This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json) Hash identifier: 3LdPoF32VvUCjNYZvU+n61K/kyBII9CDy7wHlyXnaec= Subject key identifier: 78:6A:44:A3:6A:09:31:C2:7D:DE:6F:7E:10:71:3D:AF:98:90:D8:80 Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Certificate serial: 019B356977276992E63B0E4BC17C08D659AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft Manifest number: 0E2E Signing time: Fri 19 Dec 2025 07:01:02 +0000 Manifest this update: Fri 19 Dec 2025 07:01:02 +0000 Manifest next update: Sat 20 Dec 2025 07:01:02 +0000 Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=) 2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: hnjMpcz205iwco8ZC6ancHKf/XRYyjLUqcKBG0YM/88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:77:27:69:92:e6:3b:0e:4b:c1:7c:08:d6:59:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Validity Not Before: Dec 19 07:01:02 2025 GMT Not After : Dec 20 07:01:02 2025 GMT Subject: CN=786a44a36a0931c27dde6f7e10713daf9890d880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:25:d1:70:a1:0d:f4:8e:c1:a6:cc:11:ad: f1:92:4a:9a:f2:2d:9d:77:6e:72:ff:d3:fe:45:2d: 46:a2:98:3d:ea:37:55:14:8c:0c:f4:af:0a:be:22: 3f:62:c0:6f:65:35:24:b5:0c:29:18:cc:93:77:d9: 51:65:b0:f4:29:2c:52:32:94:62:20:cc:40:78:4b: 1b:8f:42:0a:9e:2a:7e:7d:b2:8c:79:d0:29:3d:6c: 41:1d:d1:e7:e2:ac:ad:9d:85:fe:11:4b:34:27:bd: 24:6f:28:f4:a3:19:19:e4:97:a9:ea:3c:10:75:25: 79:36:a1:56:84:c1:33:ae:9d:5d:2b:c2:42:5b:d1: 68:f7:a8:cf:3b:c6:d7:1f:da:63:6d:c1:69:29:de: e0:6f:b8:dc:d5:2f:c3:0e:c8:5e:c9:db:fc:db:70: e7:f3:40:9a:8a:d3:b4:3e:1f:38:6f:bd:0b:ef:d6: 11:a0:14:32:f0:de:c2:90:3a:c6:93:54:73:95:f1: c9:fc:59:fb:f8:9c:36:30:a7:e6:7f:97:69:e3:4d: ef:96:eb:03:eb:da:67:ec:5d:d9:43:ce:a3:08:9e: c3:68:75:03:3e:6a:6b:04:14:f6:c6:ce:5e:fb:ab: 86:7d:2f:3d:75:c2:4f:ac:4b:de:ba:f6:e2:d6:2d: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6A:44:A3:6A:09:31:C2:7D:DE:6F:7E:10:71:3D:AF:98:90:D8:80 X509v3 Authority Key Identifier: keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:76:90:df:37:dd:dd:08:b6:32:3f:11:b8:fd:84:a1:0a:a8: 86:e7:50:b0:06:f1:31:7a:52:19:1a:16:fe:ef:ea:c4:da:a1: 60:65:68:68:ef:ed:0b:23:aa:0b:f4:5b:75:e4:01:d1:11:62: 36:2c:25:6b:f2:24:d5:d3:9a:ac:cb:26:e6:d7:18:c4:42:5b: d7:75:ba:23:e3:c5:db:b7:11:57:89:7d:41:be:f8:d6:aa:36: a4:71:f6:40:3b:fc:95:20:48:0a:95:5e:56:4c:7b:50:94:60: 4d:89:01:c3:8c:dd:c6:ef:9e:b1:cb:9b:32:d9:a3:21:d0:47: 6c:15:cf:e4:ab:eb:07:34:47:2d:1c:40:bd:d0:7e:48:58:00: 69:f6:1d:da:e0:58:43:47:d9:ce:21:e5:3f:fc:eb:e4:4f:8b: 85:c5:a1:9a:b2:b6:dc:25:5d:bf:b8:4d:0c:32:82:fd:47:a5: d9:99:9a:e3:e5:4b:3e:2a:ca:d1:04:7f:27:4f:17:0a:37:64: 8c:b5:10:43:33:da:d5:a5:f5:f0:79:78:ea:19:1c:57:50:38: 6a:3f:e0:7e:2d:0a:16:43:5d:3e:50:b7:27:3e:64:99:c8:ed: 2c:e7:9c:d5:71:12:82:3a:11:fd:33:c2:93:bd:be:18:1f:cc: 18:e4:ad:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aXcnaZLmOw5LwXwI1lmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm ZmUyZjgwHhcNMjUxMjE5MDcwMTAyWhcNMjUxMjIwMDcwMTAyWjAzMTEwLwYDVQQD Eyg3ODZhNDRhMzZhMDkzMWMyN2RkZTZmN2UxMDcxM2RhZjk4OTBkODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAl0XChDfSOwabMEa3xkkqa8i2d d25y/9P+RS1Gopg96jdVFIwM9K8KviI/YsBvZTUktQwpGMyTd9lRZbD0KSxSMpRi IMxAeEsbj0IKnip+fbKMedApPWxBHdHn4qytnYX+EUs0J70kbyj0oxkZ5Jep6jwQ dSV5NqFWhMEzrp1dK8JCW9Fo96jPO8bXH9pjbcFpKd7gb7jc1S/DDsheydv823Dn 80CaitO0Ph84b70L79YRoBQy8N7CkDrGk1RzlfHJ/Fn7+Jw2MKfmf5dp403vlusD 69pn7F3ZQ86jCJ7DaHUDPmprBBT2xs5e+6uGfS89dcJPrEveuvbi1i1MIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhqRKNqCTHCfd5vfhBxPa+YkNiAMB8GA1UdIwQY MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXaQ3zfd 3Qi2Mj8RuP2EoQqohudQsAbxMXpSGRoW/u/qxNqhYGVoaO/tCyOqC/RbdeQB0RFi Niwla/Ik1dOarMsm5tcYxEJb13W6I+PF27cRV4l9Qb741qo2pHH2QDv8lSBICpVe Vkx7UJRgTYkBw4zdxu+escubMtmjIdBHbBXP5KvrBzRHLRxAvdB+SFgAafYd2uBY Q0fZziHlP/zr5E+LhcWhmrK23CVdv7hNDDKC/Uel2Zma4+VLPirK0QR/J08XCjdk jLUQQzPa1aX18Hl46hkcV1A4aj/gfi0KFkNdPlC3Jz5kmcjtLOec1XESgjoR/TPC k72+GB/MGOStHg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:15:47 2025 by rpki-client