This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft File: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft (raw, json) Hash identifier: krQNKFhtX3b2xVRBWAMYLKDsUT9mZdLiXBIMY1KjV98= Subject key identifier: E5:FB:D8:4D:5A:15:24:75:1F:83:D1:F6:0F:9B:10:63:20:33:B1:A3 Authority key identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36 Certificate issuer: /CN=4007f1baed066bdbced1cf4355191bf8ac47db36 Certificate serial: 019B5A88D0227A89028C8DF89F905210CDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft Manifest number: 27 Signing time: Fri 26 Dec 2025 12:01:14 +0000 Manifest this update: Fri 26 Dec 2025 12:01:14 +0000 Manifest next update: Sat 27 Dec 2025 12:01:14 +0000 Files and hashes: 1: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl (hash: qs/iwCzFBeNNHaKvRcZGEf75HGHcyixJ3vYTEjhq0+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d0:22:7a:89:02:8c:8d:f8:9f:90:52:10:cd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4007f1baed066bdbced1cf4355191bf8ac47db36 Validity Not Before: Dec 26 12:01:14 2025 GMT Not After : Dec 27 12:01:14 2025 GMT Subject: CN=e5fbd84d5a1524751f83d1f60f9b10632033b1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:46:fd:b3:c5:fd:f8:4d:17:7f:cb:f4:89: 91:4b:bf:0c:32:3a:41:ba:a6:69:a8:1d:d2:c7:76: c7:60:26:fa:00:3c:12:19:20:ed:1e:b7:94:e6:15: 6e:32:c6:93:d2:eb:55:16:22:6e:1c:a4:9b:00:99: 5d:c6:c4:69:ed:19:12:5f:95:d9:dd:8a:9d:f6:fa: 8d:02:99:f4:84:e8:f2:34:d2:94:1c:b8:c3:48:ff: cf:69:dc:62:ae:e3:e4:7e:da:a8:2f:1e:43:be:53: 53:b5:17:52:e9:1e:57:3b:3e:d2:b6:c4:7d:76:37: 66:56:77:78:86:6d:5a:0a:65:05:b0:cb:4c:3d:d8: a4:8d:84:5a:66:be:4e:bb:86:b7:9a:a0:cf:36:e2: 01:52:e1:ff:3d:36:bd:2a:8b:ee:f9:98:eb:f3:f3: 76:d3:67:c2:c0:e8:86:7f:95:22:a6:86:fa:99:c6: 13:5f:b6:23:6a:13:5b:91:b4:cd:f0:a7:17:e4:20: b0:7b:67:62:89:6c:62:8f:2f:6f:59:2a:c6:3c:1d: d7:16:0e:e2:93:39:cb:cc:d9:52:82:61:3a:e5:8e: 74:6d:40:9d:f0:fc:a2:9c:85:26:05:e3:8f:ee:2f: 09:46:00:c0:ee:c9:db:15:ab:87:b0:41:7d:7d:12: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FB:D8:4D:5A:15:24:75:1F:83:D1:F6:0F:9B:10:63:20:33:B1:A3 X509v3 Authority Key Identifier: keyid:40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c2:08:a0:ec:d5:7d:fc:ed:fb:ac:10:92:34:34:fc:ca:87: f2:b4:8a:ce:20:4d:fd:1e:41:b3:5e:16:e7:9b:a6:9d:ac:47: b8:3b:ae:87:2c:44:c0:a6:7a:68:2d:06:1a:08:bd:f7:4e:94: 3a:1c:c2:2f:72:df:b1:a4:d3:c7:db:6d:74:5d:1d:ea:69:cc: d0:21:50:c2:70:6e:aa:b8:50:05:ec:44:38:e2:62:9b:9f:6a: 65:3c:11:93:bc:37:47:bb:ef:b2:53:20:0c:c3:c1:11:fc:f0: cb:96:61:c8:cf:54:3d:20:44:71:78:82:7f:14:cc:14:89:58: ea:6c:30:ea:27:54:11:7c:48:71:72:27:0e:24:1e:72:39:4e: 82:7e:5c:0a:a2:da:34:05:a4:d8:9b:54:38:1f:3f:08:0c:bd: e1:54:db:25:60:4f:d4:71:26:d3:b4:6c:1b:ad:9d:cd:df:2d: 41:57:47:59:94:f3:9c:5d:1e:c3:ed:86:1d:b5:44:99:00:1c: c6:3f:11:9f:c4:6f:92:b4:ce:1c:68:f2:27:7a:24:d0:39:2a: ce:88:3f:f7:38:05:74:9c:26:14:5c:c9:ad:4a:ab:c8:7c:32: 21:f8:7e:2f:58:99:ba:65:71:1b:38:45:af:5a:00:46:5b:67: 13:b6:39:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNAieokCjI34n5BSEM3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDdmMWJhZWQwNjZiZGJjZWQxY2Y0MzU1MTkxYmY4YWM0 N2RiMzYwHhcNMjUxMjI2MTIwMTE0WhcNMjUxMjI3MTIwMTE0WjAzMTEwLwYDVQQD EyhlNWZiZDg0ZDVhMTUyNDc1MWY4M2QxZjYwZjliMTA2MzIwMzNiMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBBG/bPF/fhNF3/L9ImRS78MMjpB uqZpqB3Sx3bHYCb6ADwSGSDtHreU5hVuMsaT0utVFiJuHKSbAJldxsRp7RkSX5XZ 3Yqd9vqNApn0hOjyNNKUHLjDSP/PadxiruPkftqoLx5DvlNTtRdS6R5XOz7StsR9 djdmVnd4hm1aCmUFsMtMPdikjYRaZr5Ou4a3mqDPNuIBUuH/PTa9Kovu+Zjr8/N2 02fCwOiGf5Uipob6mcYTX7YjahNbkbTN8KcX5CCwe2diiWxijy9vWSrGPB3XFg7i kznLzNlSgmE65Y50bUCd8PyinIUmBeOP7i8JRgDA7snbFauHsEF9fRLkUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX72E1aFSR1H4PR9g+bEGMgM7GjMB8GA1UdIwQY MBaAFEAH8brtBmvbztHPQ1UZG/isR9s2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYWM0MjYtYmY5ZC00ZTE2LWI0Mzkt NzYzMWNmOGM0MTQ5LzEvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYWM0MjYtYmY5ZC00ZTE2LWI0MzktNzYzMWNmOGM0MTQ5 LzEvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMIIoOzV ffzt+6wQkjQ0/MqH8rSKziBN/R5Bs14W55umnaxHuDuuhyxEwKZ6aC0GGgi9906U OhzCL3LfsaTTx9ttdF0d6mnM0CFQwnBuqrhQBexEOOJim59qZTwRk7w3R7vvslMg DMPBEfzwy5ZhyM9UPSBEcXiCfxTMFIlY6mww6idUEXxIcXInDiQecjlOgn5cCqLa NAWk2JtUOB8/CAy94VTbJWBP1HEm07RsG62dzd8tQVdHWZTznF0ew+2GHbVEmQAc xj8Rn8RvkrTOHGjyJ3ok0Dkqzog/9zgFdJwmFFzJrUqryHwyIfh+L1iZumVxGzhF r1oARltnE7Y5Ig== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client