This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json) Hash identifier: Y+uE8ly6KRIwcHt99OQGs07iAIm11deJg/RYoUl5HnI= Subject key identifier: 09:93:AD:9F:58:7A:77:34:45:9A:03:C1:03:29:43:7F:BD:2B:64:E7 Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf Certificate serial: 019AF653C44B416323D7263CAAEFC46F3F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft Manifest number: 16B8 Signing time: Sun 07 Dec 2025 01:01:16 +0000 Manifest this update: Sun 07 Dec 2025 01:01:16 +0000 Manifest next update: Mon 08 Dec 2025 01:01:16 +0000 Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: 6/BsRLEdxj4htqO/O/pfzcEigghVnN/S0zBHUfEkCkA=) 2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:c4:4b:41:63:23:d7:26:3c:aa:ef:c4:6f:3f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf Validity Not Before: Dec 7 01:01:16 2025 GMT Not After : Dec 8 01:01:16 2025 GMT Subject: CN=0993ad9f587a7734459a03c10329437fbd2b64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:94:32:37:05:ef:d8:12:19:2d:98:b1:04: 58:6d:60:ce:59:84:6d:3d:55:ba:42:40:f0:24:dd: d0:38:26:75:9d:ff:9e:d9:93:75:51:2d:4f:9d:ac: 34:5a:dc:5f:83:e0:b8:b5:77:3d:57:39:40:85:8d: 79:3f:43:91:e4:5a:c5:2a:c9:60:da:ce:f0:93:05: dc:ec:b2:ea:81:a9:64:88:6f:8d:05:b0:68:87:aa: 64:3d:bf:d8:62:ee:f7:72:e8:d0:6b:68:48:c7:ff: dc:c5:01:aa:61:3d:ca:78:e4:9d:04:27:0a:80:9f: 24:7d:47:51:03:7a:d0:5b:0c:ce:c3:a9:1b:fd:f1: f1:9f:52:70:68:d8:58:a2:41:c7:fc:65:d2:12:55: 62:27:a8:0a:48:d1:a9:bc:1a:8d:64:58:01:e0:7f: 8e:85:a9:25:e1:87:8d:e4:39:30:ec:42:4d:26:ca: 9f:84:7d:eb:37:e7:57:d1:6d:3a:7e:80:e7:fc:a8: 0d:02:7f:5c:19:6f:23:83:d4:85:58:d3:00:bc:46: c7:f0:bd:dd:88:4d:09:fd:c6:cd:64:b3:a8:f1:ad: 2e:9e:34:8e:f8:1e:0c:9a:1e:b8:0a:bf:95:a8:3e: 32:86:b5:c1:82:53:a3:ab:3e:06:80:c1:cc:11:ee: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:AD:9F:58:7A:77:34:45:9A:03:C1:03:29:43:7F:BD:2B:64:E7 X509v3 Authority Key Identifier: keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bd:95:ac:b0:c8:b9:00:fa:74:18:f3:bf:22:f4:76:b8:86: 47:1b:18:91:4c:37:39:d3:9a:0d:41:44:0e:b2:30:a8:11:1e: b5:77:f7:7a:8e:05:79:d7:e1:2f:6e:ea:2d:a7:41:7b:d7:d4: be:89:74:13:d7:2d:d8:8b:d5:58:1b:87:d9:fc:4d:e2:1c:6a: e9:e5:b8:68:ab:de:7b:16:74:52:89:92:7c:af:61:7f:4d:21: dc:14:24:b3:88:c8:80:11:f1:ba:a4:4e:c5:ae:1b:d7:a8:0b: ce:0f:a3:78:e0:ba:e5:eb:a8:23:3c:e9:bf:45:e8:18:92:b1: 22:90:16:c5:8e:d3:e2:f0:b9:39:71:a2:75:bf:da:28:97:47: 2d:c5:8f:04:47:38:00:ee:5a:60:cf:4e:31:1c:80:6b:49:6d: 89:7e:9c:0b:b8:61:41:e7:b1:01:df:30:5a:d0:06:cb:dc:fb: 6d:66:a1:c1:29:4c:45:96:13:da:d6:d8:10:da:a8:4a:db:b0: e7:c5:65:fc:a1:d4:c7:10:bf:0e:89:56:3f:b9:99:51:b9:a2: 70:91:e1:79:02:dc:aa:08:96:82:cd:ce:b2:9c:f2:65:18:2e: d6:60:8d:49:59:21:01:80:74:b1:92:dc:23:ee:cb:21:2c:1e: 1f:d6:4f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U8RLQWMj1yY8qu/Ebz8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODI2ZWU5MDI3MGZkZDE0MjNhZjgwOTA3MjYwMDY3MThk ZmM2Y2YwHhcNMjUxMjA3MDEwMTE2WhcNMjUxMjA4MDEwMTE2WjAzMTEwLwYDVQQD EygwOTkzYWQ5ZjU4N2E3NzM0NDU5YTAzYzEwMzI5NDM3ZmJkMmI2NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TeUMjcF79gSGS2YsQRYbWDOWYRt PVW6QkDwJN3QOCZ1nf+e2ZN1US1Pnaw0Wtxfg+C4tXc9VzlAhY15P0OR5FrFKslg 2s7wkwXc7LLqgalkiG+NBbBoh6pkPb/YYu73cujQa2hIx//cxQGqYT3KeOSdBCcK gJ8kfUdRA3rQWwzOw6kb/fHxn1JwaNhYokHH/GXSElViJ6gKSNGpvBqNZFgB4H+O hakl4YeN5Dkw7EJNJsqfhH3rN+dX0W06foDn/KgNAn9cGW8jg9SFWNMAvEbH8L3d iE0J/cbNZLOo8a0unjSO+B4Mmh64Cr+VqD4yhrXBglOjqz4GgMHMEe6IjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmTrZ9Yenc0RZoDwQMpQ3+9K2TnMB8GA1UdIwQY MBaAFEGCbukCcP3RQjr4CQcmAGcY38bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEt ZWU1ODZkMzc1YTU4LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEtZWU1ODZkMzc1YTU4 LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANb2VrLDI uQD6dBjzvyL0driGRxsYkUw3OdOaDUFEDrIwqBEetXf3eo4FedfhL27qLadBe9fU vol0E9ct2IvVWBuH2fxN4hxq6eW4aKveexZ0UomSfK9hf00h3BQks4jIgBHxuqRO xa4b16gLzg+jeOC65euoIzzpv0XoGJKxIpAWxY7T4vC5OXGidb/aKJdHLcWPBEc4 AO5aYM9OMRyAa0ltiX6cC7hhQeexAd8wWtAGy9z7bWahwSlMRZYT2tbYENqoStuw 58Vl/KHUxxC/DolWP7mZUbmicJHheQLcqgiWgs3OspzyZRgu1mCNSVkhAYB0sZLc I+7LISweH9ZP1A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:02 2025 by rpki-client