This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json) Hash identifier: lKpO4i9aR0o4cM7Ypys6n51bsBs4FwqvRYWeTYES1GQ= Subject key identifier: 06:AC:1A:BB:D2:C0:B7:72:52:FC:0A:84:8E:B6:E6:10:82:65:EB:5F Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Certificate serial: 019B32319100F00D24F75E60D2033AA24722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft Manifest number: 1270 Signing time: Thu 18 Dec 2025 16:01:07 +0000 Manifest this update: Thu 18 Dec 2025 16:01:07 +0000 Manifest next update: Fri 19 Dec 2025 16:01:07 +0000 Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: /QVrKA2Du7xOYWxT2xtwL+x+1MiXO1W4+ObNvUKNgF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:91:00:f0:0d:24:f7:5e:60:d2:03:3a:a2:47:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Validity Not Before: Dec 18 16:01:07 2025 GMT Not After : Dec 19 16:01:07 2025 GMT Subject: CN=06ac1abbd2c0b77252fc0a848eb6e6108265eb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:f1:6f:9e:29:3e:d1:c5:55:dc:55:e6:7f: 62:11:a9:cc:4c:61:d7:bf:ea:00:ea:f3:fb:09:c0: 1d:e4:9b:f4:d7:19:60:38:5d:98:36:eb:38:c4:c2: 94:b9:7b:f6:56:0f:71:fc:9c:c1:1d:b8:e1:e5:45: ba:59:96:14:e6:c3:ec:55:62:f8:35:32:4a:4e:00: 91:48:7e:6b:93:6d:16:26:f6:44:93:41:a8:d9:67: f3:75:7e:cc:27:4e:fd:1c:b1:9e:d5:5f:cd:17:f6: d1:a6:54:e0:da:e1:9c:fd:db:5c:05:d5:8c:25:13: 2a:6d:27:4e:76:d5:0e:0a:ae:5c:df:dc:7d:24:e6: 37:b6:c1:61:c8:24:38:47:ad:58:7d:0a:ea:1d:52: 19:95:be:cd:36:f9:7c:03:11:4c:e5:3c:a2:37:46: b7:af:0b:4c:b3:08:ff:f1:74:21:a6:86:50:fb:38: 3f:9c:ad:e0:64:09:dd:4e:25:09:2a:ce:9b:43:2b: 04:ad:4d:64:42:92:ef:86:a0:12:78:5f:90:41:e5: 7a:1d:fb:78:ec:94:06:c7:28:bb:9e:b8:7a:19:b8: b5:44:23:f0:80:f9:c2:fe:fb:67:eb:1e:af:1f:c4: 25:64:b6:ae:3a:dd:d5:fd:89:04:39:15:27:34:ed: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:1A:BB:D2:C0:B7:72:52:FC:0A:84:8E:B6:E6:10:82:65:EB:5F X509v3 Authority Key Identifier: keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:89:c9:63:7d:e3:2b:72:ca:b2:70:a7:ad:36:5e:d6:3b:e7: 9c:85:3c:c6:b2:a0:4e:56:7c:75:50:a1:da:7c:44:58:6c:5c: d9:c5:c2:e1:37:18:e0:75:b2:30:8f:c6:9e:9d:5c:67:ea:15: e5:1d:ec:12:83:c9:40:b0:37:fa:79:80:62:9a:66:1b:98:69: a2:1c:90:33:b0:f9:3e:38:11:47:08:ea:0a:0f:63:f7:6b:5b: 7b:31:7b:a5:da:a2:d7:43:c1:4a:d0:83:78:ea:5d:fe:7a:29: 6a:93:6c:88:1b:33:77:72:e2:d5:29:dc:9f:df:4f:dd:c3:67: 04:ef:77:a6:ea:5e:78:23:71:a8:5e:05:1e:f9:06:00:6d:83: 20:c4:25:35:22:81:fe:aa:08:a4:fe:45:13:e9:d9:95:76:2c: 93:29:ad:5d:a3:08:c6:46:f8:ac:32:1c:ba:b9:d6:99:2d:44: a7:82:07:ea:ec:83:d1:5e:cf:b8:5d:e6:33:58:23:4f:2e:19: 03:70:2c:af:76:71:06:61:a9:42:bd:ec:3b:5d:b4:89:f1:3e: de:37:96:78:82:fa:84:7f:2d:ac:6e:91:d0:ea:a0:e3:c6:6c: 5e:92:5f:2f:45:05:98:10:34:0a:f8:cc:5f:20:dd:74:68:a4: 99:43:b4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZEA8A0k915g0gM6okciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm MGYyNDEwHhcNMjUxMjE4MTYwMTA3WhcNMjUxMjE5MTYwMTA3WjAzMTEwLwYDVQQD EygwNmFjMWFiYmQyYzBiNzcyNTJmYzBhODQ4ZWI2ZTYxMDgyNjVlYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Txb54pPtHFVdxV5n9iEanMTGHX v+oA6vP7CcAd5Jv01xlgOF2YNus4xMKUuXv2Vg9x/JzBHbjh5UW6WZYU5sPsVWL4 NTJKTgCRSH5rk20WJvZEk0Go2WfzdX7MJ079HLGe1V/NF/bRplTg2uGc/dtcBdWM JRMqbSdOdtUOCq5c39x9JOY3tsFhyCQ4R61YfQrqHVIZlb7NNvl8AxFM5TyiN0a3 rwtMswj/8XQhpoZQ+zg/nK3gZAndTiUJKs6bQysErU1kQpLvhqASeF+QQeV6Hft4 7JQGxyi7nrh6Gbi1RCPwgPnC/vtn6x6vH8QlZLauOt3V/YkEORUnNO3fIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAasGrvSwLdyUvwKhI625hCCZetfMB8GA1UdIwQY MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQonJY33j K3LKsnCnrTZe1jvnnIU8xrKgTlZ8dVCh2nxEWGxc2cXC4TcY4HWyMI/Gnp1cZ+oV 5R3sEoPJQLA3+nmAYppmG5hpohyQM7D5PjgRRwjqCg9j92tbezF7pdqi10PBStCD eOpd/nopapNsiBszd3Li1Sncn99P3cNnBO93pupeeCNxqF4FHvkGAG2DIMQlNSKB /qoIpP5FE+nZlXYskymtXaMIxkb4rDIcurnWmS1Ep4IH6uyD0V7PuF3mM1gjTy4Z A3Asr3ZxBmGpQr3sO120ifE+3jeWeIL6hH8trG6R0Oqg48ZsXpJfL0UFmBA0CvjM XyDddGikmUO0/g== -----END CERTIFICATE-----Generated at Thu Dec 18 20:36:23 2025 by rpki-client