This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json) Hash identifier: GIV8i28NwZ2uIAG8T/7g8gmoXJxlBvIaqWyphPgXrJs= Subject key identifier: 82:75:F9:DC:E2:E5:A3:EB:80:5D:26:CC:FF:1E:DF:16:47:08:2F:00 Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6 Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6 Certificate serial: 019B3E6D66EE1B4E140F4602ED6DC42B657E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft Manifest number: 1785 Signing time: Sun 21 Dec 2025 01:01:55 +0000 Manifest this update: Sun 21 Dec 2025 01:01:55 +0000 Manifest next update: Mon 22 Dec 2025 01:01:55 +0000 Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: lZmwmsSiTxTZbulrxxF/1u2jbU4SCYC1b+KBoGjfQlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:66:ee:1b:4e:14:0f:46:02:ed:6d:c4:2b:65:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6 Validity Not Before: Dec 21 01:01:55 2025 GMT Not After : Dec 22 01:01:55 2025 GMT Subject: CN=8275f9dce2e5a3eb805d26ccff1edf1647082f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:f2:a0:76:ab:23:ff:55:f3:36:b4:f6:aa: 91:29:4f:9a:00:97:62:31:03:89:f1:11:a6:1e:de: 37:5c:39:35:65:31:95:9a:0b:9f:ce:55:79:73:1b: 14:a2:30:66:e3:b9:fa:65:ad:c0:9e:89:b4:55:f2: 67:f6:b6:92:3e:bf:8c:ba:50:ce:80:dc:53:ed:99: 91:0f:24:c7:eb:d4:b7:21:4f:42:e2:59:5f:e5:e0: 08:0d:e5:21:38:03:f8:c9:ae:71:d6:5e:ef:60:d0: dc:7a:9e:a3:fc:7e:05:99:42:14:81:00:df:3c:be: 19:05:fe:13:8f:47:d6:90:a3:9d:09:1f:16:13:39: 63:f2:ca:40:b1:20:01:6b:8c:1a:d0:e1:8c:08:cd: 5c:36:15:43:9b:8c:67:13:69:e3:4c:cc:35:b5:8a: bf:22:f0:15:33:ff:ec:6c:98:25:ac:60:c7:f5:45: dd:59:9c:30:d6:2f:1f:1f:bc:3b:d9:f3:56:b4:7b: 37:8d:62:1d:f6:32:eb:7d:03:f6:a3:15:d3:c3:7b: c5:4f:c0:df:4e:20:87:77:de:c2:1e:4c:9c:1a:dd: 80:f5:aa:b3:47:40:45:f1:b1:84:ba:e5:25:33:21: 20:28:fa:ad:fb:a1:be:ea:e2:db:8c:9c:c8:44:ed: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:75:F9:DC:E2:E5:A3:EB:80:5D:26:CC:FF:1E:DF:16:47:08:2F:00 X509v3 Authority Key Identifier: keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:99:c5:f5:97:8c:fe:30:37:eb:8d:f3:31:98:94:f2:a7:a7: b8:71:73:af:d7:fb:66:43:77:8b:c3:13:5b:ef:22:20:81:5e: fd:41:f4:89:cf:5c:d7:99:4c:98:3b:2b:c7:b9:6a:b1:44:86: 2d:d4:c8:7c:5f:99:95:78:ed:5f:65:ac:42:88:3e:7d:55:7c: 54:25:3e:c1:4e:bd:fb:5d:ea:50:c6:bb:20:b4:3d:bd:3d:3c: ee:d2:fd:65:57:24:9d:1e:53:37:54:f5:59:6c:a1:01:ce:d9: 15:1b:fc:76:5b:df:47:92:f1:57:1c:27:dd:cb:6d:0c:d9:05: 18:79:0e:09:29:3b:86:c2:16:6c:b0:cb:d1:e0:b2:92:29:69: c5:b6:99:af:ab:20:8e:09:5f:01:21:9c:8c:d7:a2:fa:35:16: de:d4:9c:f7:8b:6d:07:f4:d0:a2:84:a0:69:d3:60:13:95:ae: 6a:16:13:59:bc:d9:d4:8a:99:51:5b:06:c9:a3:65:c2:ee:54: 27:fe:b2:79:e5:07:5b:e6:fd:c0:a7:17:b7:46:9d:2f:f6:d6: f7:d7:90:71:7b:03:2a:64:2b:85:1f:95:33:58:1f:47:ba:0f: 91:c7:23:b5:1a:1e:7a:ce:b7:83:82:0d:73:58:2a:7f:c4:1e: fb:48:37:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bWbuG04UD0YC7W3EK2V+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTc4OTU5MjkwY2U5YmIyYzFiNWI2MTQ0NDM4NDQxNWI1 YWZhZDYwHhcNMjUxMjIxMDEwMTU1WhcNMjUxMjIyMDEwMTU1WjAzMTEwLwYDVQQD Eyg4Mjc1ZjlkY2UyZTVhM2ViODA1ZDI2Y2NmZjFlZGYxNjQ3MDgyZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtjyoHarI/9V8za09qqRKU+aAJdi MQOJ8RGmHt43XDk1ZTGVmgufzlV5cxsUojBm47n6Za3Anom0VfJn9raSPr+MulDO gNxT7ZmRDyTH69S3IU9C4llf5eAIDeUhOAP4ya5x1l7vYNDcep6j/H4FmUIUgQDf PL4ZBf4Tj0fWkKOdCR8WEzlj8spAsSABa4wa0OGMCM1cNhVDm4xnE2njTMw1tYq/ IvAVM//sbJglrGDH9UXdWZww1i8fH7w72fNWtHs3jWId9jLrfQP2oxXTw3vFT8Df TiCHd97CHkycGt2A9aqzR0BF8bGEuuUlMyEgKPqt+6G+6uLbjJzIRO1SrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJ1+dzi5aPrgF0mzP8e3xZHCC8AMB8GA1UdIwQY MBaAFEKXiVkpDOm7LBtbYURDhEFbWvrWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzBiMGEtMmU4My00NjlkLWI4OWIt MzI2ODA4ZWNjY2NjLzEvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hYzBiMGEtMmU4My00NjlkLWI4OWItMzI2ODA4ZWNjY2Nj LzEvUXBlSldTa002YnNzRzF0aFJFT0VRVnRhLXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipnF9ZeM /jA3643zMZiU8qenuHFzr9f7ZkN3i8MTW+8iIIFe/UH0ic9c15lMmDsrx7lqsUSG LdTIfF+ZlXjtX2WsQog+fVV8VCU+wU69+13qUMa7ILQ9vT087tL9ZVcknR5TN1T1 WWyhAc7ZFRv8dlvfR5LxVxwn3cttDNkFGHkOCSk7hsIWbLDL0eCykilpxbaZr6sg jglfASGcjNei+jUW3tSc94ttB/TQooSgadNgE5WuahYTWbzZ1IqZUVsGyaNlwu5U J/6yeeUHW+b9wKcXt0adL/bW99eQcXsDKmQrhR+VM1gfR7oPkccjtRoees63g4IN c1gqf8Qe+0g3Hw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:56:15 2025 by rpki-client