This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json) Hash identifier: r1YUa1opGhAuclsFraQvHQNZvWciyH1kxt3rPGpKQt4= Subject key identifier: 2C:F1:08:0E:31:FD:E5:73:9E:8B:D5:73:77:C7:04:DF:4F:76:85:22 Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Certificate serial: 019B35327C42C08A893BCCB4D0D5DE922313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 06:00:59 +0000 Manifest this update: Fri 19 Dec 2025 06:00:59 +0000 Manifest next update: Sat 20 Dec 2025 06:00:59 +0000 Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=) 2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: rBv4XDOl4fkGsfuJlPqsI7O0fA7OyXQNOzw8ay/rv+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7c:42:c0:8a:89:3b:cc:b4:d0:d5:de:92:23:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Validity Not Before: Dec 19 06:00:59 2025 GMT Not After : Dec 20 06:00:59 2025 GMT Subject: CN=2cf1080e31fde5739e8bd57377c704df4f768522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:52:b9:9a:b9:55:f2:ef:2e:5e:5c:d4:99:b1: 39:63:a7:61:7d:c4:0c:d5:f3:8a:72:2b:59:a4:89: 2c:b7:a0:bd:ad:c3:7e:85:86:30:28:b8:5d:cc:70: 13:b2:2e:3b:de:1f:68:71:b7:63:23:63:17:49:21: 34:c0:26:68:4a:ba:7c:d5:5a:35:5a:95:6f:fc:06: 89:c4:9b:6a:1f:c4:95:62:79:42:e0:11:6f:b1:55: fe:8c:01:3e:88:8e:fd:6b:b0:db:57:07:8e:a7:b8: a1:14:d1:87:3c:08:db:83:c0:21:d2:fe:04:23:03: 8c:a4:4b:1e:d3:b6:ca:9e:56:be:13:80:ef:5f:77: 10:be:54:9f:62:a5:16:88:e4:55:17:24:08:a0:ba: e1:ed:be:cf:af:08:49:ca:a9:9a:cc:3f:19:67:80: 6a:f1:0a:62:bf:8a:6e:7c:b6:3a:91:aa:df:98:30: 98:80:f2:29:bc:14:17:e8:95:73:7a:2f:40:a9:73: 1d:94:72:d1:0f:34:61:f7:e9:6a:ab:bf:4a:7b:84: 79:be:df:4e:6d:6b:57:77:84:1f:b9:6c:d6:f2:4d: a3:84:47:45:4f:c4:d3:d9:cf:6c:8c:c7:8e:a8:10: 4c:06:3e:ce:1e:08:7c:f1:c3:85:57:03:0a:ac:e3: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:08:0E:31:FD:E5:73:9E:8B:D5:73:77:C7:04:DF:4F:76:85:22 X509v3 Authority Key Identifier: keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:10:54:c5:65:cc:9d:46:be:58:2e:9e:1d:87:c4:d3:0c:8e: a1:27:f0:94:ab:fc:4c:de:49:18:d5:24:ea:c3:f7:c5:f7:bc: 38:bc:ff:f0:6f:80:a5:78:3c:f1:8b:6d:07:cb:2a:e4:86:ec: 3e:89:8a:d2:70:cb:6a:14:45:84:a6:34:39:8a:36:43:93:82: 15:49:d6:61:d7:29:aa:5c:70:95:0a:01:ca:5d:54:ed:fb:b5: b6:e1:27:46:81:ee:ce:a7:3b:b5:be:b2:6f:9b:59:30:80:f0: 75:f6:8e:16:54:9c:a1:c5:74:31:ff:28:02:7b:c1:ae:38:e5: 9e:6c:fe:0d:a1:77:4a:8a:7f:15:70:21:da:9a:c9:e4:56:5c: fe:8d:32:71:88:5a:12:62:6a:f7:03:05:d6:34:cd:d4:e6:8f: b8:6c:65:91:9c:0b:04:cd:3a:14:a5:93:bb:2e:42:44:fb:b9: 09:f2:ff:18:89:40:11:d2:aa:78:b2:81:68:df:28:1c:d6:b5: 79:33:86:c3:a0:97:de:08:8b:9c:8c:bb:3d:8d:ad:eb:20:64: 9e:9c:d8:f3:82:de:3a:fc:39:5e:dc:9e:39:24:c0:58:e9:20: 3e:50:f8:01:05:0b:6a:18:95:c8:79:a1:c0:89:bf:2f:ea:7d: cb:51:d5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MnxCwIqJO8y00NXekiMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODZlNmI5ZDFmNzhjOTRkNjNmYWM5MzRhYjlhYWRjMGM5 NmQ0M2UwHhcNMjUxMjE5MDYwMDU5WhcNMjUxMjIwMDYwMDU5WjAzMTEwLwYDVQQD EygyY2YxMDgwZTMxZmRlNTczOWU4YmQ1NzM3N2M3MDRkZjRmNzY4NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VK5mrlV8u8uXlzUmbE5Y6dhfcQM 1fOKcitZpIkst6C9rcN+hYYwKLhdzHATsi473h9ocbdjI2MXSSE0wCZoSrp81Vo1 WpVv/AaJxJtqH8SVYnlC4BFvsVX+jAE+iI79a7DbVweOp7ihFNGHPAjbg8Ah0v4E IwOMpEse07bKnla+E4DvX3cQvlSfYqUWiORVFyQIoLrh7b7PrwhJyqmazD8ZZ4Bq 8Qpiv4pufLY6karfmDCYgPIpvBQX6JVzei9AqXMdlHLRDzRh9+lqq79Ke4R5vt9O bWtXd4QfuWzW8k2jhEdFT8TT2c9sjMeOqBBMBj7OHgh88cOFVwMKrOMSIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzxCA4x/eVznovVc3fHBN9PdoUiMB8GA1UdIwQY MBaAFEGG5rnR94yU1j+sk0q5qtwMltQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQt ZDc4NzY2ZDhjODU4LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQtZDc4NzY2ZDhjODU4 LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhBUxWXM nUa+WC6eHYfE0wyOoSfwlKv8TN5JGNUk6sP3xfe8OLz/8G+ApXg88YttB8sq5Ibs PomK0nDLahRFhKY0OYo2Q5OCFUnWYdcpqlxwlQoByl1U7fu1tuEnRoHuzqc7tb6y b5tZMIDwdfaOFlScocV0Mf8oAnvBrjjlnmz+DaF3Sop/FXAh2prJ5FZc/o0ycYha EmJq9wMF1jTN1OaPuGxlkZwLBM06FKWTuy5CRPu5CfL/GIlAEdKqeLKBaN8oHNa1 eTOGw6CX3giLnIy7PY2t6yBknpzY84LeOvw5XtyeOSTAWOkgPlD4AQULahiVyHmh wIm/L+p9y1HVSw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:12:53 2025 by rpki-client