This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json) Hash identifier: Ks2gmtKv8zdZwOZSQeH/b/TZV9dq9lQ9aLhC+t8HeCk= Subject key identifier: 52:52:82:96:74:79:91:F0:FC:E7:A3:D0:D9:BA:45:C2:3D:5B:EA:99 Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027 Certificate serial: 019B5AF6B46FE92A6DD3A383A675B8D1039F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft Manifest number: 0F25 Signing time: Fri 26 Dec 2025 14:01:16 +0000 Manifest this update: Fri 26 Dec 2025 14:01:16 +0000 Manifest next update: Sat 27 Dec 2025 14:01:16 +0000 Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: YjzNapzkH+1tUCArG2CiLwWDcnp6VqXSw/wwED9fat0=) 2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b4:6f:e9:2a:6d:d3:a3:83:a6:75:b8:d1:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2abab75e746db1ecaa998759900399485093027 Validity Not Before: Dec 26 14:01:16 2025 GMT Not After : Dec 27 14:01:16 2025 GMT Subject: CN=52528296747991f0fce7a3d0d9ba45c23d5bea99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:ce:d3:d7:b8:66:b5:cb:4c:46:44:73:cf: 3a:f7:9a:79:dd:e3:a7:32:25:6b:d9:3e:e0:43:76: dc:e0:91:23:a5:74:de:9e:42:04:4c:aa:fc:23:3a: 86:58:33:47:be:14:fb:8e:cf:fc:e2:d1:4f:c4:f7: f2:f9:9e:84:ca:e9:9b:31:0d:ed:4b:2d:ae:93:57: 3f:89:3e:08:27:e5:7c:30:d6:f7:8f:c8:98:c6:4a: 09:b0:3f:4f:5e:77:bb:d7:7c:72:f2:29:4d:ec:ca: 58:fe:1e:23:c0:1c:bb:d9:63:db:6b:38:54:34:db: 65:82:45:42:f7:5c:00:32:64:a0:82:f9:c1:50:9f: 5f:d3:d3:6c:21:9a:c7:79:e5:fc:b6:58:78:6c:c4: f5:1b:90:0c:05:de:81:91:22:4d:e1:7c:c2:8e:7d: 6a:7e:9a:70:b1:d7:7e:89:fe:33:22:1a:d8:33:5a: 76:29:cc:ec:db:82:a3:97:92:8e:d0:57:ca:9f:00: 4b:90:18:48:3a:03:e0:63:3c:4f:b2:5d:f2:67:f8: 3d:61:4b:db:d7:d7:60:d5:1b:33:ec:04:e8:7f:16: 43:46:a2:7e:85:59:13:9b:85:1c:bf:3b:a4:22:be: d6:80:cb:37:e4:ff:c1:93:c3:a1:05:32:65:6b:1d: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:82:96:74:79:91:F0:FC:E7:A3:D0:D9:BA:45:C2:3D:5B:EA:99 X509v3 Authority Key Identifier: keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:92:83:ea:fe:57:ee:4e:f6:1b:1d:ec:13:30:18:49:97:61: ca:dd:02:79:f9:6d:70:91:46:a4:ab:34:29:d8:de:86:75:6a: ac:05:48:b1:a1:d3:cb:9f:cd:3b:49:f1:68:7d:e7:cb:61:e3: d9:79:03:66:a7:b2:26:d2:fc:1b:53:3d:04:bf:0a:84:8d:b2: f3:de:8b:0b:9c:d8:a5:97:5b:2e:66:d2:aa:1d:14:77:a3:37: 04:28:13:59:ad:35:d1:f1:5e:d4:38:f0:13:1a:89:cd:d4:1f: 96:44:76:cd:5c:e3:ba:a4:71:11:4f:4c:19:86:ac:36:95:c0: 42:c3:f7:a5:1d:75:58:6f:fc:20:17:92:22:70:ac:df:ad:d2: 45:a8:6a:3e:e2:f0:4b:b8:3b:fb:3b:5d:4b:2a:6c:46:80:37: d2:62:45:4b:b9:67:90:5c:75:33:6f:43:97:b6:80:c1:61:dc: e0:a1:1f:b3:f0:9b:21:ff:9d:2b:9b:4e:eb:07:14:dd:3d:22: cb:e4:95:62:21:ca:47:fa:be:b5:0a:ac:09:a9:8d:80:6e:9d: fd:b7:7e:89:db:1a:52:3c:f6:b2:e6:3f:1c:6d:0b:9c:df:24: 5e:a3:dc:5c:7f:fb:05:2f:cf:f9:50:2f:f0:38:fd:9c:3c:cc: 90:48:a3:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rRv6Spt06ODpnW40QOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw OTMwMjcwHhcNMjUxMjI2MTQwMTE2WhcNMjUxMjI3MTQwMTE2WjAzMTEwLwYDVQQD Eyg1MjUyODI5Njc0Nzk5MWYwZmNlN2EzZDBkOWJhNDVjMjNkNWJlYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hjO09e4ZrXLTEZEc88695p53eOn MiVr2T7gQ3bc4JEjpXTenkIETKr8IzqGWDNHvhT7js/84tFPxPfy+Z6EyumbMQ3t Sy2uk1c/iT4IJ+V8MNb3j8iYxkoJsD9PXne713xy8ilN7MpY/h4jwBy72WPbazhU NNtlgkVC91wAMmSggvnBUJ9f09NsIZrHeeX8tlh4bMT1G5AMBd6BkSJN4XzCjn1q fppwsdd+if4zIhrYM1p2Kczs24Kjl5KO0FfKnwBLkBhIOgPgYzxPsl3yZ/g9YUvb 19dg1Rsz7ATofxZDRqJ+hVkTm4UcvzukIr7WgMs35P/Bk8OhBTJlax3YXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJSgpZ0eZHw/Oej0Nm6RcI9W+qZMB8GA1UdIwQY MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0 LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5KD6v5X 7k72Gx3sEzAYSZdhyt0CefltcJFGpKs0KdjehnVqrAVIsaHTy5/NO0nxaH3ny2Hj 2XkDZqeyJtL8G1M9BL8KhI2y896LC5zYpZdbLmbSqh0Ud6M3BCgTWa010fFe1Djw ExqJzdQflkR2zVzjuqRxEU9MGYasNpXAQsP3pR11WG/8IBeSInCs363SRahqPuLw S7g7+ztdSypsRoA30mJFS7lnkFx1M29Dl7aAwWHc4KEfs/CbIf+dK5tO6wcU3T0i y+SVYiHKR/q+tQqsCamNgG6d/bd+idsaUjz2suY/HG0LnN8kXqPcXH/7BS/P+VAv 8Dj9nDzMkEijDQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:15 2025 by rpki-client