This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: c+pLG8NGSSMNdNqEYPda7dWJj6F7GlFfW86K8SeUNVI=
Subject key identifier: CA:36:ED:02:23:65:05:9D:B6:2E:CC:53:4A:1F:BA:A8:14:D9:79:1A
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019B19F1D6EF2AE83E1B9AE1342588CDCBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 05F9
Signing time: Sat 13 Dec 2025 23:00:38 +0000
Manifest this update: Sat 13 Dec 2025 23:00:38 +0000
Manifest next update: Sun 14 Dec 2025 23:00:38 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: WaAC9oaj+ptRLNJEcwbs8V4PNLWlBvQGcJml8upVzkE=)
3: lyYoYFNGC2A9WNKCueXrm4mkRZo.roa (hash: IZrpJH4Ut/OiG1jPgHzsJ5IYnAXiTXDkQvi3YTSJS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:19:f1:d6:ef:2a:e8:3e:1b:9a:e1:34:25:88:cd:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Dec 13 23:00:38 2025 GMT
Not After : Dec 14 23:00:38 2025 GMT
Subject: CN=ca36ed022365059db62ecc534a1fbaa814d9791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:95:a3:be:23:73:33:aa:27:cd:d7:d3:76:
0f:6b:aa:da:c3:14:86:27:24:b7:2b:95:39:f3:54:
b7:d4:13:7f:24:61:d9:da:90:15:9e:1d:5a:f7:cf:
77:b1:be:4e:a5:fb:90:83:50:f9:fc:a4:b2:97:27:
fe:58:16:83:1d:7d:1f:e7:47:92:a2:14:51:92:0d:
aa:bb:2c:dd:eb:a1:6f:d6:c0:97:87:06:e6:ac:24:
fb:a9:87:df:5a:74:7c:16:2c:3e:47:e6:a7:97:7e:
54:14:c1:eb:13:08:49:c9:6c:da:f1:5c:bd:24:b8:
ec:c7:d9:8d:5a:93:2b:ad:79:28:df:34:ae:f5:ad:
77:ae:e2:08:ba:28:7d:21:a8:14:a5:e3:d6:81:b0:
7c:3c:09:6b:33:84:00:dd:eb:f3:9b:d8:22:dc:b3:
ff:75:4c:92:b4:b1:3b:f3:26:28:4b:c5:ec:a6:4e:
6e:e1:2f:55:f6:4c:08:aa:f4:5b:5c:96:61:2a:b0:
98:8d:bf:42:79:7a:b7:4f:bc:82:2c:36:4a:e5:18:
dd:02:61:a1:2f:a6:05:51:88:8e:5c:51:79:7c:fd:
66:d2:9f:96:7a:c5:f4:8e:1b:69:22:d9:af:15:61:
52:32:3c:5f:db:66:13:76:30:19:39:8a:50:58:77:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:ED:02:23:65:05:9D:B6:2E:CC:53:4A:1F:BA:A8:14:D9:79:1A
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:1c:e4:50:b5:6c:4e:ee:e1:7c:cf:23:cf:5a:0a:06:19:
77:64:cb:4c:7e:f0:3f:7b:97:8c:05:2d:b5:68:f2:2e:01:2f:
23:15:7a:05:e6:96:55:be:d0:42:6b:c3:57:b2:7e:a6:f4:45:
5b:a1:95:39:3e:6c:c7:62:c1:ef:df:a6:76:4c:f9:aa:6a:95:
4f:04:64:bc:9f:27:0d:5d:c9:19:bc:0b:d2:b3:f4:bf:39:2d:
8e:d8:7c:bb:31:14:ab:84:b1:29:98:a1:ed:62:37:8b:94:85:
b5:cf:3e:b2:a2:f9:54:4c:dd:5b:57:5d:38:b2:bf:f3:59:6a:
68:86:de:a4:1c:b7:d8:2a:6d:c6:11:09:62:9c:a0:f1:02:79:
3c:ea:a5:ab:aa:5c:40:b1:f4:ec:f2:4a:2f:1f:d1:25:af:26:
71:94:26:ae:cd:b6:3d:d2:d8:34:62:fc:7f:a3:ef:61:d3:72:
06:a7:ff:f8:3f:d6:eb:42:8a:aa:9d:42:3b:4e:9f:12:14:45:
06:82:f4:50:e2:71:38:00:88:87:69:b0:04:ce:26:7e:4b:0b:
51:d2:a2:19:76:5b:0f:78:86:d6:65:2e:d5:1e:a1:dc:29:8a:
ae:cf:68:2a:6d:ea:08:6e:bb:17:bb:51:a5:ce:e2:64:d4:cf:
a6:d6:e8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsZ8dbvKug+G5rhNCWIzcugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWNiYTU4OTkyMGJlZWJiMTliYzU3MmFlNmQ1MDFiOGNm
NmJiZjAwHhcNMjUxMjEzMjMwMDM4WhcNMjUxMjE0MjMwMDM4WjAzMTEwLwYDVQQD
EyhjYTM2ZWQwMjIzNjUwNTlkYjYyZWNjNTM0YTFmYmFhODE0ZDk3OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWVo74jczOqJ83X03YPa6rawxSG
JyS3K5U581S31BN/JGHZ2pAVnh1a9893sb5OpfuQg1D5/KSylyf+WBaDHX0f50eS
ohRRkg2quyzd66Fv1sCXhwbmrCT7qYffWnR8Fiw+R+anl35UFMHrEwhJyWza8Vy9
JLjsx9mNWpMrrXko3zSu9a13ruIIuih9IagUpePWgbB8PAlrM4QA3evzm9gi3LP/
dUyStLE78yYoS8Xspk5u4S9V9kwIqvRbXJZhKrCYjb9CeXq3T7yCLDZK5RjdAmGh
L6YFUYiOXFF5fP1m0p+WesX0jhtpItmvFWFSMjxf22YTdjAZOYpQWHdcuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo27QIjZQWdti7MU0ofuqgU2XkaMB8GA1UdIwQY
MBaAFEIculiZIL7rsZvFcq5tUBuM9rvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQt
ZWMwMGUxYTI3Y2M4LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQtZWMwMGUxYTI3Y2M4
LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMAc5FC1
bE7u4XzPI89aCgYZd2TLTH7wP3uXjAUttWjyLgEvIxV6BeaWVb7QQmvDV7J+pvRF
W6GVOT5sx2LB79+mdkz5qmqVTwRkvJ8nDV3JGbwL0rP0vzktjth8uzEUq4SxKZih
7WI3i5SFtc8+sqL5VEzdW1ddOLK/81lqaIbepBy32CptxhEJYpyg8QJ5POqlq6pc
QLH07PJKLx/RJa8mcZQmrs22PdLYNGL8f6PvYdNyBqf/+D/W60KKqp1CO06fEhRF
BoL0UOJxOACIh2mwBM4mfksLUdKiGXZbD3iG1mUu1R6h3CmKrs9oKm3qCG67F7tR
pc7iZNTPptbowQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:01:55 2025 by rpki-client