This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json) Hash identifier: GKL7fqkyFC/4in0WikDTvGgpndY0SRve2NWQvq+KjaY= Subject key identifier: A7:A8:0C:12:5C:BF:3D:3E:48:0B:C8:52:AA:48:95:C0:F3:8E:11:88 Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48 Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48 Certificate serial: 019B36B44797FDCB48F3950D9D2CC8F29FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft Manifest number: 11DF Signing time: Fri 19 Dec 2025 13:02:22 +0000 Manifest this update: Fri 19 Dec 2025 13:02:22 +0000 Manifest next update: Sat 20 Dec 2025 13:02:22 +0000 Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: 6PT8NBp7qv1zvqkro4zi4j1IzJewd6PbhDU0/Kmlyj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:47:97:fd:cb:48:f3:95:0d:9d:2c:c8:f2:9f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48 Validity Not Before: Dec 19 13:02:22 2025 GMT Not After : Dec 20 13:02:22 2025 GMT Subject: CN=a7a80c125cbf3d3e480bc852aa4895c0f38e1188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:55:11:e6:8b:ca:17:23:73:63:31:46:dc: d3:1d:20:3f:e3:88:46:ec:4e:53:6e:a0:a1:3b:bb: a9:06:0a:56:a2:23:3c:68:ed:29:d2:f2:6e:45:09: c4:83:d9:fd:79:de:b3:ce:6c:a3:57:a4:72:ef:b5: 61:ab:01:fc:22:65:49:aa:98:db:74:d1:29:d1:bf: 27:a8:f3:65:05:7c:e8:1b:a5:a3:35:00:06:41:4a: 42:3f:40:0c:9a:0d:80:b7:53:be:df:70:2b:20:09: f9:fb:c0:92:0b:e2:c7:5c:24:84:66:29:99:b9:08: 1c:5b:28:32:e1:82:72:c8:a3:0d:49:e2:95:41:46: 68:ff:53:ff:6f:5f:07:c4:c5:12:63:92:8d:6f:00: 30:61:3e:2c:21:fe:2a:2f:59:16:3a:32:e2:b4:62: 07:10:38:1b:d6:96:fb:69:6c:01:a1:c6:2c:24:df: 6b:4a:c0:05:ed:4f:3b:da:77:3c:29:21:8e:5d:21: 75:5f:0b:a7:fe:1c:5f:00:ef:e3:04:7e:1b:87:23: 8f:ef:f9:3c:85:5a:23:d0:c0:17:77:1d:d9:92:79: ff:e3:86:45:b4:ee:80:df:df:59:e0:2f:94:a0:a8: b3:75:d6:b6:3b:04:73:8f:56:23:53:2d:76:28:a3: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A8:0C:12:5C:BF:3D:3E:48:0B:C8:52:AA:48:95:C0:F3:8E:11:88 X509v3 Authority Key Identifier: keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6a:b2:34:2f:fa:2a:79:a6:46:09:a9:24:bb:98:b3:16:97: ae:c7:23:3a:4d:38:f4:42:e2:59:3e:06:20:ad:0a:8f:e4:bb: e8:20:86:1a:e6:93:38:57:3e:83:2c:e5:8f:6a:33:a2:17:ee: 4d:68:b9:1e:cc:0c:0d:1c:3f:2a:9e:57:fe:1c:24:37:f5:fa: b8:98:e5:3b:71:64:c9:88:2c:6a:20:87:42:ec:ae:25:26:f7: 57:57:ad:41:8d:c3:7e:8e:3e:d8:db:47:d6:f6:36:a5:ee:28: 7e:66:96:a4:cf:ce:38:57:b2:ce:13:d0:58:84:46:c2:6c:f1: 6c:5f:d8:d0:7e:d5:17:e1:32:f5:0b:ef:8d:74:bd:69:da:16: 5d:6a:c6:44:46:a9:d7:de:ca:57:95:08:3d:49:38:74:2d:a3: 6b:fa:f9:5d:76:1d:0f:20:96:e0:64:0f:8d:51:ad:0d:b3:05: c5:cf:9c:6c:60:ff:eb:47:3f:54:5c:28:81:08:c0:4f:c2:8c: 0f:a3:35:66:fb:85:d3:20:c9:e4:b3:f1:07:c3:bf:81:ea:ec: dc:ad:55:e3:84:f3:f1:cb:15:4d:a6:e0:46:da:f1:b9:01:7e: 45:5a:d3:f3:af:94:dd:4b:7f:8a:23:22:fb:c8:0f:6d:c5:af: 09:82:64:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tEeX/ctI85UNnSzI8p+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMzZhNjRmMWEwNjZiYWJiOGJlYjg2NGU2OTVmYTk5NzY5 MmRkNDgwHhcNMjUxMjE5MTMwMjIyWhcNMjUxMjIwMTMwMjIyWjAzMTEwLwYDVQQD EyhhN2E4MGMxMjVjYmYzZDNlNDgwYmM4NTJhYTQ4OTVjMGYzOGUxMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhRVEeaLyhcjc2MxRtzTHSA/44hG 7E5TbqChO7upBgpWoiM8aO0p0vJuRQnEg9n9ed6zzmyjV6Ry77VhqwH8ImVJqpjb dNEp0b8nqPNlBXzoG6WjNQAGQUpCP0AMmg2At1O+33ArIAn5+8CSC+LHXCSEZimZ uQgcWygy4YJyyKMNSeKVQUZo/1P/b18HxMUSY5KNbwAwYT4sIf4qL1kWOjLitGIH EDgb1pb7aWwBocYsJN9rSsAF7U872nc8KSGOXSF1Xwun/hxfAO/jBH4bhyOP7/k8 hVoj0MAXdx3Zknn/44ZFtO6A399Z4C+UoKizdda2OwRzj1YjUy12KKNV1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeoDBJcvz0+SAvIUqpIlcDzjhGIMB8GA1UdIwQY MBaAFEA2pk8aBmuruL64ZOaV+pl2kt1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81NmQ1MGQtMTdjZi00YmRiLTkyZjYt MjA0NzIxYmQ1ZjkzLzEvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS81NmQ1MGQtMTdjZi00YmRiLTkyZjYtMjA0NzIxYmQ1Zjkz LzEvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2qyNC/6 KnmmRgmpJLuYsxaXrscjOk049ELiWT4GIK0Kj+S76CCGGuaTOFc+gyzlj2ozohfu TWi5HswMDRw/Kp5X/hwkN/X6uJjlO3FkyYgsaiCHQuyuJSb3V1etQY3Dfo4+2NtH 1vY2pe4ofmaWpM/OOFeyzhPQWIRGwmzxbF/Y0H7VF+Ey9QvvjXS9adoWXWrGREap 197KV5UIPUk4dC2ja/r5XXYdDyCW4GQPjVGtDbMFxc+cbGD/60c/VFwogQjAT8KM D6M1ZvuF0yDJ5LPxB8O/gers3K1V44Tz8csVTabgRtrxuQF+RVrT86+U3Ut/iiMi +8gPbcWvCYJkEA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:23:13 2025 by rpki-client