This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft File: qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json) Hash identifier: PK95tcq8Zb9RQTdePoJ8wuz2xWgefy8o8rxMhOjZpCQ= Subject key identifier: 35:60:1F:0B:68:E0:F1:07:28:A6:53:7C:E0:F6:AB:80:78:D4:E6:FE Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Certificate serial: 019B115CE013F1D79E1F979ED3DA04295042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft Manifest number: 0FCD Signing time: Fri 12 Dec 2025 07:00:57 +0000 Manifest this update: Fri 12 Dec 2025 07:00:57 +0000 Manifest next update: Sat 13 Dec 2025 07:00:57 +0000 Files and hashes: 1: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: IavHvaN9K/bsP2WnrxOJqKgzhdO0qcNvpRaAIMuFIQA=) 2: z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa (hash: JZepL6D/k4nJl6/C5sz18t6zxYuNfxZeSTEwoJkeNs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:e0:13:f1:d7:9e:1f:97:9e:d3:da:04:29:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Validity Not Before: Dec 12 07:00:57 2025 GMT Not After : Dec 13 07:00:57 2025 GMT Subject: CN=35601f0b68e0f10728a6537ce0f6ab8078d4e6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:60:3b:b1:7b:8a:5e:9d:9e:c4:4a:b4:a7: 6b:fa:e2:3e:0d:db:a8:ef:dc:65:c6:9c:c8:60:46: ca:8c:a6:f0:92:54:63:9d:5e:b9:e7:4e:a6:4a:76: 2f:b5:43:35:54:01:03:76:4a:2b:c8:c0:ca:37:fd: ba:3a:09:6b:fd:b2:18:43:d9:92:77:a8:62:7e:68: c5:90:72:f7:65:53:2f:bb:c1:e1:82:47:4d:b8:c2: 43:a3:89:ab:57:cd:bd:7b:a4:14:26:1a:d2:57:cf: f9:08:f1:07:63:e5:ee:85:33:97:88:04:75:96:2e: 8b:44:9d:3b:78:a0:30:d5:c5:cd:bd:d9:05:40:22: 57:20:6c:71:35:3f:41:c2:19:4c:ca:40:a5:86:81: fc:08:9b:86:54:07:ba:0d:20:1c:5b:38:32:1e:53: 91:f1:b6:41:77:9b:c3:39:cd:b1:3a:0d:46:84:27: f7:0d:65:d7:a0:61:9b:1d:88:c3:e4:c8:6f:ba:0c: b5:6c:89:b9:41:d4:91:e6:3e:b9:89:13:c9:f9:7f: ea:52:33:b4:2d:4a:27:48:ef:bf:74:27:ba:60:1a: 8d:1c:ff:ed:d4:af:bf:0e:85:2b:0b:d0:4e:20:18: ae:39:ed:bb:23:47:7b:d3:c5:1a:59:f9:b7:fd:64: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:60:1F:0B:68:E0:F1:07:28:A6:53:7C:E0:F6:AB:80:78:D4:E6:FE X509v3 Authority Key Identifier: keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:76:3e:bf:0b:fd:de:d3:cc:0e:41:9d:f2:4f:77:df:9e:79: 1d:93:95:78:d7:cd:ab:3f:b5:9e:8a:94:65:3b:15:cd:85:48: a0:9f:93:30:60:a4:47:56:88:7d:47:84:ee:39:88:40:f7:4a: 14:ed:b0:97:e7:7f:b6:fc:a8:ab:07:89:a8:bc:cf:9c:da:93: 41:14:ad:7d:50:ef:a7:2a:0e:9f:f3:d1:d5:a8:34:05:5a:22: f8:f0:10:88:1d:16:ba:5a:44:4a:05:2b:3b:4c:c6:50:71:5e: 6c:d6:cc:b0:03:65:7c:01:b4:70:54:cc:07:77:de:6c:25:6b: 26:48:89:ca:da:0f:1f:40:e3:55:97:47:8d:15:49:58:4f:3a: ad:3d:99:6a:b2:50:df:cf:53:32:89:8d:95:9f:87:02:b9:0a: 35:a4:bb:8a:b4:28:33:13:03:3d:3e:73:60:46:2c:cb:cb:ac: 6c:84:c0:42:ca:fc:39:c7:9a:22:35:17:41:03:e8:ab:33:e7: c2:5b:51:de:c1:ee:1a:6c:b7:bc:c4:04:6b:de:f9:83:06:a9: 91:db:bb:15:61:91:68:50:ee:63:27:bb:a0:81:45:09:b2:ae: 16:50:3e:6a:ef:2f:69:79:b3:1d:e3:46:2e:af:80:ca:a1:74: e0:06:6a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXOAT8deeH5ee09oEKVBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGE4NDM4NDYxNTZmMDhlMmQ4ZDdiZmM5MWFiMzUwNTM0 YjliOGEwHhcNMjUxMjEyMDcwMDU3WhcNMjUxMjEzMDcwMDU3WjAzMTEwLwYDVQQD EygzNTYwMWYwYjY4ZTBmMTA3MjhhNjUzN2NlMGY2YWI4MDc4ZDRlNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTNgO7F7il6dnsRKtKdr+uI+Dduo 79xlxpzIYEbKjKbwklRjnV65506mSnYvtUM1VAEDdkoryMDKN/26Oglr/bIYQ9mS d6hifmjFkHL3ZVMvu8HhgkdNuMJDo4mrV829e6QUJhrSV8/5CPEHY+XuhTOXiAR1 li6LRJ07eKAw1cXNvdkFQCJXIGxxNT9BwhlMykClhoH8CJuGVAe6DSAcWzgyHlOR 8bZBd5vDOc2xOg1GhCf3DWXXoGGbHYjD5Mhvugy1bIm5QdSR5j65iRPJ+X/qUjO0 LUonSO+/dCe6YBqNHP/t1K+/DoUrC9BOIBiuOe27I0d708UaWfm3/WT/rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVgHwto4PEHKKZTfOD2q4B41Ob+MB8GA1UdIwQY MBaAFKsKhDhGFW8I4tjXv8kas1BTS5uKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmIt MWQwOGMyNjdlZDllLzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmItMWQwOGMyNjdlZDll LzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnY+vwv9 3tPMDkGd8k933555HZOVeNfNqz+1noqUZTsVzYVIoJ+TMGCkR1aIfUeE7jmIQPdK FO2wl+d/tvyoqweJqLzPnNqTQRStfVDvpyoOn/PR1ag0BVoi+PAQiB0WulpESgUr O0zGUHFebNbMsANlfAG0cFTMB3febCVrJkiJytoPH0DjVZdHjRVJWE86rT2ZarJQ 389TMomNlZ+HArkKNaS7irQoMxMDPT5zYEYsy8usbITAQsr8OceaIjUXQQPoqzPn wltR3sHuGmy3vMQEa975gwapkdu7FWGRaFDuYye7oIFFCbKuFlA+au8vaXmzHeNG Lq+AyqF04AZq/w== -----END CERTIFICATE-----Generated at Fri Dec 12 08:26:54 2025 by rpki-client