This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json) Hash identifier: pxzkp3Z02Sv4uYgCNoIUMgfJjwkvykDG9rjOAjL+QwE= Subject key identifier: 41:8C:D2:A5:D5:46:BF:FB:1C:F5:46:D5:98:C9:BB:36:40:F3:B1:95 Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d Certificate serial: 019B5A88B8317836ABDF5E8759090B6BE74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft Manifest number: 09FC Signing time: Fri 26 Dec 2025 12:01:08 +0000 Manifest this update: Fri 26 Dec 2025 12:01:08 +0000 Manifest next update: Sat 27 Dec 2025 12:01:08 +0000 Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: zLriLN0zS97f2rYZwrH8+QT9I9VZMWWtwiVoQZoCeGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b8:31:78:36:ab:df:5e:87:59:09:0b:6b:e7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d Validity Not Before: Dec 26 12:01:08 2025 GMT Not After : Dec 27 12:01:08 2025 GMT Subject: CN=418cd2a5d546bffb1cf546d598c9bb3640f3b195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:28:f5:49:bf:ba:91:24:e9:55:d5:6a:bd: e4:8a:84:19:f6:c4:77:3f:95:6e:48:19:e1:c2:8e: bc:43:e3:93:7a:58:38:b0:3c:b2:e4:4d:05:fb:bb: 9d:b9:07:c7:a4:55:60:03:ef:ac:35:66:19:13:93: 04:e5:de:f3:79:8b:4a:34:0a:a1:25:42:19:5e:6c: 9f:ef:34:2a:c3:59:5b:7e:fd:f8:69:e6:ef:77:ae: 49:4f:ad:43:b2:f4:67:da:42:a9:c1:25:f1:14:82: ab:76:bb:7b:23:76:8e:dd:e5:5d:86:3e:01:64:61: 03:49:79:41:02:88:8c:63:49:22:44:d1:fb:cd:8c: 02:2a:de:0a:5e:30:b3:a3:37:ea:c6:78:3b:c5:e7: 36:c3:bd:35:05:11:42:99:b7:4f:e6:07:7d:89:c8: 41:88:65:14:4b:a4:52:18:43:73:3a:ba:fe:b1:b4: b2:8b:3f:0a:bb:af:7d:76:3e:2e:a3:9e:1d:3e:09: 66:18:9c:10:f1:5b:1d:73:8b:84:0c:64:ae:3c:24: 1f:d1:93:0a:a3:18:da:9a:cb:6c:99:51:f5:13:e2: 5a:48:bd:ac:1b:6b:6d:94:77:84:9d:f0:c7:8b:ba: de:8b:fa:5e:23:3e:ad:40:a6:1d:36:af:f2:e3:90: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:D2:A5:D5:46:BF:FB:1C:F5:46:D5:98:C9:BB:36:40:F3:B1:95 X509v3 Authority Key Identifier: keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5e:91:7e:20:0e:62:e3:8b:57:44:0d:36:81:2a:37:9d:f4: e2:45:7f:46:c2:f6:8d:74:21:61:dc:40:85:2a:a1:29:25:18: 30:c2:b3:82:e1:76:9b:8b:88:7c:c7:31:37:f1:94:ed:a8:13: 5d:58:46:25:c6:8f:86:06:0c:d6:81:0a:48:93:67:6b:f6:c9: 5c:77:89:21:64:02:3b:ba:2b:4b:b5:ff:98:2f:66:f7:03:f2: cf:6c:d7:ba:11:8a:e2:8f:a6:fd:96:49:7f:88:03:63:7a:65: 0e:46:40:83:9f:8d:4b:19:09:5d:d1:0f:72:7a:20:9f:63:b8: bd:49:51:55:f0:7f:58:bf:e3:ae:43:6c:c2:d2:92:f1:93:b1: 24:4f:0e:fe:e5:8e:c0:99:9e:66:36:c4:9d:3a:95:a4:2e:79: e4:db:27:bf:2b:d9:f8:d5:5a:3a:df:2d:a6:32:3e:64:b7:e4: f2:ec:0e:cd:a5:25:d1:a4:91:85:a5:4b:9d:2c:f6:50:ed:83: b6:c9:ba:f0:cb:77:9f:74:65:f3:97:a8:4c:b0:71:f4:08:f1: cb:5c:08:c4:f3:8a:1a:c7:a0:69:f8:f1:cd:c0:d5:6b:b2:25: 6e:2b:59:80:eb:c2:93:56:d4:53:51:8e:76:e9:57:40:24:b2: 05:e3:5e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLgxeDar316HWQkLa+dOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4 NTA5N2QwHhcNMjUxMjI2MTIwMTA4WhcNMjUxMjI3MTIwMTA4WjAzMTEwLwYDVQQD Eyg0MThjZDJhNWQ1NDZiZmZiMWNmNTQ2ZDU5OGM5YmIzNjQwZjNiMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYo9Um/upEk6VXVar3kioQZ9sR3 P5VuSBnhwo68Q+OTelg4sDyy5E0F+7uduQfHpFVgA++sNWYZE5ME5d7zeYtKNAqh JUIZXmyf7zQqw1lbfv34aebvd65JT61DsvRn2kKpwSXxFIKrdrt7I3aO3eVdhj4B ZGEDSXlBAoiMY0kiRNH7zYwCKt4KXjCzozfqxng7xec2w701BRFCmbdP5gd9ichB iGUUS6RSGENzOrr+sbSyiz8Ku699dj4uo54dPglmGJwQ8Vsdc4uEDGSuPCQf0ZMK oxjamstsmVH1E+JaSL2sG2ttlHeEnfDHi7rei/peIz6tQKYdNq/y45BL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGM0qXVRr/7HPVG1ZjJuzZA87GVMB8GA1UdIwQY MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt ZTllMWQ5MWE5ODE2LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2 LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF6RfiAO YuOLV0QNNoEqN5304kV/RsL2jXQhYdxAhSqhKSUYMMKzguF2m4uIfMcxN/GU7agT XVhGJcaPhgYM1oEKSJNna/bJXHeJIWQCO7orS7X/mC9m9wPyz2zXuhGK4o+m/ZZJ f4gDY3plDkZAg5+NSxkJXdEPcnogn2O4vUlRVfB/WL/jrkNswtKS8ZOxJE8O/uWO wJmeZjbEnTqVpC555NsnvyvZ+NVaOt8tpjI+ZLfk8uwOzaUl0aSRhaVLnSz2UO2D tsm68Mt3n3Rl85eoTLBx9Ajxy1wIxPOKGsegafjxzcDVa7IlbitZgOvCk1bUU1GO dulXQCSyBeNeLw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:22 2025 by rpki-client