This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json) Hash identifier: teSd+AvX2kb/hE9KDGJmFMnOilGxYb9CR5vU5L3AbyU= Subject key identifier: C6:A7:A2:A4:80:ED:EE:29:6F:36:13:4F:C9:C9:3E:8C:58:29:2E:20 Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8 Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8 Certificate serial: 019B6C574A5B169C42FB13DC23C27807F26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft Manifest number: 04C2 Signing time: Mon 29 Dec 2025 23:00:18 +0000 Manifest this update: Mon 29 Dec 2025 23:00:18 +0000 Manifest next update: Tue 30 Dec 2025 23:00:18 +0000 Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: 54eRRUr7wFoPGdYAR3vM5PwaxET3IjlKDQM/7bejtk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:4a:5b:16:9c:42:fb:13:dc:23:c2:78:07:f2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8 Validity Not Before: Dec 29 23:00:18 2025 GMT Not After : Dec 30 23:00:18 2025 GMT Subject: CN=c6a7a2a480edee296f36134fc9c93e8c58292e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:ec:37:dc:c9:8d:2b:c2:a9:bb:c7:aa:e6: f6:4f:79:c5:e5:c8:d9:5a:cd:cb:90:48:59:e8:07: e2:96:0a:d8:66:29:0f:be:9c:de:f7:d5:39:85:00: 7e:18:be:d8:78:b4:7e:e8:7d:4e:28:8e:b4:6d:0b: 5d:a2:d9:69:85:36:28:c3:f8:5a:bf:fb:66:a6:2b: 98:17:d6:4d:17:b8:25:81:d0:85:ae:86:4c:fe:39: 3f:6f:06:92:c8:8b:9c:d3:57:72:82:2f:5a:3e:3b: c9:08:84:65:d0:e1:3a:86:7c:13:5a:80:e4:b9:5d: e7:7f:b7:f0:6a:53:7a:27:20:e7:14:4c:cc:8e:80: da:a6:65:e1:d3:7c:56:b8:68:9c:44:ec:d0:57:8a: 7c:13:b3:a3:d8:22:8b:d0:cb:74:d0:85:35:31:90: e6:9e:46:6e:42:f4:ac:f9:a1:e6:b0:76:22:8f:c2: 3d:0f:8c:6c:fc:32:00:c1:dc:38:c8:11:46:ff:c8: 66:b9:a0:7e:b1:0a:f8:a6:01:db:aa:e6:23:b2:d3: b8:73:e7:38:7e:40:01:4f:42:9d:bc:a9:ab:e4:e3: de:cb:75:e2:35:3c:7f:05:37:21:a6:76:fc:a2:b5: 86:48:f6:b5:3b:cc:c3:4b:87:06:47:84:90:5b:08: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A7:A2:A4:80:ED:EE:29:6F:36:13:4F:C9:C9:3E:8C:58:29:2E:20 X509v3 Authority Key Identifier: keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:06:39:00:08:c1:7d:17:51:9c:3b:f1:eb:83:5e:a8:3a:30: 04:e6:5e:89:4a:63:4d:3e:60:c4:e9:d1:76:e3:20:2e:0d:10: 6c:8d:22:33:f6:0d:e9:ac:4b:96:59:be:c0:bc:60:71:a5:ca: 0f:f8:03:17:a8:fc:24:f4:a1:3a:35:68:c5:9e:7e:b7:69:3e: 8c:57:cc:3c:1b:6d:7b:99:c9:f5:02:87:75:e3:fd:e4:7c:29: fc:db:af:1c:92:01:45:b0:89:1c:f7:33:46:dc:c4:84:12:f3: fe:85:d6:55:89:27:22:0f:92:db:de:15:42:92:20:49:2d:82: 62:58:f4:12:92:ee:ae:3c:b8:52:6a:f0:8f:e2:83:66:29:f9: 5e:e4:95:9c:79:70:cc:a7:b4:13:fd:d4:68:f1:a9:0d:e1:db: 46:54:46:4d:8f:8d:c8:52:ed:48:66:b7:aa:79:24:a6:bc:b5: 56:72:90:8c:2b:1c:36:37:09:e7:bb:9a:7a:1a:ae:bd:dd:9f: f9:79:f1:df:02:5f:14:f8:29:20:a9:f4:b1:0c:b2:d3:76:15: 75:1c:c5:28:ab:b8:3f:50:bb:be:fe:2b:df:0f:a7:f8:57:4d: 94:23:89:8e:96:6d:2e:70:9b:75:ad:2b:51:9a:88:ed:67:4d: 91:8e:3c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV0pbFpxC+xPcI8J4B/JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDNjODUwOTBmOWNjMmUyMjlkMzhmZGVhYmFlNjI2NTA4 YmRlYjgwHhcNMjUxMjI5MjMwMDE4WhcNMjUxMjMwMjMwMDE4WjAzMTEwLwYDVQQD EyhjNmE3YTJhNDgwZWRlZTI5NmYzNjEzNGZjOWM5M2U4YzU4MjkyZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSTsN9zJjSvCqbvHqub2T3nF5cjZ Ws3LkEhZ6AfilgrYZikPvpze99U5hQB+GL7YeLR+6H1OKI60bQtdotlphTYow/ha v/tmpiuYF9ZNF7glgdCFroZM/jk/bwaSyIuc01dygi9aPjvJCIRl0OE6hnwTWoDk uV3nf7fwalN6JyDnFEzMjoDapmXh03xWuGicROzQV4p8E7Oj2CKL0Mt00IU1MZDm nkZuQvSs+aHmsHYij8I9D4xs/DIAwdw4yBFG/8hmuaB+sQr4pgHbquYjstO4c+c4 fkABT0KdvKmr5OPey3XiNTx/BTchpnb8orWGSPa1O8zDS4cGR4SQWwjY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFManoqSA7e4pbzYTT8nJPoxYKS4gMB8GA1UdIwQY MBaAFJUDyFCQ+cwuIp04/eq65iZQi964MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUt ZjBkZDg3OWFlNTNhLzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUtZjBkZDg3OWFlNTNh LzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAY5AAjB fRdRnDvx64NeqDowBOZeiUpjTT5gxOnRduMgLg0QbI0iM/YN6axLllm+wLxgcaXK D/gDF6j8JPShOjVoxZ5+t2k+jFfMPBtte5nJ9QKHdeP95Hwp/NuvHJIBRbCJHPcz RtzEhBLz/oXWVYknIg+S294VQpIgSS2CYlj0EpLurjy4Umrwj+KDZin5XuSVnHlw zKe0E/3UaPGpDeHbRlRGTY+NyFLtSGa3qnkkpry1VnKQjCscNjcJ57uaehquvd2f +Xnx3wJfFPgpIKn0sQyy03YVdRzFKKu4P1C7vv4r3w+n+FdNlCOJjpZtLnCbda0r UZqI7WdNkY48EQ== -----END CERTIFICATE-----Generated at Tue Dec 30 03:17:58 2025 by rpki-client