This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json) Hash identifier: OQq+Efy64YNM40qVoFYQ2pZ1WL7t0kH/mMPTFPczv/k= Subject key identifier: 41:29:16:DF:B6:24:9B:5C:39:86:3B:E4:D2:55:08:FD:98:30:2C:6C Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb Certificate serial: 019B390FD27012A5D4B3D554985A27D5948D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft Manifest number: 0BFC Signing time: Sat 20 Dec 2025 00:01:36 +0000 Manifest this update: Sat 20 Dec 2025 00:01:36 +0000 Manifest next update: Sun 21 Dec 2025 00:01:36 +0000 Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: dfB7gx/5eL8N2CXxwSEXwRM5XhhgLBO+Mgw86ckuTlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:d2:70:12:a5:d4:b3:d5:54:98:5a:27:d5:94:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb Validity Not Before: Dec 20 00:01:36 2025 GMT Not After : Dec 21 00:01:36 2025 GMT Subject: CN=412916dfb6249b5c39863be4d25508fd98302c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:25:75:b3:c0:2e:f8:20:90:fa:0f:eb:49: 43:5a:38:eb:e4:21:0a:f1:56:94:79:a8:11:00:93: 5b:fe:84:27:29:89:47:5b:e0:d9:27:54:f9:51:8b: d4:5d:14:ba:15:15:17:67:0c:3e:51:5a:14:de:1c: 6f:cc:a1:ed:f7:ac:6e:1c:ab:74:99:fc:9b:2f:9b: 10:ed:46:d8:26:30:30:1c:68:34:8e:34:7c:b4:f3: 9f:91:2a:60:af:4d:6d:0b:9a:1c:f8:2a:43:43:1f: 95:ac:fd:81:ec:b6:aa:ef:56:2b:f0:dc:55:2e:26: ea:f7:64:a2:3d:fb:6e:12:85:ec:05:8f:c8:d6:f7: 19:9a:2c:a7:d1:56:f4:93:aa:a8:3d:3f:e1:36:c2: ad:1c:85:ce:8f:24:0b:32:72:cb:a2:44:b1:a2:a8: 57:f0:20:68:66:61:16:e2:29:f6:80:32:79:4b:cf: 28:d5:eb:c4:ae:7b:86:f0:60:e6:8b:27:eb:01:f3: 15:c7:24:e4:ca:ce:41:3d:28:e1:6a:d6:49:12:5e: 64:cd:30:43:2e:8c:24:03:9e:a1:81:e3:bf:79:37: 58:23:a3:91:5c:cc:d3:66:14:f3:e8:eb:92:9f:97: 90:26:bc:13:de:6e:6d:35:1a:2b:0b:d7:fb:fe:e2: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:29:16:DF:B6:24:9B:5C:39:86:3B:E4:D2:55:08:FD:98:30:2C:6C X509v3 Authority Key Identifier: keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:22:04:41:db:ef:56:8c:9f:69:88:c5:a5:20:bd:73:2b:65: 51:d1:5c:fc:54:0a:3f:24:7b:0c:4c:1d:43:06:9d:27:48:4a: 7e:42:ff:34:c9:0b:78:9f:64:26:a6:5b:44:c8:ad:65:65:c7: 32:1a:ea:56:0d:21:18:13:6d:f7:bd:f6:c9:57:aa:91:59:f8: ff:12:14:47:15:5e:4f:11:e1:94:e4:80:33:32:56:40:ae:d7: f4:13:8a:e7:9a:b2:fc:7d:2e:b9:55:6e:e4:91:67:32:c3:55: bc:7e:03:0e:21:5d:29:75:01:00:97:0f:13:24:e5:cd:a8:d9: f8:55:10:72:82:d7:94:66:d2:23:2c:db:3e:c9:3b:00:9c:9e: ef:30:fa:4b:51:64:f4:1e:4e:f4:c9:40:1c:a9:dc:df:f4:29: 41:00:86:22:87:b5:70:1c:9a:f5:7a:44:4f:c7:62:26:fa:3f: fa:0e:99:55:61:62:0b:8c:d3:e5:3f:63:49:6d:6d:c2:8d:b6: 31:58:50:8d:44:06:44:67:0c:1a:bd:1a:b0:ba:12:18:09:8e: 09:b2:32:d2:12:a5:0b:70:06:bb:a3:b0:6b:ef:ae:e8:79:84: 97:fa:92:2c:c2:3a:ec:4b:23:1b:ee:5f:22:2b:d5:c5:17:d5: 6a:9b:1f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D9JwEqXUs9VUmFon1ZSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy ZjZhY2IwHhcNMjUxMjIwMDAwMTM2WhcNMjUxMjIxMDAwMTM2WjAzMTEwLwYDVQQD Eyg0MTI5MTZkZmI2MjQ5YjVjMzk4NjNiZTRkMjU1MDhmZDk4MzAyYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstwldbPALvggkPoP60lDWjjr5CEK 8VaUeagRAJNb/oQnKYlHW+DZJ1T5UYvUXRS6FRUXZww+UVoU3hxvzKHt96xuHKt0 mfybL5sQ7UbYJjAwHGg0jjR8tPOfkSpgr01tC5oc+CpDQx+VrP2B7Laq71Yr8NxV Libq92SiPftuEoXsBY/I1vcZmiyn0Vb0k6qoPT/hNsKtHIXOjyQLMnLLokSxoqhX 8CBoZmEW4in2gDJ5S88o1evErnuG8GDmiyfrAfMVxyTkys5BPSjhatZJEl5kzTBD LowkA56hgeO/eTdYI6ORXMzTZhTz6OuSn5eQJrwT3m5tNRorC9f7/uI5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEpFt+2JJtcOYY75NJVCP2YMCxsMB8GA1UdIwQY MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyIEQdvv VoyfaYjFpSC9cytlUdFc/FQKPyR7DEwdQwadJ0hKfkL/NMkLeJ9kJqZbRMitZWXH MhrqVg0hGBNt9732yVeqkVn4/xIURxVeTxHhlOSAMzJWQK7X9BOK55qy/H0uuVVu 5JFnMsNVvH4DDiFdKXUBAJcPEyTlzajZ+FUQcoLXlGbSIyzbPsk7AJye7zD6S1Fk 9B5O9MlAHKnc3/QpQQCGIoe1cBya9XpET8diJvo/+g6ZVWFiC4zT5T9jSW1two22 MVhQjUQGRGcMGr0asLoSGAmOCbIy0hKlC3AGu6Owa++u6HmEl/qSLMI67EsjG+5f IivVxRfVapsfoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:01:56 2025 by rpki-client