This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json) Hash identifier: 3CjrKBlC74OJefp9A3knWlZBZ4v0Ucp22YMeT+P1HBw= Subject key identifier: 66:76:E7:26:ED:1B:32:3F:3D:1B:21:44:76:8B:D6:DF:0F:AA:BF:07 Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6 Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6 Certificate serial: 019B59E4895F6CAF54717F47DD8072393AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 09:01:48 +0000 Manifest this update: Fri 26 Dec 2025 09:01:48 +0000 Manifest next update: Sat 27 Dec 2025 09:01:48 +0000 Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: GfJFT0M0+Acz/PbTRaI6WrjWtBWv1ZpZ8j29B1hCcNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:89:5f:6c:af:54:71:7f:47:dd:80:72:39:3a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6 Validity Not Before: Dec 26 09:01:48 2025 GMT Not After : Dec 27 09:01:48 2025 GMT Subject: CN=6676e726ed1b323f3d1b2144768bd6df0faabf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:9f:59:f7:a7:fd:ce:db:93:26:00:cd:86: 53:2e:71:4f:3e:8b:3a:87:87:2f:cb:38:29:b9:9d: 7a:34:ab:03:b4:02:7e:55:bd:71:6e:d4:c4:77:55: 7d:ac:6f:6b:2a:12:bf:a3:27:4a:df:55:59:2b:85: 62:44:f3:aa:6c:87:7a:aa:e4:63:05:28:bc:1d:59: 76:9b:c9:b6:d6:de:af:6b:ed:5f:f3:d0:66:bc:a0: 83:45:cb:1b:d5:de:76:6b:d0:57:b5:37:ab:7b:a7: 6e:ae:af:a6:76:74:8b:18:ea:7f:21:a2:81:71:95: 33:f6:48:68:4f:18:10:43:09:08:80:98:3e:dd:b5: 7a:7d:72:dc:6e:e2:41:b9:52:9b:9d:75:82:bc:4f: 19:98:da:e1:4f:00:84:94:f7:fa:03:61:ed:3a:3d: 05:d3:b7:f7:39:c9:40:54:78:16:c3:fd:19:25:1d: 38:65:d0:59:34:39:f1:50:23:9e:56:1a:48:c6:6d: 56:86:67:ef:5a:02:54:43:3e:3d:08:c9:c7:d7:a5: e7:69:6b:fb:d6:d6:a6:0c:08:65:6b:93:86:92:e3: fa:ea:c7:cd:1f:6e:39:46:40:2f:be:2b:56:01:3b: 16:aa:15:f2:0d:79:91:7d:fc:05:85:84:92:34:9d: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:76:E7:26:ED:1B:32:3F:3D:1B:21:44:76:8B:D6:DF:0F:AA:BF:07 X509v3 Authority Key Identifier: keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:87:39:50:02:86:85:55:c0:4c:74:f1:12:9f:e4:9c:d6:2d: ed:8a:52:25:0d:4b:4e:7f:8b:9e:18:b2:06:ce:73:02:35:22: 24:4d:33:39:18:2d:e9:64:05:57:3a:cf:a3:da:7f:78:1f:72: 27:0e:ae:96:d8:45:78:6a:e2:1f:de:e0:fe:84:01:d1:e5:e4: f0:98:cc:39:78:1e:7c:d3:6b:1b:7d:f0:f5:fb:4b:49:fd:c3: 29:41:91:91:01:3f:37:f1:0b:5c:5d:3b:24:64:2a:1c:59:6e: dd:73:d2:f9:f8:fe:da:85:d5:ba:3f:34:40:19:f4:1e:86:c6: 16:e6:60:91:34:e1:38:05:58:bd:33:22:fa:3b:f2:d8:6e:ea: 52:9e:58:8b:14:56:68:51:ad:8f:c1:e5:1c:fc:12:14:42:b1: 02:7e:8d:b6:b8:ea:6f:c4:e9:a4:c4:e7:10:0c:0a:8b:11:89: 97:31:f9:0c:03:ae:25:45:1a:65:e1:61:3f:d7:eb:0f:0e:e1: fa:44:88:0e:44:78:30:d7:2b:ba:cb:aa:83:67:0a:fe:35:c4: 8f:41:51:b4:b5:f8:60:17:0e:0a:8d:a9:d1:c2:65:4e:95:ee: 88:e6:39:d7:2c:45:1b:2e:ee:95:e8:19:84:b4:74:58:ff:36: a0:2e:81:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5IlfbK9UcX9H3YByOTr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy ZmUzYTYwHhcNMjUxMjI2MDkwMTQ4WhcNMjUxMjI3MDkwMTQ4WjAzMTEwLwYDVQQD Eyg2Njc2ZTcyNmVkMWIzMjNmM2QxYjIxNDQ3NjhiZDZkZjBmYWFiZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs+fWfen/c7bkyYAzYZTLnFPPos6 h4cvyzgpuZ16NKsDtAJ+Vb1xbtTEd1V9rG9rKhK/oydK31VZK4ViRPOqbId6quRj BSi8HVl2m8m21t6va+1f89BmvKCDRcsb1d52a9BXtTere6durq+mdnSLGOp/IaKB cZUz9khoTxgQQwkIgJg+3bV6fXLcbuJBuVKbnXWCvE8ZmNrhTwCElPf6A2HtOj0F 07f3OclAVHgWw/0ZJR04ZdBZNDnxUCOeVhpIxm1WhmfvWgJUQz49CMnH16XnaWv7 1tamDAhla5OGkuP66sfNH245RkAvvitWATsWqhXyDXmRffwFhYSSNJ0ZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ25ybtGzI/PRshRHaL1t8Pqr8HMB8GA1UdIwQY MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoc5UAKG hVXATHTxEp/knNYt7YpSJQ1LTn+LnhiyBs5zAjUiJE0zORgt6WQFVzrPo9p/eB9y Jw6ulthFeGriH97g/oQB0eXk8JjMOXgefNNrG33w9ftLSf3DKUGRkQE/N/ELXF07 JGQqHFlu3XPS+fj+2oXVuj80QBn0HobGFuZgkTThOAVYvTMi+jvy2G7qUp5YixRW aFGtj8HlHPwSFEKxAn6Ntrjqb8TppMTnEAwKixGJlzH5DAOuJUUaZeFhP9frDw7h +kSIDkR4MNcrusuqg2cK/jXEj0FRtLX4YBcOCo2p0cJlTpXuiOY51yxFGy7ulegZ hLR0WP82oC6BRg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client