This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json) Hash identifier: Hqlm2s6+D3IvYmclzGkLPKxkydhxoDdNHGC9ivnwYok= Subject key identifier: 7A:27:37:71:A4:99:48:00:12:A6:8D:05:60:56:37:98:6D:36:7E:CC Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d Certificate serial: 019B4B15A1FB1F87C458CB79CA7390F6F4B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft Manifest number: 09F4 Signing time: Tue 23 Dec 2025 12:01:07 +0000 Manifest this update: Tue 23 Dec 2025 12:01:07 +0000 Manifest next update: Wed 24 Dec 2025 12:01:07 +0000 Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: 4Vbjr3s83OomN1hdKt6KnZ8TmYLrDLCvuWzjvt3ePdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:a1:fb:1f:87:c4:58:cb:79:ca:73:90:f6:f4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d Validity Not Before: Dec 23 12:01:07 2025 GMT Not After : Dec 24 12:01:07 2025 GMT Subject: CN=7a273771a499480012a68d05605637986d367ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:20:9d:03:16:23:42:87:61:5e:c8:5e:01: ea:fb:a7:f8:51:76:53:73:c7:74:42:1c:7a:41:36: ba:b6:61:0e:ef:25:d6:a6:7a:52:9c:af:78:8a:8e: 79:9c:f2:52:b0:4f:be:db:1d:4a:66:88:ee:f5:d5: 85:36:93:d8:a7:79:69:cf:c6:7e:6e:0a:b5:a3:1c: dd:04:85:56:dc:84:e9:c7:bd:b6:c6:7a:30:f7:fe: dc:1b:71:be:d9:8c:7e:fd:0f:15:79:c8:3e:e5:55: d3:03:d9:19:7a:bd:d1:ce:30:ed:bb:d9:af:73:bf: d2:95:9b:58:d1:6f:e5:27:38:38:45:63:bb:3c:3e: bf:db:d0:ca:73:39:5d:a3:0d:9f:b7:d7:ca:5e:f1: e5:03:63:56:e3:6b:d5:d0:29:74:d2:0e:b9:c7:b4: 04:ad:a3:6e:2e:b6:d8:0b:ea:4f:26:df:50:1c:4b: 1a:f8:e4:e4:ee:36:b2:1c:3c:70:e6:fe:28:fb:34: 7f:eb:2f:1a:c9:b0:5b:6c:f9:ea:da:e5:b8:2b:6f: 97:f6:cd:24:8b:ce:1e:65:f0:2e:0e:b5:b8:8f:9b: 28:a7:3e:34:4c:29:db:0c:92:24:3e:85:87:87:97: e8:24:1a:be:0b:8f:27:8c:73:61:ad:9f:7e:7c:97: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:37:71:A4:99:48:00:12:A6:8D:05:60:56:37:98:6D:36:7E:CC X509v3 Authority Key Identifier: keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:30:e0:3e:cf:e5:25:3a:a6:b7:31:4c:b2:19:33:2d:42:ab: 1b:0a:50:f8:e0:b6:25:93:d8:e6:0b:6b:f0:cd:7a:6b:1e:20: 59:e8:80:b8:72:89:d4:57:26:6e:a8:27:f2:8d:d0:35:1a:ac: 4e:2d:52:a0:8e:a3:58:ac:85:c5:b2:1c:a2:39:f1:80:ee:be: 44:0f:5a:69:f2:94:97:dc:4a:09:ed:f2:28:d3:ea:ed:a2:19: 60:e6:c2:10:dd:f6:f4:39:43:3a:80:da:30:c7:d1:5b:7f:5f: 35:78:99:95:c2:62:92:e6:43:6f:07:73:b8:87:ac:2f:6c:2b: ca:84:0d:42:15:4b:8f:f0:47:74:28:8a:e7:75:72:2c:bb:5a: 3f:2a:78:6a:d2:0a:92:1c:2c:4f:d6:f2:20:8c:85:51:f1:e9: 4b:36:47:80:3a:e1:d3:b6:fa:76:7e:a7:b7:84:e1:c9:ef:f1: 56:58:4f:f3:06:cb:a6:f1:c7:0e:f1:cf:82:ea:c3:ba:3a:5f: c0:14:8c:4a:de:10:cc:1e:2d:94:c4:bf:3a:13:79:1e:0e:17: d9:00:5d:75:36:dc:70:d2:1f:8c:c3:14:b0:17:43:4d:83:b9: 25:a9:2a:54:eb:c9:36:2e:b2:2d:ea:a0:fb:8d:1d:b6:ae:16: 9a:30:b9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFaH7H4fEWMt5ynOQ9vS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4 NTA5N2QwHhcNMjUxMjIzMTIwMTA3WhcNMjUxMjI0MTIwMTA3WjAzMTEwLwYDVQQD Eyg3YTI3Mzc3MWE0OTk0ODAwMTJhNjhkMDU2MDU2Mzc5ODZkMzY3ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA4gnQMWI0KHYV7IXgHq+6f4UXZT c8d0Qhx6QTa6tmEO7yXWpnpSnK94io55nPJSsE++2x1KZoju9dWFNpPYp3lpz8Z+ bgq1oxzdBIVW3ITpx722xnow9/7cG3G+2Yx+/Q8Vecg+5VXTA9kZer3RzjDtu9mv c7/SlZtY0W/lJzg4RWO7PD6/29DKczldow2ft9fKXvHlA2NW42vV0Cl00g65x7QE raNuLrbYC+pPJt9QHEsa+OTk7jayHDxw5v4o+zR/6y8aybBbbPnq2uW4K2+X9s0k i84eZfAuDrW4j5sopz40TCnbDJIkPoWHh5foJBq+C48njHNhrZ9+fJfJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHonN3GkmUgAEqaNBWBWN5htNn7MMB8GA1UdIwQY MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt ZTllMWQ5MWE5ODE2LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2 LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzDgPs/l JTqmtzFMshkzLUKrGwpQ+OC2JZPY5gtr8M16ax4gWeiAuHKJ1Fcmbqgn8o3QNRqs Ti1SoI6jWKyFxbIcojnxgO6+RA9aafKUl9xKCe3yKNPq7aIZYObCEN329DlDOoDa MMfRW39fNXiZlcJikuZDbwdzuIesL2wryoQNQhVLj/BHdCiK53VyLLtaPyp4atIK khwsT9byIIyFUfHpSzZHgDrh07b6dn6nt4Thye/xVlhP8wbLpvHHDvHPgurDujpf wBSMSt4QzB4tlMS/OhN5Hg4X2QBddTbccNIfjMMUsBdDTYO5JakqVOvJNi6yLeqg +40dtq4WmjC5Sg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:08 2025 by rpki-client