This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json) Hash identifier: GeoVgaUUDtxyYbCi4Zc4z8c3+TRqA31ygDSEM4fukss= Subject key identifier: E7:25:06:A5:B0:D4:C9:41:3F:72:15:C5:59:8F:96:E6:34:F4:1B:9E Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Certificate serial: 019B6A32630ABCF6046FC616FD51F4278BD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft Manifest number: 128D Signing time: Mon 29 Dec 2025 13:00:45 +0000 Manifest this update: Mon 29 Dec 2025 13:00:45 +0000 Manifest next update: Tue 30 Dec 2025 13:00:45 +0000 Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: /Tuodo2M8m8Spq/RcSbutJFEXG1zlZqP7Gf2dEHgqkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:63:0a:bc:f6:04:6f:c6:16:fd:51:f4:27:8b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241 Validity Not Before: Dec 29 13:00:45 2025 GMT Not After : Dec 30 13:00:45 2025 GMT Subject: CN=e72506a5b0d4c9413f7215c5598f96e634f41b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:7c:9a:92:f8:55:d1:c8:1d:2d:d8:bf:0b: 51:90:83:04:bd:98:60:84:02:3e:38:8a:0d:ca:06: 62:60:58:1c:41:a5:8b:84:65:21:87:d2:fe:dd:b7: 5d:70:c7:04:c9:ba:14:5a:fc:b5:74:9b:c3:35:36: 9d:88:7d:d7:39:e5:5c:c4:ee:f9:32:f5:f2:44:a8: 0b:94:1c:d4:4a:ba:d2:6d:6f:25:71:b9:41:6a:dc: 4d:21:b8:5f:78:9f:bf:cb:72:eb:3f:f5:49:da:ff: 88:d5:2f:b9:d6:6a:4a:c3:7b:48:e2:29:8a:db:b7: 80:5c:1a:29:95:9a:9b:1f:93:54:25:27:7c:60:ae: f6:54:6d:96:42:a4:e8:e3:88:dd:02:66:bc:f3:5b: af:3c:69:dd:f1:b5:e5:a7:ae:0b:e0:1a:d6:3c:24: 34:55:be:33:bb:48:c6:8c:a1:b3:17:35:6c:a3:cd: 44:b2:33:b3:76:51:d9:db:fb:d4:1a:58:27:2c:a6: bb:dd:ce:60:10:33:b5:1c:40:60:3f:2d:44:b4:41: 1f:cf:94:a3:02:90:db:80:ec:c5:38:5d:fc:63:86: 3e:a5:63:65:d6:c2:2a:ee:af:20:b8:cf:34:10:f6: 6c:28:6d:f7:2e:88:81:e4:8b:52:cc:10:b5:1f:63: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:06:A5:B0:D4:C9:41:3F:72:15:C5:59:8F:96:E6:34:F4:1B:9E X509v3 Authority Key Identifier: keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:94:20:f4:84:03:a8:6a:19:87:d1:7e:14:bb:41:36:dc:04: e2:a8:0a:71:6d:01:2d:77:9c:67:68:74:8e:9b:62:da:52:34: 04:19:90:19:ba:61:72:93:f6:a5:a0:72:c7:c4:77:04:77:ae: 6f:39:7f:2b:84:10:3e:1d:78:a4:a4:d1:31:54:15:f3:a4:56: 88:ef:89:ee:28:9c:a3:70:73:54:22:ab:06:de:cc:56:71:a5: 3e:1a:45:1d:e7:1a:b7:19:49:6d:d4:d1:d9:b4:ae:e4:49:83: 0e:12:ca:8a:a4:57:9e:98:bc:57:19:fb:9d:84:2a:f5:f2:52: d2:ea:e5:5e:52:da:a7:6e:c3:41:78:71:f2:69:e3:50:a8:42: 5a:d7:0a:a6:62:a3:1f:24:f9:78:57:fc:ef:f2:fc:b7:9e:91: 0a:d3:50:57:5b:71:34:12:a3:c5:fa:7b:77:97:1b:96:3f:21: 58:2e:3c:1c:f0:5d:8f:ca:e3:35:ea:2e:7f:bc:fb:ba:2b:fd: 79:3c:35:20:c6:df:a8:48:80:87:c0:ec:ec:9a:82:79:02:5d: ab:1e:eb:51:db:33:74:99:a4:62:a3:7f:73:f3:e2:de:70:45: 9b:a4:53:fd:37:c7:23:3b:3a:82:1a:68:6d:53:db:1c:80:3d: da:33:93:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMmMKvPYEb8YW/VH0J4vSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm MGYyNDEwHhcNMjUxMjI5MTMwMDQ1WhcNMjUxMjMwMTMwMDQ1WjAzMTEwLwYDVQQD EyhlNzI1MDZhNWIwZDRjOTQxM2Y3MjE1YzU1OThmOTZlNjM0ZjQxYjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpx8mpL4VdHIHS3YvwtRkIMEvZhg hAI+OIoNygZiYFgcQaWLhGUhh9L+3bddcMcEyboUWvy1dJvDNTadiH3XOeVcxO75 MvXyRKgLlBzUSrrSbW8lcblBatxNIbhfeJ+/y3LrP/VJ2v+I1S+51mpKw3tI4imK 27eAXBoplZqbH5NUJSd8YK72VG2WQqTo44jdAma881uvPGnd8bXlp64L4BrWPCQ0 Vb4zu0jGjKGzFzVso81EsjOzdlHZ2/vUGlgnLKa73c5gEDO1HEBgPy1EtEEfz5Sj ApDbgOzFOF38Y4Y+pWNl1sIq7q8guM80EPZsKG33LoiB5ItSzBC1H2MpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOclBqWw1MlBP3IVxVmPluY09BueMB8GA1UdIwQY MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJQg9IQD qGoZh9F+FLtBNtwE4qgKcW0BLXecZ2h0jpti2lI0BBmQGbphcpP2paByx8R3BHeu bzl/K4QQPh14pKTRMVQV86RWiO+J7iico3BzVCKrBt7MVnGlPhpFHecatxlJbdTR 2bSu5EmDDhLKiqRXnpi8Vxn7nYQq9fJS0urlXlLap27DQXhx8mnjUKhCWtcKpmKj HyT5eFf87/L8t56RCtNQV1txNBKjxfp7d5cblj8hWC48HPBdj8rjNeouf7z7uiv9 eTw1IMbfqEiAh8Ds7JqCeQJdqx7rUdszdJmkYqN/c/Pi3nBFm6RT/TfHIzs6ghpo bVPbHIA92jOTHg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:52:53 2025 by rpki-client