This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json) Hash identifier: UOaizeP4u9+pMyeyYOQaMrwaoW9WI0Spo/UY7dMJdZs= Subject key identifier: 4D:1C:CD:C1:FF:B5:95:B4:E8:98:DA:5A:00:11:75:93:E0:4E:CA:3B Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Certificate serial: 019AF38949C77B93FC5121CF424E39D0AC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=) 2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: NjSv6EA6CDIceCrosDpzELmDWCUkkxwjfHqXiarjLDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:49:c7:7b:93:fc:51:21:cf:42:4e:39:d0:ac:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=4d1ccdc1ffb595b4e898da5a00117593e04eca3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:3f:51:cf:a5:29:ce:18:ac:e5:fd:b4:af: f5:f4:4e:70:41:9a:1d:86:9f:0f:e0:0f:38:13:07: 89:bd:1a:f6:a6:08:76:0b:6b:5c:f7:41:fc:4c:ac: f1:0a:09:f8:af:3b:be:f1:9b:69:a0:36:53:bd:14: 98:a0:03:de:fb:24:fe:8d:76:a0:52:7f:79:54:cc: ff:29:bc:bf:fe:f1:b6:7b:5d:77:bb:dc:a2:80:1d: 72:aa:2e:72:0d:80:fc:52:1e:ce:e0:af:6f:ee:b2: bd:49:b2:0c:3b:1d:24:c2:1a:4c:e8:dc:93:8b:65: 6e:f3:ef:1e:7e:5c:07:a1:db:28:a6:e6:d8:24:f2: 25:7a:0d:9a:3a:4e:f7:eb:b4:c5:86:60:33:6c:bd: 23:e7:55:aa:4d:6c:b3:33:4a:44:0f:c6:5a:49:82: 75:db:e3:cb:93:14:2f:f1:60:f7:b5:45:5f:4a:40: 27:23:ee:40:86:82:e8:bf:8b:5e:60:e7:17:93:8b: 6b:a0:c7:3c:39:31:78:2f:f0:f4:95:76:9a:c6:2f: e3:60:d6:cf:ea:c5:15:18:54:9d:d8:7b:92:d3:e4: b2:d7:40:37:aa:ba:2d:20:df:19:f0:00:40:29:8d: 27:88:5c:57:40:59:37:a6:f5:d0:ca:40:ec:9f:19: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:CD:C1:FF:B5:95:B4:E8:98:DA:5A:00:11:75:93:E0:4E:CA:3B X509v3 Authority Key Identifier: keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:22:6c:45:79:17:94:fd:50:99:e1:e0:a6:29:01:7f:b1:24: ee:7a:5d:4b:7c:56:1b:71:e7:b2:09:cf:ea:e6:d8:8d:6b:5d: 43:be:7b:be:e7:a5:51:70:01:76:9e:c2:a9:2e:6f:40:c7:a7: 04:47:77:12:f0:76:9c:2e:b4:91:f8:51:5f:63:12:b1:f8:66: e9:62:c8:bf:86:ff:cf:ab:d5:50:1f:85:ac:36:47:fe:b8:86: f4:ac:23:5c:8c:ab:7c:48:a2:2a:26:0e:59:cd:98:51:7d:85: 62:1e:76:01:8a:99:ee:0d:a7:b0:16:97:43:3f:16:ba:32:c1: ef:24:06:83:0e:78:3c:7a:8a:4c:f1:06:a9:03:f3:53:03:88: fb:9f:a1:4c:af:d1:1e:e4:81:0a:02:2a:14:11:0a:de:3c:25: 32:08:71:64:15:fb:a1:80:fe:74:9d:f6:57:fc:35:8b:fc:4d: 90:67:c1:48:a5:79:c8:8a:d9:03:70:97:a4:e7:3a:98:b2:73: c6:96:2b:32:75:74:e0:b1:09:ff:68:04:d3:38:1e:e3:19:15: e9:77:86:c2:a1:1d:12:92:37:86:f7:4a:56:55:8e:07:24:3b: 28:d3:9f:14:1a:ce:61:1f:12:dc:f6:5c:68:96:bb:15:fb:5b: 21:3a:8a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUnHe5P8USHPQk450KwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODZlNmI5ZDFmNzhjOTRkNjNmYWM5MzRhYjlhYWRjMGM5 NmQ0M2UwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD Eyg0ZDFjY2RjMWZmYjU5NWI0ZTg5OGRhNWEwMDExNzU5M2UwNGVjYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbM/Uc+lKc4YrOX9tK/19E5wQZod hp8P4A84EweJvRr2pgh2C2tc90H8TKzxCgn4rzu+8ZtpoDZTvRSYoAPe+yT+jXag Un95VMz/Kby//vG2e113u9yigB1yqi5yDYD8Uh7O4K9v7rK9SbIMOx0kwhpM6NyT i2Vu8+8eflwHodsopubYJPIleg2aOk7367TFhmAzbL0j51WqTWyzM0pED8ZaSYJ1 2+PLkxQv8WD3tUVfSkAnI+5AhoLov4teYOcXk4troMc8OTF4L/D0lXaaxi/jYNbP 6sUVGFSd2HuS0+Sy10A3qrotIN8Z8ABAKY0niFxXQFk3pvXQykDsnxnfgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0czcH/tZW06JjaWgARdZPgTso7MB8GA1UdIwQY MBaAFEGG5rnR94yU1j+sk0q5qtwMltQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQt ZDc4NzY2ZDhjODU4LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQtZDc4NzY2ZDhjODU4 LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiJsRXkX lP1QmeHgpikBf7Ek7npdS3xWG3HnsgnP6ubYjWtdQ757vuelUXABdp7CqS5vQMen BEd3EvB2nC60kfhRX2MSsfhm6WLIv4b/z6vVUB+FrDZH/riG9KwjXIyrfEiiKiYO Wc2YUX2FYh52AYqZ7g2nsBaXQz8WujLB7yQGgw54PHqKTPEGqQPzUwOI+5+hTK/R HuSBCgIqFBEK3jwlMghxZBX7oYD+dJ32V/w1i/xNkGfBSKV5yIrZA3CXpOc6mLJz xpYrMnV04LEJ/2gE0zge4xkV6XeGwqEdEpI3hvdKVlWOByQ7KNOfFBrOYR8S3PZc aJa7FftbITqKAg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:27 2025 by rpki-client