This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft File: QZTZ3em51VD_NJfkNoP2iA1AMyM.mft (raw, json) Hash identifier: 12VMDcFGsNUBmZ+od8myPrioYC4Oe7j4bvMxrPvJEcY= Subject key identifier: C4:8B:9C:09:58:ED:33:D7:B5:C4:6B:F9:16:BB:03:3C:60:F4:4A:DB Authority key identifier: 41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23 Certificate issuer: /CN=4194d9dde9b9d550ff3497e43683f6880d403323 Certificate serial: 019B59E3817C9669658A70841C2ABB8918B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft Manifest number: 44 Signing time: Fri 26 Dec 2025 09:00:40 +0000 Manifest this update: Fri 26 Dec 2025 09:00:40 +0000 Manifest next update: Sat 27 Dec 2025 09:00:40 +0000 Files and hashes: 1: QZTZ3em51VD_NJfkNoP2iA1AMyM.crl (hash: TMsi4VHpdu4I1ChApP8fgTJmfIAdKPbFMUTwIWWBAnc=) 2: lVpBRIi3PbL0pxFTOHIPsen8YRw.roa (hash: Ck8BBcqupqvNYzNl6UXJrtFbj/DxuvN1NlgRMuprHBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:81:7c:96:69:65:8a:70:84:1c:2a:bb:89:18:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4194d9dde9b9d550ff3497e43683f6880d403323 Validity Not Before: Dec 26 09:00:40 2025 GMT Not After : Dec 27 09:00:40 2025 GMT Subject: CN=c48b9c0958ed33d7b5c46bf916bb033c60f44adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:d3:0c:4a:21:5a:7b:7d:33:b8:3a:67:f1: 0a:df:83:99:08:d4:a7:3c:20:c3:36:fe:81:16:65: 3f:a8:23:7b:a2:48:84:54:20:86:6f:09:21:a8:b0: d4:8f:79:6b:32:41:ca:97:dd:92:76:8b:24:15:19: 5f:4e:1f:59:c7:30:54:9b:bc:48:bf:5b:ca:08:8b: b4:a9:b6:95:61:e3:c4:02:7f:99:f5:05:ea:c8:d5: 53:b7:32:d2:d2:f6:dc:b5:5f:cb:76:6a:ef:c2:bf: ca:fd:25:1f:1c:81:8c:74:8a:e5:10:c3:52:42:ea: 57:f8:47:58:1d:36:3f:cd:d3:32:c4:02:69:da:de: bf:b7:a2:30:38:f0:69:e8:e3:a8:50:33:6d:66:87: 7f:ed:a2:f6:45:77:bb:89:4b:a8:43:48:59:92:a4: 34:17:42:f2:b4:d3:e5:b4:0a:70:e9:e5:cd:35:fb: c8:48:59:4a:34:9c:32:86:60:0c:c8:fe:71:cb:7d: 9e:3c:c2:9d:6f:3c:af:fe:a5:4a:1f:65:cc:60:9a: 42:7e:ec:9f:84:28:4b:e4:b9:28:11:18:31:dc:17: 29:f0:a4:c6:7c:89:cb:67:00:ea:6f:b2:f4:b7:8a: 98:6a:c5:7f:f7:b2:1b:74:55:0d:17:fd:e9:21:ef: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8B:9C:09:58:ED:33:D7:B5:C4:6B:F9:16:BB:03:3C:60:F4:4A:DB X509v3 Authority Key Identifier: keyid:41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c2:c4:9d:04:64:af:e7:3d:5e:bd:18:5a:6b:b0:68:5d:d3: 74:1f:77:3a:5f:2e:c5:57:cc:57:d7:cf:9a:97:98:2a:16:1d: 9b:e3:cb:da:27:66:5d:76:cf:de:67:6a:cc:08:b9:7a:19:6e: 8c:14:54:ff:20:5b:d9:b7:b4:44:04:72:2e:cb:d5:60:1e:02: 29:1d:5f:05:cf:87:45:0f:53:ab:f3:62:e6:1a:ef:46:6d:e5: ab:a9:59:da:6d:1e:b3:39:b5:ce:0c:b4:66:41:3d:bd:d7:2d: a0:d9:23:4f:2b:8c:8f:41:4c:94:ff:06:22:f9:b2:81:0a:0e: 36:ca:d6:c3:94:4c:c7:e4:98:26:59:98:4c:85:4a:b6:f1:44: 7a:5f:71:81:d5:9f:d4:55:dd:31:44:c8:b2:ba:0d:7c:5b:86: 69:d7:fd:ae:ec:1b:5b:e0:a1:03:cd:61:b1:40:88:a5:5e:1c: 45:5c:3b:fc:ec:45:06:81:45:cd:85:7f:e5:61:67:fc:d1:3e: a1:35:1c:dd:be:0c:a0:a6:a8:e8:5c:07:bb:11:e9:43:76:8d: 84:d4:83:5a:e7:81:70:bb:f0:b7:ea:6d:b3:a3:e6:a2:9f:3c: 7e:6a:e2:fb:60:af:cf:2f:a3:02:9a:18:f3:16:2d:24:76:c5: 74:dd:0e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44F8lmllinCEHCq7iRi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTRkOWRkZTliOWQ1NTBmZjM0OTdlNDM2ODNmNjg4MGQ0 MDMzMjMwHhcNMjUxMjI2MDkwMDQwWhcNMjUxMjI3MDkwMDQwWjAzMTEwLwYDVQQD EyhjNDhiOWMwOTU4ZWQzM2Q3YjVjNDZiZjkxNmJiMDMzYzYwZjQ0YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDTDEohWnt9M7g6Z/EK34OZCNSn PCDDNv6BFmU/qCN7okiEVCCGbwkhqLDUj3lrMkHKl92SdoskFRlfTh9ZxzBUm7xI v1vKCIu0qbaVYePEAn+Z9QXqyNVTtzLS0vbctV/Ldmrvwr/K/SUfHIGMdIrlEMNS QupX+EdYHTY/zdMyxAJp2t6/t6IwOPBp6OOoUDNtZod/7aL2RXe7iUuoQ0hZkqQ0 F0LytNPltApw6eXNNfvISFlKNJwyhmAMyP5xy32ePMKdbzyv/qVKH2XMYJpCfuyf hChL5LkoERgx3Bcp8KTGfInLZwDqb7L0t4qYasV/97IbdFUNF/3pIe9xRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSLnAlY7TPXtcRr+Ra7Azxg9ErbMB8GA1UdIwQY MBaAFEGU2d3pudVQ/zSX5DaD9ogNQDMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80YTZhMDktMzg1My00NTRiLWFlMDkt ZmZhNzUxNGZhZDJlLzEvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80YTZhMDktMzg1My00NTRiLWFlMDktZmZhNzUxNGZhZDJl LzEvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcLEnQRk r+c9Xr0YWmuwaF3TdB93Ol8uxVfMV9fPmpeYKhYdm+PL2idmXXbP3mdqzAi5ehlu jBRU/yBb2be0RARyLsvVYB4CKR1fBc+HRQ9Tq/Ni5hrvRm3lq6lZ2m0eszm1zgy0 ZkE9vdctoNkjTyuMj0FMlP8GIvmygQoONsrWw5RMx+SYJlmYTIVKtvFEel9xgdWf 1FXdMUTIsroNfFuGadf9ruwbW+ChA81hsUCIpV4cRVw7/OxFBoFFzYV/5WFn/NE+ oTUc3b4MoKao6FwHuxHpQ3aNhNSDWueBcLvwt+pts6Pmop88fmri+2Cvzy+jApoY 8xYtJHbFdN0O2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client