This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft File: qOeaWm0FfybaCYxi-R31ExEa7a0.mft (raw, json) Hash identifier: yvfRqr+2mFGqmvwTvltqfK3RIPbi0FG6V8MKBErPTfU= Subject key identifier: D7:B4:A9:DE:CA:86:27:35:7A:1C:7C:1C:AF:CF:C4:78:D5:3D:83:C4 Authority key identifier: A8:E7:9A:5A:6D:05:7F:26:DA:09:8C:62:F9:1D:F5:13:11:1A:ED:AD Certificate issuer: /CN=a8e79a5a6d057f26da098c62f91df513111aedad Certificate serial: 019B2EFA9F9145D4DB6A4B224BAE36246EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft Manifest number: 0235 Signing time: Thu 18 Dec 2025 01:02:15 +0000 Manifest this update: Thu 18 Dec 2025 01:02:15 +0000 Manifest next update: Fri 19 Dec 2025 01:02:15 +0000 Files and hashes: 1: qOeaWm0FfybaCYxi-R31ExEa7a0.crl (hash: e3wxriI7TcBLxM2PtwC8C1J35fEvqMJ86yRxfIJL+rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:9f:91:45:d4:db:6a:4b:22:4b:ae:36:24:6e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e79a5a6d057f26da098c62f91df513111aedad Validity Not Before: Dec 18 01:02:15 2025 GMT Not After : Dec 19 01:02:15 2025 GMT Subject: CN=d7b4a9deca8627357a1c7c1cafcfc478d53d83c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:2b:1e:e6:3e:82:63:90:4b:bb:e6:41:80: 9b:26:8d:01:81:89:be:ac:ee:5c:af:88:36:81:3e: 89:37:26:f6:24:f9:a4:8f:a1:2b:cd:93:9a:b1:51: 87:87:5f:3c:93:05:c7:cc:09:f2:c0:d9:3f:b2:f1: 2e:e7:ef:b1:dc:03:00:0e:92:39:9c:78:06:47:b2: 3d:76:94:20:e4:df:f9:04:d3:e9:a1:33:40:d5:66: 72:84:e5:34:9e:1d:6d:7e:48:0c:4f:17:14:9c:e0: 99:ff:08:4c:40:d9:75:a8:73:40:c9:27:b3:04:d4: f9:4f:20:54:55:59:f4:c9:43:a3:8b:c9:10:bc:86: c7:be:21:4f:1b:94:89:5b:10:2a:b2:af:d9:7a:50: 2e:d5:f8:0e:e8:bb:0f:cc:d7:c4:35:3a:a6:42:fd: 0f:1e:61:81:57:08:92:84:22:15:a0:51:0c:d5:f0: e5:dd:bf:6e:c7:51:a2:c9:85:39:8a:41:b1:19:80: 5a:f3:bf:b0:38:5c:ee:6b:55:0a:a0:5e:eb:b0:52: 57:4a:bc:4a:73:2e:42:ca:93:5c:48:6d:49:ab:72: a5:cc:fe:4e:29:02:78:ac:00:06:96:2c:45:31:1f: 5c:d5:5e:83:88:a0:d4:c8:fe:d5:34:ab:18:34:8e: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:A9:DE:CA:86:27:35:7A:1C:7C:1C:AF:CF:C4:78:D5:3D:83:C4 X509v3 Authority Key Identifier: keyid:A8:E7:9A:5A:6D:05:7F:26:DA:09:8C:62:F9:1D:F5:13:11:1A:ED:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:b7:c8:62:b8:56:36:c4:ea:9c:47:a6:7d:da:24:3a:e0: b2:f2:e5:07:20:25:38:26:94:fd:61:ae:16:b8:b6:2b:da:b0: