This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft File: qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json) Hash identifier: ZG1gmZjFBf8DbDaTgMN0fG7Vsv7naivxHIVuC9Zckww= Subject key identifier: A9:46:8E:AA:34:58:8A:A1:E5:65:42:DB:F4:8F:1F:75:4A:3A:5C:34 Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Certificate serial: 019B323179B0F88B140C5C23FC9ABAE83297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft Manifest number: 0FDE Signing time: Thu 18 Dec 2025 16:01:01 +0000 Manifest this update: Thu 18 Dec 2025 16:01:01 +0000 Manifest next update: Fri 19 Dec 2025 16:01:01 +0000 Files and hashes: 1: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: PJn4ItL+QmezaJhbbQeMFsIxwBDfdzGFDawhnJdKAkU=) 2: z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa (hash: JZepL6D/k4nJl6/C5sz18t6zxYuNfxZeSTEwoJkeNs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:79:b0:f8:8b:14:0c:5c:23:fc:9a:ba:e8:32:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Validity Not Before: Dec 18 16:01:01 2025 GMT Not After : Dec 19 16:01:01 2025 GMT Subject: CN=a9468eaa34588aa1e56542dbf48f1f754a3a5c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:73:69:99:44:b6:03:9a:b2:e6:f6:88:cb: a8:65:e4:c7:c7:df:99:c1:7a:3e:bb:dc:10:b6:b3: 13:fc:11:00:a0:25:95:1f:0d:dd:66:7e:f0:51:b2: f1:f4:0a:12:e6:b1:e5:06:76:96:9e:70:f4:9f:96: fd:3a:6d:b9:34:0a:ea:0f:6c:72:09:04:24:2e:f8: 25:e8:a7:2a:7c:29:0a:a3:c8:62:1b:f6:2c:e1:7f: 43:7c:83:bd:a9:b5:dc:e5:f2:54:ba:5b:47:55:41: c6:79:36:07:6c:3b:4d:ba:6a:12:d4:1a:ee:d3:3a: 92:22:e6:af:29:b5:03:84:b6:02:eb:02:98:bd:b0: 04:91:43:b8:21:6a:2f:67:4d:3e:2c:ee:41:6c:5b: 6d:05:87:b5:e6:e2:da:8e:2e:a2:7e:12:c0:41:1a: 45:c2:b8:79:3c:bc:62:70:57:5a:f5:1c:6a:67:b0: 33:90:20:2a:36:e6:b4:aa:26:a1:22:74:81:2d:aa: 10:a5:54:b2:75:05:ce:43:33:85:a4:4b:d1:e0:89: 90:77:94:03:98:b3:cc:ec:f6:a8:a2:50:a1:c2:98: 31:ed:3d:e5:a6:5d:89:04:4f:50:c8:98:03:e5:f6: a0:83:50:fa:ff:f7:1a:03:55:cb:d2:33:b9:66:58: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:8E:AA:34:58:8A:A1:E5:65:42:DB:F4:8F:1F:75:4A:3A:5C:34 X509v3 Authority Key Identifier: keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:63:17:5a:b9:b1:63:e5:e5:e2:28:e9:3c:14:b7:ca:7b:07: 4e:66:51:10:00:67:21:4f:f9:5b:f6:01:4c:92:32:09:3e:6b: 5e:08:a9:dd:c0:09:88:1c:eb:30:1c:07:84:b2:51:e1:b8:1d: bb:b3:34:0b:96:88:e2:6e:db:28:70:f8:22:4b:13:83:da:e6: cb:bb:a7:b2:d7:80:c2:81:a8:2a:06:4a:a9:9b:0e:56:da:a4: 34:b4:a3:8f:b1:53:65:be:78:c6:31:ba:73:99:11:a3:15:35: 9b:ae:77:9e:70:24:5f:0a:62:b7:a0:08:a9:7a:bc:e4:16:15: 7b:46:e7:c0:4c:31:7e:32:b1:c0:8b:54:1f:af:82:a9:52:98: 85:97:6c:b2:74:78:11:55:ff:1b:92:50:75:dc:e3:23:a4:ad: 29:d7:23:c0:af:4a:ed:5b:b7:0d:a7:66:ff:ad:71:5a:52:5a: d5:52:ac:9d:4b:ca:71:88:28:2a:81:e4:c1:b0:97:b9:61:81: 01:77:61:d1:32:4e:61:46:75:b9:ff:72:fd:97:df:ed:56:40: 1f:3a:80:a9:f7:c1:79:be:95:83:42:05:3f:4e:4c:91:cb:d2: 33:30:69:95:7a:92:42:d1:e2:ed:46:01:bb:3e:b7:fc:87:89: f6:44:87:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMXmw+IsUDFwj/Jq66DKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGE4NDM4NDYxNTZmMDhlMmQ4ZDdiZmM5MWFiMzUwNTM0 YjliOGEwHhcNMjUxMjE4MTYwMTAxWhcNMjUxMjE5MTYwMTAxWjAzMTEwLwYDVQQD EyhhOTQ2OGVhYTM0NTg4YWExZTU2NTQyZGJmNDhmMWY3NTRhM2E1YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5NzaZlEtgOasub2iMuoZeTHx9+Z wXo+u9wQtrMT/BEAoCWVHw3dZn7wUbLx9AoS5rHlBnaWnnD0n5b9Om25NArqD2xy CQQkLvgl6KcqfCkKo8hiG/Ys4X9DfIO9qbXc5fJUultHVUHGeTYHbDtNumoS1Bru 0zqSIuavKbUDhLYC6wKYvbAEkUO4IWovZ00+LO5BbFttBYe15uLaji6ifhLAQRpF wrh5PLxicFda9RxqZ7AzkCAqNua0qiahInSBLaoQpVSydQXOQzOFpEvR4ImQd5QD mLPM7PaoolChwpgx7T3lpl2JBE9QyJgD5fagg1D6//caA1XL0jO5Zljt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlGjqo0WIqh5WVC2/SPH3VKOlw0MB8GA1UdIwQY MBaAFKsKhDhGFW8I4tjXv8kas1BTS5uKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmIt MWQwOGMyNjdlZDllLzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmItMWQwOGMyNjdlZDll LzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWMXWrmx Y+Xl4ijpPBS3ynsHTmZREABnIU/5W/YBTJIyCT5rXgip3cAJiBzrMBwHhLJR4bgd u7M0C5aI4m7bKHD4IksTg9rmy7unsteAwoGoKgZKqZsOVtqkNLSjj7FTZb54xjG6 c5kRoxU1m653nnAkXwpit6AIqXq85BYVe0bnwEwxfjKxwItUH6+CqVKYhZdssnR4 EVX/G5JQddzjI6StKdcjwK9K7Vu3Dadm/61xWlJa1VKsnUvKcYgoKoHkwbCXuWGB AXdh0TJOYUZ1uf9y/Zff7VZAHzqAqffBeb6Vg0IFP05MkcvSMzBplXqSQtHi7UYB uz63/IeJ9kSHuA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:39:55 2025 by rpki-client