This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json) Hash identifier: uY9DBr6252H3U9n6R0K+4NNTjJaQnGj7a5YFsbPNupk= Subject key identifier: 8D:A9:76:A0:3A:2C:76:1A:5C:B2:F1:63:F4:ED:80:58:2E:47:EF:13 Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Certificate serial: 019AF2771B13FAC44B4049129A9C9B5003AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft Manifest number: 124F Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: p7yzs5uI1dTaOgV4bT/enelfLIYnJdtoa0hJspyjnZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1b:13:fa:c4:4b:40:49:12:9a:9c:9b:50:03:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=8da976a03a2c761a5cb2f163f4ed80582e47ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:1d:93:c1:07:e4:8d:c1:0b:11:67:9b:05: 0d:03:4b:5a:d7:77:72:e1:9d:3d:0a:2f:3b:44:96: 24:8d:5c:7c:77:20:45:ba:f8:3f:66:2b:b8:a0:be: af:de:5c:34:c8:c1:1f:f4:6b:31:e0:b3:9d:de:16: 11:b4:a6:72:66:0c:4f:f8:e5:75:97:69:43:a9:2d: c5:4a:0d:13:bc:9e:a9:3d:d3:52:3f:3d:80:d7:b6: 02:61:a3:79:39:eb:5b:83:a5:f8:e4:3e:ab:71:3a: ae:32:a6:a3:67:36:1d:7e:78:9d:ca:a2:89:ee:a5: 8d:e5:c3:f1:6d:6f:b5:b2:9d:b4:3d:27:76:7a:51: 33:d9:2c:bd:ec:a4:aa:9f:84:a5:69:47:b0:50:08: 15:7e:ab:95:b0:2f:e9:43:28:74:06:47:db:07:38: 29:f7:e6:db:b6:44:5c:9d:09:c8:37:30:a0:43:8e: 9b:0c:34:87:ca:c8:d5:23:89:8d:a2:61:f6:f8:2b: d4:c7:da:01:16:33:f7:ed:1d:f8:41:a8:7f:0b:a1: d8:0d:cf:2a:55:19:f2:43:a3:cc:20:f7:92:cf:f2: b1:9f:de:36:ad:8b:d2:75:dd:02:dc:5a:09:8d:95: 15:f0:b8:5b:e0:f0:75:5e:2a:0a:91:dd:d1:ed:ff: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A9:76:A0:3A:2C:76:1A:5C:B2:F1:63:F4:ED:80:58:2E:47:EF:13 X509v3 Authority Key Identifier: keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:95:5a:de:f3:36:e6:44:b8:df:98:4f:a0:dc:75:48:d5:80: f9:2d:94:20:c0:21:97:e5:ff:aa:db:b3:4b:c7:3f:3e:3c:48: c3:1a:0e:a8:be:fd:65:2f:6d:15:af:58:60:7f:3a:b6:69:b9: a1:f3:c3:66:80:07:8a:de:0a:1c:23:bf:9e:b3:52:2c:75:21: be:88:4a:0b:af:8b:fb:89:86:9f:bc:38:82:d6:54:ed:31:fc: af:26:35:f4:a1:88:8d:c4:47:66:15:24:74:f3:bd:f0:70:e8: d2:35:c4:9b:bc:cc:74:cd:26:a5:d4:32:a8:1a:04:6d:37:df: d0:6c:66:52:60:1d:0b:be:eb:a3:90:62:b1:a4:63:ff:d0:99: 8c:ae:ff:da:ad:dc:a4:ed:7f:43:f1:df:13:ad:ec:33:5c:ad: 9b:83:2d:c6:68:07:b5:6b:20:c1:88:63:09:71:0f:f7:3f:33: 5b:ce:ac:8b:ce:8d:03:56:77:ae:3a:59:21:b6:1c:09:9d:da: 64:b5:90:b6:c3:07:b4:5a:37:0c:ab:22:80:4c:2c:f4:9b:38: 95:84:a6:c6:16:ef:5c:31:14:64:8b:68:d3:4d:32:c8:31:38: de:1c:63:40:67:d4:1a:d9:70:1c:44:5b:8c:2f:0a:94:1c:b5: a5:7f:20:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxsT+sRLQEkSmpybUAOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm MGYyNDEwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg4ZGE5NzZhMDNhMmM3NjFhNWNiMmYxNjNmNGVkODA1ODJlNDdlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYdk8EH5I3BCxFnmwUNA0ta13dy 4Z09Ci87RJYkjVx8dyBFuvg/Ziu4oL6v3lw0yMEf9Gsx4LOd3hYRtKZyZgxP+OV1 l2lDqS3FSg0TvJ6pPdNSPz2A17YCYaN5Oetbg6X45D6rcTquMqajZzYdfnidyqKJ 7qWN5cPxbW+1sp20PSd2elEz2Sy97KSqn4SlaUewUAgVfquVsC/pQyh0BkfbBzgp 9+bbtkRcnQnINzCgQ46bDDSHysjVI4mNomH2+CvUx9oBFjP37R34Qah/C6HYDc8q VRnyQ6PMIPeSz/Kxn942rYvSdd0C3FoJjZUV8Lhb4PB1XioKkd3R7f/zyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2pdqA6LHYaXLLxY/TtgFguR+8TMB8GA1UdIwQY MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZVa3vM2 5kS435hPoNx1SNWA+S2UIMAhl+X/qtuzS8c/PjxIwxoOqL79ZS9tFa9YYH86tmm5 ofPDZoAHit4KHCO/nrNSLHUhvohKC6+L+4mGn7w4gtZU7TH8ryY19KGIjcRHZhUk dPO98HDo0jXEm7zMdM0mpdQyqBoEbTff0GxmUmAdC77ro5BisaRj/9CZjK7/2q3c pO1/Q/HfE63sM1ytm4MtxmgHtWsgwYhjCXEP9z8zW86si86NA1Z3rjpZIbYcCZ3a ZLWQtsMHtFo3DKsigEws9Js4lYSmxhbvXDEUZIto000yyDE43hxjQGfUGtlwHERb jC8KlBy1pX8gRw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:44 2025 by rpki-client