This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json) Hash identifier: cedAqWOY8KFYE2dn7QfM5Z9W3DL84FM8k0N86X+4U8I= Subject key identifier: 77:51:9C:69:D1:0D:5F:08:A9:1B:9E:0A:70:40:06:08:BA:A5:70:E8 Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8 Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8 Certificate serial: 019B36B425CD77889F87E0D83428CA82D1BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 13:02:14 +0000 Manifest this update: Fri 19 Dec 2025 13:02:14 +0000 Manifest next update: Sat 20 Dec 2025 13:02:14 +0000 Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: Ps8bGZnsoKOWm1AzwPNcvNYKPcUmMwUntzOS2HhtoLY=) 2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:25:cd:77:88:9f:87:e0:d8:34:28:ca:82:d1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8 Validity Not Before: Dec 19 13:02:14 2025 GMT Not After : Dec 20 13:02:14 2025 GMT Subject: CN=77519c69d10d5f08a91b9e0a70400608baa570e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b7:79:54:a8:82:a4:a1:99:c2:2b:f4:4e:50: 82:bc:1f:fe:0f:1a:19:11:cb:8d:63:6e:6a:3d:43: 55:70:c2:fd:08:01:25:da:01:fb:0f:90:dd:f6:d5: ff:b2:61:10:db:dd:e3:a0:e4:ca:1a:07:b3:f6:f8: 40:6d:48:91:49:bf:c8:51:a5:e9:ee:53:5a:03:32: 86:63:42:54:6c:be:82:b3:00:1c:fd:37:e1:b3:0e: 50:24:f2:bb:78:bc:52:21:f3:ad:4b:0f:3f:aa:4f: 74:b8:e1:4c:b6:3b:3a:10:0c:6a:fd:56:f4:47:43: 1b:1a:d9:0b:66:82:7c:85:4f:62:72:af:e7:e1:f4: 73:b3:0a:8b:c0:e6:5f:c7:1a:98:01:98:32:8b:d3: b4:a9:70:7f:78:af:09:70:f0:03:3a:b3:e3:fc:bd: b3:7a:4b:4b:38:6f:7a:c8:1c:74:97:74:50:64:73: a1:39:9f:0e:19:7a:97:db:cf:a7:18:6b:dd:14:b1: 57:38:e1:5a:c8:9e:af:54:56:eb:3f:71:fc:ec:ff: 1f:1c:4a:bc:9a:59:8f:c9:83:78:65:a8:1f:fe:e3: 2a:6b:72:de:71:63:ba:e5:f5:4d:23:5a:6c:da:a8: 99:67:ae:13:ea:1a:a7:a8:ef:51:d1:24:bb:f5:42: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:51:9C:69:D1:0D:5F:08:A9:1B:9E:0A:70:40:06:08:BA:A5:70:E8 X509v3 Authority Key Identifier: keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ca:2b:2e:bc:58:8a:8b:33:dd:9f:1d:f2:5d:ff:6f:f7:1e: 7c:10:db:8a:72:86:05:35:ba:9b:88:4d:23:9d:d7:0f:e3:1f: ee:f0:8e:01:77:13:de:7e:50:37:1b:2a:15:0b:b3:b1:1b:b4: 97:9d:bf:91:c8:f0:fb:bc:06:79:1f:69:9f:b0:c5:51:ef:4d: 39:30:31:eb:eb:8e:44:b6:62:e3:5a:04:24:dd:83:64:84:6f: 00:05:37:7b:92:54:3c:f1:d1:d1:2e:72:0e:45:e4:2e:56:b7: 49:6d:06:41:ec:5f:f1:ed:fd:27:5a:c1:6a:31:fa:77:0b:73: 5c:8e:50:83:b1:67:47:74:d0:a5:94:82:ef:e1:15:3f:5a:39: 21:ec:d9:85:cc:f1:4e:41:87:61:2c:01:51:01:2d:fc:8e:45: f0:42:fb:28:66:13:b9:57:ea:93:f8:13:08:f7:41:05:df:53: c7:db:14:b0:97:f5:e9:2c:35:3b:34:f5:17:0e:4b:c2:ab:95: 0e:15:70:4c:28:aa:d6:9c:07:be:e6:ac:91:0f:82:0e:ca:69: c9:95:5e:16:b9:8d:52:cf:8f:43:cc:df:c1:34:65:a4:eb:b3: 59:dc:64:91:24:7f:a8:7b:e0:0f:0a:f0:f8:ab:d1:7f:0f:6c: c7:f6:b8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tCXNd4ifh+DYNCjKgtG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYxZTZkMTZlYmYxN2U1NzFjNmJmNzdlYzA2YmRmN2Fi NjhhZjgwHhcNMjUxMjE5MTMwMjE0WhcNMjUxMjIwMTMwMjE0WjAzMTEwLwYDVQQD Eyg3NzUxOWM2OWQxMGQ1ZjA4YTkxYjllMGE3MDQwMDYwOGJhYTU3MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ld5VKiCpKGZwiv0TlCCvB/+DxoZ EcuNY25qPUNVcML9CAEl2gH7D5Dd9tX/smEQ293joOTKGgez9vhAbUiRSb/IUaXp 7lNaAzKGY0JUbL6CswAc/Tfhsw5QJPK7eLxSIfOtSw8/qk90uOFMtjs6EAxq/Vb0 R0MbGtkLZoJ8hU9icq/n4fRzswqLwOZfxxqYAZgyi9O0qXB/eK8JcPADOrPj/L2z ektLOG96yBx0l3RQZHOhOZ8OGXqX28+nGGvdFLFXOOFayJ6vVFbrP3H87P8fHEq8 mlmPyYN4Zagf/uMqa3LecWO65fVNI1ps2qiZZ64T6hqnqO9R0SS79UJ5aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdRnGnRDV8IqRueCnBABgi6pXDoMB8GA1UdIwQY MBaAFEF2Hm0W6/F+Vxxr937Aa996tor4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUt YTg3OWRmNDZlYjk5LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUtYTg3OWRmNDZlYjk5 LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8orLrxY iosz3Z8d8l3/b/cefBDbinKGBTW6m4hNI53XD+Mf7vCOAXcT3n5QNxsqFQuzsRu0 l52/kcjw+7wGeR9pn7DFUe9NOTAx6+uORLZi41oEJN2DZIRvAAU3e5JUPPHR0S5y DkXkLla3SW0GQexf8e39J1rBajH6dwtzXI5Qg7FnR3TQpZSC7+EVP1o5IezZhczx TkGHYSwBUQEt/I5F8EL7KGYTuVfqk/gTCPdBBd9Tx9sUsJf16Sw1OzT1Fw5LwquV DhVwTCiq1pwHvuaskQ+CDsppyZVeFrmNUs+PQ8zfwTRlpOuzWdxkkSR/qHvgDwrw +KvRfw9sx/a4AA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:06:12 2025 by rpki-client