This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json) Hash identifier: Y+YroOZEFgKcRW1nZ0O+IBx0izoWbwOgkul98uevv6A= Subject key identifier: 4B:F9:1E:01:36:83:AB:D0:78:A3:78:72:BC:ED:79:CB:C1:39:4C:98 Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99 Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99 Certificate serial: 019B390F38DAF70CF98455422A03BD021A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft Manifest number: 1356 Signing time: Sat 20 Dec 2025 00:00:57 +0000 Manifest this update: Sat 20 Dec 2025 00:00:57 +0000 Manifest next update: Sun 21 Dec 2025 00:00:57 +0000 Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: 6mmMxXx5xMy29MF2HLD8w0xBFLdFhSTJ6P4bSdycUdE=) 2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:38:da:f7:0c:f9:84:55:42:2a:03:bd:02:1a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99 Validity Not Before: Dec 20 00:00:57 2025 GMT Not After : Dec 21 00:00:57 2025 GMT Subject: CN=4bf91e013683abd078a37872bced79cbc1394c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:be:ab:c6:cb:22:09:1c:30:de:2e:a8:46:93: 76:6d:fc:dc:62:f3:59:e1:db:d9:b1:6b:71:bf:ea: 5e:97:a2:8c:d5:f8:29:2e:ce:9d:98:39:74:9e:8a: fe:d7:55:bb:af:f4:c7:62:dc:e4:b8:5a:e9:b1:62: a7:70:c1:55:ed:cd:b8:95:bc:9c:e9:14:c5:a0:5e: 21:74:4c:d9:01:c5:3d:3c:f9:c4:a8:cb:29:46:5a: ea:07:1e:ae:9d:fa:1b:2b:93:4f:e3:8a:55:58:5f: 7f:6a:2a:53:12:c7:7e:85:96:03:50:26:1f:dc:df: 68:8c:95:35:8e:fb:8a:9d:32:45:dd:0d:18:51:70: fc:24:ae:4c:5e:97:c9:40:47:1b:9c:48:d9:c2:92: 21:1b:67:40:eb:58:38:f1:94:27:6d:2e:ea:72:f1: 31:dd:76:ff:1e:2f:98:27:61:a7:eb:4c:37:48:af: bd:3a:bd:62:93:0c:7d:31:4e:3b:3c:cc:bf:97:c5: 6c:c1:d8:f3:53:e2:f6:fe:3d:e4:7c:6c:9c:05:ba: ac:20:52:f4:7b:ff:ae:f2:99:2a:c6:38:9c:d3:71: a2:a5:aa:e6:c5:0e:c8:26:e8:a2:ca:8f:47:20:b2: 75:93:1e:9d:5f:b4:04:b0:49:2c:e2:14:fe:53:ad: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:1E:01:36:83:AB:D0:78:A3:78:72:BC:ED:79:CB:C1:39:4C:98 X509v3 Authority Key Identifier: keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a9:f6:59:3a:b2:67:3c:50:48:e6:cc:7b:e2:e9:a6:14:99: db:0d:98:94:ad:66:f4:45:32:f6:88:04:a9:7c:6d:99:1d:80: d5:6e:e1:5a:af:62:c9:34:44:18:56:5d:56:6e:ba:ad:e7:cd: ca:cb:0e:8c:ba:67:44:8d:1d:74:2e:37:f8:b3:f6:8a:a6:c5: 7e:86:e5:72:c9:e2:48:aa:86:28:4b:4d:2a:e8:ee:b3:5c:1e: 73:46:96:33:0c:52:3d:d2:c4:e4:60:c9:d5:e8:c6:f2:6c:74: 61:c2:b6:da:ce:a7:1e:6e:96:2e:c7:69:88:6c:70:1c:c1:d6: b2:61:bd:14:1a:e6:a3:49:88:76:bd:20:30:23:19:51:a8:ca: 73:92:aa:81:f7:4a:8b:31:7f:3f:27:fd:b1:34:fe:9c:c5:b3: ff:ac:a5:1e:4f:a0:22:8a:a9:7d:8c:b0:6d:eb:75:32:c7:98: bf:b8:20:c4:2a:2a:72:b1:7d:ee:e6:3f:75:cb:9d:44:8f:d5: f3:47:8b:c5:f1:2d:5c:69:a4:b6:71:5c:19:7b:03:71:27:9e: e6:ac:66:4f:c7:27:22:16:e4:ca:89:97:c0:ba:40:7a:b5:f9: 66:43:de:43:a7:63:bb:0a:78:6b:9b:15:88:6c:0e:2f:12:68: 0c:04:40:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dzja9wz5hFVCKgO9AhpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk Y2NlOTkwHhcNMjUxMjIwMDAwMDU3WhcNMjUxMjIxMDAwMDU3WjAzMTEwLwYDVQQD Eyg0YmY5MWUwMTM2ODNhYmQwNzhhMzc4NzJiY2VkNzljYmMxMzk0Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b6rxssiCRww3i6oRpN2bfzcYvNZ 4dvZsWtxv+pel6KM1fgpLs6dmDl0nor+11W7r/THYtzkuFrpsWKncMFV7c24lbyc 6RTFoF4hdEzZAcU9PPnEqMspRlrqBx6unfobK5NP44pVWF9/aipTEsd+hZYDUCYf 3N9ojJU1jvuKnTJF3Q0YUXD8JK5MXpfJQEcbnEjZwpIhG2dA61g48ZQnbS7qcvEx 3Xb/Hi+YJ2Gn60w3SK+9Or1ikwx9MU47PMy/l8VswdjzU+L2/j3kfGycBbqsIFL0 e/+u8pkqxjic03GiparmxQ7IJuiiyo9HILJ1kx6dX7QEsEks4hT+U60juQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv5HgE2g6vQeKN4crztecvBOUyYMB8GA1UdIwQY MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3 LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKn2WTqy ZzxQSObMe+LpphSZ2w2YlK1m9EUy9ogEqXxtmR2A1W7hWq9iyTREGFZdVm66refN yssOjLpnRI0ddC43+LP2iqbFfoblcsniSKqGKEtNKujus1wec0aWMwxSPdLE5GDJ 1ejG8mx0YcK22s6nHm6WLsdpiGxwHMHWsmG9FBrmo0mIdr0gMCMZUajKc5KqgfdK izF/Pyf9sTT+nMWz/6ylHk+gIoqpfYywbet1MseYv7ggxCoqcrF97uY/dcudRI/V 80eLxfEtXGmktnFcGXsDcSee5qxmT8cnIhbkyomXwLpAerX5ZkPeQ6djuwp4a5sV iGwOLxJoDARADA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:11 2025 by rpki-client