDl6wpi70TLWf2YCiKiqUhQd7dNk31PsVoW5mMAsSEolTiN sbWQiwsaXVWUyqTOPLtOauV1mwRuJO6KL0diZBYnfNW120oEsEMOKa8L4vIvbdGw 1v+iQqdW7byF3R2L+FQeXqK2zQ6b59FQwrdWSC7BJEFI7dGQTafhsMXnHzE10LKu z5SEWIO8xqR90UUz6ub9fhO9981q7BLQyNW/mx04RG3k5Vetcvr10IRnhVOrxf3Z tnoYtYX/Grxx6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:01 2025 by rpki-client