This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json) Hash identifier: FtfI22OYdOZtrSKUM77kl38gLt36OroNa5lcTfS2qoE= Subject key identifier: F4:3D:4F:B6:88:30:C9:10:4B:73:ED:5A:DE:8F:45:C0:5C:8C:02:B3 Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944 Certificate serial: 019B3833B5E2B58C4EA3D8D2DE0625C7D6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft Manifest number: 16D1 Signing time: Fri 19 Dec 2025 20:01:11 +0000 Manifest this update: Fri 19 Dec 2025 20:01:11 +0000 Manifest next update: Sat 20 Dec 2025 20:01:11 +0000 Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: 6/HYGxkNT/r8rPBy3wIOE7LtJD1AueyjmWY8ggBkCTw=) 2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:b5:e2:b5:8c:4e:a3:d8:d2:de:06:25:c7:d6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944 Validity Not Before: Dec 19 20:01:11 2025 GMT Not After : Dec 20 20:01:11 2025 GMT Subject: CN=f43d4fb68830c9104b73ed5ade8f45c05c8c02b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:11:d9:f5:be:fa:ae:6e:73:b3:c1:fb:1f: 38:92:03:22:cc:b3:f3:76:8b:b5:ab:56:8c:b6:1d: a5:c7:a8:74:7c:cc:d8:c5:d0:fc:1c:5f:06:da:64: 32:81:a3:f5:34:97:22:0c:48:5f:00:34:25:e2:3c: 24:35:8d:2f:55:b0:3b:a7:71:a9:46:82:35:cc:3b: 98:c2:ac:2b:cd:8d:8a:ed:86:8c:f6:75:d4:35:84: ce:8f:ef:f1:90:3f:5e:7c:b7:b0:60:50:63:e9:ce: 8b:4c:d9:dd:b4:4c:20:9f:6d:57:56:b6:6c:5c:69: ab:2c:40:80:b9:bf:06:7a:e1:35:73:c1:25:82:66: e9:2e:ca:56:e9:a5:39:44:a9:77:1c:38:7d:f8:3d: 29:09:a6:d1:b1:5c:4a:e9:31:d3:3a:3f:6e:45:4b: 94:c8:dd:04:86:10:76:34:47:af:99:7a:b4:13:8b: d8:c6:a4:57:d7:fb:1b:7a:bf:6b:24:01:86:59:73: eb:4f:0c:44:da:7a:42:97:0d:5c:49:c3:9a:b3:0d: 93:23:22:fc:ad:75:f3:f5:a1:70:a0:ea:58:03:e5: 6d:b9:09:3a:c2:0c:01:e8:5a:97:82:e3:34:13:1e: 61:39:bb:f7:a0:60:2b:dc:a3:cc:06:59:97:33:b9: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:4F:B6:88:30:C9:10:4B:73:ED:5A:DE:8F:45:C0:5C:8C:02:B3 X509v3 Authority Key Identifier: keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f5:f5:46:53:1f:06:31:46:7e:ea:bd:79:ea:09:4a:27:a0: 70:3b:40:99:2a:cd:11:1f:49:75:63:23:c9:39:f3:80:c4:17: 9a:a1:a5:31:2a:01:99:17:c8:9d:df:7c:d0:48:0d:2c:75:37: d2:6d:73:bc:f7:06:03:60:44:74:30:02:e5:43:d0:93:67:a5: 9d:72:46:e4:18:f9:dd:5b:6f:ca:60:e3:07:28:75:29:dc:6a: a9:e4:9a:e4:14:12:06:92:4d:ae:fd:77:ea:dd:68:9d:b7:82: 3e:38:90:1e:89:5b:a7:3d:f0:71:06:b9:9c:c6:d7:b9:9e:e3: 1a:44:b4:f6:42:9a:6b:c3:e1:49:45:31:c2:2d:5a:74:7c:fd: 34:2d:38:67:3c:6f:06:7a:f6:e9:08:b1:76:4f:8f:ef:bc:09: 6d:50:cf:1c:63:34:c1:f7:6b:c7:f0:cf:1c:94:34:d0:04:c3: 2b:8e:7b:ae:b7:cc:6a:ee:ea:39:f5:6c:68:be:ca:0d:83:dd: f8:d6:62:07:e2:4d:fe:c6:d7:bf:8f:c8:a7:38:35:06:b5:59: 6d:59:64:58:9e:b5:2a:ff:ca:4b:b2:00:7d:8f:87:eb:5c:71: 53:14:27:d4:a0:4b:98:92:aa:2c:79:09:32:7f:39:56:5c:0c: 87:45:64:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M7XitYxOo9jS3gYlx9bTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj NDc5NDQwHhcNMjUxMjE5MjAwMTExWhcNMjUxMjIwMjAwMTExWjAzMTEwLwYDVQQD EyhmNDNkNGZiNjg4MzBjOTEwNGI3M2VkNWFkZThmNDVjMDVjOGMwMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QER2fW++q5uc7PB+x84kgMizLPz dou1q1aMth2lx6h0fMzYxdD8HF8G2mQygaP1NJciDEhfADQl4jwkNY0vVbA7p3Gp RoI1zDuYwqwrzY2K7YaM9nXUNYTOj+/xkD9efLewYFBj6c6LTNndtEwgn21XVrZs XGmrLECAub8GeuE1c8ElgmbpLspW6aU5RKl3HDh9+D0pCabRsVxK6THTOj9uRUuU yN0EhhB2NEevmXq0E4vYxqRX1/sber9rJAGGWXPrTwxE2npClw1cScOasw2TIyL8 rXXz9aFwoOpYA+VtuQk6wgwB6FqXguM0Ex5hObv3oGAr3KPMBlmXM7nj1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ9T7aIMMkQS3PtWt6PRcBcjAKzMB8GA1UdIwQY MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5 LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPX1RlMf BjFGfuq9eeoJSiegcDtAmSrNER9JdWMjyTnzgMQXmqGlMSoBmRfInd980EgNLHU3 0m1zvPcGA2BEdDAC5UPQk2elnXJG5Bj53VtvymDjByh1KdxqqeSa5BQSBpJNrv13 6t1onbeCPjiQHolbpz3wcQa5nMbXuZ7jGkS09kKaa8PhSUUxwi1adHz9NC04Zzxv Bnr26Qixdk+P77wJbVDPHGM0wfdrx/DPHJQ00ATDK457rrfMau7qOfVsaL7KDYPd +NZiB+JN/sbXv4/Ipzg1BrVZbVlkWJ61Kv/KS7IAfY+H61xxUxQn1KBLmJKqLHkJ Mn85VlwMh0VkCQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:16 2025 by rpki-client