This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json) Hash identifier: ZpxCth4cz/ygL0rSVLWY2xpSCNjIqKOCZrA7/FXt3N8= Subject key identifier: F6:DA:14:9C:44:A5:2F:E9:FD:24:B0:A3:3D:C0:60:E6:00:CE:8E:47 Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2 Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2 Certificate serial: 019B3A8F592B7E30BAB22D161FADCDF2F94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft Manifest number: 0896 Signing time: Sat 20 Dec 2025 07:00:31 +0000 Manifest this update: Sat 20 Dec 2025 07:00:31 +0000 Manifest next update: Sun 21 Dec 2025 07:00:31 +0000 Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: 9aDRo8cSMwpdSShZjtQckEajrcCmn0lHJhEzUwTB4l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:59:2b:7e:30:ba:b2:2d:16:1f:ad:cd:f2:f9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2 Validity Not Before: Dec 20 07:00:31 2025 GMT Not After : Dec 21 07:00:31 2025 GMT Subject: CN=f6da149c44a52fe9fd24b0a33dc060e600ce8e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:05:16:b3:74:ab:b7:d3:26:34:d1:84:28: 27:a4:00:e7:d8:76:38:c4:7c:8a:cc:54:4e:fb:55: 6a:93:18:0c:50:42:3d:f8:3a:9c:94:29:76:35:ca: 40:cb:32:e9:b3:6f:55:cf:2c:fb:23:f7:3f:f0:0c: 80:0c:77:08:6d:db:1c:e9:9b:ca:84:05:32:36:c5: ee:72:34:0d:15:ba:d4:77:12:1f:d0:a5:3b:2b:05: 7c:dc:54:1e:21:ed:e6:0e:22:67:6d:54:6c:17:b6: 7f:50:0e:d2:b5:76:a5:47:8b:b5:57:4e:b6:d8:e3: d6:95:64:0e:a3:97:30:e9:ef:15:f8:b5:b9:b8:a8: 80:19:b5:1a:77:bc:6f:9c:85:af:5d:8f:0c:fb:81: 97:1d:44:94:b0:fa:e2:ee:27:2f:d0:6d:22:5f:7d: 5d:21:c3:d4:37:d1:f6:49:f3:bd:0a:69:43:86:ea: b8:2c:3f:01:f8:c5:d0:7d:15:fd:f8:b4:c2:30:92: 44:75:25:bd:73:fc:e0:68:b9:79:d7:a7:89:9b:d5: 2b:6b:f5:c7:32:c3:f1:a3:3d:7a:27:c9:92:46:44: 7d:4b:e9:5d:48:7e:bb:71:89:47:0b:c0:0f:ca:f6: 9e:24:a4:ce:94:f5:87:32:a3:cc:4c:72:d6:2b:3a: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DA:14:9C:44:A5:2F:E9:FD:24:B0:A3:3D:C0:60:E6:00:CE:8E:47 X509v3 Authority Key Identifier: keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:bd:ed:d1:94:4e:19:a2:8d:37:07:de:79:fc:32:ae:2b: 5b:ec:fb:f8:21:53:8c:fa:1c:b1:cf:de:77:85:04:44:85:1f: a3:1f:33:76:12:cf:b2:d8:b8:aa:86:7c:d1:29:05:a8:71:28: 32:e9:9d:4d:40:2c:99:2b:d5:4f:a8:4e:91:76:7b:dd:04:ce: 0b:e4:c6:ec:d0:78:d7:9d:33:db:7d:c2:5a:06:f0:a8:fa:c3: e7:8f:13:ac:84:c3:81:1f:b7:bf:bb:59:08:62:fc:86:65:93: ee:21:1d:26:b6:22:0e:31:66:0e:6d:4f:0e:68:23:a3:43:d4: 2a:82:4a:5d:99:f9:aa:72:cf:07:98:bf:d9:8e:9c:a5:b9:8f: 64:40:5b:bb:b3:75:aa:f9:6a:d9:85:48:85:b9:11:d9:57:4c: 70:4b:cd:37:04:6a:39:ed:08:8d:aa:07:fe:c7:cc:74:b9:73: 18:59:e8:81:96:1e:bc:9f:70:9f:d3:0a:a0:5f:02:8c:9a:67: 85:a3:3e:b4:fc:2d:18:7c:21:da:5a:f6:c0:50:c5:9b:b1:4b: fd:be:18:84:b7:d3:84:e8:75:1a:89:ef:db:b6:f1:9c:b6:db: 70:5b:8c:e7:b1:d8:84:b3:c6:40:57:91:be:5d:98:67:37:2f: 59:c9:29:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j1krfjC6si0WH63N8vlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWU5NzY1ODY0YmQxMWQ0YTM0OTQyNmUzNzJlMTFhOTQz NDhkZTIwHhcNMjUxMjIwMDcwMDMxWhcNMjUxMjIxMDcwMDMxWjAzMTEwLwYDVQQD EyhmNmRhMTQ5YzQ0YTUyZmU5ZmQyNGIwYTMzZGMwNjBlNjAwY2U4ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7oFFrN0q7fTJjTRhCgnpADn2HY4 xHyKzFRO+1VqkxgMUEI9+DqclCl2NcpAyzLps29Vzyz7I/c/8AyADHcIbdsc6ZvK hAUyNsXucjQNFbrUdxIf0KU7KwV83FQeIe3mDiJnbVRsF7Z/UA7StXalR4u1V062 2OPWlWQOo5cw6e8V+LW5uKiAGbUad7xvnIWvXY8M+4GXHUSUsPri7icv0G0iX31d IcPUN9H2SfO9CmlDhuq4LD8B+MXQfRX9+LTCMJJEdSW9c/zgaLl516eJm9Ura/XH MsPxoz16J8mSRkR9S+ldSH67cYlHC8APyvaeJKTOlPWHMqPMTHLWKzqjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbaFJxEpS/p/SSwoz3AYOYAzo5HMB8GA1UdIwQY MBaAFEDul2WGS9EdSjSUJuNy4RqUNI3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NWQ3YjktY2NmOS00YjczLWI2Njkt MzUzM2E1MTJmY2Y3LzEvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NWQ3YjktY2NmOS00YjczLWI2NjktMzUzM2E1MTJmY2Y3 LzEvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq297dGU ThmijTcH3nn8Mq4rW+z7+CFTjPocsc/ed4UERIUfox8zdhLPsti4qoZ80SkFqHEo MumdTUAsmSvVT6hOkXZ73QTOC+TG7NB4150z233CWgbwqPrD548TrITDgR+3v7tZ CGL8hmWT7iEdJrYiDjFmDm1PDmgjo0PUKoJKXZn5qnLPB5i/2Y6cpbmPZEBbu7N1 qvlq2YVIhbkR2VdMcEvNNwRqOe0IjaoH/sfMdLlzGFnogZYevJ9wn9MKoF8CjJpn haM+tPwtGHwh2lr2wFDFm7FL/b4YhLfThOh1Gonv27bxnLbbcFuM57HYhLPGQFeR vl2YZzcvWckpqg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:52:19 2025 by rpki-client