This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft File: Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft (raw, json) Hash identifier: W/v8fCwTQ1qLmQHbNkDKUXVMkHIVmVM2TR2WJAgMAss= Subject key identifier: F2:3A:E6:11:B2:2B:73:F3:BA:98:CA:91:09:20:44:87:94:7E:5B:FF Authority key identifier: 43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0 Certificate issuer: /CN=4362bc90ba442eef19d5e82536523262c5eb72a0 Certificate serial: 019B5AF6AFAA81124D6486554E717EDCAC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft Manifest number: 0111 Signing time: Fri 26 Dec 2025 14:01:14 +0000 Manifest this update: Fri 26 Dec 2025 14:01:14 +0000 Manifest next update: Sat 27 Dec 2025 14:01:14 +0000 Files and hashes: 1: Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl (hash: lwMpGZguBzD3dhAgHEYcs0NI7wP3n1hW7eIzdTxaP/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:af:aa:81:12:4d:64:86:55:4e:71:7e:dc:ac:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4362bc90ba442eef19d5e82536523262c5eb72a0 Validity Not Before: Dec 26 14:01:14 2025 GMT Not After : Dec 27 14:01:14 2025 GMT Subject: CN=f23ae611b22b73f3ba98ca9109204487947e5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:24:44:1b:c9:a5:d8:40:63:48:c1:48:e0: 6a:e2:58:8c:18:9b:a9:13:2d:92:5d:3f:be:76:f5: 3e:03:d6:cd:31:72:9f:d6:2f:78:8c:8d:31:c2:39: 2a:b5:70:29:c3:5b:a9:87:85:7c:56:ee:74:d2:6b: 3d:0f:47:e4:3f:4e:f2:86:b5:6a:1f:f4:23:a2:7f: 0c:9d:4e:86:37:50:4e:79:b1:2d:77:c1:ca:70:28: 5e:40:d5:6f:15:94:42:57:6f:52:05:6a:f7:46:7e: d5:81:d0:7a:a6:c5:1e:04:de:a6:a6:51:c5:5b:7c: 2a:24:54:02:8b:64:9a:29:32:3a:3e:16:aa:e9:02: e9:1f:8a:b9:22:cc:a3:01:bc:4e:e3:50:88:94:81: 3a:9c:41:57:44:3b:5c:1c:fb:4a:52:4f:6f:e7:73: 8a:a2:c7:65:60:91:3b:d6:2d:7a:95:c8:d0:8e:cc: f3:5d:a8:fe:a6:36:72:a3:0f:7e:4f:52:7a:dd:cd: a9:74:30:82:73:d4:89:c6:ed:6a:21:3e:e6:a3:8b: db:ad:ee:c9:da:07:03:38:ab:47:65:2e:af:57:fa: 66:c9:fc:c9:c6:b7:4a:f0:d6:1a:e9:47:8b:0e:df: cf:e8:aa:30:d1:da:6a:8d:10:3b:d9:6b:81:62:37: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:E6:11:B2:2B:73:F3:BA:98:CA:91:09:20:44:87:94:7E:5B:FF X509v3 Authority Key Identifier: keyid:43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d8:11:96:90:0f:95:d3:28:0a:a1:78:43:3f:19:7e:44:02: 6c:11:a9:57:72:ad:d2:1e:0e:2e:22:64:21:1f:2c:45:27:7c: 90:9d:98:a1:b7:c5:b4:c3:10:b6:fe:37:07:39:96:2c:5b:18: ce:78:5a:9d:4f:e4:27:e7:fe:5f:d7:a4:8a:ba:45:3b:54:23: a4:09:4e:fe:77:12:8c:2f:f0:cf:2f:69:7e:72:c6:24:c3:99: 13:1f:2a:54:89:d5:a3:ab:c7:99:dd:84:fd:01:6e:b0:4f:6c: 4d:9f:48:3c:73:d1:80:44:98:a6:58:20:d8:4d:c8:96:5a:09: b3:4b:24:66:cc:b8:4e:44:5b:8c:c4:cf:d4:9a:fb:5f:69:3b: a9:94:73:f9:6b:01:19:a8:dc:a9:2b:36:94:d4:46:23:a6:3f: 2c:c5:40:bf:a8:62:2d:c3:4a:e9:dc:e3:23:73:5b:db:93:e6: ce:44:a7:16:df:3f:09:d9:e8:88:0f:61:88:fd:ae:dc:ff:88: a0:28:91:8d:94:23:26:fb:95:b8:ae:8c:7d:aa:56:75:bd:7d: 66:b9:a8:f6:f0:44:bc:81:67:40:cf:c1:d9:aa:f5:36:4e:af: 1f:9e:a7:a8:82:a1:65:32:5b:fa:86:24:ac:19:c4:95:09:b4: 68:ba:f7:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9q+qgRJNZIZVTnF+3KwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjJiYzkwYmE0NDJlZWYxOWQ1ZTgyNTM2NTIzMjYyYzVl YjcyYTAwHhcNMjUxMjI2MTQwMTE0WhcNMjUxMjI3MTQwMTE0WjAzMTEwLwYDVQQD EyhmMjNhZTYxMWIyMmI3M2YzYmE5OGNhOTEwOTIwNDQ4Nzk0N2U1YmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IckRBvJpdhAY0jBSOBq4liMGJup Ey2SXT++dvU+A9bNMXKf1i94jI0xwjkqtXApw1uph4V8Vu500ms9D0fkP07yhrVq H/Qjon8MnU6GN1BOebEtd8HKcCheQNVvFZRCV29SBWr3Rn7VgdB6psUeBN6mplHF W3wqJFQCi2SaKTI6Phaq6QLpH4q5IsyjAbxO41CIlIE6nEFXRDtcHPtKUk9v53OK osdlYJE71i16lcjQjszzXaj+pjZyow9+T1J63c2pdDCCc9SJxu1qIT7mo4vbre7J 2gcDOKtHZS6vV/pmyfzJxrdK8NYa6UeLDt/P6Kow0dpqjRA72WuBYjfPnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI65hGyK3PzupjKkQkgRIeUflv/MB8GA1UdIwQY MBaAFENivJC6RC7vGdXoJTZSMmLF63KgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZDU5YjMtMjNjYy00MGZlLTgwNjQt MzcxZDVjODQyZjJjLzEvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZDU5YjMtMjNjYy00MGZlLTgwNjQtMzcxZDVjODQyZjJj LzEvUTJLOGtMcEVMdThaMWVnbE5sSXlZc1hyY3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9gRlpAP ldMoCqF4Qz8ZfkQCbBGpV3Kt0h4OLiJkIR8sRSd8kJ2YobfFtMMQtv43BzmWLFsY znhanU/kJ+f+X9ekirpFO1QjpAlO/ncSjC/wzy9pfnLGJMOZEx8qVInVo6vHmd2E /QFusE9sTZ9IPHPRgESYplgg2E3IlloJs0skZsy4TkRbjMTP1Jr7X2k7qZRz+WsB GajcqSs2lNRGI6Y/LMVAv6hiLcNK6dzjI3Nb25PmzkSnFt8/CdnoiA9hiP2u3P+I oCiRjZQjJvuVuK6MfapWdb19Zrmo9vBEvIFnQM/B2ar1Nk6vH56nqIKhZTJb+oYk rBnElQm0aLr3DA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:29 2025 by rpki-client