This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json) Hash identifier: 27zZ/Xa3ZmGsejOHbLE7BbX3WpH6tDcvfOVfNFq5+y8= Subject key identifier: 3B:44:7D:77:93:C4:DE:14:CD:18:F7:A0:B5:71:D2:FF:F5:7F:24:79 Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96 Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296 Certificate serial: 019B4B15C3A94090C238D4B98152B504E491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft Manifest number: 08F5 Signing time: Tue 23 Dec 2025 12:01:16 +0000 Manifest this update: Tue 23 Dec 2025 12:01:16 +0000 Manifest next update: Wed 24 Dec 2025 12:01:16 +0000 Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=) 2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: egrZ5Ul9BxMTXN2azi+8eAxTk8COhx3flBgl99La3Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:c3:a9:40:90:c2:38:d4:b9:81:52:b5:04:e4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296 Validity Not Before: Dec 23 12:01:16 2025 GMT Not After : Dec 24 12:01:16 2025 GMT Subject: CN=3b447d7793c4de14cd18f7a0b571d2fff57f2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:51:fe:00:70:7c:e7:90:e6:3b:0b:af:4f: 22:71:f3:ce:0f:db:61:2e:d0:78:99:6b:73:05:70: 89:98:80:94:e5:de:e6:d4:e9:54:a8:2b:1f:47:e4: 2a:46:f5:8e:c4:e6:0e:8e:7a:f1:9e:03:99:0a:15: ff:35:99:3b:40:2a:d3:ff:30:d2:de:79:0b:68:6b: 4a:40:6b:c1:c6:35:c1:6c:ea:f9:59:46:73:f9:e1: e6:99:f8:ef:69:b2:2d:f0:ff:76:29:81:fb:72:fe: 3e:a9:41:2c:22:cb:52:0f:d7:41:62:20:f3:f5:d0: 93:4e:b4:75:e6:e8:f4:bc:56:9a:10:2b:ac:9e:7b: 3e:09:61:de:a8:ed:66:7d:b3:ab:d6:78:db:6a:7b: ed:d3:d0:37:9c:f3:bd:df:1e:39:d1:f9:2a:35:92: 5a:74:68:59:60:47:80:7a:28:2d:e9:16:08:c5:57: 15:ff:d5:d8:f5:d3:5a:0a:4f:2e:87:0f:7a:2a:ce: 82:29:87:35:73:30:34:77:5c:bf:aa:ec:d9:b7:ba: 84:98:51:50:a4:5c:f8:6c:29:d1:80:4c:90:54:b0: dc:52:96:87:fe:1e:10:7e:ae:02:ec:b7:5c:d3:c5: 5b:b9:9f:3a:ee:4f:b0:d4:de:27:c6:0c:1a:d6:9d: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:7D:77:93:C4:DE:14:CD:18:F7:A0:B5:71:D2:FF:F5:7F:24:79 X509v3 Authority Key Identifier: keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:91:da:44:c0:13:58:5f:b0:8a:0b:fc:ce:76:b4:3c:73: 73:72:25:0f:88:2f:c6:ec:91:c6:d4:c8:9b:ca:76:e0:5c:43: 52:09:4a:6b:26:cc:cd:56:d7:5d:49:7a:31:4e:9c:b0:7f:92: 88:b0:b4:36:27:8a:c5:ed:ee:de:58:81:00:b2:af:4e:ef:db: 03:12:7a:04:14:b9:68:38:f9:6d:24:31:e9:99:f3:d7:e8:e5: bc:00:36:ef:08:b9:72:c9:3a:6c:fc:db:92:c6:d9:38:54:a5: f3:71:7e:c2:77:3f:76:4e:53:3f:6c:5e:f5:d5:24:29:02:7f: ca:a0:bc:be:72:37:56:f9:80:e7:f3:1b:81:1d:5f:d0:35:9d: 60:0c:21:98:0a:f7:62:eb:51:5f:55:47:a4:15:98:f5:03:a0: 7b:1c:17:3c:a5:9e:aa:54:92:ff:87:a1:8d:8c:5e:65:cc:cb: ff:ee:df:5b:9a:33:58:39:85:72:dd:29:af:b4:05:db:9b:e3: 75:8e:d3:ff:65:7f:ba:77:f1:5c:34:ff:7c:df:9a:4c:72:0d: 52:f2:2b:28:6c:83:7e:0e:e7:4a:45:bc:78:16:bf:40:d8:ba: bb:bc:09:2b:75:6e:24:c1:ab:97:65:b9:9b:fa:91:f9:0d:36: 24:fd:f1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFcOpQJDCONS5gVK1BOSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMTdkZDE1YjYyYmRkNzExMjU5OWI4MTQyMzM2MGVlZTdh MDEyOTYwHhcNMjUxMjIzMTIwMTE2WhcNMjUxMjI0MTIwMTE2WjAzMTEwLwYDVQQD EygzYjQ0N2Q3NzkzYzRkZTE0Y2QxOGY3YTBiNTcxZDJmZmY1N2YyNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SNR/gBwfOeQ5jsLr08icfPOD9th LtB4mWtzBXCJmICU5d7m1OlUqCsfR+QqRvWOxOYOjnrxngOZChX/NZk7QCrT/zDS 3nkLaGtKQGvBxjXBbOr5WUZz+eHmmfjvabIt8P92KYH7cv4+qUEsIstSD9dBYiDz 9dCTTrR15uj0vFaaECusnns+CWHeqO1mfbOr1njbanvt09A3nPO93x450fkqNZJa dGhZYEeAeigt6RYIxVcV/9XY9dNaCk8uhw96Ks6CKYc1czA0d1y/quzZt7qEmFFQ pFz4bCnRgEyQVLDcUpaH/h4Qfq4C7Ldc08VbuZ867k+w1N4nxgwa1p3MUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtEfXeTxN4UzRj3oLVx0v/1fyR5MB8GA1UdIwQY MBaAFEMX3RW2K91xElmbgUIzYO7noBKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMt NmI5NTUwMGRhMjNiLzEvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMtNmI5NTUwMGRhMjNi LzEvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuuR2kTA E1hfsIoL/M52tDxzc3IlD4gvxuyRxtTIm8p24FxDUglKaybMzVbXXUl6MU6csH+S iLC0NieKxe3u3liBALKvTu/bAxJ6BBS5aDj5bSQx6Znz1+jlvAA27wi5csk6bPzb ksbZOFSl83F+wnc/dk5TP2xe9dUkKQJ/yqC8vnI3VvmA5/MbgR1f0DWdYAwhmAr3 YutRX1VHpBWY9QOgexwXPKWeqlSS/4ehjYxeZczL/+7fW5ozWDmFct0pr7QF25vj dY7T/2V/unfxXDT/fN+aTHINUvIrKGyDfg7nSkW8eBa/QNi6u7wJK3VuJMGrl2W5 m/qR+Q02JP3xTw== -----END CERTIFICATE-----Generated at Tue Dec 23 14:39:37 2025 by rpki-client