This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json) Hash identifier: x3OjLCnii+7Nt4x3Z3BvSbjbk3mpvzEKzM4yXmYz/Fw= Subject key identifier: 7E:7B:2C:76:6E:6F:B4:AF:43:F5:3A:73:33:34:D6:0F:B4:8D:63:73 Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e Certificate serial: 019B4A03D0D7012CE3983332CAA92953457D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft Manifest number: 178C Signing time: Tue 23 Dec 2025 07:02:02 +0000 Manifest this update: Tue 23 Dec 2025 07:02:02 +0000 Manifest next update: Wed 24 Dec 2025 07:02:02 +0000 Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: KV6GluzAZeRB5aJdIfOImYpopI3SMOsJTR4aVD7WJiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:d0:d7:01:2c:e3:98:33:32:ca:a9:29:53:45:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e Validity Not Before: Dec 23 07:02:02 2025 GMT Not After : Dec 24 07:02:02 2025 GMT Subject: CN=7e7b2c766e6fb4af43f53a733334d60fb48d6373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:5d:b8:f8:2d:31:11:07:7e:e3:f6:a0:4e: 6f:84:f8:b5:57:1a:58:5d:69:d4:72:7a:1a:03:76: e3:44:e1:5d:2a:00:db:27:ad:5d:ec:3c:0f:85:8f: b9:65:96:29:a0:2d:98:79:c0:2a:2d:c6:fb:84:a5: 9b:ca:ea:1c:1b:25:67:04:4e:27:b5:3d:d6:52:59: d6:d3:a6:6e:57:6e:5b:9b:6c:2d:57:79:a2:82:e1: 50:7e:ea:35:d9:b2:b9:9f:16:31:76:af:1a:ed:28: 36:98:13:b1:56:81:8e:a3:19:de:72:17:5d:8b:32: 77:3a:0e:1b:a6:e5:38:3b:ad:f8:60:93:bc:60:e1: 9a:7c:bf:1f:2b:8b:8c:dc:1c:ee:f8:bc:a8:a8:83: c7:60:7a:cc:8d:4c:de:17:87:ca:e9:cd:94:42:b9: 7a:90:dc:6e:b6:bc:f6:aa:2e:71:1d:d4:73:4a:15: b6:13:9a:77:74:56:7c:1d:7e:00:b1:03:b5:dc:9e: 66:91:a4:96:e9:05:29:e2:09:8b:29:26:84:64:5c: c6:99:1a:76:9d:31:32:16:d2:92:78:8b:d9:02:f7: 59:6c:92:b1:29:a0:07:30:5f:eb:af:2a:9c:12:55: eb:55:2d:1a:66:2e:40:96:92:be:c2:2d:5c:7e:25: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7B:2C:76:6E:6F:B4:AF:43:F5:3A:73:33:34:D6:0F:B4:8D:63:73 X509v3 Authority Key Identifier: keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:46:87:cf:1c:51:e8:e7:e2:54:1d:ed:db:ec:b8:0f:68:43: 42:ef:4a:49:88:64:93:2a:75:9d:76:4c:ee:d6:b5:00:82:68: 20:64:b0:b1:3a:30:65:cd:ed:ef:d8:53:f3:6e:5a:f5:50:04: b7:f3:4a:69:17:e8:71:74:35:51:cd:4a:b7:db:17:4f:8d:07: 5f:bf:ea:24:48:4d:da:bc:02:bb:bb:da:e9:3f:68:e6:79:cd: 11:30:d2:be:f1:2a:01:79:85:0c:fd:83:6c:e5:47:9a:a9:f3: 57:ea:6e:a7:5e:ac:07:c8:26:a8:a4:87:4e:49:ab:a3:c3:36: 31:dc:2a:8a:88:65:29:b5:80:7f:66:84:da:5d:0f:c5:35:27: 8c:fa:8b:22:4c:a9:c3:d9:5f:a7:b5:b4:6b:11:7f:a0:22:6a: c5:ef:d5:26:24:80:d0:e6:da:c3:51:95:63:6b:3b:67:36:f8: dc:37:d8:17:f6:70:cb:c9:b4:8e:c0:91:1e:fb:25:c7:4a:f8: f3:5a:a6:32:72:d2:c0:80:45:70:9a:66:3d:54:11:e5:8b:b4: 09:32:63:73:55:61:22:ea:8b:a3:ad:fe:9e:75:bc:9b:a0:95: d0:84:7c:20:c8:1a:83:0d:80:91:26:78:5f:ef:ad:56:02:66: 55:c4:c3:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA9DXASzjmDMyyqkpU0V9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWQ3ZjdkODM4NDg1YTE5ZTAwMjc5OTY4YTliOTg2ODNh NGM1NmUwHhcNMjUxMjIzMDcwMjAyWhcNMjUxMjI0MDcwMjAyWjAzMTEwLwYDVQQD Eyg3ZTdiMmM3NjZlNmZiNGFmNDNmNTNhNzMzMzM0ZDYwZmI0OGQ2MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYdduPgtMREHfuP2oE5vhPi1VxpY XWnUcnoaA3bjROFdKgDbJ61d7DwPhY+5ZZYpoC2YecAqLcb7hKWbyuocGyVnBE4n tT3WUlnW06ZuV25bm2wtV3miguFQfuo12bK5nxYxdq8a7Sg2mBOxVoGOoxnechdd izJ3Og4bpuU4O634YJO8YOGafL8fK4uM3Bzu+LyoqIPHYHrMjUzeF4fK6c2UQrl6 kNxutrz2qi5xHdRzShW2E5p3dFZ8HX4AsQO13J5mkaSW6QUp4gmLKSaEZFzGmRp2 nTEyFtKSeIvZAvdZbJKxKaAHMF/rryqcElXrVS0aZi5AlpK+wi1cfiVeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH57LHZub7SvQ/U6czM01g+0jWNzMB8GA1UdIwQY MBaAFDKtf32DhIWhngAnmWipuYaDpMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmIt OTRjNGU0ZWJjZDQxLzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2I3NTAtNjkxNi00YzNmLWJkZmItOTRjNGU0ZWJjZDQx LzEvTXExX2ZZT0VoYUdlQUNlWmFLbTVob09reFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkaHzxxR 6OfiVB3t2+y4D2hDQu9KSYhkkyp1nXZM7ta1AIJoIGSwsTowZc3t79hT825a9VAE t/NKaRfocXQ1Uc1Kt9sXT40HX7/qJEhN2rwCu7va6T9o5nnNETDSvvEqAXmFDP2D bOVHmqnzV+pup16sB8gmqKSHTkmro8M2MdwqiohlKbWAf2aE2l0PxTUnjPqLIkyp w9lfp7W0axF/oCJqxe/VJiSA0Obaw1GVY2s7Zzb43DfYF/Zwy8m0jsCRHvslx0r4 81qmMnLSwIBFcJpmPVQR5Yu0CTJjc1VhIuqLo63+nnW8m6CV0IR8IMgagw2AkSZ4 X++tVgJmVcTDCg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:55:11 2025 by rpki-client