This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json) Hash identifier: 5Z8dp4137aszytqdhjD7JZ2p4c9N7xkUQlUPMcefj14= Subject key identifier: 6B:BA:D2:9E:9D:AD:B3:E4:01:50:AE:ED:0E:BB:72:BB:A3:48:D1:96 Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5 Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5 Certificate serial: 019B390F4A80EBD3ACBBF1D4D315675828D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft Manifest number: 0E9E Signing time: Sat 20 Dec 2025 00:01:01 +0000 Manifest this update: Sat 20 Dec 2025 00:01:01 +0000 Manifest next update: Sun 21 Dec 2025 00:01:01 +0000 Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: pqz3Bj2yNsxNHZ0r6HofNbiH7Nn9WfC/3I12xVBXSnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:4a:80:eb:d3:ac:bb:f1:d4:d3:15:67:58:28:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5 Validity Not Before: Dec 20 00:01:01 2025 GMT Not After : Dec 21 00:01:01 2025 GMT Subject: CN=6bbad29e9dadb3e40150aeed0ebb72bba348d196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:c5:05:da:7e:18:8b:25:d5:c9:c2:ae:78: 9e:79:62:10:c1:3b:f2:bc:a3:f7:88:68:75:06:98: d5:9b:8a:d2:0a:4d:ce:15:56:28:42:43:7b:66:af: 4e:8e:42:bf:17:81:05:14:39:8a:28:1b:22:f6:3a: 52:09:0c:f4:48:51:bb:42:52:48:74:5d:dc:a6:73: fd:59:0f:71:bd:51:12:a5:60:93:9f:3d:02:d5:3d: 80:b1:43:72:d2:b7:bf:7c:4d:ff:9e:94:4f:95:1d: b0:9f:e3:c4:fe:48:8b:af:a7:b8:85:06:33:61:9b: 72:42:6d:9e:40:59:b8:fe:e0:83:fb:b1:85:d7:be: e8:35:9e:b9:d6:d5:f7:f9:b6:a4:4c:2e:01:56:69: 39:9c:b7:3e:47:ee:c7:ce:f0:50:bf:fc:c4:07:3e: bf:fe:6b:2d:80:31:9c:27:ea:41:3b:48:f1:7a:e1: 42:95:c4:2a:22:18:c4:d5:b5:a8:46:6b:e3:5c:9b: 7c:78:96:b3:46:43:59:06:84:99:a1:34:40:21:d4: 8c:17:59:82:b3:e5:cb:86:19:ae:a0:22:8d:96:e8: 40:ab:ec:b2:6c:ae:8b:25:3b:ec:17:8a:6b:a6:a8: 54:38:98:91:91:dd:e9:5e:31:d7:6f:87:f2:be:e2: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:D2:9E:9D:AD:B3:E4:01:50:AE:ED:0E:BB:72:BB:A3:48:D1:96 X509v3 Authority Key Identifier: keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:c4:b6:fa:5f:2b:1f:a4:17:8f:7a:5f:cc:af:4b:92:ee: 3c:8f:91:07:b2:67:8e:a4:28:63:c3:22:c2:7a:8b:2d:99:02: 00:0f:66:9a:68:94:ee:73:8d:54:1d:33:81:da:b3:98:f4:a4: b0:d2:47:77:1c:fa:6c:b8:97:da:0a:b6:4c:a0:70:e6:48:14: 83:23:5c:f8:50:d4:68:61:1d:93:91:d7:92:1c:6e:e8:a2:39: 02:4e:48:50:94:5a:9d:11:91:22:fd:e1:83:6c:5c:d5:6f:1b: 4a:1b:02:56:cd:d7:0d:f2:50:7f:4d:1a:2b:d6:b6:67:33:40: 45:d6:c1:34:45:a9:ec:36:34:e1:2d:c9:2d:ff:34:85:07:6d: 4d:7a:52:e7:5a:14:99:6e:05:bf:e0:47:ce:9d:28:a8:2a:69: 3b:37:c1:71:d1:e0:d5:0b:4c:fe:1c:93:c8:b0:a2:3a:69:3e: 49:78:cc:ad:46:3f:68:7e:26:bb:ab:15:9c:76:08:3b:03:ae: 22:1b:99:6b:64:28:58:79:ff:e7:97:89:c6:9b:16:6c:23:dc: d7:93:db:ec:5c:18:c6:4a:56:05:14:90:4f:20:83:83:70:0d: 6e:ed:a2:e1:e5:fb:f5:3e:37:90:30:48:ef:d2:37:1f:10:44: 2a:39:41:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D0qA69Osu/HU0xVnWCjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMTRhZWY4MDNkNTBkNzAwYmI5ODUyYWU4YmIyYmI0MDky NjE2YTUwHhcNMjUxMjIwMDAwMTAxWhcNMjUxMjIxMDAwMTAxWjAzMTEwLwYDVQQD Eyg2YmJhZDI5ZTlkYWRiM2U0MDE1MGFlZWQwZWJiNzJiYmEzNDhkMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCHFBdp+GIsl1cnCrnieeWIQwTvy vKP3iGh1BpjVm4rSCk3OFVYoQkN7Zq9OjkK/F4EFFDmKKBsi9jpSCQz0SFG7QlJI dF3cpnP9WQ9xvVESpWCTnz0C1T2AsUNy0re/fE3/npRPlR2wn+PE/kiLr6e4hQYz YZtyQm2eQFm4/uCD+7GF177oNZ651tX3+bakTC4BVmk5nLc+R+7HzvBQv/zEBz6/ /mstgDGcJ+pBO0jxeuFClcQqIhjE1bWoRmvjXJt8eJazRkNZBoSZoTRAIdSMF1mC s+XLhhmuoCKNluhAq+yybK6LJTvsF4prpqhUOJiRkd3pXjHXb4fyvuJgmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu60p6drbPkAVCu7Q67crujSNGWMB8GA1UdIwQY MBaAFKsUrvgD1Q1wC7mFKui7K7QJJhalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mMzJjMmEtYzA1NC00MTdkLThlMGMt YzAwYmFjZmZmY2U1LzEvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mMzJjMmEtYzA1NC00MTdkLThlMGMtYzAwYmFjZmZmY2U1 LzEvcXhTdS1BUFZEWEFMdVlVcTZMc3J0QWttRnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4vEtvpf Kx+kF496X8yvS5LuPI+RB7JnjqQoY8MiwnqLLZkCAA9mmmiU7nONVB0zgdqzmPSk sNJHdxz6bLiX2gq2TKBw5kgUgyNc+FDUaGEdk5HXkhxu6KI5Ak5IUJRanRGRIv3h g2xc1W8bShsCVs3XDfJQf00aK9a2ZzNARdbBNEWp7DY04S3JLf80hQdtTXpS51oU mW4Fv+BHzp0oqCppOzfBcdHg1QtM/hyTyLCiOmk+SXjMrUY/aH4mu6sVnHYIOwOu IhuZa2QoWHn/55eJxpsWbCPc15Pb7FwYxkpWBRSQTyCDg3ANbu2i4eX79T43kDBI 79I3HxBEKjlBCQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:11 2025 by rpki-client