This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft File: qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json) Hash identifier: a67SehuCQQlAoC1CdBzbH4/TbViBbYWoFV/WOMpIjto= Subject key identifier: 43:50:2C:B9:10:AF:E1:7B:AD:EE:3A:6C:CE:EF:C4:DD:59:C0:50:D7 Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb Certificate serial: 019B59E3A5E72C7C52E54D664AC9B75FAA37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft Manifest number: 0466 Signing time: Fri 26 Dec 2025 09:00:49 +0000 Manifest this update: Fri 26 Dec 2025 09:00:49 +0000 Manifest next update: Sat 27 Dec 2025 09:00:49 +0000 Files and hashes: 1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: npugS8PhXlbLpHsZZBaJIQdkDm+g8Z0Rao0qenZbFyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a5:e7:2c:7c:52:e5:4d:66:4a:c9:b7:5f:aa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb Validity Not Before: Dec 26 09:00:49 2025 GMT Not After : Dec 27 09:00:49 2025 GMT Subject: CN=43502cb910afe17badee3a6cceefc4dd59c050d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:fe:62:f7:e2:ee:8c:4f:1a:e1:32:de:9a: e1:43:c6:99:18:5b:c1:84:75:b7:f1:db:4a:18:cf: 7d:cf:bf:b8:6a:ad:28:41:16:6b:2e:f6:9e:7f:89: bd:55:f5:5a:9d:fa:35:38:56:4b:99:3f:3c:14:e4: 3a:5f:fa:cc:f3:b4:fb:ab:1a:dc:65:93:c1:29:25: 86:43:fe:f6:bd:3b:6b:f4:40:c0:f9:37:54:5e:00: 8c:1d:88:72:3c:07:f1:fd:fb:d4:ce:01:40:04:b9: c0:6a:b7:ca:e7:70:ee:60:86:8f:39:85:df:e6:f5: e4:12:2d:f6:40:be:3f:9b:a6:ca:a9:6c:f8:81:8f: 5a:59:0a:0b:52:86:d2:4d:26:0c:e6:40:32:14:7d: e3:af:0f:4d:cc:09:b0:fa:6f:2c:6a:a2:79:96:c4: 09:94:10:9e:67:6d:a9:27:91:db:11:47:fe:45:06: 36:60:ac:01:89:35:4d:6b:a9:0f:24:e3:a9:c2:59: 89:51:27:63:d9:1a:9e:be:ee:16:92:49:47:e2:fd: ce:e2:0f:51:82:e8:3a:60:9b:a6:95:b3:8a:0f:8a: d3:8b:0b:be:dd:2a:4c:59:5a:b2:50:64:c1:bd:95: 3e:1a:d1:38:24:2b:9b:e0:20:c7:82:04:aa:f4:ba: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:50:2C:B9:10:AF:E1:7B:AD:EE:3A:6C:CE:EF:C4:DD:59:C0:50:D7 X509v3 Authority Key Identifier: keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a0:7c:f1:7c:4a:99:54:0f:39:ad:a3:29:f4:db:2d:fa:15: d0:9c:3e:9f:fe:9b:5e:58:aa:be:f6:36:f8:81:f3:79:ca:a3: 07:e1:c9:43:87:63:6c:a4:f9:13:81:a9:09:b1:be:10:60:39: f2:60:c6:4b:31:19:bb:0d:e2:f9:74:d1:75:20:02:d9:fc:4d: 8e:d7:f3:7f:5e:ad:89:bf:f8:b4:f2:76:08:36:b5:7e:d4:79: 0b:7a:f8:2e:a7:21:43:31:6b:d3:97:96:32:fa:4f:7a:f1:05: b4:c6:8c:06:3f:35:33:7b:2a:ef:42:a9:2e:69:be:f5:06:9d: d1:dd:2f:8d:05:44:22:30:29:1e:b0:8c:bd:04:52:ba:01:85: 87:ae:63:1c:a2:78:18:af:83:aa:25:19:fa:39:40:f7:cb:8d: 0a:c7:71:f7:fe:77:8c:17:61:2d:1b:f5:1b:d4:e7:c0:99:1f: cb:cd:23:b2:36:bb:4a:e4:52:39:b4:2a:5f:81:d2:3d:d9:a1: 93:d3:e2:27:08:cf:42:c6:8d:ed:37:76:e0:3b:bf:f9:6e:94: ac:78:3c:76:4c:d1:4b:18:75:b9:31:fc:72:1d:53:4c:0e:75: fe:db:9c:c2:14:e9:61:e7:43:ae:9e:8e:3a:6e:13:a6:9c:14: fd:7d:be:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46XnLHxS5U1mSsm3X6o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMTkwMDA3ODFjMTgzMzY2Y2JhNTU0MTZmZDc1YjU3ZGJh MGU0YmIwHhcNMjUxMjI2MDkwMDQ5WhcNMjUxMjI3MDkwMDQ5WjAzMTEwLwYDVQQD Eyg0MzUwMmNiOTEwYWZlMTdiYWRlZTNhNmNjZWVmYzRkZDU5YzA1MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sb+Yvfi7oxPGuEy3prhQ8aZGFvB hHW38dtKGM99z7+4aq0oQRZrLvaef4m9VfVanfo1OFZLmT88FOQ6X/rM87T7qxrc ZZPBKSWGQ/72vTtr9EDA+TdUXgCMHYhyPAfx/fvUzgFABLnAarfK53DuYIaPOYXf 5vXkEi32QL4/m6bKqWz4gY9aWQoLUobSTSYM5kAyFH3jrw9NzAmw+m8saqJ5lsQJ lBCeZ22pJ5HbEUf+RQY2YKwBiTVNa6kPJOOpwlmJUSdj2Rqevu4WkklH4v3O4g9R gug6YJumlbOKD4rTiwu+3SpMWVqyUGTBvZU+GtE4JCub4CDHggSq9LorGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENQLLkQr+F7re46bM7vxN1ZwFDXMB8GA1UdIwQY MBaAFKsZAAeBwYM2bLpVQW/XW1fboOS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMt ZmYyZGZkNjJkMzc2LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMtZmYyZGZkNjJkMzc2 LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzaB88XxK mVQPOa2jKfTbLfoV0Jw+n/6bXliqvvY2+IHzecqjB+HJQ4djbKT5E4GpCbG+EGA5 8mDGSzEZuw3i+XTRdSAC2fxNjtfzf16tib/4tPJ2CDa1ftR5C3r4LqchQzFr05eW MvpPevEFtMaMBj81M3sq70KpLmm+9Qad0d0vjQVEIjApHrCMvQRSugGFh65jHKJ4 GK+DqiUZ+jlA98uNCsdx9/53jBdhLRv1G9TnwJkfy80jsja7SuRSObQqX4HSPdmh k9PiJwjPQsaN7Td24Du/+W6UrHg8dkzRSxh1uTH8ch1TTA51/tucwhTpYedDrp6O Om4TppwU/X2+dw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client