This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json) Hash identifier: RtYozCXa8XOgLm+KRbjPD3zxs6rKnfR/mkNYb87abi4= Subject key identifier: 10:24:08:61:9F:EE:6B:63:BB:B2:00:45:C8:1B:C1:84:31:DF:2F:0D Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523 Certificate serial: 019B416D32F502EEE368988A8060B8F00D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft Manifest number: 04A2 Signing time: Sun 21 Dec 2025 15:00:33 +0000 Manifest this update: Sun 21 Dec 2025 15:00:33 +0000 Manifest next update: Mon 22 Dec 2025 15:00:33 +0000 Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: G9pCTfvBr1sorB4EYSlPF6VNPbG7q7cF5YYSv30UErc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:32:f5:02:ee:e3:68:98:8a:80:60:b8:f0:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523 Validity Not Before: Dec 21 15:00:33 2025 GMT Not After : Dec 22 15:00:33 2025 GMT Subject: CN=102408619fee6b63bbb20045c81bc18431df2f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:2e:50:d8:88:67:03:3b:86:00:87:2b:80: b7:fd:c6:6a:1b:ad:f5:7a:e3:bf:f1:45:01:fc:ac: 7d:1f:9c:d0:69:8c:5d:41:13:db:c4:b4:5f:b3:9d: 3b:56:51:92:c1:b0:8f:1e:d3:83:b2:7f:3f:55:57: d2:04:7e:ea:a5:a1:f6:da:50:ba:d3:01:a1:b4:81: f1:55:8c:f5:0d:62:0f:b3:09:3b:5e:8d:aa:cd:06: db:16:fa:55:bd:dd:c9:a3:5c:ef:ae:cc:68:e1:ab: b3:74:87:29:e2:43:e7:74:f3:2d:68:fd:4f:81:07: 6a:2f:e9:9f:09:6a:a8:d4:ba:c9:a3:26:d7:cc:cc: 85:e9:f5:ec:bd:a2:18:dc:07:80:c6:2b:39:bf:3a: ef:4d:b8:f5:74:78:02:57:86:6b:42:64:2c:69:86: 30:02:fb:98:9a:3b:99:d7:6f:dc:24:1d:b9:c2:7f: 3f:fa:5d:14:59:6a:e7:d6:ea:92:f0:88:ab:e5:bf: 7b:3a:0a:f4:81:07:6b:48:e8:00:9f:05:9d:01:72: 0f:92:86:39:32:6c:b7:ec:39:67:5f:d9:22:7a:3d: d5:07:1e:cf:1a:3a:c0:db:c5:fb:6c:fd:f5:aa:26: e9:cd:f0:8a:bd:43:c2:09:48:a3:2f:ba:13:87:87: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:24:08:61:9F:EE:6B:63:BB:B2:00:45:C8:1B:C1:84:31:DF:2F:0D X509v3 Authority Key Identifier: keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:41:92:2c:af:ad:ba:d0:6f:0a:e4:b6:af:17:d4:fd:65:2d: c0:8c:78:92:b1:22:20:cc:64:a5:b5:67:e3:17:eb:0e:2a:08: 97:32:39:91:84:65:42:cd:bd:3a:11:cd:31:1f:56:e4:8c:09: f2:fb:2b:28:63:e1:f3:99:1a:89:cd:f7:d1:f3:fe:3a:ad:60: df:9b:cc:99:b6:c0:1f:14:e9:5d:02:6d:da:fe:c8:d8:16:2e: bb:41:38:6a:e8:6f:5d:e8:a2:10:c8:34:b7:8f:2d:dd:a3:21: fa:d1:72:d4:ce:45:fc:55:e8:64:d4:66:b4:dc:2c:ff:3d:44: e6:b2:36:f7:10:b2:ac:c2:58:5c:d8:54:c0:f8:92:7f:b3:4c: 82:a2:4d:11:55:b5:ba:31:23:4e:40:be:4f:bf:87:9e:5b:85: bb:44:26:0c:50:18:a2:14:a8:8d:01:60:a3:81:2e:ca:13:70: 2b:81:4d:dc:7e:77:3a:42:de:09:56:eb:44:27:05:5f:f0:98: 54:2c:c5:54:b9:e8:47:2a:e5:35:a8:82:43:0f:8e:80:46:87: dc:d9:56:95:ae:1d:0c:88:29:b4:f7:c7:f1:2a:81:97:3a:6e: 81:5b:24:91:80:c1:a5:fc:9e:01:37:75:fb:69:8e:48:d4:22: 29:62:1b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTL1Au7jaJiKgGC48A0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDhkMDExZWRiOGNkMzNlNjY3Njc4ODBjYTRhYjMwNjFk OWM1MjMwHhcNMjUxMjIxMTUwMDMzWhcNMjUxMjIyMTUwMDMzWjAzMTEwLwYDVQQD EygxMDI0MDg2MTlmZWU2YjYzYmJiMjAwNDVjODFiYzE4NDMxZGYyZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFsuUNiIZwM7hgCHK4C3/cZqG631 euO/8UUB/Kx9H5zQaYxdQRPbxLRfs507VlGSwbCPHtODsn8/VVfSBH7qpaH22lC6 0wGhtIHxVYz1DWIPswk7Xo2qzQbbFvpVvd3Jo1zvrsxo4auzdIcp4kPndPMtaP1P gQdqL+mfCWqo1LrJoybXzMyF6fXsvaIY3AeAxis5vzrvTbj1dHgCV4ZrQmQsaYYw AvuYmjuZ12/cJB25wn8/+l0UWWrn1uqS8Iir5b97Ogr0gQdrSOgAnwWdAXIPkoY5 Mmy37DlnX9kiej3VBx7PGjrA28X7bP31qibpzfCKvUPCCUijL7oTh4foIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAkCGGf7mtju7IARcgbwYQx3y8NMB8GA1UdIwQY MBaAFKlI0BHtuM0z5mdniAykqzBh2cUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4Mjgt M2Q1NDlmYmI4MzdmLzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4MjgtM2Q1NDlmYmI4Mzdm LzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREGSLK+t utBvCuS2rxfU/WUtwIx4krEiIMxkpbVn4xfrDioIlzI5kYRlQs29OhHNMR9W5IwJ 8vsrKGPh85kaic330fP+Oq1g35vMmbbAHxTpXQJt2v7I2BYuu0E4auhvXeiiEMg0 t48t3aMh+tFy1M5F/FXoZNRmtNws/z1E5rI29xCyrMJYXNhUwPiSf7NMgqJNEVW1 ujEjTkC+T7+HnluFu0QmDFAYohSojQFgo4EuyhNwK4FN3H53OkLeCVbrRCcFX/CY VCzFVLnoRyrlNaiCQw+OgEaH3NlWla4dDIgptPfH8SqBlzpugVskkYDBpfyeATd1 +2mOSNQiKWIb4A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:12:55 2025 by rpki-client