This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json) Hash identifier: /u0TDyldet3ca+tuOLHCy5x6fj21s1jTZMIFSXi4CC4= Subject key identifier: B9:F3:A4:B2:DB:DA:0E:29:76:15:F3:4B:80:49:5E:FE:AA:9D:3F:BE Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Certificate serial: 019B38A1F9061B2C86E248009C5A033C6239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 22:01:37 +0000 Manifest this update: Fri 19 Dec 2025 22:01:37 +0000 Manifest next update: Sat 20 Dec 2025 22:01:37 +0000 Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=) 2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: j4lyWGhgaapGy+aQYKJUDXRcsnVwOOQXCvwwXBKaVTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:f9:06:1b:2c:86:e2:48:00:9c:5a:03:3c:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Validity Not Before: Dec 19 22:01:37 2025 GMT Not After : Dec 20 22:01:37 2025 GMT Subject: CN=b9f3a4b2dbda0e297615f34b80495efeaa9d3fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:81:a9:6b:81:20:17:9f:50:31:d0:da:11: cf:e8:bc:7e:d6:00:72:df:e1:d3:c8:05:43:b0:ad: 7a:f4:32:73:73:9e:cf:6c:c5:d3:d9:50:f5:4b:76: f7:17:f6:e7:34:5b:d6:ca:d2:2b:e8:3d:b5:0b:38: a7:6c:a8:1a:25:d8:47:11:74:bb:18:46:a7:0b:35: 34:7f:23:bf:01:09:d5:61:62:c1:60:72:2d:b1:6a: 50:73:ad:85:24:77:24:97:e2:3a:91:c7:43:2b:75: 2a:72:38:ae:05:90:9d:dc:be:06:81:c3:ab:f1:af: c5:fc:35:36:bf:0b:bc:f0:81:52:52:29:f9:14:cc: 65:2b:48:92:84:b5:31:78:cc:47:86:e7:fe:00:56: 30:1c:12:9f:d7:5d:ce:78:ef:63:8c:77:5a:e6:73: 79:b6:e1:3c:9a:0a:21:61:b5:ee:d0:27:66:c9:53: bc:7c:e6:38:33:c4:ee:40:05:ae:61:27:cf:79:2a: 89:35:53:06:62:b8:a3:f7:88:3c:5d:7c:21:8d:83: 36:36:e3:35:4b:c0:f8:f7:d8:48:b9:c0:25:ae:28: 15:00:7f:7f:ee:ed:f7:65:23:08:64:ce:77:f6:55: a9:83:48:7a:99:30:6c:1a:f8:fe:d8:64:bd:c2:1e: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:A4:B2:DB:DA:0E:29:76:15:F3:4B:80:49:5E:FE:AA:9D:3F:BE X509v3 Authority Key Identifier: keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:84:fc:46:b8:12:2a:ee:6b:1d:2d:4d:ff:ac:bb:55:01:0d: 26:6b:59:55:5d:8c:73:be:11:f9:94:43:29:9f:d5:0a:b4:b3: 88:e7:b9:d7:aa:3d:31:2e:22:33:8d:75:cc:83:5c:f8:19:a3: ea:d6:83:fc:a0:5d:8c:cf:6a:86:2a:9f:1b:fa:df:cc:ee:83: 37:03:5b:21:3d:a1:c4:32:a1:c6:30:49:4f:61:b0:98:20:fe: a4:67:2f:7a:ad:a9:43:64:64:e5:11:20:63:9f:13:9a:aa:cb: 89:ef:de:87:f8:46:c3:ad:4e:7c:c3:15:30:61:b5:dc:ec:f6: 19:28:0f:b0:39:38:42:bb:fe:f8:03:5c:6e:e1:25:ea:18:e3: b1:6d:cb:87:cd:fb:95:26:c4:cf:eb:1f:8f:62:b5:1d:04:ec: 8a:69:0e:ec:f7:eb:e6:d5:f9:21:ef:48:1f:62:d3:66:19:65: a1:76:b4:00:77:8f:c3:52:d2:a2:cf:b8:ab:1c:da:08:32:9a: 73:2c:3c:e0:ce:fe:59:48:d2:98:95:4e:c9:de:6b:db:aa:0b: d1:c5:f1:e9:1f:7f:a7:c4:3a:28:dc:fd:48:d3:3b:c9:37:6b: 7c:15:5d:d1:6e:37:4e:17:06:b3:b4:a0:25:f5:bc:ab:36:1c: 2c:81:b6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ofkGGyyG4kgAnFoDPGI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw NDc3OWYwHhcNMjUxMjE5MjIwMTM3WhcNMjUxMjIwMjIwMTM3WjAzMTEwLwYDVQQD EyhiOWYzYTRiMmRiZGEwZTI5NzYxNWYzNGI4MDQ5NWVmZWFhOWQzZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iOBqWuBIBefUDHQ2hHP6Lx+1gBy 3+HTyAVDsK169DJzc57PbMXT2VD1S3b3F/bnNFvWytIr6D21CzinbKgaJdhHEXS7 GEanCzU0fyO/AQnVYWLBYHItsWpQc62FJHckl+I6kcdDK3UqcjiuBZCd3L4GgcOr 8a/F/DU2vwu88IFSUin5FMxlK0iShLUxeMxHhuf+AFYwHBKf113OeO9jjHda5nN5 tuE8mgohYbXu0CdmyVO8fOY4M8TuQAWuYSfPeSqJNVMGYrij94g8XXwhjYM2NuM1 S8D499hIucAlrigVAH9/7u33ZSMIZM539lWpg0h6mTBsGvj+2GS9wh5CgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnzpLLb2g4pdhXzS4BJXv6qnT++MB8GA1UdIwQY MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxYT8RrgS Ku5rHS1N/6y7VQENJmtZVV2Mc74R+ZRDKZ/VCrSziOe516o9MS4iM411zINc+Bmj 6taD/KBdjM9qhiqfG/rfzO6DNwNbIT2hxDKhxjBJT2GwmCD+pGcveq2pQ2Rk5REg Y58TmqrLie/eh/hGw61OfMMVMGG13Oz2GSgPsDk4Qrv++ANcbuEl6hjjsW3Lh837 lSbEz+sfj2K1HQTsimkO7Pfr5tX5Ie9IH2LTZhlloXa0AHePw1LSos+4qxzaCDKa cyw84M7+WUjSmJVOyd5r26oL0cXx6R9/p8Q6KNz9SNM7yTdrfBVd0W43ThcGs7Sg JfW8qzYcLIG2Jg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:49 2025 by rpki-client