This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json) Hash identifier: DlWQwYQW51XFy9zE6r5rGaHL2Hdq39yUSPQTvpnLxZg= Subject key identifier: C3:37:AB:FD:0F:D2:8D:5D:B7:B1:A6:97:D0:3F:F6:08:04:5F:41:73 Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Certificate serial: 019B424A770C5EBF7C1EF07AFED951A9DFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft Manifest number: 16C4 Signing time: Sun 21 Dec 2025 19:02:14 +0000 Manifest this update: Sun 21 Dec 2025 19:02:14 +0000 Manifest next update: Mon 22 Dec 2025 19:02:14 +0000 Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: Mji08m3teUk+jBJ0Y/wh8iZaQoAU5b1AZVyGYU1TIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:77:0c:5e:bf:7c:1e:f0:7a:fe:d9:51:a9:df:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Validity Not Before: Dec 21 19:02:14 2025 GMT Not After : Dec 22 19:02:14 2025 GMT Subject: CN=c337abfd0fd28d5db7b1a697d03ff608045f4173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:f3:37:75:ba:74:ac:f9:a2:d0:db:b9:c5: 09:04:f5:77:1f:5f:e7:92:3e:7f:81:34:2c:40:68: 2c:96:bc:a1:08:4f:b5:0e:1d:b9:d8:0f:3d:5a:fa: 9b:1b:b8:c3:81:84:bb:64:c2:b8:42:fc:c8:cc:14: 7f:20:7b:fa:7b:db:65:36:9f:99:c2:b0:33:42:b5: 77:1b:06:85:22:d1:4f:57:e9:56:1d:0e:92:c0:f6: 99:7c:29:c0:d0:ca:86:a5:c7:cd:53:c1:1e:28:18: 0d:c8:ca:f3:eb:de:f2:ae:08:3e:75:f1:33:38:e4: a2:3d:3c:0f:3a:d7:93:76:c0:15:ca:05:50:50:36: b9:28:67:17:1d:06:13:8e:27:3c:e5:fc:39:61:b6: ef:f4:02:08:b3:1d:2a:a2:0d:0f:8d:f8:c3:cf:7d: 96:ec:cb:31:b3:18:1a:c8:98:3f:15:23:20:2f:91: ba:77:b8:d1:d8:38:c2:dd:03:7e:8b:82:82:2c:30: 1c:f3:93:f1:81:17:90:86:7b:fc:12:b4:2e:e1:81: 86:87:04:4d:d4:a8:25:e6:fb:f0:f7:2a:bc:f2:04: 99:f7:61:4f:1e:d5:81:ee:29:ff:6b:9f:59:fc:af: 6e:6e:54:69:30:08:96:4a:34:d8:52:c7:df:78:18: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:37:AB:FD:0F:D2:8D:5D:B7:B1:A6:97:D0:3F:F6:08:04:5F:41:73 X509v3 Authority Key Identifier: keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ec:03:65:9f:9d:d6:ec:f9:4e:e0:9f:cd:51:6d:e7:69:22: 0c:fd:3d:ca:4b:01:0d:19:2b:c2:fb:83:c4:dd:95:04:24:f1: 63:60:60:0b:3c:01:4d:0c:fc:b7:5e:3b:5b:79:63:a4:04:7a: ab:3a:f7:4f:93:b5:42:fc:d7:2f:b0:64:fe:63:d2:cd:9b:f7: d8:fc:ba:d1:6b:40:1c:09:fe:55:20:2c:b7:c6:34:7e:57:36: a6:ce:cc:51:0d:08:5f:97:a2:a1:ad:77:ae:03:c9:d6:26:40: be:95:db:21:06:d9:01:06:c3:fb:f0:ec:cb:71:7a:bf:e4:3d: 0b:bc:c9:4b:14:2a:c1:fe:80:cd:4d:bd:9a:ce:e1:84:bf:b2: f6:72:e7:fa:5b:d2:78:c2:1e:68:31:5a:d9:bf:95:3a:ec:c1: 2a:1c:21:49:5f:f2:0d:7d:5f:8c:3f:35:d1:95:24:b6:eb:ec: f2:4b:eb:f2:4b:4f:15:aa:d2:52:8c:07:cc:63:f3:65:11:3d: 43:35:65:5a:db:cf:92:67:2e:91:74:18:29:93:ff:73:7c:b6: 1b:b9:ff:22:89:8c:a7:43:ec:37:be:7d:55:3a:1b:db:43:cc: 7c:ab:2f:1b:a5:df:a0:bd:87:61:c2:20:7f:0d:85:06:81:01: 1e:a6:f2:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSncMXr98HvB6/tlRqd+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi Y2QyMTIwHhcNMjUxMjIxMTkwMjE0WhcNMjUxMjIyMTkwMjE0WjAzMTEwLwYDVQQD EyhjMzM3YWJmZDBmZDI4ZDVkYjdiMWE2OTdkMDNmZjYwODA0NWY0MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy/zN3W6dKz5otDbucUJBPV3H1/n kj5/gTQsQGgslryhCE+1Dh252A89WvqbG7jDgYS7ZMK4QvzIzBR/IHv6e9tlNp+Z wrAzQrV3GwaFItFPV+lWHQ6SwPaZfCnA0MqGpcfNU8EeKBgNyMrz697yrgg+dfEz OOSiPTwPOteTdsAVygVQUDa5KGcXHQYTjic85fw5Ybbv9AIIsx0qog0PjfjDz32W 7MsxsxgayJg/FSMgL5G6d7jR2DjC3QN+i4KCLDAc85PxgReQhnv8ErQu4YGGhwRN 1Kgl5vvw9yq88gSZ92FPHtWB7in/a59Z/K9ublRpMAiWSjTYUsffeBhqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM3q/0P0o1dt7Gml9A/9ggEX0FzMB8GA1UdIwQY MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOwDZZ+d 1uz5TuCfzVFt52kiDP09yksBDRkrwvuDxN2VBCTxY2BgCzwBTQz8t147W3ljpAR6 qzr3T5O1QvzXL7Bk/mPSzZv32Py60WtAHAn+VSAst8Y0flc2ps7MUQ0IX5eioa13 rgPJ1iZAvpXbIQbZAQbD+/Dsy3F6v+Q9C7zJSxQqwf6AzU29ms7hhL+y9nLn+lvS eMIeaDFa2b+VOuzBKhwhSV/yDX1fjD810ZUktuvs8kvr8ktPFarSUowHzGPzZRE9 QzVlWtvPkmcukXQYKZP/c3y2G7n/IomMp0PsN759VTob20PMfKsvG6XfoL2HYcIg fw2FBoEBHqbylQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:38:05 2025 by rpki-client