This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json) Hash identifier: 7hYeWeyoYsZrqoWKx3k2asJTjG+iCejEORSopOYF3PY= Subject key identifier: F2:07:93:01:30:59:5E:81:BD:1D:18:CB:C2:D4:50:CB:7C:B8:C5:BA Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25 Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725 Certificate serial: 019B5DF7B52A5EAF06ADDE9D5A2CA465D166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft Manifest number: 1709 Signing time: Sat 27 Dec 2025 04:01:13 +0000 Manifest this update: Sat 27 Dec 2025 04:01:13 +0000 Manifest next update: Sun 28 Dec 2025 04:01:13 +0000 Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: gR9Q7bo8s4VwJnic8P+62JkHR6zevMCmaGE+iJ28VFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:b5:2a:5e:af:06:ad:de:9d:5a:2c:a4:65:d1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725 Validity Not Before: Dec 27 04:01:13 2025 GMT Not After : Dec 28 04:01:13 2025 GMT Subject: CN=f207930130595e81bd1d18cbc2d450cb7cb8c5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:88:45:8b:0f:90:94:6a:b0:31:e9:58:d4: 76:88:0b:3d:1c:1d:ef:38:0b:f3:1f:e0:90:4c:b4: 41:23:08:4f:12:7f:fe:4b:d2:b0:5f:3d:68:97:b7: 9e:15:eb:b1:3d:ce:92:6f:9b:33:d8:2b:b9:9a:7e: 0b:b9:5e:ca:ce:01:df:ec:8e:bd:7e:80:8f:42:5e: 95:a3:5f:c7:5c:f5:72:be:07:c7:18:0b:1f:7b:93: a7:4a:08:9b:a1:71:28:a7:09:85:05:db:34:e4:12: 8e:e8:f0:9c:ab:4a:fd:87:ea:f3:05:25:05:bf:eb: 5b:9e:46:89:e1:5e:a2:4b:10:d3:24:63:4f:f8:b0: 9d:01:7a:2a:b2:fd:bf:e6:ed:8d:f8:74:33:04:2c: 9b:aa:8c:c7:fb:04:70:a0:ca:ec:95:0b:89:8a:da: fd:23:7a:f8:39:65:34:01:65:f3:b2:50:0f:e4:00: 5f:29:30:6a:91:33:9c:bc:f1:e1:96:e3:0b:4f:0a: 39:6a:ad:ea:6b:73:85:ec:4b:8b:7d:bc:8f:38:b0: 34:5c:56:e3:7f:72:6e:7d:36:74:94:3f:3b:4e:db: c4:f7:8d:f5:b6:5c:1d:c9:57:f9:4b:dc:b4:a4:0f: c6:9e:4b:7e:94:04:ca:42:7b:59:f2:94:da:29:ab: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:07:93:01:30:59:5E:81:BD:1D:18:CB:C2:D4:50:CB:7C:B8:C5:BA X509v3 Authority Key Identifier: keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1b:9c:5e:6a:af:b4:7a:c3:5c:be:f5:5c:6c:45:42:79:85: 5d:77:0c:63:ef:7a:ef:fd:ab:7c:2b:9f:05:1d:13:dc:af:03: 60:7e:41:f1:f1:eb:01:32:af:c5:7c:0b:17:20:7d:f0:67:ec: d8:d7:2e:72:c6:ea:24:5a:0d:d7:74:3a:46:98:f1:80:48:24: ee:ca:e6:5d:02:a3:84:1b:d2:16:a1:10:12:58:15:47:5d:da: 55:c2:f0:55:b4:94:4a:e6:fa:9c:d7:b4:50:b9:16:24:8f:17: c7:7c:91:fe:42:1a:ab:39:a5:2f:39:8e:aa:c7:9a:d5:61:b0: 24:d4:cd:7e:f3:52:ff:9d:97:53:53:cb:13:db:5d:83:cf:62: cc:79:bc:7b:44:3e:07:8c:bb:cf:49:d4:25:7b:0c:78:6c:8c: 5b:e4:7c:f8:81:37:55:55:2f:6c:52:6e:e9:e7:86:1c:05:21: 9c:db:6a:3c:b4:22:9e:42:79:9c:8e:1b:ab:8c:bd:13:ea:d3: 5a:91:f0:e6:76:f5:0d:23:0f:05:97:67:d6:57:4a:c0:ef:03: f5:ec:7d:91:da:73:9b:5b:d3:08:10:c6:15:de:b6:14:68:a1: b4:84:f6:26:03:fa:cb:5a:fa:36:25:98:f2:54:61:a6:d2:41: 07:eb:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd97UqXq8Grd6dWiykZdFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiM2E5ZDFmYzk5ZjI1MmYyMjU4ZjY4MmFiM2ZjNTgzNWJk MmY3MjUwHhcNMjUxMjI3MDQwMTEzWhcNMjUxMjI4MDQwMTEzWjAzMTEwLwYDVQQD EyhmMjA3OTMwMTMwNTk1ZTgxYmQxZDE4Y2JjMmQ0NTBjYjdjYjhjNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr6IRYsPkJRqsDHpWNR2iAs9HB3v OAvzH+CQTLRBIwhPEn/+S9KwXz1ol7eeFeuxPc6Sb5sz2Cu5mn4LuV7KzgHf7I69 foCPQl6Vo1/HXPVyvgfHGAsfe5OnSgiboXEopwmFBds05BKO6PCcq0r9h+rzBSUF v+tbnkaJ4V6iSxDTJGNP+LCdAXoqsv2/5u2N+HQzBCybqozH+wRwoMrslQuJitr9 I3r4OWU0AWXzslAP5ABfKTBqkTOcvPHhluMLTwo5aq3qa3OF7EuLfbyPOLA0XFbj f3JufTZ0lD87TtvE9431tlwdyVf5S9y0pA/Gnkt+lATKQntZ8pTaKatW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIHkwEwWV6BvR0Yy8LUUMt8uMW6MB8GA1UdIwQY MBaAFKs6nR/JnyUvIlj2gqs/xYNb0vclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYt ZTMxNmFhMWYxNmIzLzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYtZTMxNmFhMWYxNmIz LzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRucXmqv tHrDXL71XGxFQnmFXXcMY+967/2rfCufBR0T3K8DYH5B8fHrATKvxXwLFyB98Gfs 2NcucsbqJFoN13Q6RpjxgEgk7srmXQKjhBvSFqEQElgVR13aVcLwVbSUSub6nNe0 ULkWJI8Xx3yR/kIaqzmlLzmOqsea1WGwJNTNfvNS/52XU1PLE9tdg89izHm8e0Q+ B4y7z0nUJXsMeGyMW+R8+IE3VVUvbFJu6eeGHAUhnNtqPLQinkJ5nI4bq4y9E+rT WpHw5nb1DSMPBZdn1ldKwO8D9ex9kdpzm1vTCBDGFd62FGihtIT2JgP6y1r6NiWY 8lRhptJBB+sWvg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:34 2025 by rpki-client