This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json) Hash identifier: D4nvNviSIYL6fW5fKq4Lx5Wm9pern0naqWcJfu8N4hg= Subject key identifier: 9D:C8:24:1B:3B:73:DC:61:5E:C7:01:12:BF:F9:5E:D5:6F:3F:73:C2 Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Certificate serial: 019B38A0EEF9CFD194AE99400BA5C8D7E9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 22:00:29 +0000 Manifest this update: Fri 19 Dec 2025 22:00:29 +0000 Manifest next update: Sat 20 Dec 2025 22:00:29 +0000 Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: iRkL8bIDN2fFUrGJweOi3w7gi8H2/hUd/UT7Piz3VAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:ee:f9:cf:d1:94:ae:99:40:0b:a5:c8:d7:e9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Validity Not Before: Dec 19 22:00:29 2025 GMT Not After : Dec 20 22:00:29 2025 GMT Subject: CN=9dc8241b3b73dc615ec70112bff95ed56f3f73c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:7c:8e:94:5f:90:cf:7e:3d:f5:8b:2f:c9: a2:b9:6d:d8:f7:ac:27:f8:cc:f2:aa:82:93:54:25: b0:07:0d:31:24:d8:ad:cf:e9:58:3d:b1:1c:77:87: aa:07:55:dd:fe:83:e0:3f:ad:53:8a:f2:5d:ac:fd: a2:63:4b:47:ca:a5:be:a8:2e:2d:f2:88:b2:98:83: 0d:13:04:fc:d7:5f:00:0a:81:14:2d:23:48:18:4c: d7:77:1a:6c:1c:bf:1f:f5:53:ff:38:40:1d:d4:24: 99:42:fd:bf:89:01:ca:64:f0:34:fb:3f:08:bc:b3: 60:94:1b:89:94:52:14:e9:2e:df:d6:14:7c:36:4a: 20:33:13:08:7f:68:44:bf:01:69:32:fd:13:ac:e9: 1b:bb:59:c6:5a:16:5b:2d:76:5b:e8:44:94:5a:be: 4e:c5:b1:93:69:59:59:a5:d9:04:86:79:f8:20:d5: c0:6a:e5:eb:b7:99:82:cf:e6:85:14:6b:43:5e:ed: 51:25:56:33:4f:ac:0c:be:c2:8c:c3:04:c4:d0:58: 62:e8:ea:37:ea:e1:cb:6c:b9:cb:0d:fb:cf:69:be: 05:60:51:16:74:c3:53:75:8d:fa:3b:1b:9d:8f:3a: 11:35:61:03:90:cd:a1:13:22:4d:b6:4a:c3:30:14: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C8:24:1B:3B:73:DC:61:5E:C7:01:12:BF:F9:5E:D5:6F:3F:73:C2 X509v3 Authority Key Identifier: keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:ad:27:60:2c:9d:10:59:bf:e8:7c:b1:10:17:fa:60:2e: d7:19:35:87:6c:8d:e6:7b:2a:54:a3:71:dc:c3:6a:cf:b7:1f: a9:1e:57:7a:91:ce:92:27:99:6c:7f:ac:34:30:b0:ab:94:05: 90:f9:5e:c3:3b:9a:93:fd:b4:b0:5e:3e:21:d5:c7:c2:21:f0: 40:5a:4a:4d:d9:7b:1f:77:1e:dc:53:1c:5a:74:5c:2f:d4:cd: 9e:7a:3c:57:c5:4a:9b:53:c7:07:19:71:a5:26:55:70:09:44: c0:62:d3:47:4f:e0:9c:da:a9:81:bf:67:0c:cc:de:80:aa:35: d7:57:93:98:8a:ce:8b:d1:18:6e:fa:ff:30:24:8b:b3:17:3b: 5e:e3:e0:aa:6d:e6:48:d4:a1:8c:f4:c7:51:22:6c:81:ae:77: ff:5a:14:43:6e:fd:66:54:bc:18:12:b5:64:e7:c1:21:42:fe: e0:e2:a5:d5:28:74:dd:97:29:9f:d2:ed:4b:10:29:a2:94:d1: 64:dc:fb:26:fa:a9:09:dc:a1:ce:3a:74:cf:f8:c0:65:05:3f: 05:14:78:e3:6c:1d:fd:b5:95:1f:cf:c4:52:2e:43:53:81:cf: e5:34:68:d2:9d:79:03:ec:a6:85:30:5b:89:03:18:75:45:b1: 93:c0:21:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oO75z9GUrplAC6XI1+nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4 MWFiM2EwHhcNMjUxMjE5MjIwMDI5WhcNMjUxMjIwMjIwMDI5WjAzMTEwLwYDVQQD Eyg5ZGM4MjQxYjNiNzNkYzYxNWVjNzAxMTJiZmY5NWVkNTZmM2Y3M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweF8jpRfkM9+PfWLL8miuW3Y96wn +MzyqoKTVCWwBw0xJNitz+lYPbEcd4eqB1Xd/oPgP61TivJdrP2iY0tHyqW+qC4t 8oiymIMNEwT8118ACoEULSNIGEzXdxpsHL8f9VP/OEAd1CSZQv2/iQHKZPA0+z8I vLNglBuJlFIU6S7f1hR8NkogMxMIf2hEvwFpMv0TrOkbu1nGWhZbLXZb6ESUWr5O xbGTaVlZpdkEhnn4INXAauXrt5mCz+aFFGtDXu1RJVYzT6wMvsKMwwTE0Fhi6Oo3 6uHLbLnLDfvPab4FYFEWdMNTdY36OxudjzoRNWEDkM2hEyJNtkrDMBR5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3IJBs7c9xhXscBEr/5XtVvP3PCMB8GA1UdIwQY MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF2tJ2As nRBZv+h8sRAX+mAu1xk1h2yN5nsqVKNx3MNqz7cfqR5XepHOkieZbH+sNDCwq5QF kPlewzuak/20sF4+IdXHwiHwQFpKTdl7H3ce3FMcWnRcL9TNnno8V8VKm1PHBxlx pSZVcAlEwGLTR0/gnNqpgb9nDMzegKo111eTmIrOi9EYbvr/MCSLsxc7XuPgqm3m SNShjPTHUSJsga53/1oUQ279ZlS8GBK1ZOfBIUL+4OKl1Sh03Zcpn9LtSxApopTR ZNz7JvqpCdyhzjp0z/jAZQU/BRR442wd/bWVH8/EUi5DU4HP5TRo0p15A+ymhTBb iQMYdUWxk8AhdA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:10 2025 by rpki-client