This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json) Hash identifier: nbsaGgiArj8Pwc1A07H55cTBMOe4C5zp2k955abHC7M= Subject key identifier: 58:E8:35:71:88:E1:A3:9C:09:C6:A3:E8:01:11:EC:AE:75:C0:64:E4 Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Certificate serial: 019B2E54FE9CC139A3833B8D6C5526F5DCF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft Manifest number: 0686 Signing time: Wed 17 Dec 2025 22:01:20 +0000 Manifest this update: Wed 17 Dec 2025 22:01:20 +0000 Manifest next update: Thu 18 Dec 2025 22:01:20 +0000 Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=) 2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: /O7rZeDDiDV4W9gSt3q8GNxeaPuKB48cQruY41YIWiI=) 3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:fe:9c:c1:39:a3:83:3b:8d:6c:55:26:f5:dc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Validity Not Before: Dec 17 22:01:20 2025 GMT Not After : Dec 18 22:01:20 2025 GMT Subject: CN=58e8357188e1a39c09c6a3e80111ecae75c064e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:dc:df:a4:1e:c7:79:5b:d0:52:4c:11:f0: fa:ee:66:43:ab:70:83:b2:1e:51:fd:e5:17:2e:24: 70:ad:39:16:5d:84:c6:ed:6a:ee:dc:b2:5e:12:59: c5:1b:8b:cb:f4:ed:8f:58:e5:52:ab:52:c3:1f:cb: 6a:98:35:3e:ff:41:da:33:3f:85:2d:39:60:fa:11: e1:d7:07:00:8c:47:60:af:eb:99:15:64:69:b8:d5: 2b:e0:60:ca:bd:20:74:21:90:ca:2e:51:18:80:c9: fd:53:8b:59:97:ff:d0:19:c5:87:d8:78:0c:50:e1: 8a:4a:0d:7d:b7:7b:31:fe:5d:ac:01:39:0d:19:9b: 64:cb:d4:f1:27:88:e7:f0:6a:a5:a7:fe:cc:09:64: 50:38:ae:2a:b9:c7:6c:1f:7a:f4:44:a9:da:45:19: 87:14:5e:69:cf:c8:b4:85:20:25:dc:5d:c4:59:fa: fc:d5:bd:7b:fd:6c:52:bb:6a:e1:3e:42:2c:98:d6: 40:94:47:d1:d5:b2:e2:12:67:5e:da:9b:d5:76:69: cb:54:41:86:b2:16:21:42:78:1a:49:37:b0:95:7a: 78:8c:3c:20:33:5e:94:8a:da:45:06:5b:e4:a5:59: 42:80:7e:91:76:3e:a4:f0:c0:1f:6f:8e:73:b1:37: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:35:71:88:E1:A3:9C:09:C6:A3:E8:01:11:EC:AE:75:C0:64:E4 X509v3 Authority Key Identifier: keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:57:69:2e:1e:62:7a:dc:fb:b0:41:d7:25:df:c1:98:8d:bd: 25:10:f1:c9:71:7d:ea:23:f4:d2:16:83:da:d4:b4:0d:17:97: 74:98:ca:d2:63:b4:1d:84:08:0f:98:7e:e1:01:f3:5a:be:16: 11:8c:09:66:0b:20:10:91:ab:1f:09:f0:b4:10:2e:a4:c3:7f: 82:c7:70:7e:65:85:ec:34:36:7d:05:77:a1:bc:25:d5:af:97: c6:57:5d:7d:bd:c3:45:52:21:9d:93:19:82:05:f3:10:53:41: 4a:da:53:73:4d:55:92:9b:d6:bd:6f:28:e8:f6:cf:05:2b:a4: 6b:92:0f:6c:61:5b:82:c5:9a:27:f2:e2:68:1c:5e:06:9f:dc: 06:02:81:41:2c:35:ae:7b:7d:5d:c5:c0:fe:3c:c5:bb:45:99: 8d:72:cc:a4:49:01:f0:3f:61:da:91:dc:d8:68:de:ab:a7:74: 9e:65:3f:cf:c8:41:fd:b7:d7:27:5b:6d:d4:98:6a:09:0e:1f: e9:44:e8:b0:d5:01:b3:47:d7:9f:a0:2c:ee:09:8a:02:27:e4: 8a:06:bf:0e:75:56:d5:3e:10:a0:fc:98:32:4c:54:fa:96:8d: 2a:b0:fb:ed:5d:fa:eb:00:df:63:43:5d:a4:fa:46:e6:2c:03: a6:a1:5b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVP6cwTmjgzuNbFUm9dzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx MTcxZjEwHhcNMjUxMjE3MjIwMTIwWhcNMjUxMjE4MjIwMTIwWjAzMTEwLwYDVQQD Eyg1OGU4MzU3MTg4ZTFhMzljMDljNmEzZTgwMTExZWNhZTc1YzA2NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJPc36Qex3lb0FJMEfD67mZDq3CD sh5R/eUXLiRwrTkWXYTG7Wru3LJeElnFG4vL9O2PWOVSq1LDH8tqmDU+/0HaMz+F LTlg+hHh1wcAjEdgr+uZFWRpuNUr4GDKvSB0IZDKLlEYgMn9U4tZl//QGcWH2HgM UOGKSg19t3sx/l2sATkNGZtky9TxJ4jn8Gqlp/7MCWRQOK4qucdsH3r0RKnaRRmH FF5pz8i0hSAl3F3EWfr81b17/WxSu2rhPkIsmNZAlEfR1bLiEmde2pvVdmnLVEGG shYhQngaSTewlXp4jDwgM16UitpFBlvkpVlCgH6Rdj6k8MAfb45zsTfkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjoNXGI4aOcCcaj6AER7K51wGTkMB8GA1UdIwQY MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFdpLh5i etz7sEHXJd/BmI29JRDxyXF96iP00haD2tS0DReXdJjK0mO0HYQID5h+4QHzWr4W EYwJZgsgEJGrHwnwtBAupMN/gsdwfmWF7DQ2fQV3obwl1a+Xxlddfb3DRVIhnZMZ ggXzEFNBStpTc01VkpvWvW8o6PbPBSuka5IPbGFbgsWaJ/LiaBxeBp/cBgKBQSw1 rnt9XcXA/jzFu0WZjXLMpEkB8D9h2pHc2Gjeq6d0nmU/z8hB/bfXJ1tt1JhqCQ4f 6UTosNUBs0fXn6As7gmKAifkiga/DnVW1T4QoPyYMkxU+paNKrD77V366wDfY0Nd pPpG5iwDpqFbgw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:02:36 2025 by rpki-client