This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json) Hash identifier: Dyx/r0vucBFPEO1X24aLyfoqXtU5PnEcVLrf2P8EhmI= Subject key identifier: 27:20:10:FC:C1:35:1D:E8:32:75:0E:C7:04:6B:B8:E7:1F:A9:29:41 Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf Certificate serial: 019B59AC954CA41F7BC11500F96E16EE5D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: FkMbK67Gn1fUKysTQBFCCKRCsYVPed0MxGIA8IugYmY=) 2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:95:4c:a4:1f:7b:c1:15:00:f9:6e:16:ee:5d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=272010fcc1351de832750ec7046bb8e71fa92941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:c6:80:4a:84:c8:63:66:c1:67:16:b9:7e: 9a:b1:97:c9:b0:7f:b7:8f:85:b2:7b:d0:58:a0:9c: 0e:da:a4:a1:83:6b:20:d4:09:9a:e4:c9:d9:e7:80: c2:b0:c4:3c:4c:c0:f1:da:41:54:d2:81:93:fe:cd: 37:cf:09:df:18:5c:31:5e:8b:9a:a1:90:15:9f:6a: 83:62:8e:90:ba:15:d9:64:08:61:57:57:4d:97:87: 84:74:3b:71:9f:79:5a:73:bc:3e:47:14:19:60:4a: 3a:f9:66:1d:f0:cc:1d:4e:2d:d1:6d:42:ea:cd:22: ed:79:5a:11:bb:bf:16:7d:42:e8:bc:4f:08:5c:3c: 13:5e:81:cc:0a:38:13:00:be:45:32:00:f8:d9:9e: 27:a8:50:04:da:8f:43:56:5f:bd:04:c7:9a:12:9c: 75:01:29:d7:7b:19:1d:0b:93:ee:d4:dc:23:ec:1a: 39:04:07:e7:36:ca:7c:5c:ee:c8:3e:e7:17:46:b6: 8a:bf:61:46:0b:23:84:3c:f0:ed:d2:37:8c:4d:bc: c0:70:e4:ec:f2:e9:f9:75:4a:7a:6a:23:92:a1:1c: 17:72:d7:8f:5b:f6:49:ff:59:10:b9:78:9f:a4:9e: b7:39:73:d7:da:f0:b3:56:c9:3a:84:b3:5e:ad:af: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:10:FC:C1:35:1D:E8:32:75:0E:C7:04:6B:B8:E7:1F:A9:29:41 X509v3 Authority Key Identifier: keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:1d:66:64:c4:e5:7a:70:0e:ee:14:d2:bc:e9:9c:13:6c: 9d:ba:cf:e3:9e:3d:9d:21:35:1d:e0:da:63:20:cb:c4:a4:21: be:59:0a:19:80:7e:8d:20:e4:14:e6:85:a9:83:6c:4f:9d:18: 1c:8c:14:3c:61:b9:30:08:61:e8:7b:af:9c:e5:9e:6c:f1:62: e8:c8:41:b1:d1:87:37:45:4a:78:14:45:8c:69:df:d6:3b:ac: db:d2:26:3d:6a:a7:31:b0:08:06:e7:eb:19:b5:0a:cc:91:54: c5:ab:b8:c2:ad:d2:8d:9c:d1:c8:1b:52:43:03:de:73:a4:bf: ed:4d:42:f0:13:65:8c:30:a5:8a:d0:77:a2:09:f0:8d:58:fd: 29:eb:f4:df:8f:24:64:c1:4a:f7:fa:ae:89:c3:1b:4d:1d:66: 3c:d3:d7:0a:08:bb:7d:6c:55:83:15:b5:90:a4:da:00:b2:0b: 02:f5:d1:85:d8:90:73:fa:ce:32:6f:eb:28:7b:f3:13:4c:ae: fd:dd:bd:b7:b1:2d:cd:81:7f:eb:d9:37:3a:71:5f:60:79:bd: 4b:7a:a9:81:25:f1:b8:2d:0b:be:e4:c7:9d:2f:36:b7:15:c4: 84:8a:a5:59:fe:a7:e6:e8:f5:ad:7c:61:ed:02:e3:f4:d1:8a: c2:de:c4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJVMpB97wRUA+W4W7l2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjkwZTIzOTBlOTBiYmQ4ZGU0MDIxOGFkMjIxZTA5M2Jj Y2VjYmYwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD EygyNzIwMTBmY2MxMzUxZGU4MzI3NTBlYzcwNDZiYjhlNzFmYTkyOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31XGgEqEyGNmwWcWuX6asZfJsH+3 j4Wye9BYoJwO2qShg2sg1Ama5MnZ54DCsMQ8TMDx2kFU0oGT/s03zwnfGFwxXoua oZAVn2qDYo6QuhXZZAhhV1dNl4eEdDtxn3lac7w+RxQZYEo6+WYd8MwdTi3RbULq zSLteVoRu78WfULovE8IXDwTXoHMCjgTAL5FMgD42Z4nqFAE2o9DVl+9BMeaEpx1 ASnXexkdC5Pu1Nwj7Bo5BAfnNsp8XO7IPucXRraKv2FGCyOEPPDt0jeMTbzAcOTs 8un5dUp6aiOSoRwXctePW/ZJ/1kQuXifpJ63OXPX2vCzVsk6hLNera9vRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcgEPzBNR3oMnUOxwRruOcfqSlBMB8GA1UdIwQY MBaAFEFpDiOQ6Qu9jeQCGK0iHgk7zOy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUt MzM4NWQ5YmYxZDgwLzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yODg0YWEtMGNjYi00OWYyLTkwYzUtMzM4NWQ5YmYxZDgw LzEvUVdrT0k1RHBDNzJONUFJWXJTSWVDVHZNN0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeEdZmTE 5XpwDu4U0rzpnBNsnbrP4549nSE1HeDaYyDLxKQhvlkKGYB+jSDkFOaFqYNsT50Y HIwUPGG5MAhh6HuvnOWebPFi6MhBsdGHN0VKeBRFjGnf1jus29ImPWqnMbAIBufr GbUKzJFUxau4wq3SjZzRyBtSQwPec6S/7U1C8BNljDClitB3ognwjVj9Kev0348k ZMFK9/quicMbTR1mPNPXCgi7fWxVgxW1kKTaALILAvXRhdiQc/rOMm/rKHvzE0yu /d29t7EtzYF/69k3OnFfYHm9S3qpgSXxuC0LvuTHnS82txXEhIqlWf6n5uj1rXxh 7QLj9NGKwt7E+A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:39 2025 by rpki-client