This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json) Hash identifier: nbGX75xDn+SwxE7ayPwGVIhmb6RJKqq59ubUpIYNhZg= Subject key identifier: F4:69:DC:13:57:E7:AD:6D:77:BB:E0:A5:C6:5B:F6:F9:C9:96:DC:7B Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Certificate serial: 019B31562EA32CA1DEE5B827A1CE249B51E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft Manifest number: 0A4D Signing time: Thu 18 Dec 2025 12:01:30 +0000 Manifest this update: Thu 18 Dec 2025 12:01:30 +0000 Manifest next update: Fri 19 Dec 2025 12:01:30 +0000 Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=) 2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: WWQ2Gy+oaHzmcK/AZ6qfmyudj6hLzEVe/8ovEeaLxog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:2e:a3:2c:a1:de:e5:b8:27:a1:ce:24:9b:51:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Validity Not Before: Dec 18 12:01:30 2025 GMT Not After : Dec 19 12:01:30 2025 GMT Subject: CN=f469dc1357e7ad6d77bbe0a5c65bf6f9c996dc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:5b:fa:84:27:42:0f:d0:93:31:20:84:b1: 22:32:2d:14:db:70:e6:21:4c:f1:19:fd:18:e4:78: 59:5f:6d:f0:31:c6:ea:68:19:e6:57:fc:19:75:9f: 7f:d8:ac:c1:29:fb:db:60:30:7d:43:17:91:f3:26: a8:42:4f:35:11:74:1b:aa:32:9e:25:8c:72:42:1b: bc:c9:7b:4d:7f:69:6c:a7:4a:5e:a2:5c:71:0d:d6: a0:c8:ed:6b:b7:97:73:1d:9f:f2:86:a9:01:0e:f5: ea:e5:b0:a7:3a:da:12:4e:5c:94:9c:a2:5e:bc:e9: 93:1f:24:3a:20:cf:49:75:3a:85:0e:8f:d1:da:22: 8c:bc:e2:06:41:6e:67:23:6d:01:5e:f9:99:09:ab: 72:cb:9a:9c:3c:ad:9f:0e:ab:dd:bc:22:37:73:31: 60:3b:3d:e7:64:0f:1b:5e:50:b8:a6:47:2a:e9:81: 49:ea:5c:dc:db:73:7c:53:4b:05:b6:91:94:50:af: 92:10:8c:1b:0e:dd:ee:cc:50:91:90:fe:b1:80:bd: 7f:9a:79:75:aa:db:bd:8f:8f:67:b9:0b:65:4e:2a: d5:d6:51:f0:40:c2:d8:bf:98:f5:7f:0c:1c:98:3d: f8:15:08:0c:13:93:1c:7c:5c:ba:6d:cc:c5:51:75: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:69:DC:13:57:E7:AD:6D:77:BB:E0:A5:C6:5B:F6:F9:C9:96:DC:7B X509v3 Authority Key Identifier: keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c2:bb:cb:b7:c1:64:b7:69:32:82:1c:3d:5f:6d:e3:67:3d: 7d:dd:0f:e7:68:c8:5b:83:97:3a:ba:71:4a:ee:88:ce:39:77: 38:ee:11:81:bc:20:7e:91:2f:45:ce:26:69:8f:31:78:a3:7b: 38:49:d7:ae:9e:ae:d8:54:18:7b:2d:63:3e:e3:bf:e7:07:c1: 35:1b:15:8c:2d:2a:0a:c6:17:4b:63:0a:8b:bb:0b:94:5d:e2: b7:08:a2:76:f8:86:b1:08:47:25:10:28:91:60:28:97:22:e4: c0:58:7b:b7:e0:76:a4:98:08:99:28:1d:0f:39:6b:86:d0:cc: ba:14:77:0d:af:d7:2c:3a:67:01:8e:7d:34:24:64:06:f0:e8: 05:4e:10:ae:9e:c0:5b:86:3f:13:f6:fa:2f:23:e3:77:36:84: 81:47:88:3c:b7:a8:33:e5:79:1d:cb:bd:dd:d3:74:6b:4c:44: 0d:6e:cf:1a:01:06:b3:2f:1b:ea:2a:96:80:bb:a9:be:70:bf: bf:84:97:c7:ce:6b:8a:6c:0b:f3:fd:3c:0c:b5:a0:df:dc:0a: a2:2b:c1:76:70:55:50:a0:d7:5f:38:f5:8c:f5:d1:06:89:55: 11:f6:dd:ad:ff:dc:4a:87:06:bb:7c:bd:56:ca:15:1d:ee:34: 15:b8:ef:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVi6jLKHe5bgnoc4km1HlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh ZmQ3MTIwHhcNMjUxMjE4MTIwMTMwWhcNMjUxMjE5MTIwMTMwWjAzMTEwLwYDVQQD EyhmNDY5ZGMxMzU3ZTdhZDZkNzdiYmUwYTVjNjViZjZmOWM5OTZkYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRpb+oQnQg/QkzEghLEiMi0U23Dm IUzxGf0Y5HhZX23wMcbqaBnmV/wZdZ9/2KzBKfvbYDB9QxeR8yaoQk81EXQbqjKe JYxyQhu8yXtNf2lsp0peolxxDdagyO1rt5dzHZ/yhqkBDvXq5bCnOtoSTlyUnKJe vOmTHyQ6IM9JdTqFDo/R2iKMvOIGQW5nI20BXvmZCatyy5qcPK2fDqvdvCI3czFg Oz3nZA8bXlC4pkcq6YFJ6lzc23N8U0sFtpGUUK+SEIwbDt3uzFCRkP6xgL1/mnl1 qtu9j49nuQtlTirV1lHwQMLYv5j1fwwcmD34FQgME5McfFy6bczFUXXaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRp3BNX561td7vgpcZb9vnJltx7MB8GA1UdIwQY MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8K7y7fB ZLdpMoIcPV9t42c9fd0P52jIW4OXOrpxSu6Izjl3OO4RgbwgfpEvRc4maY8xeKN7 OEnXrp6u2FQYey1jPuO/5wfBNRsVjC0qCsYXS2MKi7sLlF3itwiidviGsQhHJRAo kWAolyLkwFh7t+B2pJgImSgdDzlrhtDMuhR3Da/XLDpnAY59NCRkBvDoBU4Qrp7A W4Y/E/b6LyPjdzaEgUeIPLeoM+V5Hcu93dN0a0xEDW7PGgEGsy8b6iqWgLupvnC/ v4SXx85rimwL8/08DLWg39wKoivBdnBVUKDXXzj1jPXRBolVEfbdrf/cSocGu3y9 VsoVHe40FbjvBg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:24 2025 by rpki-client