This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json) Hash identifier: xk56X6EV//SxQKvAA34WaVPSTaqo9K51FVWaS2rYuuQ= Subject key identifier: F8:DD:80:2B:F3:7E:B1:F9:FA:53:AB:3B:A6:75:58:BE:95:24:90:45 Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34 Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734 Certificate serial: 019B6A6988CF1692C93973F295331DEA7CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft Manifest number: 0461 Signing time: Mon 29 Dec 2025 14:00:59 +0000 Manifest this update: Mon 29 Dec 2025 14:00:59 +0000 Manifest next update: Tue 30 Dec 2025 14:00:59 +0000 Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: 6QG6KXKZjvgHCBy4ODBY6ZvMAzya7NxsNev0+oV6uOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:88:cf:16:92:c9:39:73:f2:95:33:1d:ea:7c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734 Validity Not Before: Dec 29 14:00:59 2025 GMT Not After : Dec 30 14:00:59 2025 GMT Subject: CN=f8dd802bf37eb1f9fa53ab3ba67558be95249045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:84:66:8c:f5:88:84:f9:2f:34:c5:8f:76: 6b:8b:39:08:a7:4d:01:65:2a:d9:c6:c8:7b:ef:ba: 83:52:7d:75:47:16:ba:eb:ca:fe:90:4a:f7:ff:c4: 2e:df:70:b2:5f:50:ba:57:d1:59:bd:bf:0c:c1:8c: 6a:04:a3:59:e9:56:2a:73:5c:ad:4c:d1:e5:ef:83: d6:44:a6:74:b8:51:d2:98:a7:74:cd:86:75:e5:9e: 6f:07:16:1b:f0:43:03:ec:62:6f:5e:c1:1a:52:e5: 93:76:e1:d6:a5:20:79:56:d3:57:63:ff:e2:8d:0a: 10:24:fe:b4:0d:90:cc:72:e9:a7:ff:7e:38:03:62: 27:38:60:7d:a3:1d:7c:a6:c6:67:03:f3:9e:29:1f: c6:c2:2b:cd:00:71:bf:56:bc:70:46:d1:dd:8c:08: 58:63:77:e0:53:ab:f1:f7:64:40:05:d5:be:28:b8: 7e:50:55:58:88:e9:0e:3a:ad:73:b1:1e:10:bb:d1: e3:5c:e5:27:c8:32:d4:59:b1:a7:cf:a0:bf:b1:49: 58:9d:53:3d:b6:f2:1b:14:86:60:03:9a:61:13:18: f2:53:7e:ee:de:e3:79:14:b2:28:61:d4:73:9f:10: d8:11:82:03:52:16:d0:e7:79:be:2e:95:c1:3d:a0: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:80:2B:F3:7E:B1:F9:FA:53:AB:3B:A6:75:58:BE:95:24:90:45 X509v3 Authority Key Identifier: keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:71:c3:a4:1e:14:20:5d:ba:b7:f1:57:8e:a2:3a:66:43:e5: 06:2f:b3:9c:71:0f:91:17:a1:60:3c:50:2e:d4:22:dd:f7:1a: 16:87:6f:58:0c:e0:8c:76:da:17:70:7d:be:1c:f7:8c:b2:e7: b9:65:25:92:f4:35:c0:6f:3f:f8:46:5f:51:5c:cb:f9:f0:e9: 5a:57:13:22:eb:12:67:8c:3b:3a:4d:c9:88:9c:2e:73:a6:7b: b7:5d:85:db:e8:e4:5f:7e:03:5d:cf:d1:d7:70:d0:a4:5a:85: 38:e4:b5:68:99:41:2f:d4:31:cb:16:35:35:c8:aa:0e:4f:41: b6:ca:5d:19:c7:16:d0:5c:9a:6a:08:ec:98:e8:0f:9b:7d:ed: a9:f7:71:45:b7:31:84:cc:59:2f:85:29:3b:97:55:45:81:e8: 6a:98:cc:54:cd:5d:69:c6:37:d5:1e:f9:95:77:ba:66:2d:f4: 80:2f:c8:f8:44:54:0f:38:cc:42:7b:ae:83:62:1c:45:60:cf: ce:03:bc:30:3f:6e:d6:96:f3:b9:e0:6b:74:cf:ba:25:f8:65: 8e:55:96:34:b0:7e:69:32:34:58:2b:f0:51:2f:0d:ba:f4:15: 4f:db:37:82:98:67:47:4c:fa:7d:90:e0:9b:dd:df:47:d5:0c: fc:04:84:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaYjPFpLJOXPylTMd6nzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmZkNjU5ODUxYTM0YmI3N2MzMjEzY2E0YmY3NzI1MTFl MDg3MzQwHhcNMjUxMjI5MTQwMDU5WhcNMjUxMjMwMTQwMDU5WjAzMTEwLwYDVQQD EyhmOGRkODAyYmYzN2ViMWY5ZmE1M2FiM2JhNjc1NThiZTk1MjQ5MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JaEZoz1iIT5LzTFj3ZrizkIp00B ZSrZxsh777qDUn11Rxa668r+kEr3/8Qu33CyX1C6V9FZvb8MwYxqBKNZ6VYqc1yt TNHl74PWRKZ0uFHSmKd0zYZ15Z5vBxYb8EMD7GJvXsEaUuWTduHWpSB5VtNXY//i jQoQJP60DZDMcumn/344A2InOGB9ox18psZnA/OeKR/GwivNAHG/VrxwRtHdjAhY Y3fgU6vx92RABdW+KLh+UFVYiOkOOq1zsR4Qu9HjXOUnyDLUWbGnz6C/sUlYnVM9 tvIbFIZgA5phExjyU37u3uN5FLIoYdRznxDYEYIDUhbQ53m+LpXBPaDgDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjdgCvzfrH5+lOrO6Z1WL6VJJBFMB8GA1UdIwQY MBaAFKlv1lmFGjS7d8MhPKS/dyUR4Ic0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2Ut YzJjY2UzNWI3MDE1LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81YzZhMmEtYzBiNi00OWE0LTk5M2UtYzJjY2UzNWI3MDE1 LzEvcVdfV1dZVWFOTHQzd3lFOHBMOTNKUkhnaHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHHDpB4U IF26t/FXjqI6ZkPlBi+znHEPkRehYDxQLtQi3fcaFodvWAzgjHbaF3B9vhz3jLLn uWUlkvQ1wG8/+EZfUVzL+fDpWlcTIusSZ4w7Ok3JiJwuc6Z7t12F2+jkX34DXc/R 13DQpFqFOOS1aJlBL9QxyxY1NciqDk9BtspdGccW0FyaagjsmOgPm33tqfdxRbcx hMxZL4UpO5dVRYHoapjMVM1dacY31R75lXe6Zi30gC/I+ERUDzjMQnuug2IcRWDP zgO8MD9u1pbzueBrdM+6JfhljlWWNLB+aTI0WCvwUS8NuvQVT9s3gphnR0z6fZDg m93fR9UM/ASEnA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:47:54 2025 by rpki-client