This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json) Hash identifier: 53i1XHb6jf7y0l1L7XuwSfJMnKy2j17v1kT5IP+8198= Subject key identifier: CA:5A:F8:9D:B6:87:0D:75:10:01:EC:B1:67:4A:9C:CD:4D:13:85:7F Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47 Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47 Certificate serial: 019B292F7308B68EE371957951D916A4CBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 22:02:14 +0000 Manifest this update: Tue 16 Dec 2025 22:02:14 +0000 Manifest next update: Wed 17 Dec 2025 22:02:14 +0000 Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: ms7wX78UYPhD17aoLxxXrlmoF8jYY4+GIDOT6WUmVig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:73:08:b6:8e:e3:71:95:79:51:d9:16:a4:cb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47 Validity Not Before: Dec 16 22:02:14 2025 GMT Not After : Dec 17 22:02:14 2025 GMT Subject: CN=ca5af89db6870d751001ecb1674a9ccd4d13857f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:6f:ca:0a:89:e8:c1:25:78:01:a4:f5:62: ff:7c:66:fb:74:45:3f:f4:49:05:8a:ef:bd:ce:8f: 45:f4:4c:53:d2:3e:b5:64:50:b6:55:ad:bc:e5:59: 46:fd:78:41:6e:08:05:2b:f9:b3:98:da:36:d6:dd: d4:a2:b2:7e:26:92:93:2f:da:0e:57:f8:a8:fb:3c: 32:3b:46:47:0f:03:43:17:79:d2:1a:50:68:e5:45: a2:b5:c8:51:df:c7:78:1d:9a:d4:7b:e9:b8:d4:bc: c0:07:f5:60:69:72:06:38:07:0a:04:1e:b3:c3:40: 28:fa:b4:ce:b0:6e:a8:5c:37:57:5e:c0:c6:bd:d5: d3:51:b0:43:33:8b:c0:87:46:16:9d:ab:f5:a6:4b: ef:ad:e3:f7:7a:75:b2:25:e8:a6:3d:97:41:67:37: 81:48:aa:eb:a8:dd:51:b0:0a:ce:28:0c:db:f1:f9: 7b:c6:ce:9a:23:cf:e0:15:fa:0d:e8:02:91:5e:87: a5:98:91:83:63:d8:70:b3:a4:14:00:3e:b7:3d:24: a1:be:f8:0d:af:cb:31:ca:7f:f4:39:ca:cd:dd:4c: 91:df:99:a0:a5:e0:9a:98:e7:46:c4:73:05:ab:49: 57:0c:c7:b3:f8:a4:e3:80:f8:f0:a7:51:bb:4f:e8: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5A:F8:9D:B6:87:0D:75:10:01:EC:B1:67:4A:9C:CD:4D:13:85:7F X509v3 Authority Key Identifier: keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f7:ec:48:f7:15:1c:ae:20:c8:9d:6f:34:a8:cc:f1:c3:8a: db:44:90:8f:69:fa:81:8b:9f:0a:77:08:c4:b0:3b:d8:46:95: ec:b4:7c:16:a3:af:a6:99:46:21:1b:8e:4f:28:78:92:b2:39: aa:16:54:9d:20:31:e6:45:b5:aa:cf:6a:e5:2c:36:17:eb:a4: 68:3a:d5:7d:a2:43:00:9c:f4:6d:ef:5d:17:0c:16:bf:0c:d4: 10:29:cb:95:8c:d0:26:6e:72:96:7b:04:cc:b9:72:66:99:aa: 0f:3f:ad:d2:dc:84:0c:0e:76:d5:cb:05:9f:42:2a:45:62:f0: 65:6c:2f:19:1b:08:51:9c:c2:ca:fc:0d:6b:a6:4a:7e:70:97: 3a:e0:14:1b:ab:2b:95:91:52:a5:94:a8:52:ee:c4:65:22:a7: 45:37:1f:96:9e:58:12:2f:33:bf:56:5d:e8:0d:53:80:6d:df: aa:1f:6e:10:2e:3e:8f:36:78:e4:21:d2:84:26:2f:a3:4c:2a: b9:6f:09:5f:5d:31:7a:33:57:0a:d6:8a:e4:15:79:da:8b:9a: 09:2d:0d:6d:8f:76:c5:1a:6a:f6:5c:98:b9:a2:87:8a:1c:52: 4f:4d:7e:60:c0:0d:0e:19:ee:9b:5b:90:22:b1:dd:51:3a:86: 23:ca:a2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL3MIto7jcZV5UdkWpMuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYTMyYTZiZWU3YWQxOGQxYThhZTM0MjNlOTFkYzU1OWYy NzZjNDcwHhcNMjUxMjE2MjIwMjE0WhcNMjUxMjE3MjIwMjE0WjAzMTEwLwYDVQQD EyhjYTVhZjg5ZGI2ODcwZDc1MTAwMWVjYjE2NzRhOWNjZDRkMTM4NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv1vygqJ6MEleAGk9WL/fGb7dEU/ 9EkFiu+9zo9F9ExT0j61ZFC2Va285VlG/XhBbggFK/mzmNo21t3UorJ+JpKTL9oO V/io+zwyO0ZHDwNDF3nSGlBo5UWitchR38d4HZrUe+m41LzAB/VgaXIGOAcKBB6z w0Ao+rTOsG6oXDdXXsDGvdXTUbBDM4vAh0YWnav1pkvvreP3enWyJeimPZdBZzeB SKrrqN1RsArOKAzb8fl7xs6aI8/gFfoN6AKRXoelmJGDY9hws6QUAD63PSShvvgN r8sxyn/0OcrN3UyR35mgpeCamOdGxHMFq0lXDMez+KTjgPjwp1G7T+hzWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpa+J22hw11EAHssWdKnM1NE4V/MB8GA1UdIwQY MBaAFMKjKmvuetGNGorjQj6R3FWfJ2xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEt YzBjMGIzYjMwN2M2LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEtYzBjMGIzYjMwN2M2 LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/fsSPcV HK4gyJ1vNKjM8cOK20SQj2n6gYufCncIxLA72EaV7LR8FqOvpplGIRuOTyh4krI5 qhZUnSAx5kW1qs9q5Sw2F+ukaDrVfaJDAJz0be9dFwwWvwzUECnLlYzQJm5ylnsE zLlyZpmqDz+t0tyEDA521csFn0IqRWLwZWwvGRsIUZzCyvwNa6ZKfnCXOuAUG6sr lZFSpZSoUu7EZSKnRTcflp5YEi8zv1Zd6A1TgG3fqh9uEC4+jzZ45CHShCYvo0wq uW8JX10xejNXCtaK5BV52ouaCS0NbY92xRpq9lyYuaKHihxST01+YMANDhnum1uQ IrHdUTqGI8qiQA== -----END CERTIFICATE-----Generated at Wed Dec 17 01:00:38 2025 by rpki-client