This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json) Hash identifier: NFbWV2b75WtXMyFQa1CdOc9CdKspEXya/pJd/Yq8hqo= Subject key identifier: 31:98:76:6C:F9:20:70:A7:E6:DE:AB:8D:B5:6E:11:C8:EA:0F:1F:9D Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe Certificate serial: 019B405C0BFBCB7CEF30D8C247C153ED56B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft Manifest number: 1185 Signing time: Sun 21 Dec 2025 10:02:12 +0000 Manifest this update: Sun 21 Dec 2025 10:02:12 +0000 Manifest next update: Mon 22 Dec 2025 10:02:12 +0000 Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: zgxsSCCN2MIrLgy2ktfBS3HqwVyss/htTv/CVB/v0Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:0b:fb:cb:7c:ef:30:d8:c2:47:c1:53:ed:56:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe Validity Not Before: Dec 21 10:02:12 2025 GMT Not After : Dec 22 10:02:12 2025 GMT Subject: CN=3198766cf92070a7e6deab8db56e11c8ea0f1f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:bc:bc:81:af:4e:e3:de:45:4e:ef:69:b9: c1:55:50:a3:83:66:f3:a9:f7:27:e1:6d:5a:4f:f9: a2:7e:9e:45:f9:aa:6f:d0:da:a8:3d:8c:c1:ea:c7: c5:4f:5e:a2:05:2f:ee:cd:52:ff:fa:35:29:0d:2d: 15:cc:bf:88:f3:10:64:c6:d4:22:40:f6:c7:30:f7: 99:70:8a:dc:2f:c1:ed:63:8e:40:ba:18:3f:ee:49: 69:8c:35:98:5c:5a:02:5e:be:9a:21:4a:c6:8b:c0: e1:49:ad:89:b3:65:4c:2f:aa:bc:51:f7:c1:38:f0: 07:ff:1b:51:15:2c:cc:ec:f4:05:89:75:52:9b:5c: b5:dd:98:4e:c2:0e:0e:cc:80:ba:dd:c4:a6:20:2e: 1e:bf:14:ea:39:05:1a:6e:1b:1c:f6:89:53:ab:8d: 47:37:ca:3c:b5:5b:47:70:64:dc:19:27:c5:19:72: c8:17:cd:df:05:44:b8:3f:07:b9:ac:ff:9b:10:7a: 53:6e:f5:28:d0:ee:48:1f:c2:ce:35:e2:12:ff:fa: c0:42:59:fb:2e:21:2d:8a:67:e1:06:b4:77:46:09: 46:f7:5f:a1:13:6f:90:d4:71:dd:39:e6:ab:48:24: dc:37:49:92:a5:bb:74:a5:cd:f9:af:10:34:48:a2: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:76:6C:F9:20:70:A7:E6:DE:AB:8D:B5:6E:11:C8:EA:0F:1F:9D X509v3 Authority Key Identifier: keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cd:b0:1b:e0:a5:72:87:cb:1d:87:a3:02:68:8b:5e:83:7e: 0d:a8:ce:7c:f4:45:e1:78:dd:e6:c3:9b:15:05:04:3e:28:38: 46:b2:2b:e4:6d:f1:2d:6b:d7:70:b1:75:eb:18:cf:83:75:11: 5d:8b:10:b2:7e:a2:d4:e3:61:73:7f:18:00:a8:d4:61:0f:c3: c8:12:e1:6b:6c:41:55:fb:ba:6f:7c:23:33:a3:de:82:f7:00: bd:85:5b:b2:61:11:63:c9:d1:6a:58:e8:ee:8a:84:48:0a:56: c3:91:90:3c:6b:25:31:08:79:1e:59:70:5d:fa:28:13:e1:2e: b1:f4:5e:a3:ae:2e:51:d2:f3:ef:c3:eb:d5:c1:07:e7:7d:59: 32:65:25:00:0a:28:53:9b:fe:8f:20:f6:36:2b:78:2f:dc:32: f1:67:cf:0c:cc:4f:1d:e3:43:ae:01:9a:58:6f:91:00:7a:a0: d0:c5:32:72:e6:a3:12:e0:f9:d1:1f:5d:93:ec:ce:96:49:e0: 2a:54:2d:06:e9:a9:af:ec:b1:76:39:c4:e3:94:bc:b8:3e:a8: a4:4e:c5:16:e8:5f:a3:ec:76:d8:30:f7:de:51:b2:9f:0f:92: ed:8a:48:13:84:a2:f8:62:79:4a:20:4b:7e:dc:34:94:6f:f8: 1e:c3:c5:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXAv7y3zvMNjCR8FT7Va0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNGFhYmJmYWI5ZGU3MTI2YjdkMTE5ZGI1MjRkYTQxMTFm MDRhZmUwHhcNMjUxMjIxMTAwMjEyWhcNMjUxMjIyMTAwMjEyWjAzMTEwLwYDVQQD EygzMTk4NzY2Y2Y5MjA3MGE3ZTZkZWFiOGRiNTZlMTFjOGVhMGYxZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KC8vIGvTuPeRU7vabnBVVCjg2bz qfcn4W1aT/mifp5F+apv0NqoPYzB6sfFT16iBS/uzVL/+jUpDS0VzL+I8xBkxtQi QPbHMPeZcIrcL8HtY45Auhg/7klpjDWYXFoCXr6aIUrGi8DhSa2Js2VML6q8UffB OPAH/xtRFSzM7PQFiXVSm1y13ZhOwg4OzIC63cSmIC4evxTqOQUabhsc9olTq41H N8o8tVtHcGTcGSfFGXLIF83fBUS4Pwe5rP+bEHpTbvUo0O5IH8LONeIS//rAQln7 LiEtimfhBrR3RglG91+hE2+Q1HHdOearSCTcN0mSpbt0pc35rxA0SKKXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGYdmz5IHCn5t6rjbVuEcjqDx+dMB8GA1UdIwQY MBaAFEBKq7+rnecSa30RnbUk2kER8Er+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt NzFhMjdlZjgxNzg2LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2 LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc2wG+Cl cofLHYejAmiLXoN+DajOfPRF4Xjd5sObFQUEPig4RrIr5G3xLWvXcLF16xjPg3UR XYsQsn6i1ONhc38YAKjUYQ/DyBLha2xBVfu6b3wjM6PegvcAvYVbsmERY8nRaljo 7oqESApWw5GQPGslMQh5HllwXfooE+EusfReo64uUdLz78Pr1cEH531ZMmUlAAoo U5v+jyD2Nit4L9wy8WfPDMxPHeNDrgGaWG+RAHqg0MUycuajEuD50R9dk+zOlkng KlQtBumpr+yxdjnE45S8uD6opE7FFuhfo+x22DD33lGynw+S7YpIE4Si+GJ5SiBL ftw0lG/4HsPFNg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:20:18 2025 by rpki-client