This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json) Hash identifier: +2vbbt1YsfV7BBSD24rF5m25kQQhb114uj7JPdqpuHM= Subject key identifier: E5:25:8A:EC:C3:71:D4:36:11:63:94:E8:9B:70:45:CB:45:78:EA:BB Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7 Certificate serial: 019B68E8DBFBF734F427C9B5416C9AB245FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft Manifest number: 179C Signing time: Mon 29 Dec 2025 07:00:49 +0000 Manifest this update: Mon 29 Dec 2025 07:00:49 +0000 Manifest next update: Tue 30 Dec 2025 07:00:49 +0000 Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: IlAxhb9Tb6FPauAp8DOv6D0QBKQ/PMzqtU/C5IGLdG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:db:fb:f7:34:f4:27:c9:b5:41:6c:9a:b2:45:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a3517606989eb352f699976f219faec8e350e7 Validity Not Before: Dec 29 07:00:49 2025 GMT Not After : Dec 30 07:00:49 2025 GMT Subject: CN=e5258aecc371d436116394e89b7045cb4578eabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:8e:ad:11:18:dc:7d:f0:5e:4a:42:75:fa: 7e:f6:06:98:33:a7:d3:75:34:07:12:03:d9:f5:e1: dd:2c:8c:9c:74:63:24:bd:84:fc:d6:53:d8:b1:9d: 11:f1:e5:7e:a3:f0:48:07:8d:35:20:d6:bc:e1:f9: 3a:e2:0e:dc:99:62:2f:c6:e9:23:f7:73:45:78:23: f9:b5:e4:5a:41:f7:d8:33:6f:89:76:62:38:b7:50: 63:2e:52:0d:3a:01:e6:e9:d6:3a:87:63:88:6e:2c: 25:fe:b5:63:57:e7:0a:e3:57:7a:8b:3e:a7:f3:b1: 2b:f0:3b:28:d1:24:df:c6:ec:ef:e6:c0:4b:d3:27: 11:37:b6:44:54:32:3b:9b:41:4b:17:b6:11:af:55: c1:ab:52:8e:65:0a:27:db:41:99:29:e5:8c:4b:b7: 25:e8:0d:aa:0d:59:65:24:0e:3d:6e:12:0f:6e:78: ee:17:4e:ee:2d:e5:5c:52:8a:21:fc:e6:59:a4:0b: c4:bf:98:4d:6a:76:6d:9d:27:7e:e1:92:7b:ef:de: 54:a3:69:4a:7e:f6:c5:df:5c:61:62:54:2e:11:8a: a3:34:bd:4c:96:b5:77:fd:34:de:b7:17:d8:35:0a: 03:27:bd:30:a9:44:15:66:e7:88:82:63:1c:44:a7: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:8A:EC:C3:71:D4:36:11:63:94:E8:9B:70:45:CB:45:78:EA:BB X509v3 Authority Key Identifier: keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:64:84:11:64:a7:30:53:7e:22:0b:34:5e:c0:21:62:30:2c: d3:01:93:95:9d:53:3d:93:82:00:5b:15:ff:95:08:52:70:2c: 78:81:da:e4:00:c8:0a:48:7e:30:2e:7e:4d:8b:64:ee:e9:92: 3a:38:95:d5:e1:60:ad:1d:bb:ed:92:0f:b4:88:40:1d:46:cc: b5:54:d8:d6:07:8b:c4:0b:9e:5c:d6:a7:44:c7:13:fc:a6:48: 07:b4:10:68:bc:3d:9a:b5:84:c5:ae:62:46:4b:2f:54:68:4d: 04:e7:ee:0d:a2:0d:d8:63:38:1a:68:7c:00:c4:c9:33:08:2d: bc:b6:73:e3:89:66:c3:38:89:a7:89:17:7a:3c:df:0f:7b:12: 00:b7:57:73:c9:9f:ef:f5:38:09:1d:f1:42:db:55:68:ad:b7: 01:fa:5c:8a:a8:68:ff:c3:65:8b:0e:55:15:b4:04:0c:3e:08: 6e:01:4a:7e:84:98:03:98:1b:b2:e9:3b:e2:7c:7b:39:78:3e: 3b:0f:c6:f2:2e:fa:96:34:0c:d9:f0:08:7d:4f:db:23:1f:1f: 52:5b:50:f6:d1:89:7d:8b:19:d0:0e:6f:2d:15:46:55:de:13: 87:70:9e:72:dd:ea:01:76:ed:1f:26:e1:33:48:6f:c6:c1:1e: 7a:f3:d2:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6Nv79zT0J8m1QWyaskX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl MzUwZTcwHhcNMjUxMjI5MDcwMDQ5WhcNMjUxMjMwMDcwMDQ5WjAzMTEwLwYDVQQD EyhlNTI1OGFlY2MzNzFkNDM2MTE2Mzk0ZTg5YjcwNDVjYjQ1NzhlYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn+OrREY3H3wXkpCdfp+9gaYM6fT dTQHEgPZ9eHdLIycdGMkvYT81lPYsZ0R8eV+o/BIB401INa84fk64g7cmWIvxukj 93NFeCP5teRaQffYM2+JdmI4t1BjLlINOgHm6dY6h2OIbiwl/rVjV+cK41d6iz6n 87Er8Dso0STfxuzv5sBL0ycRN7ZEVDI7m0FLF7YRr1XBq1KOZQon20GZKeWMS7cl 6A2qDVllJA49bhIPbnjuF07uLeVcUooh/OZZpAvEv5hNanZtnSd+4ZJ7795Uo2lK fvbF31xhYlQuEYqjNL1MlrV3/TTetxfYNQoDJ70wqUQVZueIgmMcRKcT6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUliuzDcdQ2EWOU6JtwRctFeOq7MB8GA1UdIwQY MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2 LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2SEEWSn MFN+Igs0XsAhYjAs0wGTlZ1TPZOCAFsV/5UIUnAseIHa5ADICkh+MC5+TYtk7umS OjiV1eFgrR277ZIPtIhAHUbMtVTY1geLxAueXNanRMcT/KZIB7QQaLw9mrWExa5i RksvVGhNBOfuDaIN2GM4Gmh8AMTJMwgtvLZz44lmwziJp4kXejzfD3sSALdXc8mf 7/U4CR3xQttVaK23Afpciqho/8Nliw5VFbQEDD4IbgFKfoSYA5gbsuk74nx7OXg+ Ow/G8i76ljQM2fAIfU/bIx8fUltQ9tGJfYsZ0A5vLRVGVd4Th3Cect3qAXbtHybh M0hvxsEeevPStA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:55:44 2025 by rpki-client