This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json) Hash identifier: ROeMlYv3gky1+6aL0QrTMXCxfhdyOMkH+bOifyDiJa0= Subject key identifier: 84:CA:07:7B:4C:F9:D5:D8:E0:46:2E:A8:55:60:BD:BC:30:95:96:14 Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84 Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284 Certificate serial: 019B59764B844E083E945D62697E42319352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft Manifest number: 0B35 Signing time: Fri 26 Dec 2025 07:01:23 +0000 Manifest this update: Fri 26 Dec 2025 07:01:23 +0000 Manifest next update: Sat 27 Dec 2025 07:01:23 +0000 Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: O/SKOo7DczYQ7XPzGTLWNE3c1focV6Xr12LbNa78mAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:4b:84:4e:08:3e:94:5d:62:69:7e:42:31:93:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424c165b6a49349541c65af9b21580163819f284 Validity Not Before: Dec 26 07:01:23 2025 GMT Not After : Dec 27 07:01:23 2025 GMT Subject: CN=84ca077b4cf9d5d8e0462ea85560bdbc30959614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:a0:32:16:25:38:d1:d0:3d:5f:75:bd:ff: 40:5c:36:54:72:5b:42:e3:f8:7c:ea:71:e0:bd:44: 12:01:9d:36:16:4c:f3:ac:9b:6a:52:02:68:b2:64: 66:d7:7b:c6:90:56:6f:1d:d5:ae:de:20:75:64:f9: bb:57:af:67:74:64:5e:fa:92:9b:01:4d:a9:93:0a: c3:1c:1e:ba:a1:33:47:2b:14:d2:ef:c4:91:9d:9c: 03:81:be:26:1c:e4:d0:d1:26:a0:90:a3:4d:57:ca: e8:ab:09:a4:d2:ab:15:99:e0:e7:33:da:2c:38:00: 01:c2:e9:c2:87:6c:b0:01:7c:be:95:85:4f:f9:f4: 00:60:34:77:fb:e0:e0:ae:d9:9b:ab:84:6b:52:07: 02:d1:25:4f:e8:ee:cb:d2:ac:5a:5a:dd:dd:34:b0: f6:8d:34:a9:6e:e1:95:17:86:12:54:3c:f7:bd:a7: 29:5c:11:26:c3:bc:74:c5:6c:5d:08:36:e9:52:10: db:43:63:2b:cb:57:4a:f2:0b:96:89:04:df:ea:aa: 64:a1:6d:22:87:e6:4f:2b:a4:2a:42:9b:f8:16:85: b2:d8:cd:8c:0a:14:ab:1b:6c:53:ba:97:84:f9:16: b9:07:e0:bd:3d:9b:38:6a:2b:00:86:02:b5:9e:fc: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CA:07:7B:4C:F9:D5:D8:E0:46:2E:A8:55:60:BD:BC:30:95:96:14 X509v3 Authority Key Identifier: keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:43:ac:be:1c:8f:52:01:66:34:b2:5f:ea:3b:3c:b1:9b: cc:dc:59:01:0d:1e:55:a7:2c:07:6a:7b:5c:3d:08:d7:70:3e: 7b:ba:58:31:cb:06:4a:a8:3b:2e:b1:95:61:8c:eb:04:10:0b: 70:51:59:ba:8e:1c:e3:b8:3e:de:6a:6b:6b:8d:c1:ba:3f:19: 5a:51:f4:90:3c:4e:da:c7:06:e5:fa:03:7c:be:80:0a:58:a9: b4:37:a9:ef:88:9c:5b:13:bb:b9:cb:7b:ee:84:4c:71:90:98: 94:32:2a:12:92:91:81:3c:a2:0e:4a:c3:a9:d0:8a:5e:fd:8f: 16:95:6f:c2:15:5d:ab:60:7e:97:60:83:b9:d3:2e:b0:96:16: 0b:b2:34:e9:59:79:dc:24:0d:0d:bf:19:42:48:5c:6e:b7:e3: 90:db:f8:9e:3e:15:d9:bf:46:64:cc:44:3c:43:3e:be:e2:25: 71:6a:97:b4:36:e0:cd:2f:01:d8:c6:40:a0:5e:73:ad:14:98: 94:47:31:59:4d:5c:86:74:c5:89:67:0d:8e:6b:30:42:e8:ff: f2:6c:5e:aa:d5:a1:1c:bc:d2:d2:4e:7c:96:4a:4e:da:a6:d7: 5f:1c:6c:14:e3:3b:fc:e6:e4:9c:89:3b:8f:f8:a3:b8:74:70: 62:fe:f0:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkuETgg+lF1iaX5CMZNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGMxNjViNmE0OTM0OTU0MWM2NWFmOWIyMTU4MDE2Mzgx OWYyODQwHhcNMjUxMjI2MDcwMTIzWhcNMjUxMjI3MDcwMTIzWjAzMTEwLwYDVQQD Eyg4NGNhMDc3YjRjZjlkNWQ4ZTA0NjJlYTg1NTYwYmRiYzMwOTU5NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTGgMhYlONHQPV91vf9AXDZUcltC 4/h86nHgvUQSAZ02FkzzrJtqUgJosmRm13vGkFZvHdWu3iB1ZPm7V69ndGRe+pKb AU2pkwrDHB66oTNHKxTS78SRnZwDgb4mHOTQ0SagkKNNV8roqwmk0qsVmeDnM9os OAABwunCh2ywAXy+lYVP+fQAYDR3++Dgrtmbq4RrUgcC0SVP6O7L0qxaWt3dNLD2 jTSpbuGVF4YSVDz3vacpXBEmw7x0xWxdCDbpUhDbQ2Mry1dK8guWiQTf6qpkoW0i h+ZPK6QqQpv4FoWy2M2MChSrG2xTupeE+Ra5B+C9PZs4aisAhgK1nvxY6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITKB3tM+dXY4EYuqFVgvbwwlZYUMB8GA1UdIwQY MBaAFEJMFltqSTSVQcZa+bIVgBY4GfKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MGM0OTgtNmIxZC00ZDkyLWE0ZTgt ZWMzYmY0ODE2ZDM2LzEvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MGM0OTgtNmIxZC00ZDkyLWE0ZTgtZWMzYmY0ODE2ZDM2 LzEvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG1DrL4c j1IBZjSyX+o7PLGbzNxZAQ0eVacsB2p7XD0I13A+e7pYMcsGSqg7LrGVYYzrBBAL cFFZuo4c47g+3mpra43Buj8ZWlH0kDxO2scG5foDfL6ACliptDep74icWxO7uct7 7oRMcZCYlDIqEpKRgTyiDkrDqdCKXv2PFpVvwhVdq2B+l2CDudMusJYWC7I06Vl5 3CQNDb8ZQkhcbrfjkNv4nj4V2b9GZMxEPEM+vuIlcWqXtDbgzS8B2MZAoF5zrRSY lEcxWU1chnTFiWcNjmswQuj/8mxeqtWhHLzS0k58lkpO2qbXXxxsFOM7/ObknIk7 j/ijuHRwYv7wPw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:05 2025 by rpki-client