cc:98:c0:ad:95:a8:21:36:05:aa:e8:01:14:36:8b:c6:f9:ae: 9d:25:82:61:d1:02:f4:d7:33:3e:6b:3e:0e:83:07:44:8b:0e: 52:93:9c:23:97:91:c1:7b:39:83:43:6c:76:88:6f:21:40:b5: 50:aa:0b:31:31:ae:6e:4f:8e:e7:c6:9a:9d:20:e2:9b:57:64: 57:5d:46:d4:f8:56:31:85:c3:e4:05:c2:75:e7:3d:c5:ec:f0: 57:89:71:30:c8:38:6f:ca:f7:1d:4d:62:d0:70:23:4b:fe:72: be:1f:5b:22:bc:5d:c7:0e:6e:a0:12:f0:a4:e8:b4:a4:04:9a: 97:a7:de:05:22:cd:c9:fd:ab:46:b5:dd:12:87:9c:30:dd:88: 14:96:c6:bc:ad:9f:ff:84:77:43:10:19:6c:ee:0d:d6:08:0c: 6a:06:81:54:a8:9f:f0:7e:34:0d:43:d3:93:29:06:51:0f:0b: a4:87:93:55:1e:3c:f1:d8:64:1b:0a:96:89:93:42:c6:57:5a: 29:7d:07:6e:cf:e5:91:d0:1b:a1:4f:94:3a:8c:e3:0c:e2:1e: 8b:d3:0f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+p+RRdTbaksiS642JG74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTc5YTVhNmQwNTdmMjZkYTA5OGM2MmY5MWRmNTEzMTEx YWVkYWQwHhcNMjUxMjE4MDEwMjE1WhcNMjUxMjE5MDEwMjE1WjAzMTEwLwYDVQQD EyhkN2I0YTlkZWNhODYyNzM1N2ExYzdjMWNhZmNmYzQ3OGQ1M2Q4M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo8rHuY+gmOQS7vmQYCbJo0BgYm+ rO5cr4g2gT6JNyb2JPmkj6ErzZOasVGHh188kwXHzAnywNk/svEu5++x3AMADpI5 nHgGR7I9dpQg5N/5BNPpoTNA1WZyhOU0nh1tfkgMTxcUnOCZ/whMQNl1qHNAySez BNT5TyBUVVn0yUOji8kQvIbHviFPG5SJWxAqsq/ZelAu1fgO6LsPzNfENTqmQv0P HmGBVwiShCIVoFEM1fDl3b9ux1GiyYU5ikGxGYBa87+wOFzua1UKoF7rsFJXSrxK cy5CypNcSG1Jq3KlzP5OKQJ4rAAGlixFMR9c1V6DiKDUyP7VNKsYNI54+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe0qd7Khic1ehx8HK/PxHjVPYPEMB8GA1UdIwQY MBaAFKjnmlptBX8m2gmMYvkd9RMRGu2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9lYVdtMEZmeWJhQ1l4aS1SMzFFeEVhN2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80MjY5MmItYTQ2MC00NzdjLWJhYTAt ZWNjZGFjOGI2YTk4LzEvcU9lYVdtMEZmeWJhQ1l4aS1SMzFFeEVhN2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80MjY5MmItYTQ2MC00NzdjLWJhYTAtZWNjZGFjOGI2YTk4 LzEvcU9lYVdtMEZmeWJhQ1l4aS1SMzFFeEVhN2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz+3yGK4 VjbE6pxHpn3aJDrgsvLlByAlOCaU/WGuFri2K9qwzJjArZWoITYFqugBFDaLxvmu nSWCYdEC9NczPms+DoMHRIsOUpOcI5eRwXs5g0NsdohvIUC1UKoLMTGubk+O58aa nSDim1dkV11G1PhWMYXD5AXCdec9xezwV4lxMMg4b8r3HU1i0HAjS/5yvh9bIrxd xw5uoBLwpOi0pASal6feBSLNyf2rRrXdEoecMN2IFJbGvK2f/4R3QxAZbO4N1ggM agaBVKif8H40DUPTkykGUQ8LpIeTVR488dhkGwqWiZNCxldaKX0Hbs/lkdAboU+U OozjDOIei9MPuw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:57:06 2025 by rpki-client