This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json) Hash identifier: 0/fS+pHnm1bM5Cs980/XGntL0NTRQUnK7Praqdd96Ts= Subject key identifier: AC:16:8B:21:78:A8:58:40:20:A2:B2:4D:CD:23:46:51:4B:32:93:E7 Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64 Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64 Certificate serial: 019B32312AE6277CA855AB377D087FA0AB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 16:00:41 +0000 Manifest this update: Thu 18 Dec 2025 16:00:41 +0000 Manifest next update: Fri 19 Dec 2025 16:00:41 +0000 Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: Yuyl4IGbDJtEW4HnfVFZ4CN/7BBE1nmrZ0rNox1lanI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:2a:e6:27:7c:a8:55:ab:37:7d:08:7f:a0:ab:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64 Validity Not Before: Dec 18 16:00:41 2025 GMT Not After : Dec 19 16:00:41 2025 GMT Subject: CN=ac168b2178a8584020a2b24dcd2346514b3293e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:d5:3f:c1:e5:31:0a:3b:30:ab:1a:a1:b8: 0c:ab:2a:e3:53:a3:77:a8:54:ed:2e:14:5c:d7:53: 70:ee:3e:7b:b9:e1:bf:b8:e0:60:53:54:f7:f9:bb: 0f:68:9c:c0:f4:fc:47:9c:2c:01:6f:b6:2c:3d:34: 64:d6:ea:d2:3f:cb:10:a5:f2:d6:d6:23:5e:fe:90: 5e:a5:91:63:50:59:a4:fc:d3:ac:47:7e:1e:36:fe: ba:1e:e0:05:ab:3f:1e:70:2f:22:2c:c1:fb:83:50: f5:7c:11:09:e0:dd:b6:18:30:1d:49:52:9a:8e:fd: b7:cc:48:41:19:0e:39:f6:61:c4:99:ce:4b:1e:97: 9b:e2:3b:eb:fe:d6:93:9a:d3:ce:9c:ee:68:ce:35: fe:27:85:5e:6c:3a:64:ac:fd:3c:73:49:38:33:ff: 9d:a8:77:e7:a3:91:f3:01:5c:12:88:fb:14:e2:98: 9c:01:84:8b:99:f3:87:36:dc:ba:e1:c9:f8:0c:91: 17:4c:19:79:a0:f9:0a:ac:8d:51:e5:39:45:df:de: a3:00:de:ee:fd:3d:7b:27:8e:1a:6c:34:1f:46:5e: 0b:4c:92:17:f9:d5:9d:43:b3:89:94:47:4b:2b:43: 6e:e9:5b:c6:bb:40:83:a1:04:06:80:1a:b6:ec:5c: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:16:8B:21:78:A8:58:40:20:A2:B2:4D:CD:23:46:51:4B:32:93:E7 X509v3 Authority Key Identifier: keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:25:b6:d1:b8:4e:cd:f5:cd:13:ef:65:22:b2:8f:9e:24:be: a3:5c:2f:df:6a:4d:6f:79:f3:72:69:54:b3:75:66:cc:45:2c: 5e:0d:96:66:23:60:d4:3f:a9:ec:7f:d2:78:92:95:c6:5e:7a: fc:44:75:c6:dd:1f:fa:b6:f1:9e:f9:3e:d8:1e:5f:a9:00:88: 62:55:17:bc:1b:bf:bd:d6:e9:dd:90:5d:6f:b5:3c:dc:f0:67: 92:d4:3c:ac:b1:ce:c1:8c:85:27:da:ba:df:59:98:89:4e:35: 17:04:04:9a:4b:a8:75:aa:21:72:fe:a2:6b:eb:26:32:83:c5: 2b:44:96:25:91:f3:b1:6b:1f:16:ea:50:b9:b8:3c:b4:b5:7a: f2:cd:e3:e3:c5:eb:ac:5a:8d:fc:70:d0:06:50:33:6a:5b:d9: 04:de:4c:ff:e3:28:e4:ff:77:b9:03:52:c2:71:67:d1:0f:25: 56:f7:c0:11:97:68:66:0d:5e:86:3d:d5:41:c1:26:6f:d5:fa: 53:27:b4:61:2b:79:17:ff:de:58:56:1d:08:0d:93:e0:42:fc: d9:93:b9:7a:e2:53:bd:43:de:93:03:a4:92:cf:67:69:01:87: 62:49:1c:df:fc:4b:14:3b:a9:5e:9f:60:91:0f:1f:d2:be:17: a0:d4:d5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMSrmJ3yoVas3fQh/oKtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYTY2NDY2MmRiMzdmYWY5Y2I1MzgwOWY4MTg5ZjY0NTQy YThmNjQwHhcNMjUxMjE4MTYwMDQxWhcNMjUxMjE5MTYwMDQxWjAzMTEwLwYDVQQD EyhhYzE2OGIyMTc4YTg1ODQwMjBhMmIyNGRjZDIzNDY1MTRiMzI5M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRjVP8HlMQo7MKsaobgMqyrjU6N3 qFTtLhRc11Nw7j57ueG/uOBgU1T3+bsPaJzA9PxHnCwBb7YsPTRk1urSP8sQpfLW 1iNe/pBepZFjUFmk/NOsR34eNv66HuAFqz8ecC8iLMH7g1D1fBEJ4N22GDAdSVKa jv23zEhBGQ459mHEmc5LHpeb4jvr/taTmtPOnO5ozjX+J4VebDpkrP08c0k4M/+d qHfno5HzAVwSiPsU4picAYSLmfOHNty64cn4DJEXTBl5oPkKrI1R5TlF396jAN7u /T17J44abDQfRl4LTJIX+dWdQ7OJlEdLK0Nu6VvGu0CDoQQGgBq27Fw11wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwWiyF4qFhAIKKyTc0jRlFLMpPnMB8GA1UdIwQY MBaAFJqmZGYts3+vnLU4CfgYn2RUKo9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUt OGUyMWM0ZDczODU1LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUtOGUyMWM0ZDczODU1 LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCW20bhO zfXNE+9lIrKPniS+o1wv32pNb3nzcmlUs3VmzEUsXg2WZiNg1D+p7H/SeJKVxl56 /ER1xt0f+rbxnvk+2B5fqQCIYlUXvBu/vdbp3ZBdb7U83PBnktQ8rLHOwYyFJ9q6 31mYiU41FwQEmkuodaohcv6ia+smMoPFK0SWJZHzsWsfFupQubg8tLV68s3j48Xr rFqN/HDQBlAzalvZBN5M/+Mo5P93uQNSwnFn0Q8lVvfAEZdoZg1ehj3VQcEmb9X6 Uye0YSt5F//eWFYdCA2T4EL82ZO5euJTvUPekwOkks9naQGHYkkc3/xLFDupXp9g kQ8f0r4XoNTVdA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:10 2025 by rpki-client