This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json) Hash identifier: AecECspOaoECLv6O/nIuUwYPTHjcJ4xWCMnRQAj7488= Subject key identifier: 3B:0D:D5:DF:2E:A0:95:BF:04:B7:C7:D0:B6:B5:11:39:C0:AF:A6:41 Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Certificate serial: 019B23D17CC1E94BB5DBEC6E261FBAEE86C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft Manifest number: 06CA Signing time: Mon 15 Dec 2025 21:01:30 +0000 Manifest this update: Mon 15 Dec 2025 21:01:30 +0000 Manifest next update: Tue 16 Dec 2025 21:01:30 +0000 Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: OMJDSuK/v2d3J/KF5dJBzhsOe/fZLCGj7iLQ3n6ewEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:7c:c1:e9:4b:b5:db:ec:6e:26:1f:ba:ee:86:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c Validity Not Before: Dec 15 21:01:30 2025 GMT Not After : Dec 16 21:01:30 2025 GMT Subject: CN=3b0dd5df2ea095bf04b7c7d0b6b51139c0afa641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:92:26:e2:da:f1:29:ad:f3:4b:3a:38:4c:04: 05:37:c9:03:d8:2c:10:c3:5a:13:16:d8:04:d2:a9: 8a:1d:2e:b4:4a:87:96:a3:a8:ea:8e:f5:0b:26:ea: 5e:c7:24:f9:53:3c:73:91:52:26:23:d2:96:c7:61: 66:ec:fd:11:b5:47:b6:df:6e:52:78:c5:8e:44:59: 90:99:d4:d5:70:28:2c:fc:f7:5e:5d:3a:96:23:cd: 86:32:1d:5e:93:59:17:af:fb:95:d9:64:a0:e9:a3: fd:18:64:3f:05:f5:71:80:4b:52:31:4d:3b:b0:2c: 8f:61:f2:61:1e:49:e7:65:cd:a3:ea:ec:b7:47:9d: 75:76:a4:9f:f9:c8:74:3f:c8:54:7f:2d:d9:c3:10: ae:4e:eb:ab:d3:30:7c:9b:88:0f:21:f9:37:d5:da: 63:4a:28:0a:40:3a:a8:59:24:b6:17:91:b0:70:d5: 9b:c1:8e:82:e2:e1:02:36:71:61:94:1c:32:09:59: 8a:19:b7:09:2f:0d:5d:5e:72:3c:04:a8:4d:03:51: 3a:95:62:4a:8d:02:3f:e3:88:df:a7:ad:d0:a4:13: c2:e5:a1:11:a1:ed:d0:66:a8:00:e1:de:c7:87:d6: 23:f6:ed:26:db:7e:cc:5d:c3:12:5c:a8:64:e9:49: bc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:D5:DF:2E:A0:95:BF:04:B7:C7:D0:B6:B5:11:39:C0:AF:A6:41 X509v3 Authority Key Identifier: keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1f:9d:14:ec:c2:28:0e:83:5e:3c:42:ca:46:ee:91:de:a8: 72:97:5e:de:d5:8b:03:64:7a:65:7f:8e:7e:0c:ac:78:a4:6b: a9:49:0d:a4:2e:d6:60:0f:d2:a3:37:00:3c:d2:c3:42:21:ca: 94:05:93:7e:cf:df:7c:a7:8f:83:92:2a:b8:5e:dd:d2:8f:74: a6:7e:91:6b:6b:0f:ac:32:51:ba:ed:ff:38:1a:8e:3b:83:90: 31:38:75:49:54:bb:88:40:44:14:66:d9:4e:aa:19:f7:f6:3e: f8:db:bf:2e:6f:d4:d3:f4:2f:84:50:fd:e0:8d:89:65:bb:9a: 5f:8e:77:6b:6d:b4:16:34:9f:9b:77:f7:8d:a6:c3:17:b4:69: e1:34:3c:a0:3e:d3:0f:9e:60:73:b1:1a:54:14:a8:f7:34:a1: 7f:54:11:8c:6f:59:cd:c2:93:be:29:63:cf:3a:e9:6e:f7:bf: e3:21:6e:ce:03:ca:48:62:df:58:63:bd:23:2f:ac:25:94:19: ed:8e:42:f4:13:b0:9b:c1:80:24:8e:30:06:5f:d6:f6:50:f6: bb:c9:69:b9:78:85:1c:84:47:f4:df:bc:26:5a:b9:a4:27:fa: d1:df:a5:91:ef:fe:f1:8b:57:d0:31:0c:a8:cb:a4:f9:61:6a: 2f:9a:87:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0XzB6Uu12+xuJh+67obFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk NjQxNGMwHhcNMjUxMjE1MjEwMTMwWhcNMjUxMjE2MjEwMTMwWjAzMTEwLwYDVQQD EygzYjBkZDVkZjJlYTA5NWJmMDRiN2M3ZDBiNmI1MTEzOWMwYWZhNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JIm4trxKa3zSzo4TAQFN8kD2CwQ w1oTFtgE0qmKHS60SoeWo6jqjvULJupexyT5UzxzkVImI9KWx2Fm7P0RtUe2325S eMWORFmQmdTVcCgs/PdeXTqWI82GMh1ek1kXr/uV2WSg6aP9GGQ/BfVxgEtSMU07 sCyPYfJhHknnZc2j6uy3R511dqSf+ch0P8hUfy3ZwxCuTuur0zB8m4gPIfk31dpj SigKQDqoWSS2F5GwcNWbwY6C4uECNnFhlBwyCVmKGbcJLw1dXnI8BKhNA1E6lWJK jQI/44jfp63QpBPC5aERoe3QZqgA4d7Hh9Yj9u0m237MXcMSXKhk6Um8GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsN1d8uoJW/BLfH0La1ETnAr6ZBMB8GA1UdIwQY MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANx+dFOzC KA6DXjxCykbukd6ocpde3tWLA2R6ZX+OfgyseKRrqUkNpC7WYA/SozcAPNLDQiHK lAWTfs/ffKePg5IquF7d0o90pn6Ra2sPrDJRuu3/OBqOO4OQMTh1SVS7iEBEFGbZ TqoZ9/Y++Nu/Lm/U0/QvhFD94I2JZbuaX453a220FjSfm3f3jabDF7Rp4TQ8oD7T D55gc7EaVBSo9zShf1QRjG9ZzcKTviljzzrpbve/4yFuzgPKSGLfWGO9Iy+sJZQZ 7Y5C9BOwm8GAJI4wBl/W9lD2u8lpuXiFHIRH9N+8Jlq5pCf60d+lke/+8YtX0DEM qMuk+WFqL5qHtA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:05 2025 by rpki-client