This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json) Hash identifier: hgNN1dycQOtUTEBgU0PURIcqH8z8Tpne1Rw2sNaO63c= Subject key identifier: 4C:DF:84:51:9D:62:E8:87:67:56:C5:F9:F6:5B:75:30:29:ED:2D:AC Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9 Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9 Certificate serial: 019B32D71E33DAB684FDA93F6E35C36198E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:01:57 +0000 Manifest this update: Thu 18 Dec 2025 19:01:57 +0000 Manifest next update: Fri 19 Dec 2025 19:01:57 +0000 Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: T16L3zZpCaDRLyNq1OqGbBRUlBp54a9J3lC4mLHvEcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1e:33:da:b6:84:fd:a9:3f:6e:35:c3:61:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9 Validity Not Before: Dec 18 19:01:57 2025 GMT Not After : Dec 19 19:01:57 2025 GMT Subject: CN=4cdf84519d62e8876756c5f9f65b753029ed2dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:2d:56:f6:be:0c:d5:b3:c8:de:f1:97:11: 21:a9:79:d7:92:57:ca:26:14:43:d2:7c:66:e7:6c: 65:1b:13:99:28:64:cf:7b:d1:da:5e:a1:44:43:3f: 35:51:75:04:5f:92:37:a7:4c:95:f0:7b:a7:34:4c: 37:a8:c6:bb:52:03:dc:4b:4e:c0:8f:37:eb:1e:db: 85:8c:5d:a7:53:44:41:aa:82:5f:b9:9a:04:09:cd: b4:c9:38:fe:b4:b9:4d:c4:46:cf:56:fd:ac:8e:ba: a4:72:33:b7:95:87:b3:68:86:08:5b:ba:52:22:3a: 9b:43:68:41:e3:6c:41:8b:4c:4f:12:7e:ca:d3:f4: cd:fe:46:cb:af:e9:f4:7b:95:84:75:2c:86:03:06: 6b:34:74:25:5c:66:13:74:65:4a:94:e9:ac:e9:4c: b9:84:74:a3:a7:ec:16:66:b8:a5:e8:5c:e3:8f:bd: a3:d3:fb:b4:be:cd:5b:ba:a0:c8:1c:78:8a:c0:66: 8b:1c:ce:93:e6:04:bf:50:cf:70:ab:0c:9f:1d:55: df:06:71:de:e3:c9:aa:65:a0:1f:d7:0a:6f:74:9c: a2:0a:0d:fd:dc:df:31:b1:6b:cf:6d:7b:20:ac:75: e8:d6:97:81:e1:f7:0a:e5:2c:f9:9f:a2:bb:9f:3c: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:84:51:9D:62:E8:87:67:56:C5:F9:F6:5B:75:30:29:ED:2D:AC X509v3 Authority Key Identifier: keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:54:f9:17:5e:a5:83:76:d5:21:09:9d:96:f0:84:a6:33:3d: 21:f4:5a:94:14:c2:fc:5b:ad:90:94:23:db:75:54:2e:bd:c5: 5c:88:99:eb:a4:40:f2:83:22:c3:be:46:ae:23:13:40:1b:35: dd:93:62:71:d0:28:99:16:da:fc:60:35:52:8f:d3:89:d9:e4: 0a:15:96:9e:34:aa:32:14:20:a1:8d:0c:6f:b1:b3:a8:58:fe: 6c:ea:6e:f6:db:7c:54:23:d3:d1:88:d9:e1:f1:61:5d:b5:30: 81:e8:9f:2f:ba:55:a1:3c:df:e0:91:5f:d4:29:7c:25:8c:a6: 6a:ba:9e:05:47:ee:31:cc:d6:26:41:1e:e8:b7:fe:26:72:50: 7d:4c:02:6f:76:6c:c1:8c:ff:45:a4:5b:62:92:c2:2f:15:a7: cc:c6:53:ff:75:75:32:ad:d7:75:01:19:36:99:ca:99:d0:1c: 40:cd:f3:08:2c:b2:df:b3:0a:7e:4d:6f:05:88:43:f7:48:70: 1b:30:c9:11:79:fa:82:96:91:9f:4c:86:9b:22:fa:a6:21:a7: 13:51:24:49:d6:cd:ea:8e:1e:76:4b:8f:aa:72:26:7e:6b:49: 0c:60:23:bd:e0:a6:ff:36:34:bc:5f:5e:67:47:64:64:8f:b1: 45:75:9b:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1x4z2raE/ak/bjXDYZjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NmVlNDUwZGViM2E3MDhhZWU4NWI3ODIzOGZhMzcwZjkw NDU3ZjkwHhcNMjUxMjE4MTkwMTU3WhcNMjUxMjE5MTkwMTU3WjAzMTEwLwYDVQQD Eyg0Y2RmODQ1MTlkNjJlODg3Njc1NmM1ZjlmNjViNzUzMDI5ZWQyZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYtVva+DNWzyN7xlxEhqXnXklfK JhRD0nxm52xlGxOZKGTPe9HaXqFEQz81UXUEX5I3p0yV8HunNEw3qMa7UgPcS07A jzfrHtuFjF2nU0RBqoJfuZoECc20yTj+tLlNxEbPVv2sjrqkcjO3lYezaIYIW7pS IjqbQ2hB42xBi0xPEn7K0/TN/kbLr+n0e5WEdSyGAwZrNHQlXGYTdGVKlOms6Uy5 hHSjp+wWZril6Fzjj72j0/u0vs1buqDIHHiKwGaLHM6T5gS/UM9wqwyfHVXfBnHe 48mqZaAf1wpvdJyiCg393N8xsWvPbXsgrHXo1peB4fcK5Sz5n6K7nzwfwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzfhFGdYuiHZ1bF+fZbdTAp7S2sMB8GA1UdIwQY MBaAFKhu5FDes6cIruhbeCOPo3D5BFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgt YWFjNmIwZTgyNWI5LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgtYWFjNmIwZTgyNWI5 LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglT5F16l g3bVIQmdlvCEpjM9IfRalBTC/FutkJQj23VULr3FXIiZ66RA8oMiw75GriMTQBs1 3ZNicdAomRba/GA1Uo/TidnkChWWnjSqMhQgoY0Mb7GzqFj+bOpu9tt8VCPT0YjZ 4fFhXbUwgeifL7pVoTzf4JFf1Cl8JYymarqeBUfuMczWJkEe6Lf+JnJQfUwCb3Zs wYz/RaRbYpLCLxWnzMZT/3V1Mq3XdQEZNpnKmdAcQM3zCCyy37MKfk1vBYhD90hw GzDJEXn6gpaRn0yGmyL6piGnE1EkSdbN6o4edkuPqnImfmtJDGAjveCm/zY0vF9e Z0dkZI+xRXWbrg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:02 2025 by rpki-client