This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json) Hash identifier: bSlhGJAMVVCCtmkRbQMZOJw4utUZIdr8aEATPbE/zT8= Subject key identifier: EF:F9:CE:A9:AD:FB:D9:E9:95:36:EC:50:DA:21:1E:35:9D:9F:82:F3 Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Certificate serial: 019B5975FCA84BB437A61130CB61F2CD7C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft Manifest number: 062C Signing time: Fri 26 Dec 2025 07:01:03 +0000 Manifest this update: Fri 26 Dec 2025 07:01:03 +0000 Manifest next update: Sat 27 Dec 2025 07:01:03 +0000 Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=) 2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: +JfCd/oPI45G+Z4512ifySh0ZdAsB9DWGur2RSFPSAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:fc:a8:4b:b4:37:a6:11:30:cb:61:f2:cd:7c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Validity Not Before: Dec 26 07:01:03 2025 GMT Not After : Dec 27 07:01:03 2025 GMT Subject: CN=eff9cea9adfbd9e99536ec50da211e359d9f82f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:3e:38:e2:4f:ea:30:1e:c9:00:df:f6:03: a8:02:0b:61:e1:92:58:ba:3f:f0:64:78:13:de:57: e7:c8:37:13:d4:27:ed:3f:2b:7a:20:d6:87:9b:68: 42:b0:fd:60:96:6f:80:ae:f4:a2:cc:01:5d:e7:85: 53:b9:2c:01:0e:3b:18:4a:c9:a1:3f:bb:97:49:69: 46:2a:e7:06:92:2f:f0:2e:60:f3:b9:4f:17:2f:f9: 43:20:ba:39:6d:f4:e3:ec:43:8d:10:a1:4e:bf:1e: 0a:55:60:20:78:91:79:58:d6:af:06:34:07:ab:04: 6b:05:8d:04:26:db:af:9b:2c:f9:18:bf:80:bf:a6: 18:4c:a6:23:68:e8:98:18:bf:01:f2:a9:fa:4a:a5: 43:6e:74:85:1a:1b:20:2d:64:ff:37:f0:06:3b:eb: a6:db:26:1e:6e:8f:3a:cb:10:11:61:ec:13:73:e4: c2:92:87:8c:5f:cf:fd:d9:1e:c0:03:39:f9:d0:09: 86:3c:e9:a3:60:1e:39:1a:3b:26:4f:ca:81:93:01: 02:67:5d:e0:07:78:44:4a:e0:e1:84:9f:1c:bc:8e: 32:9f:e3:01:1b:a2:f5:cf:2b:c3:4d:b8:a6:e4:01: 73:f9:f6:be:e1:62:57:7f:a7:c7:cc:50:1d:9c:60: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:CE:A9:AD:FB:D9:E9:95:36:EC:50:DA:21:1E:35:9D:9F:82:F3 X509v3 Authority Key Identifier: keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5c:ee:9c:2b:26:ba:e4:f6:4b:51:4e:69:ee:38:71:78:80: 37:e5:e7:d6:55:0a:ba:c5:42:85:f9:02:fb:2c:45:72:c3:c3: 80:9d:94:09:75:03:94:ff:ee:7a:99:50:60:54:3d:b7:28:ac: c3:55:d4:73:c4:11:62:0e:73:e5:cc:60:9a:92:7d:ec:04:ba: d8:cb:75:a4:c9:a6:92:e6:ce:c5:ce:81:24:74:b1:13:66:06: ad:fb:f8:32:04:b7:45:37:59:99:97:a0:0e:5b:23:4f:34:ec: f1:3f:9b:3f:bd:dd:96:08:bc:0b:ec:20:34:cf:ab:46:88:e3: 06:cf:4b:d5:78:68:5a:54:d6:74:c6:16:c2:ea:5f:11:40:ad: 24:81:69:1e:64:88:65:84:c2:23:4c:fd:1a:e8:db:68:90:fb: ab:62:31:86:2b:fa:4b:79:24:9d:d8:52:f6:bf:dd:ca:6d:83: 42:e3:a0:10:cc:79:35:ec:1d:55:1c:57:ee:15:4c:7e:83:1c: 36:73:a9:34:7a:b1:72:b8:41:61:e4:33:7d:8a:2d:97:db:1b: 2f:ab:70:1f:91:6a:66:c5:17:73:a7:55:ea:39:4d:b7:c4:6c: 19:a5:d6:ce:6d:0e:0a:16:69:a1:1d:33:93:5c:02:a6:37:c8: c0:70:09:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfyoS7Q3phEwy2HyzXxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGYyZDE4MjlkNmZiOGQyNDdmYTRlOTY1OGVhMTdmMDZj MDBiMDUwHhcNMjUxMjI2MDcwMTAzWhcNMjUxMjI3MDcwMTAzWjAzMTEwLwYDVQQD EyhlZmY5Y2VhOWFkZmJkOWU5OTUzNmVjNTBkYTIxMWUzNTlkOWY4MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6I+OOJP6jAeyQDf9gOoAgth4ZJY uj/wZHgT3lfnyDcT1CftPyt6INaHm2hCsP1glm+ArvSizAFd54VTuSwBDjsYSsmh P7uXSWlGKucGki/wLmDzuU8XL/lDILo5bfTj7EONEKFOvx4KVWAgeJF5WNavBjQH qwRrBY0EJtuvmyz5GL+Av6YYTKYjaOiYGL8B8qn6SqVDbnSFGhsgLWT/N/AGO+um 2yYebo86yxARYewTc+TCkoeMX8/92R7AAzn50AmGPOmjYB45GjsmT8qBkwECZ13g B3hESuDhhJ8cvI4yn+MBG6L1zyvDTbim5AFz+fa+4WJXf6fHzFAdnGDyaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/5zqmt+9nplTbsUNohHjWdn4LzMB8GA1UdIwQY MBaAFKsPLRgp1vuNJH+k6WWOoX8GwAsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUt NTcwZmVjMjlkMTM5LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUtNTcwZmVjMjlkMTM5 LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFzunCsm uuT2S1FOae44cXiAN+Xn1lUKusVChfkC+yxFcsPDgJ2UCXUDlP/ueplQYFQ9tyis w1XUc8QRYg5z5cxgmpJ97AS62Mt1pMmmkubOxc6BJHSxE2YGrfv4MgS3RTdZmZeg DlsjTzTs8T+bP73dlgi8C+wgNM+rRojjBs9L1XhoWlTWdMYWwupfEUCtJIFpHmSI ZYTCI0z9GujbaJD7q2Ixhiv6S3kkndhS9r/dym2DQuOgEMx5NewdVRxX7hVMfoMc NnOpNHqxcrhBYeQzfYotl9sbL6twH5FqZsUXc6dV6jlNt8RsGaXWzm0OChZpoR0z k1wCpjfIwHAJRA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client