This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json) Hash identifier: PPrjCX4fjwV2u2ZJy7auDJDnryip1f0eTMe5UVu2+Gs= Subject key identifier: CA:9B:A2:67:FD:F3:D4:EC:3C:05:52:D0:B0:4D:58:16:BA:DA:F9:23 Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97 Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97 Certificate serial: 019B58D1029E9146B7622DEC445AF8B9794E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft Manifest number: 122F Signing time: Fri 26 Dec 2025 04:00:51 +0000 Manifest this update: Fri 26 Dec 2025 04:00:51 +0000 Manifest next update: Sat 27 Dec 2025 04:00:51 +0000 Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: qoMBUhpwNYagZy1b+hALnUDAfZsc1H41YcBTmSVqvZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:02:9e:91:46:b7:62:2d:ec:44:5a:f8:b9:79:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97 Validity Not Before: Dec 26 04:00:51 2025 GMT Not After : Dec 27 04:00:51 2025 GMT Subject: CN=ca9ba267fdf3d4ec3c0552d0b04d5816badaf923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:01:0a:60:4a:0f:32:32:01:00:bb:5d:5d: 32:be:f1:1f:bc:f1:18:ae:da:e2:12:05:fe:9d:21: 62:02:30:fc:c9:56:7b:22:ba:a2:3b:2c:40:22:e5: ce:70:c8:ef:7d:4d:61:16:a9:c8:71:b6:2e:d2:f5: 07:ee:c3:8b:e2:9f:df:c7:23:f9:61:78:a6:d6:d1: ed:da:30:c7:df:13:67:ad:06:2b:93:bd:24:c4:a3: 3e:40:83:a0:7e:33:4e:ad:00:4a:8d:c1:4d:d7:52: 38:0c:8c:c0:21:53:86:b3:aa:37:af:94:00:3a:47: 5e:6e:f8:60:72:13:f5:a3:dc:8e:34:ac:3f:ad:d9: ae:14:6c:0d:4f:04:43:9d:7c:4c:ce:fc:0b:93:c8: 42:b3:f7:b4:99:ed:eb:c1:aa:80:93:39:c6:91:7c: 54:d6:12:66:e1:ff:8e:8b:e1:19:13:f5:7e:f8:82: 14:2b:b8:cf:41:3e:2d:18:49:46:1a:81:a9:8e:32: 41:01:8a:22:62:90:5c:bd:11:b7:d0:37:ee:54:22: 0b:42:31:06:37:22:92:ac:2d:ea:78:fb:46:bd:97: b5:65:b1:9b:ea:c9:20:4a:da:d2:5a:c9:d1:2c:80: 73:fe:40:a5:8d:a5:b3:d2:f4:a9:d4:71:9b:12:71: 4d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9B:A2:67:FD:F3:D4:EC:3C:05:52:D0:B0:4D:58:16:BA:DA:F9:23 X509v3 Authority Key Identifier: keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:70:a8:b2:51:13:ac:e4:4f:a6:f1:08:9c:ff:7a:9f:43:62: 44:34:d2:6e:dc:b4:17:f3:ac:e6:4c:c5:30:27:70:bf:1f:8f: 1a:c4:e6:7e:e0:27:bd:c3:17:c8:ad:32:78:28:47:06:50:03: 21:a7:81:4f:33:37:aa:7b:06:ba:30:50:69:90:f2:d5:d0:95: 69:5e:cd:0d:b3:7f:c0:63:93:cc:f6:fc:e4:ee:7c:ed:bf:60: bb:4c:f5:94:30:8e:1e:74:06:e1:ed:5f:dd:9f:fb:cd:bc:01: 36:7d:1f:81:00:5f:70:a8:64:87:0e:d6:74:61:58:83:b1:58: a8:54:d4:4d:b0:66:8e:b8:fd:60:ce:1b:01:59:f0:ca:0e:90: 55:2b:5a:3b:aa:57:f0:9c:f7:9d:e6:22:6b:1b:de:7a:10:8a: d6:33:9c:1e:48:5e:2a:04:e9:9e:0b:03:2c:f3:6e:ee:e5:1d: e6:f5:d6:f7:73:e2:76:ca:45:1f:10:48:e4:0b:b1:53:bc:9e: 11:e1:ab:81:22:7f:2c:b5:2e:a5:45:14:0d:52:75:26:5a:08: c7:77:cb:61:fe:36:ef:8f:73:5f:9f:50:bf:8f:75:45:23:06: 4b:99:08:ed:a2:96:c4:11:47:53:b1:c4:cc:31:ca:c0:47:cd: 03:3e:9d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0QKekUa3Yi3sRFr4uXlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYTk4NmRhMzVmMTcxMDRlOGIxMTY1MjZmODA2MzE1N2Ex NmRiOTcwHhcNMjUxMjI2MDQwMDUxWhcNMjUxMjI3MDQwMDUxWjAzMTEwLwYDVQQD EyhjYTliYTI2N2ZkZjNkNGVjM2MwNTUyZDBiMDRkNTgxNmJhZGFmOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6kBCmBKDzIyAQC7XV0yvvEfvPEY rtriEgX+nSFiAjD8yVZ7IrqiOyxAIuXOcMjvfU1hFqnIcbYu0vUH7sOL4p/fxyP5 YXim1tHt2jDH3xNnrQYrk70kxKM+QIOgfjNOrQBKjcFN11I4DIzAIVOGs6o3r5QA OkdebvhgchP1o9yONKw/rdmuFGwNTwRDnXxMzvwLk8hCs/e0me3rwaqAkznGkXxU 1hJm4f+Oi+EZE/V++IIUK7jPQT4tGElGGoGpjjJBAYoiYpBcvRG30DfuVCILQjEG NyKSrC3qePtGvZe1ZbGb6skgStrSWsnRLIBz/kCljaWz0vSp1HGbEnFNAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqbomf989TsPAVS0LBNWBa62vkjMB8GA1UdIwQY MBaAFMKphto18XEE6LEWUm+AYxV6FtuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjY5M2ItMjhmZC00M2JkLWJhMjUt NTBkMzhiMzczOTEzLzEvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yYjY5M2ItMjhmZC00M2JkLWJhMjUtNTBkMzhiMzczOTEz LzEvd3FtRzJqWHhjUVRvc1JaU2I0QmpGWG9XMjVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXCoslET rORPpvEInP96n0NiRDTSbty0F/Os5kzFMCdwvx+PGsTmfuAnvcMXyK0yeChHBlAD IaeBTzM3qnsGujBQaZDy1dCVaV7NDbN/wGOTzPb85O587b9gu0z1lDCOHnQG4e1f 3Z/7zbwBNn0fgQBfcKhkhw7WdGFYg7FYqFTUTbBmjrj9YM4bAVnwyg6QVStaO6pX 8Jz3neYiaxveehCK1jOcHkheKgTpngsDLPNu7uUd5vXW93PidspFHxBI5AuxU7ye EeGrgSJ/LLUupUUUDVJ1JloIx3fLYf42749zX59Qv491RSMGS5kI7aKWxBFHU7HE zDHKwEfNAz6djA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client