This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json) Hash identifier: oamytGR05jOJilWFYcceWsye0HlBPO1xMcZwwADsvvs= Subject key identifier: 69:BB:D0:18:FB:99:44:33:FA:DA:E2:94:5B:3D:1A:97:EE:25:FB:33 Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Certificate serial: 019B2740B152B2DE9BD3E01DAC915D2ABAD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft Manifest number: 0B8A Signing time: Tue 16 Dec 2025 13:01:49 +0000 Manifest this update: Tue 16 Dec 2025 13:01:49 +0000 Manifest next update: Wed 17 Dec 2025 13:01:49 +0000 Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: jNhzgkUB1xrEwTmwFpJxMc8rxbEageCrBpIEfX3d04g=) 2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:b1:52:b2:de:9b:d3:e0:1d:ac:91:5d:2a:ba:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Validity Not Before: Dec 16 13:01:49 2025 GMT Not After : Dec 17 13:01:49 2025 GMT Subject: CN=69bbd018fb994433fadae2945b3d1a97ee25fb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:5f:e1:a4:a3:6f:9d:69:ff:ee:f1:02:b1: 3d:72:b4:3d:5e:03:7e:50:dd:66:23:52:4e:6f:4e: 45:eb:7e:83:cb:43:e3:27:65:0c:e7:3a:d5:04:ec: d8:eb:06:0f:bb:20:8d:e7:34:f5:3f:3d:ed:ea:36: 80:fe:40:f8:2f:7c:52:41:45:af:98:07:12:14:ba: 2e:4b:f3:08:ba:32:47:ec:25:38:ec:98:53:6f:e3: d3:39:3a:4e:70:72:ee:22:b0:46:ec:45:2c:ee:bc: 2b:7c:29:15:6f:15:46:b5:7d:1f:3c:da:da:5e:e2: 3f:5a:29:62:d7:3c:3b:50:e5:f3:77:b2:c8:73:2a: 06:27:d3:0d:10:b2:1b:01:35:de:19:aa:5a:ee:be: 0c:fb:8f:cb:7c:94:b7:bc:a1:a8:38:06:bd:4a:02: 65:57:29:61:f2:bb:0a:58:41:4a:57:bc:12:a7:a7: 98:96:ec:f3:3c:07:5d:40:58:14:e5:1c:2a:c8:a7: c6:59:c6:50:92:9b:ee:e6:f9:79:60:9a:25:7c:f5: 41:60:49:4e:a4:ab:4e:eb:46:82:b9:90:c9:93:c5: 7b:bf:12:a3:09:41:db:9e:af:fa:eb:53:8a:74:fa: 5d:d6:eb:0a:07:35:b4:4a:6c:e9:05:c8:1c:5d:02: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:D0:18:FB:99:44:33:FA:DA:E2:94:5B:3D:1A:97:EE:25:FB:33 X509v3 Authority Key Identifier: keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:af:c1:9a:00:70:e6:1f:a9:33:72:3d:7d:d9:b8:bf:33:03: 3b:bb:58:f8:ff:1b:45:2b:ef:5b:2c:5f:1d:bd:25:18:7d:e3: 1b:3b:df:06:96:10:04:99:c4:75:7b:4f:e8:b6:ff:96:33:a2: ab:b0:65:23:e9:76:56:90:2c:ef:a4:91:42:95:43:f3:0f:37: 84:b2:e0:bc:a4:33:86:ab:80:f2:20:57:ba:3f:e3:12:98:32: 03:de:25:39:a8:2e:78:4f:32:65:15:fe:f4:87:9e:be:73:d2: 90:93:4c:82:5d:57:f5:0d:74:3e:0d:20:8e:68:55:78:ed:d4: 9d:b1:b5:08:df:dc:0c:da:c6:c8:fa:b4:c9:d5:7c:10:56:62: e4:1f:b0:56:23:ef:44:56:3e:2e:50:ce:07:8f:b6:48:e2:9b: 93:a5:14:bb:4d:b2:d7:21:e9:c2:06:0a:5d:b3:30:d6:51:9a: 8f:55:ec:33:65:d6:1e:a4:ed:b4:d4:03:d4:d2:fc:2a:e1:0c: 77:9c:2b:a5:d4:08:b2:fd:e9:17:3c:36:a1:eb:1f:db:cf:e9: 56:6f:0f:d5:fd:96:04:f0:f1:c1:e3:dc:79:3a:94:0f:9d:69: 17:ca:1b:a7:bf:69:5b:96:7f:a5:7b:b2:09:d3:42:f8:64:c6: ad:7e:01:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQLFSst6b0+AdrJFdKrrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0 MTJjODAwHhcNMjUxMjE2MTMwMTQ5WhcNMjUxMjE3MTMwMTQ5WjAzMTEwLwYDVQQD Eyg2OWJiZDAxOGZiOTk0NDMzZmFkYWUyOTQ1YjNkMWE5N2VlMjVmYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65f4aSjb51p/+7xArE9crQ9XgN+ UN1mI1JOb05F636Dy0PjJ2UM5zrVBOzY6wYPuyCN5zT1Pz3t6jaA/kD4L3xSQUWv mAcSFLouS/MIujJH7CU47JhTb+PTOTpOcHLuIrBG7EUs7rwrfCkVbxVGtX0fPNra XuI/Wili1zw7UOXzd7LIcyoGJ9MNELIbATXeGapa7r4M+4/LfJS3vKGoOAa9SgJl Vylh8rsKWEFKV7wSp6eYluzzPAddQFgU5RwqyKfGWcZQkpvu5vl5YJolfPVBYElO pKtO60aCuZDJk8V7vxKjCUHbnq/661OKdPpd1usKBzW0SmzpBcgcXQK13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm70Bj7mUQz+trilFs9GpfuJfszMB8GA1UdIwQY MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK/BmgBw 5h+pM3I9fdm4vzMDO7tY+P8bRSvvWyxfHb0lGH3jGzvfBpYQBJnEdXtP6Lb/ljOi q7BlI+l2VpAs76SRQpVD8w83hLLgvKQzhquA8iBXuj/jEpgyA94lOagueE8yZRX+ 9IeevnPSkJNMgl1X9Q10Pg0gjmhVeO3UnbG1CN/cDNrGyPq0ydV8EFZi5B+wViPv RFY+LlDOB4+2SOKbk6UUu02y1yHpwgYKXbMw1lGaj1XsM2XWHqTttNQD1NL8KuEM d5wrpdQIsv3pFzw2oesf28/pVm8P1f2WBPDxwePceTqUD51pF8obp79pW5Z/pXuy CdNC+GTGrX4Brw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:14:27 2025 by rpki-client