This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json) Hash identifier: VEuajg+5AlHwOiNn1O1SdRHB9avxzrYXZB0I7zLVk6s= Subject key identifier: 50:E3:78:FD:95:D9:41:FD:43:60:50:EE:85:D4:C8:75:E7:57:2D:18 Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B25512EB81D5A24DD685757EC45642709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft Manifest number: 1317 Signing time: Tue 16 Dec 2025 04:00:35 +0000 Manifest this update: Tue 16 Dec 2025 04:00:35 +0000 Manifest next update: Wed 17 Dec 2025 04:00:35 +0000 Files and hashes: 1: AuKeMwICnv8GK3NJTUf6Verg3I8.roa (hash: kwdux9NYacYTU28nuaHLrfwEJdOFmVTpX4Lxa9A6UiM=) 2: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=) 3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: WY7D05srbuUad449cZ4z3hh9ZPPJ5aO8oL5Bj3jnWoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:2e:b8:1d:5a:24:dd:68:57:57:ec:45:64:27:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Dec 16 04:00:35 2025 GMT Not After : Dec 17 04:00:35 2025 GMT Subject: CN=50e378fd95d941fd436050ee85d4c875e7572d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:09:2e:ac:0b:c7:51:ff:a9:4b:81:bd:2c: 65:a8:37:87:65:1e:1e:3e:7e:a4:0d:80:d6:77:f7: 6d:86:18:ad:90:b4:17:7e:a1:eb:81:11:ef:c3:49: 43:85:12:aa:0a:75:44:fc:d7:e6:c9:8e:85:01:fe: 3d:ea:c2:06:89:2b:13:a5:8d:7d:1b:95:ed:27:c2: 94:b4:38:35:f5:1b:f7:b1:d5:a0:4d:06:28:22:c0: 91:04:be:5a:72:3f:54:2f:d6:3b:cd:48:68:22:81: f4:0b:97:92:c8:56:1a:c8:b7:71:7f:38:c3:1b:81: 07:18:ed:1f:68:b9:91:13:ab:4f:53:66:35:44:99: 1d:b7:d8:98:56:58:4f:59:c7:6b:0f:33:cb:e8:89: 7f:e7:76:94:84:2b:ee:0a:50:5e:d9:cf:59:81:00: 91:f4:bd:b2:01:99:16:4c:8e:0d:b2:f4:ae:95:8b: 5c:78:63:5c:f3:04:d2:99:7c:2e:75:14:8a:4d:7a: c9:5e:6a:ba:7b:44:01:da:70:db:af:84:b7:a3:de: 6b:07:27:2d:72:58:ea:01:e9:0f:cc:25:5f:37:bc: 51:2a:a0:d3:78:af:fe:02:8d:47:ee:01:2f:1f:18: 28:9b:dc:34:e1:9a:1f:37:82:b2:6f:6d:8e:a4:93: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E3:78:FD:95:D9:41:FD:43:60:50:EE:85:D4:C8:75:E7:57:2D:18 X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ea:91:fe:f1:fd:46:8f:55:fa:c3:5a:91:16:71:c2:94:89: 88:8c:ab:2a:7c:68:ae:26:7f:fa:08:a2:35:86:a0:36:20:81: 8c:d8:59:63:f4:40:e9:be:ad:ee:2b:b4:ea:00:d1:23:c1:3e: 95:3c:f1:45:91:7a:5a:22:ab:73:7d:b3:eb:cd:68:b3:14:db: 5f:41:3f:ed:b3:59:14:86:22:ed:91:3c:34:7f:4a:52:2c:b4: 2a:ba:7a:19:b0:0c:ba:e1:57:4d:76:68:bd:1f:c3:a0:b0:04: f2:dc:19:bf:09:d8:b3:fe:44:31:1f:40:0e:a3:3b:1c:a3:b5: dd:f1:09:88:00:b2:06:76:a7:17:d0:9b:d7:3d:e5:4d:29:54: 12:99:81:24:44:1f:bd:0a:58:98:76:03:e8:9e:d2:41:75:08: 0d:e7:68:d2:37:82:fb:b3:5c:0a:97:79:c3:e1:8b:4c:23:fc: 51:e5:5c:90:45:ee:42:52:60:61:54:30:c9:7d:e9:47:65:dc: e8:c7:4e:7b:17:02:cd:a1:bd:fd:c0:36:9b:8d:60:41:60:3d: 12:bc:80:74:19:c5:ee:96:b4:ef:f1:03:1d:60:74:bc:e3:c3: 4d:4f:dd:e1:a6:24:b2:20:9b:dd:82:5b:3f:37:32:7f:7e:d2: 77:9c:44:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUS64HVok3WhXV+xFZCcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjUxMjE2MDQwMDM1WhcNMjUxMjE3MDQwMDM1WjAzMTEwLwYDVQQD Eyg1MGUzNzhmZDk1ZDk0MWZkNDM2MDUwZWU4NWQ0Yzg3NWU3NTcyZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqAJLqwLx1H/qUuBvSxlqDeHZR4e Pn6kDYDWd/dthhitkLQXfqHrgRHvw0lDhRKqCnVE/NfmyY6FAf496sIGiSsTpY19 G5XtJ8KUtDg19Rv3sdWgTQYoIsCRBL5acj9UL9Y7zUhoIoH0C5eSyFYayLdxfzjD G4EHGO0faLmRE6tPU2Y1RJkdt9iYVlhPWcdrDzPL6Il/53aUhCvuClBe2c9ZgQCR 9L2yAZkWTI4NsvSulYtceGNc8wTSmXwudRSKTXrJXmq6e0QB2nDbr4S3o95rByct cljqAekPzCVfN7xRKqDTeK/+Ao1H7gEvHxgom9w04ZofN4Kyb22OpJNGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDjeP2V2UH9Q2BQ7oXUyHXnVy0YMB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOqR/vH9 Ro9V+sNakRZxwpSJiIyrKnxoriZ/+giiNYagNiCBjNhZY/RA6b6t7iu06gDRI8E+ lTzxRZF6WiKrc32z681osxTbX0E/7bNZFIYi7ZE8NH9KUiy0Krp6GbAMuuFXTXZo vR/DoLAE8twZvwnYs/5EMR9ADqM7HKO13fEJiACyBnanF9Cb1z3lTSlUEpmBJEQf vQpYmHYD6J7SQXUIDedo0jeC+7NcCpd5w+GLTCP8UeVckEXuQlJgYVQwyX3pR2Xc 6MdOexcCzaG9/cA2m41gQWA9EryAdBnF7pa07/EDHWB0vOPDTU/d4aYksiCb3YJb Pzcyf37Sd5xEdQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:22:09 2025 by rpki-client