This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json) Hash identifier: YEKPU1+VWVnar0QldUd+0swyR+aUyWTXpd79wc5nek8= Subject key identifier: A6:B9:7E:56:46:78:17:9A:4D:5F:56:CF:67:6F:7C:D3:EF:3A:07:CB Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Certificate serial: 019B3AFE44809F2B194C63A4066CA6DC6AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft Manifest number: 06D6 Signing time: Sat 20 Dec 2025 09:01:40 +0000 Manifest this update: Sat 20 Dec 2025 09:01:40 +0000 Manifest next update: Sun 21 Dec 2025 09:01:40 +0000 Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: 1KRvdEQFpc+sVZO91huySZ1KmPGBLweK+OZ+mpiYSH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:44:80:9f:2b:19:4c:63:a4:06:6c:a6:dc:6a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Validity Not Before: Dec 20 09:01:40 2025 GMT Not After : Dec 21 09:01:40 2025 GMT Subject: CN=a6b97e564678179a4d5f56cf676f7cd3ef3a07cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:4d:4c:e4:14:51:71:82:7b:49:53:2f:a9: 26:a4:45:f7:2c:0f:41:4f:4d:f1:ec:c4:84:e4:bb: 59:49:a4:0d:e2:08:16:d8:ca:2f:ee:19:00:23:84: fe:d2:d7:51:d8:7a:36:87:7c:23:31:02:f3:77:9f: 04:ad:3e:96:bb:ac:0b:ae:da:df:c8:f8:7f:f9:19: c5:f0:81:98:4e:7b:96:b6:d7:1a:1e:50:ff:a0:7b: 94:04:08:03:d8:b2:dc:0f:31:5d:cd:24:f7:35:f6: a6:59:22:7c:09:93:a8:0b:d3:70:40:f7:96:29:93: c0:ae:7e:e2:97:0f:7c:71:17:c5:7a:2c:15:a7:e8: 15:26:dd:87:2b:ea:a6:70:93:15:a9:ff:28:41:18: e2:e5:2a:93:a9:a7:bf:f5:4a:78:62:a8:9e:7e:0f: 5f:fb:7d:5c:8d:29:1a:93:fc:57:ec:97:c0:8c:15: 05:37:f8:28:f3:e7:fc:e2:27:6c:c9:d9:a1:f9:e9: 2c:61:0b:89:37:af:ea:3c:24:94:fc:09:c9:45:92: f7:31:bf:e9:b1:4c:b7:75:7c:fa:79:9b:62:58:f6: 07:6a:4c:57:3f:b3:77:27:3d:dd:0c:43:ed:64:b3: 8e:bb:21:28:59:1e:22:44:9e:19:1a:48:f5:b0:a6: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:7E:56:46:78:17:9A:4D:5F:56:CF:67:6F:7C:D3:EF:3A:07:CB X509v3 Authority Key Identifier: keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:40:1a:40:14:58:58:4b:3c:68:18:17:e2:f2:3c:7a:aa:e4: 94:9c:5f:81:d8:56:da:53:b1:4f:f9:29:c5:cc:6c:b1:32:5f: 82:7d:47:e4:c1:e6:53:8a:67:c9:38:c2:3c:76:30:84:b3:17: ca:21:5e:70:46:bc:5a:e2:13:bc:db:c1:2f:ef:85:71:d3:cf: 17:53:8a:e9:fd:39:b2:bd:11:8a:a8:b9:e2:27:6d:45:4a:f9: 7a:6a:56:43:cf:57:25:7d:90:4f:b1:64:c7:c9:11:10:ea:6a: 2f:39:29:24:5a:30:e9:02:ed:ae:a4:88:41:8d:69:b0:bd:c7: e6:fb:c2:ce:cc:1d:b6:d3:25:b3:fc:42:b6:c7:d9:6e:fd:08: 05:fc:4b:ac:1c:83:32:d4:80:97:52:0f:f5:99:d2:33:f5:9e: 56:28:b7:11:52:f9:08:2d:9f:03:48:17:53:58:af:a4:f1:5f: 0e:86:da:e0:43:d6:48:b8:11:b6:61:66:8e:c7:49:1b:34:47: 70:10:df:02:50:e9:ed:17:6b:69:4d:ab:d9:ab:f0:37:a4:85: 7b:13:5e:50:2f:1c:5b:4b:dd:43:b3:ba:9c:68:6b:d9:d2:1f: 5f:6c:9d:41:c3:47:e0:54:e8:ca:f2:78:18:f9:8a:50:f1:09: 4f:80:b5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kSAnysZTGOkBmym3GrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk NjQxNGMwHhcNMjUxMjIwMDkwMTQwWhcNMjUxMjIxMDkwMTQwWjAzMTEwLwYDVQQD EyhhNmI5N2U1NjQ2NzgxNzlhNGQ1ZjU2Y2Y2NzZmN2NkM2VmM2EwN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1NTOQUUXGCe0lTL6kmpEX3LA9B T03x7MSE5LtZSaQN4ggW2Mov7hkAI4T+0tdR2Ho2h3wjMQLzd58ErT6Wu6wLrtrf yPh/+RnF8IGYTnuWttcaHlD/oHuUBAgD2LLcDzFdzST3NfamWSJ8CZOoC9NwQPeW KZPArn7ilw98cRfFeiwVp+gVJt2HK+qmcJMVqf8oQRji5SqTqae/9Up4Yqiefg9f +31cjSkak/xX7JfAjBUFN/go8+f84idsydmh+eksYQuJN6/qPCSU/AnJRZL3Mb/p sUy3dXz6eZtiWPYHakxXP7N3Jz3dDEPtZLOOuyEoWR4iRJ4ZGkj1sKaulQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa5flZGeBeaTV9Wz2dvfNPvOgfLMB8GA1UdIwQY MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEAaQBRY WEs8aBgX4vI8eqrklJxfgdhW2lOxT/kpxcxssTJfgn1H5MHmU4pnyTjCPHYwhLMX yiFecEa8WuITvNvBL++FcdPPF1OK6f05sr0Riqi54idtRUr5empWQ89XJX2QT7Fk x8kREOpqLzkpJFow6QLtrqSIQY1psL3H5vvCzswdttMls/xCtsfZbv0IBfxLrByD MtSAl1IP9ZnSM/WeVii3EVL5CC2fA0gXU1ivpPFfDoba4EPWSLgRtmFmjsdJGzRH cBDfAlDp7RdraU2r2avwN6SFexNeUC8cW0vdQ7O6nGhr2dIfX2ydQcNH4FToyvJ4 GPmKUPEJT4C1jw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:53:48 2025 by rpki-client