This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft File: qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json) Hash identifier: 5vwMnhS/uVFRxvuQsCwZZUy7ihQTwypthTf2ORnvlh4= Subject key identifier: 85:66:B6:F4:10:84:9A:96:93:98:1C:E3:C2:7E:D9:4E:F5:99:B5:84 Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Certificate serial: 019B5305DB79F49DE70CF8953D29C902CA34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft Manifest number: 0FEF Signing time: Thu 25 Dec 2025 01:00:51 +0000 Manifest this update: Thu 25 Dec 2025 01:00:51 +0000 Manifest next update: Fri 26 Dec 2025 01:00:51 +0000 Files and hashes: 1: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: Cx4fZBOV9rH+DOFx0/5juZlbl+Srzy+tuweOvlMICR8=) 2: z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa (hash: JZepL6D/k4nJl6/C5sz18t6zxYuNfxZeSTEwoJkeNs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:db:79:f4:9d:e7:0c:f8:95:3d:29:c9:02:ca:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Validity Not Before: Dec 25 01:00:51 2025 GMT Not After : Dec 26 01:00:51 2025 GMT Subject: CN=8566b6f410849a9693981ce3c27ed94ef599b584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:fd:1f:b4:bf:e1:b8:3c:4c:9d:8c:8c:70: 10:3f:95:05:c1:98:69:cd:3d:48:1e:63:91:16:71: 2c:35:2c:94:71:6f:03:83:7c:2d:95:8a:3a:7b:1a: 07:9f:87:ea:1b:04:d8:08:98:9e:36:74:63:43:70: fd:18:09:0a:85:a3:fd:73:16:a7:f0:d6:7b:59:c5: e2:de:7b:1c:fe:0c:88:fb:ef:cd:e1:0a:ce:58:79: 4c:7e:e8:96:f8:3f:95:d4:96:ea:82:f3:3c:91:04: 52:76:e9:cd:53:fe:65:69:1a:a5:70:29:bf:6a:7c: f4:d7:94:2b:34:52:f7:26:ff:99:28:e8:21:dd:d9: 91:3d:9f:06:f5:b4:6a:da:76:a4:63:22:75:c4:a1: 84:ef:64:f6:5a:4a:cc:c1:66:96:d9:52:c7:2a:dc: b0:cd:cf:35:af:d9:12:3d:10:86:16:2c:53:f2:69: e4:56:e9:37:e2:83:60:4a:a3:76:95:41:4a:96:1a: 4e:28:f9:1f:5e:77:9e:50:12:08:d5:7d:13:b1:ec: 07:60:f1:18:b1:4c:61:62:f7:04:43:4a:61:5d:e8: d2:32:14:27:33:89:97:8b:e2:a4:0b:55:e4:a8:21: ee:85:b2:38:f5:65:af:0c:1b:95:08:23:1d:2b:17: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:B6:F4:10:84:9A:96:93:98:1C:E3:C2:7E:D9:4E:F5:99:B5:84 X509v3 Authority Key Identifier: keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8a:20:ca:01:24:cd:18:25:7c:48:ba:ad:ce:ee:1a:b0:51: c8:7d:d7:15:2c:8f:10:a3:11:46:42:7e:d4:95:d4:4b:ed:db: f1:78:a0:9a:b3:65:73:65:9b:e8:c7:b8:ca:cc:7f:5d:43:cc: 5d:a9:2d:f2:29:a8:48:06:ad:fa:3f:af:32:08:e3:9d:bb:04: 4f:68:7b:0f:b2:c1:aa:cb:9f:7b:5c:fc:9e:de:e5:3c:c7:78: fa:cc:60:bf:6a:d8:7b:0d:79:d9:98:9c:f8:55:70:48:a8:59: 5f:39:e7:ea:f6:b5:5a:93:08:36:24:49:99:ea:07:69:b6:c9: d6:e8:49:ef:50:ad:bf:5b:b8:d1:45:8a:82:17:65:15:d7:ed: 6a:b9:be:3d:a1:27:6d:e0:4b:f1:55:0e:16:f5:2b:1d:f1:55: 75:1f:6f:a9:86:f9:6f:61:5a:12:cb:e1:3c:e9:53:e6:54:a6: 9f:a4:09:71:94:4d:a2:fb:c4:88:e7:5f:ad:da:29:f5:8e:53: e5:c5:ca:d5:8e:17:d7:2d:df:88:30:d1:e8:69:d2:c9:4a:92: 64:5a:c1:72:da:3c:a8:77:b7:05:f0:a8:2e:f4:fd:81:e0:97: 35:b3:a0:7b:48:28:70:b1:35:95:36:f8:89:dc:30:87:be:d6: b4:c9:27:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBdt59J3nDPiVPSnJAso0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGE4NDM4NDYxNTZmMDhlMmQ4ZDdiZmM5MWFiMzUwNTM0 YjliOGEwHhcNMjUxMjI1MDEwMDUxWhcNMjUxMjI2MDEwMDUxWjAzMTEwLwYDVQQD Eyg4NTY2YjZmNDEwODQ5YTk2OTM5ODFjZTNjMjdlZDk0ZWY1OTliNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSn9H7S/4bg8TJ2MjHAQP5UFwZhp zT1IHmORFnEsNSyUcW8Dg3wtlYo6exoHn4fqGwTYCJieNnRjQ3D9GAkKhaP9cxan 8NZ7WcXi3nsc/gyI++/N4QrOWHlMfuiW+D+V1JbqgvM8kQRSdunNU/5laRqlcCm/ anz015QrNFL3Jv+ZKOgh3dmRPZ8G9bRq2nakYyJ1xKGE72T2WkrMwWaW2VLHKtyw zc81r9kSPRCGFixT8mnkVuk34oNgSqN2lUFKlhpOKPkfXneeUBII1X0TsewHYPEY sUxhYvcEQ0phXejSMhQnM4mXi+KkC1XkqCHuhbI49WWvDBuVCCMdKxcWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVmtvQQhJqWk5gc48J+2U71mbWEMB8GA1UdIwQY MBaAFKsKhDhGFW8I4tjXv8kas1BTS5uKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmIt MWQwOGMyNjdlZDllLzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmItMWQwOGMyNjdlZDll LzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIogygEk zRglfEi6rc7uGrBRyH3XFSyPEKMRRkJ+1JXUS+3b8XigmrNlc2Wb6Me4ysx/XUPM Xakt8imoSAat+j+vMgjjnbsET2h7D7LBqsufe1z8nt7lPMd4+sxgv2rYew152Zic +FVwSKhZXznn6va1WpMINiRJmeoHabbJ1uhJ71Ctv1u40UWKghdlFdftarm+PaEn beBL8VUOFvUrHfFVdR9vqYb5b2FaEsvhPOlT5lSmn6QJcZRNovvEiOdfrdop9Y5T 5cXK1Y4X1y3fiDDR6GnSyUqSZFrBcto8qHe3BfCoLvT9geCXNbOge0gocLE1lTb4 idwwh77WtMknhw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:20 2025 by rpki-client