This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json) Hash identifier: b3+AyYXce+RTzPwcMkdLJZ4yhX0Enf61k7S2x6uWVb4= Subject key identifier: E0:E9:5C:D9:44:7F:7A:2C:B8:E5:B2:49:B3:E1:46:C1:BD:10:A5:DF Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Certificate serial: 019B4A71781684303236540DDCB360788182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft Manifest number: 0B77 Signing time: Tue 23 Dec 2025 09:01:48 +0000 Manifest this update: Tue 23 Dec 2025 09:01:48 +0000 Manifest next update: Wed 24 Dec 2025 09:01:48 +0000 Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: 56KrqjnF//+GB+lNFLD8t+zaHZz3iCBPA/oby5XjnIY=) 2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:78:16:84:30:32:36:54:0d:dc:b3:60:78:81:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Validity Not Before: Dec 23 09:01:48 2025 GMT Not After : Dec 24 09:01:48 2025 GMT Subject: CN=e0e95cd9447f7a2cb8e5b249b3e146c1bd10a5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:18:49:f4:0a:bf:bf:c5:4b:2c:bb:38:b4: 58:c3:a1:5d:c7:7c:24:1e:16:30:36:7d:0e:23:c3: 73:ac:4f:4f:49:6b:33:dd:c1:c1:20:a8:7c:2e:25: ef:25:16:79:f5:7d:79:55:45:02:98:ae:7f:98:b9: 4e:67:9c:3d:5f:70:ad:87:c6:78:c3:37:6c:18:cf: 3f:81:90:bd:3b:7a:52:cd:8b:25:22:82:8c:75:38: 8b:1d:b2:93:15:ef:aa:e5:9a:19:37:89:30:21:51: ff:48:bd:91:c9:dc:1f:24:2a:83:82:8f:42:9f:16: 8b:1e:6f:77:70:f0:d3:e5:54:a6:a7:ab:dd:e0:20: 4d:0f:56:f8:33:21:98:d9:c5:0e:6e:59:72:d5:60: a9:15:43:a6:a2:77:7c:f6:c4:db:9e:1f:98:09:7c: 8c:10:73:40:92:1d:f8:33:d4:59:9c:a5:67:1b:3b: 76:5a:9f:b6:73:75:55:2d:29:24:ad:52:20:35:ab: ac:3e:33:41:d4:75:a0:59:88:98:e8:ce:84:74:b3: 97:61:1b:a3:a4:e3:a2:c9:0c:94:a8:2b:ef:6b:d2: a5:b8:64:ef:8d:00:17:f3:8c:26:c3:80:82:38:3a: 68:12:41:28:25:e8:a3:0c:4d:4c:b7:b2:34:11:9a: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:5C:D9:44:7F:7A:2C:B8:E5:B2:49:B3:E1:46:C1:BD:10:A5:DF X509v3 Authority Key Identifier: keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c9:11:db:b7:91:41:4e:dd:4a:35:95:ff:cf:90:a7:15:e8: d5:a2:1c:3f:40:4d:a5:99:6c:e0:f4:27:c9:65:b7:8c:f7:c8: d5:da:e0:cf:21:ed:12:e0:45:b7:1b:39:76:14:61:4a:88:87: f2:ee:b1:46:07:45:e7:8a:2a:db:51:43:f8:f6:fd:89:f6:e4: 3f:46:db:bb:3a:11:f4:33:04:a5:8f:7d:a0:06:6c:12:98:5d: 83:91:e5:18:11:ce:48:d5:c8:2f:83:c9:5a:44:86:b1:bf:0a: 32:f9:36:dd:68:ab:ed:0b:22:ee:f9:5c:7d:9b:b7:59:92:cf: e3:9e:1f:c1:fe:8b:f7:21:a6:f7:bc:d4:20:fc:bd:f4:33:02: da:a3:f9:2a:65:20:2b:b6:b8:fd:b0:bd:ea:ee:0b:cd:c4:12: d1:98:aa:cd:34:f8:58:c1:d8:e1:cc:ff:73:c1:aa:3a:18:79: f7:6f:3b:60:0f:7c:3e:6b:80:bb:2a:c8:a9:89:5a:12:e6:7f: f4:de:cf:b3:58:06:07:b5:d9:b8:b1:fe:40:59:0b:09:9f:bd: 88:6f:5d:ed:f5:57:8e:3c:c9:f3:2a:68:26:06:e6:63:10:37: c3:9a:cd:93:27:72:c5:6e:8c:0a:7d:3b:b3:bd:6f:7c:f4:ac: c4:09:15:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcXgWhDAyNlQN3LNgeIGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl YTQ3NDMwHhcNMjUxMjIzMDkwMTQ4WhcNMjUxMjI0MDkwMTQ4WjAzMTEwLwYDVQQD EyhlMGU5NWNkOTQ0N2Y3YTJjYjhlNWIyNDliM2UxNDZjMWJkMTBhNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSQYSfQKv7/FSyy7OLRYw6Fdx3wk HhYwNn0OI8NzrE9PSWsz3cHBIKh8LiXvJRZ59X15VUUCmK5/mLlOZ5w9X3Cth8Z4 wzdsGM8/gZC9O3pSzYslIoKMdTiLHbKTFe+q5ZoZN4kwIVH/SL2RydwfJCqDgo9C nxaLHm93cPDT5VSmp6vd4CBND1b4MyGY2cUOblly1WCpFUOmond89sTbnh+YCXyM EHNAkh34M9RZnKVnGzt2Wp+2c3VVLSkkrVIgNausPjNB1HWgWYiY6M6EdLOXYRuj pOOiyQyUqCvva9KluGTvjQAX84wmw4CCODpoEkEoJeijDE1Mt7I0EZqBWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODpXNlEf3osuOWySbPhRsG9EKXfMB8GA1UdIwQY MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4 LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlckR27eR QU7dSjWV/8+QpxXo1aIcP0BNpZls4PQnyWW3jPfI1drgzyHtEuBFtxs5dhRhSoiH 8u6xRgdF54oq21FD+Pb9ifbkP0bbuzoR9DMEpY99oAZsEphdg5HlGBHOSNXIL4PJ WkSGsb8KMvk23Wir7Qsi7vlcfZu3WZLP454fwf6L9yGm97zUIPy99DMC2qP5KmUg K7a4/bC96u4LzcQS0ZiqzTT4WMHY4cz/c8GqOhh59287YA98PmuAuyrIqYlaEuZ/ 9N7Ps1gGB7XZuLH+QFkLCZ+9iG9d7fVXjjzJ8ypoJgbmYxA3w5rNkydyxW6MCn07 s71vfPSsxAkVZQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:52:51 2025 by rpki-client