This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json) Hash identifier: hvKyjb9ttk7ETIQB21fIAfSpS9K7VYWRvdnZPZE+TVM= Subject key identifier: BE:70:2B:E1:AE:A5:9A:DC:5B:47:4C:A2:78:41:BE:B9:87:35:91:B0 Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019AF208F4E28734EB36A205153D028B8438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft Manifest number: 0273 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: R3jZdpHbsrY+F6WcD7X+U+5C9QSQwLnEeUevw1kdkmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:e2:87:34:eb:36:a2:05:15:3d:02:8b:84:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=be702be1aea59adc5b474ca27841beb9873591b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:85:f8:48:20:75:37:1e:69:b1:c9:98:d5: 1e:20:03:2e:df:db:ff:3d:b7:82:9e:bd:53:4a:fe: de:45:3b:86:f7:56:17:fd:b7:a7:91:7d:84:87:f5: 80:a9:e9:4d:fa:e0:1c:06:b7:86:e0:84:91:d0:24: 18:cf:51:18:f1:18:1c:e7:12:e9:5d:6c:cc:c2:5b: 01:db:c1:29:83:1a:d9:1a:45:39:f9:cf:7f:0d:f1: 3d:80:41:4e:5e:e2:a7:84:3a:73:e0:43:c0:60:27: d5:44:5b:9c:3c:87:12:39:16:43:60:b1:0c:94:23: 6a:1d:f0:8c:fe:b0:dc:e9:37:d9:57:ed:2d:d8:91: 56:55:92:95:22:a9:80:79:65:f2:93:6e:b2:68:1b: 40:f7:7a:31:0f:b2:e4:69:9d:0c:50:ce:be:14:98: 7d:06:d4:bf:1a:ad:03:0e:0c:4a:37:6b:94:b4:01: fd:e9:79:dc:dd:12:90:86:e5:29:a0:f7:61:0b:62: 31:39:34:8b:96:23:a0:c4:33:d0:33:0b:c4:47:31: fc:96:0f:38:30:92:5b:d2:0f:0e:c7:14:96:0a:32: 50:7c:d3:98:fd:bd:71:5c:73:c2:60:e1:5a:0b:68: 73:2e:0d:3e:a8:d4:a0:cc:3c:c3:71:06:01:d7:d0: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:2B:E1:AE:A5:9A:DC:5B:47:4C:A2:78:41:BE:B9:87:35:91:B0 X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:9e:fd:e9:d0:a3:e0:12:36:50:be:77:50:74:77:9a:cd: fd:da:75:c3:a6:63:21:1d:43:af:9c:fb:14:c4:22:30:e6:5f: 9c:26:e5:d0:6e:e5:78:93:5c:93:61:c7:58:3c:ff:85:04:22: e9:30:db:21:49:d3:46:1b:07:55:3f:3f:b4:e2:30:33:57:84: 4f:65:ab:2b:3c:d2:78:d0:6b:b7:57:e1:45:cb:4d:48:d3:51: ac:b5:6c:8f:da:23:aa:1c:77:e0:6a:39:36:4e:7d:5d:f9:c4: 1d:a8:39:d7:82:3c:3a:00:c0:af:eb:40:43:b1:f3:ca:5b:af: e7:cf:58:31:52:63:9e:c2:8e:1a:65:e8:6d:5b:98:80:3f:ec: a9:93:9f:a9:f2:48:14:8e:00:cf:21:3a:be:ea:c4:2b:9d:19: 27:b2:21:87:8e:9b:63:61:f2:fc:06:56:52:6e:9a:6d:08:f6: c8:2e:19:aa:9b:1e:dc:11:4e:22:1f:a9:81:6a:da:ac:b3:61: 87:44:f4:b7:5d:2f:c3:c4:92:cc:bf:48:86:58:0f:2c:ca:41: c4:18:84:6f:24:dc:b0:ce:10:e8:a7:b4:1a:94:86:89:96:3b: a7:4f:7a:9b:13:e7:d3:91:26:a4:8d:4e:76:00:e1:eb:98:9e: 00:36:f8:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPTihzTrNqIFFT0Ci4Q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhiZTcwMmJlMWFlYTU5YWRjNWI0NzRjYTI3ODQxYmViOTg3MzU5MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY2F+EggdTceabHJmNUeIAMu39v/ PbeCnr1TSv7eRTuG91YX/benkX2Eh/WAqelN+uAcBreG4ISR0CQYz1EY8Rgc5xLp XWzMwlsB28EpgxrZGkU5+c9/DfE9gEFOXuKnhDpz4EPAYCfVRFucPIcSORZDYLEM lCNqHfCM/rDc6TfZV+0t2JFWVZKVIqmAeWXyk26yaBtA93oxD7LkaZ0MUM6+FJh9 BtS/Gq0DDgxKN2uUtAH96Xnc3RKQhuUpoPdhC2IxOTSLliOgxDPQMwvERzH8lg84 MJJb0g8OxxSWCjJQfNOY/b1xXHPCYOFaC2hzLg0+qNSgzDzDcQYB19A6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5wK+GupZrcW0dMonhBvrmHNZGwMB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdqe/enQ o+ASNlC+d1B0d5rN/dp1w6ZjIR1Dr5z7FMQiMOZfnCbl0G7leJNck2HHWDz/hQQi 6TDbIUnTRhsHVT8/tOIwM1eET2WrKzzSeNBrt1fhRctNSNNRrLVsj9ojqhx34Go5 Nk59XfnEHag514I8OgDAr+tAQ7Hzyluv589YMVJjnsKOGmXobVuYgD/sqZOfqfJI FI4AzyE6vurEK50ZJ7Ihh46bY2Hy/AZWUm6abQj2yC4Zqpse3BFOIh+pgWrarLNh h0T0t10vw8SSzL9IhlgPLMpBxBiEbyTcsM4Q6Ke0GpSGiZY7p096mxPn05EmpI1O dgDh65ieADb44A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:27 2025 by rpki-client