This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json) Hash identifier: rUDl+T1TfWedWnNQrl/MkQ8R1ID2WUIgtckbA+iwdJU= Subject key identifier: 8B:28:50:74:4E:A1:1C:65:05:96:68:A8:E9:77:74:A4:C6:9C:4B:A3 Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4 Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4 Certificate serial: 019B315586E0F8F34F99F696B1A7227B41AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 12:00:47 +0000 Manifest this update: Thu 18 Dec 2025 12:00:47 +0000 Manifest next update: Fri 19 Dec 2025 12:00:47 +0000 Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: px/VA5I5Xvcm8ZdrKmlmzl0PeTDD/OMLwAnSOf5p9ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:86:e0:f8:f3:4f:99:f6:96:b1:a7:22:7b:41:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4 Validity Not Before: Dec 18 12:00:47 2025 GMT Not After : Dec 19 12:00:47 2025 GMT Subject: CN=8b2850744ea11c65059668a8e97774a4c69c4ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:71:0c:9b:f8:fd:27:fa:be:4b:78:86:70: 67:11:f2:ab:d8:b2:20:2a:70:e9:e3:ff:f9:6e:90: c6:8b:69:f2:03:4f:17:41:cd:9a:87:2a:4b:3a:37: 6a:09:e9:cf:12:94:bf:b6:34:ad:c9:b0:19:ca:91: 7d:e6:80:a2:0d:8e:1f:3b:76:1a:dc:f1:4f:9a:73: 19:a9:3e:51:27:a4:fe:0a:89:8f:cb:d8:63:48:4b: 08:e5:fb:60:6d:9b:80:4e:cc:3c:31:64:71:2b:4a: 61:7d:02:1b:34:d8:59:ea:6b:df:d8:0b:22:ad:fb: 54:f3:53:ca:84:7b:23:e7:0e:cf:68:97:78:f9:38: a3:bd:57:e4:67:a0:b7:47:56:5d:97:3a:ec:b2:ed: 99:75:3f:a5:c4:22:ad:5d:4a:56:0f:78:08:8b:1f: 8f:47:33:98:95:7b:cc:07:45:19:4f:d3:2b:d5:bb: a1:bd:9b:4c:30:29:50:95:28:b3:d3:da:ff:78:d1: d7:5e:79:86:15:77:16:0b:1e:ee:a9:2f:24:3f:88: a0:7d:1d:f1:83:2f:3c:7e:77:91:3b:3c:fd:9a:a2: 61:86:60:73:5e:7a:b1:e7:41:a1:db:e9:f9:70:a9: 5e:9f:e6:09:a7:fd:d5:dd:75:05:d5:1a:7c:c3:28: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:28:50:74:4E:A1:1C:65:05:96:68:A8:E9:77:74:A4:C6:9C:4B:A3 X509v3 Authority Key Identifier: keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:be:d9:be:ca:ba:54:c5:fa:40:1d:b5:31:95:7f:41:55:f9: a3:19:34:b1:2b:59:c9:0c:4e:6c:57:96:b1:19:fe:ab:b3:81: c2:cb:89:50:74:70:b2:a5:52:cc:e9:eb:a7:a6:04:fb:9d:27: d7:91:0c:04:e8:a5:6d:90:cd:ef:6c:15:e0:d5:ba:f3:9f:03: fd:9e:35:1c:05:98:0b:78:70:bf:fb:a3:1b:a2:0f:3a:8d:77: c2:0f:a9:42:3f:5d:ff:85:27:b8:d9:c4:32:07:eb:b6:40:68: 51:eb:07:d7:2a:ea:dd:fb:85:c4:4a:dd:1c:7e:92:0a:08:a0: ed:cf:90:e2:03:a3:16:44:64:21:9a:e9:c7:0b:fa:4f:cb:6a: e0:3d:35:34:f6:30:25:f2:f7:01:61:8f:40:1c:11:ac:aa:ae: 09:d3:9e:a6:46:a4:2c:c8:57:59:f2:76:c0:3e:53:97:8a:5b: cb:28:2b:b6:0e:92:9b:d5:9d:a8:f7:f5:34:2f:17:84:22:d2: df:0a:62:59:9f:25:80:bd:ca:2d:ce:ce:6b:c1:4e:d5:55:58: 0c:32:77:66:9f:19:32:6e:54:a8:94:d4:46:a5:a1:ab:4b:3e: 5c:5d:c8:cd:20:62:74:9c:bf:06:06:01:52:49:db:9f:a7:5b: c2:2b:68:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVYbg+PNPmfaWsacie0GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjQxM2ZhNzgyYTMwNDI4MzBkYTIzYWEzZjM1OTRhN2Q1 ZWEyZjQwHhcNMjUxMjE4MTIwMDQ3WhcNMjUxMjE5MTIwMDQ3WjAzMTEwLwYDVQQD Eyg4YjI4NTA3NDRlYTExYzY1MDU5NjY4YThlOTc3NzRhNGM2OWM0YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugdxDJv4/Sf6vkt4hnBnEfKr2LIg KnDp4//5bpDGi2nyA08XQc2ahypLOjdqCenPEpS/tjStybAZypF95oCiDY4fO3Ya 3PFPmnMZqT5RJ6T+ComPy9hjSEsI5ftgbZuATsw8MWRxK0phfQIbNNhZ6mvf2Asi rftU81PKhHsj5w7PaJd4+TijvVfkZ6C3R1Zdlzrssu2ZdT+lxCKtXUpWD3gIix+P RzOYlXvMB0UZT9Mr1buhvZtMMClQlSiz09r/eNHXXnmGFXcWCx7uqS8kP4igfR3x gy88fneROzz9mqJhhmBzXnqx50Gh2+n5cKlen+YJp/3V3XUF1Rp8wyjk3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsoUHROoRxlBZZoqOl3dKTGnEujMB8GA1UdIwQY MBaAFHC0E/p4KjBCgw2iOqPzWUp9XqL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84Y2YxZjUtMjA5NS00OGZhLThjM2Et YTMxMzdiYzgzZDBhLzEvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84Y2YxZjUtMjA5NS00OGZhLThjM2EtYTMxMzdiYzgzZDBh LzEvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr7Zvsq6 VMX6QB21MZV/QVX5oxk0sStZyQxObFeWsRn+q7OBwsuJUHRwsqVSzOnrp6YE+50n 15EMBOilbZDN72wV4NW6858D/Z41HAWYC3hwv/ujG6IPOo13wg+pQj9d/4UnuNnE MgfrtkBoUesH1yrq3fuFxErdHH6SCgig7c+Q4gOjFkRkIZrpxwv6T8tq4D01NPYw JfL3AWGPQBwRrKquCdOepkakLMhXWfJ2wD5Tl4pbyygrtg6Sm9WdqPf1NC8XhCLS 3wpiWZ8lgL3KLc7Oa8FO1VVYDDJ3Zp8ZMm5UqJTURqWhq0s+XF3IzSBidJy/BgYB Uknbn6dbwitoDw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:39:33 2025 by rpki-client