This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json) Hash identifier: H1CrzbhHsq1sRdUesber8UW1nwf8uUAj/MGLEbtRSR0= Subject key identifier: 6C:B1:25:46:88:4A:92:35:A9:60:F0:5E:CE:F1:98:ED:0C:F1:68:69 Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Certificate serial: 019B3456A3D42F013965B2DEAC2484B86B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft Manifest number: 1715 Signing time: Fri 19 Dec 2025 02:00:51 +0000 Manifest this update: Fri 19 Dec 2025 02:00:51 +0000 Manifest next update: Sat 20 Dec 2025 02:00:51 +0000 Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=) 2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: CA+KqWQbsbPyVqDYbU0fjkQH1NHgtGwLpT2lPB05ztM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:a3:d4:2f:01:39:65:b2:de:ac:24:84:b8:6b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Validity Not Before: Dec 19 02:00:51 2025 GMT Not After : Dec 20 02:00:51 2025 GMT Subject: CN=6cb12546884a9235a960f05ecef198ed0cf16869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:ab:9c:a0:67:47:b7:d0:15:44:d7:b7:db: 11:7c:d3:f6:ed:fc:80:dd:b1:d7:00:4d:e8:03:ea: 40:27:2c:1e:36:24:5a:1c:09:c0:5a:1b:41:83:c1: 08:14:f7:f3:e0:45:8b:31:df:35:91:4c:fe:f1:5d: d5:9c:97:38:d8:b6:59:47:30:97:d4:5a:41:cc:5e: 1f:af:6a:8e:27:69:34:16:9d:21:a9:32:6b:f5:1c: c3:85:03:18:33:cc:2f:08:0d:f2:df:c7:ac:9d:2f: 09:80:b5:04:27:b1:d8:97:13:3a:3a:0f:06:c4:6f: b9:05:8e:a7:5d:20:c5:a5:6e:a7:7e:d1:6d:2a:32: 01:83:1d:5a:13:03:35:a6:4a:2a:32:83:80:a2:39: 8a:f9:d3:5e:f0:d4:f2:e2:9c:df:ff:68:e7:7d:f5: 90:b3:66:93:51:97:d1:8c:27:a4:f2:ba:15:a9:c6: ad:d8:0c:7b:6c:8e:78:62:78:62:45:0c:26:27:95: 7a:3e:58:cd:0a:8a:7d:cf:58:35:0b:89:b9:0c:e2: b8:51:01:ed:16:65:e2:05:58:26:7e:6e:f8:60:9a: 93:8d:b6:8d:8d:7d:8c:6d:83:57:7a:b8:af:c6:5f: e7:4c:f1:ce:b2:ef:cb:f7:09:35:45:6d:aa:dd:45: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B1:25:46:88:4A:92:35:A9:60:F0:5E:CE:F1:98:ED:0C:F1:68:69 X509v3 Authority Key Identifier: keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:c9:ad:b5:a0:05:8d:86:8a:6b:73:da:47:d3:48:10:8f: b8:e9:96:8e:9d:47:2f:a4:a5:e6:a3:60:56:e7:e7:c4:71:ec: f3:fb:bf:79:13:78:40:54:75:5f:01:0a:dc:07:6e:bf:0c:f6: 02:5c:d4:04:8e:f7:01:da:59:ec:a3:de:e6:e2:e1:1c:9c:1f: b3:f4:70:e5:96:db:66:e5:c7:80:91:58:85:35:ea:af:29:a4: 2b:11:88:96:b1:df:96:0a:f0:e9:2f:9c:99:3f:9f:42:ef:d3: 59:a7:d9:02:40:ee:79:3b:60:b1:c2:ac:8a:f4:db:df:c4:8d: 75:a5:b4:20:4b:1c:4f:5f:d6:e0:35:31:f2:a6:37:19:56:03: d0:58:d6:31:5f:61:13:4b:fa:f9:38:c3:9c:ea:47:32:c1:79: 51:21:28:88:3e:12:0c:18:2d:30:d3:41:21:06:ff:86:db:fc: d8:4b:1a:75:90:44:e6:45:d4:d0:65:8a:2e:39:f1:f4:65:b4: 2b:45:9b:de:02:1e:c4:2f:d2:8a:f0:50:9d:28:86:12:15:72: f0:ba:cf:88:45:86:6e:5a:2a:a2:0d:1d:72:f2:ee:a9:c0:a2: 40:8c:c8:5a:45:df:7f:88:c2:b3:5a:be:1b:6e:c1:8f:67:4b: 8f:25:b6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VqPULwE5ZbLerCSEuGsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl MzlhYzYwHhcNMjUxMjE5MDIwMDUxWhcNMjUxMjIwMDIwMDUxWjAzMTEwLwYDVQQD Eyg2Y2IxMjU0Njg4NGE5MjM1YTk2MGYwNWVjZWYxOThlZDBjZjE2ODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPurnKBnR7fQFUTXt9sRfNP27fyA 3bHXAE3oA+pAJyweNiRaHAnAWhtBg8EIFPfz4EWLMd81kUz+8V3VnJc42LZZRzCX 1FpBzF4fr2qOJ2k0Fp0hqTJr9RzDhQMYM8wvCA3y38esnS8JgLUEJ7HYlxM6Og8G xG+5BY6nXSDFpW6nftFtKjIBgx1aEwM1pkoqMoOAojmK+dNe8NTy4pzf/2jnffWQ s2aTUZfRjCek8roVqcat2Ax7bI54YnhiRQwmJ5V6PljNCop9z1g1C4m5DOK4UQHt FmXiBVgmfm74YJqTjbaNjX2MbYNXerivxl/nTPHOsu/L9wk1RW2q3UXhdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyxJUaISpI1qWDwXs7xmO0M8WhpMB8GA1UdIwQY MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1vJrbWg BY2Gimtz2kfTSBCPuOmWjp1HL6Sl5qNgVufnxHHs8/u/eRN4QFR1XwEK3Aduvwz2 AlzUBI73AdpZ7KPe5uLhHJwfs/Rw5ZbbZuXHgJFYhTXqrymkKxGIlrHflgrw6S+c mT+fQu/TWafZAkDueTtgscKsivTb38SNdaW0IEscT1/W4DUx8qY3GVYD0FjWMV9h E0v6+TjDnOpHMsF5USEoiD4SDBgtMNNBIQb/htv82EsadZBE5kXU0GWKLjnx9GW0 K0Wb3gIexC/SivBQnSiGEhVy8LrPiEWGbloqog0dcvLuqcCiQIzIWkXff4jCs1q+ G27Bj2dLjyW2Pw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:06:08 2025 by rpki-client