This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json) Hash identifier: CSV78mDyweVUMyeGuvyzXAfgX0mjftyf3lPBTNMGfBg= Subject key identifier: C7:9C:CF:C4:59:43:A9:88:D3:7F:63:FF:FD:8E:DA:B6:CF:4C:FE:A8 Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Certificate serial: 019B348D3E2E6BBC8AA7AF3A1B6F2CD947C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft Manifest number: AC Signing time: Fri 19 Dec 2025 03:00:30 +0000 Manifest this update: Fri 19 Dec 2025 03:00:30 +0000 Manifest next update: Sat 20 Dec 2025 03:00:30 +0000 Files and hashes: 1: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (hash: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=) 2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: lnoj5C4WNYrGZBLosR3vd2XQfJnilvUqYOxSNfVYuN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:3e:2e:6b:bc:8a:a7:af:3a:1b:6f:2c:d9:47:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732 Validity Not Before: Dec 19 03:00:30 2025 GMT Not After : Dec 20 03:00:30 2025 GMT Subject: CN=c79ccfc45943a988d37f63fffd8edab6cf4cfea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:d1:c2:1e:11:68:3d:bd:db:85:62:70:d9: 5e:97:91:2b:d2:ca:0b:ca:b1:ee:5e:46:a0:1d:a2: 4f:5d:23:fa:6c:6a:8c:c0:89:1d:5e:93:12:d4:38: 1c:2b:b2:c6:cd:3b:25:eb:61:6d:39:47:c1:c3:66: ef:ea:c9:b8:fb:b8:88:af:86:f4:5b:57:6b:d8:d0: 4d:20:4d:16:e0:9b:4a:c6:e5:44:55:08:39:ee:50: cd:c3:34:7e:cd:96:af:d9:05:fa:ae:82:5a:16:f0: ab:f3:d4:0e:00:37:d2:d8:8b:7e:ac:1f:92:25:ed: 30:40:99:d3:1c:90:f8:bf:63:1e:53:7d:31:e6:dc: d4:c3:0a:13:78:95:5a:9e:88:52:75:1e:ee:fe:26: b5:67:c2:00:2f:80:b3:00:32:b7:b5:11:15:79:a1: e6:26:6f:b9:29:b6:58:84:9c:e2:34:5a:10:86:09: 2a:02:96:e8:9b:22:52:5f:86:de:aa:08:ec:5e:38: ea:5d:f6:b2:2e:88:65:3a:e9:9b:a0:6c:f7:e4:80: 10:ae:63:39:7e:ea:03:3c:ec:34:33:09:5c:f8:0b: 87:86:4b:49:dc:6d:1d:53:55:51:c9:38:cc:e4:a0: 20:91:13:ae:c2:7e:48:95:12:06:3e:64:0c:6f:a1: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9C:CF:C4:59:43:A9:88:D3:7F:63:FF:FD:8E:DA:B6:CF:4C:FE:A8 X509v3 Authority Key Identifier: keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:80:1d:7d:00:0e:8f:7b:21:57:10:54:e6:da:c8:3c:fa: 5a:98:8b:61:70:76:75:31:83:37:19:7e:42:f9:c4:26:a1:e6: 1a:08:2c:96:ba:38:e7:50:cf:d2:c9:dd:06:61:b6:aa:3a:1d: b8:2a:1b:57:f0:a4:81:d9:01:be:84:2d:22:16:cd:19:91:2b: 95:c0:88:0d:cb:8d:b5:2a:f1:9b:a4:39:d0:be:62:29:96:cc: e8:1e:ed:8a:14:64:de:b1:83:0f:b8:69:93:31:6c:6e:af:43: ea:ee:dd:26:0a:af:2e:20:9c:7b:fe:99:f7:d6:26:69:cb:9f: 8f:03:67:af:ce:b2:20:d9:2f:76:37:87:96:bf:58:86:b1:91: da:4a:d6:50:a9:a7:a9:ea:f8:36:60:ae:77:64:d7:c7:b4:3c: 8b:05:82:32:b7:3e:b4:ed:b5:18:d7:c0:1b:dd:23:c2:aa:ac: 9c:c7:fa:c4:80:ed:05:97:4c:22:9f:a7:d2:c8:66:d1:9c:a5: a7:c5:53:69:e4:4c:25:5a:75:29:5f:14:ea:4f:95:f8:d2:e1: 2a:df:23:25:e8:bb:f9:56:f4:61:ad:2f:b0:10:3b:80:0e:2c: 9d:3c:75:17:9a:76:c7:b8:b1:59:66:b4:cd:e1:2f:a8:de:e0: c3:6b:13:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jT4ua7yKp686G28s2UfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDRmNTNiMjEzZmQ1ZjZlNDZkZDNlZTNiN2U5ZDI4N2Zj OTE3MzIwHhcNMjUxMjE5MDMwMDMwWhcNMjUxMjIwMDMwMDMwWjAzMTEwLwYDVQQD EyhjNzljY2ZjNDU5NDNhOTg4ZDM3ZjYzZmZmZDhlZGFiNmNmNGNmZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIXRwh4RaD2924VicNlel5Er0soL yrHuXkagHaJPXSP6bGqMwIkdXpMS1DgcK7LGzTsl62FtOUfBw2bv6sm4+7iIr4b0 W1dr2NBNIE0W4JtKxuVEVQg57lDNwzR+zZav2QX6roJaFvCr89QOADfS2It+rB+S Je0wQJnTHJD4v2MeU30x5tzUwwoTeJVanohSdR7u/ia1Z8IAL4CzADK3tREVeaHm Jm+5KbZYhJziNFoQhgkqApbomyJSX4beqgjsXjjqXfayLohlOumboGz35IAQrmM5 fuoDPOw0Mwlc+AuHhktJ3G0dU1VRyTjM5KAgkROuwn5IlRIGPmQMb6HOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMecz8RZQ6mI039j//2O2rbPTP6oMB8GA1UdIwQY MBaAFKrU9TshP9X25G3T7jt+nSh/yRcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEt MTZhYjU3NDZlZjRlLzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80MmJlZDQtNDRkNy00ODBiLWJiZGEtMTZhYjU3NDZlZjRl LzEvcXRUMU95RV8xZmJrYmRQdU8zNmRLSF9KRnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrWAHX0A Do97IVcQVObayDz6WpiLYXB2dTGDNxl+QvnEJqHmGggslro451DP0sndBmG2qjod uCobV/CkgdkBvoQtIhbNGZErlcCIDcuNtSrxm6Q50L5iKZbM6B7tihRk3rGDD7hp kzFsbq9D6u7dJgqvLiCce/6Z99YmacufjwNnr86yINkvdjeHlr9YhrGR2krWUKmn qer4NmCud2TXx7Q8iwWCMrc+tO21GNfAG90jwqqsnMf6xIDtBZdMIp+n0shm0Zyl p8VTaeRMJVp1KV8U6k+V+NLhKt8jJei7+Vb0Ya0vsBA7gA4snTx1F5p2x7ixWWa0 zeEvqN7gw2sTUQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:08 2025 by rpki-client