This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json) Hash identifier: IgJ8gLFq7VfleZYEkKeaPl0avdtrB02BVXrfPmybU9A= Subject key identifier: 0C:6F:5C:D7:00:8A:CD:8C:E5:F3:58:E4:14:B8:BE:22:2D:3C:6A:27 Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Certificate serial: 019B0F3731E112CBBA3418FBC04AEC814CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft Manifest number: 16A1 Signing time: Thu 11 Dec 2025 21:00:34 +0000 Manifest this update: Thu 11 Dec 2025 21:00:34 +0000 Manifest next update: Fri 12 Dec 2025 21:00:34 +0000 Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: PU1rub0wOQ5eCArSP5P34j2OHbfUUNi1+ntztTefqLE=) 2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:31:e1:12:cb:ba:34:18:fb:c0:4a:ec:81:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Validity Not Before: Dec 11 21:00:34 2025 GMT Not After : Dec 12 21:00:34 2025 GMT Subject: CN=0c6f5cd7008acd8ce5f358e414b8be222d3c6a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:cf:ad:f8:b7:2b:1d:9d:e9:4f:cf:8e:b8: 67:31:a5:17:75:ef:36:71:30:b2:2b:f7:7a:cc:c9: 67:47:cf:b7:31:17:43:91:cc:a7:cd:7f:ab:f7:38: 98:d9:f7:18:24:f3:05:c1:d7:1a:4f:73:d9:4d:d2: 01:d3:de:b0:49:06:f5:a6:46:0f:e9:91:50:05:5c: ce:b1:af:49:a6:9e:d7:cc:e2:3e:1e:b3:d5:92:76: 3c:37:3d:37:21:28:26:d1:3b:b4:5a:be:3b:7d:04: 7a:25:8b:47:3e:54:29:3a:06:2c:8e:6c:55:d7:c6: e5:99:35:0f:a0:d6:16:17:50:1f:d0:a6:f4:82:98: 15:07:9b:cc:fa:a5:9f:08:a2:fa:78:41:4d:6e:00: cd:4f:ff:66:b9:81:14:b8:49:f6:07:95:a4:e5:90: 12:ee:79:35:c2:13:22:bc:7e:05:13:8d:19:fa:56: 15:92:c0:68:56:a7:d8:b2:cd:d9:8c:7c:ae:8e:1f: 54:91:b0:37:e9:ce:f3:f6:18:55:cc:48:5c:81:9c: 6a:71:4b:03:29:a4:e5:fa:e6:27:71:02:81:34:84: 74:b7:5f:f8:f5:01:a0:4b:f4:ad:b6:7e:af:e1:e6: 9a:25:f5:38:04:9e:9c:5c:b8:1c:68:2e:a3:00:22: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:5C:D7:00:8A:CD:8C:E5:F3:58:E4:14:B8:BE:22:2D:3C:6A:27 X509v3 Authority Key Identifier: keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:d6:5e:98:a2:3c:89:20:30:c0:d4:cd:03:67:e4:dc:94:3c: cd:8b:ba:02:c3:bb:e1:2b:db:b2:66:90:cf:80:3a:2e:ff:4c: ab:92:bb:83:cf:0a:d5:dc:c5:43:a2:c0:4f:c1:64:e1:b2:83: a6:36:42:35:b9:26:e9:5b:24:00:c0:7a:a8:63:07:77:ad:b6: 1b:34:97:52:35:da:b7:e3:c2:3b:ac:b6:6e:e8:c8:14:ac:5c: d5:3f:47:fd:96:00:e5:85:35:9c:7b:f3:a5:e9:97:ea:3b:af: ca:bf:a6:48:65:08:1b:5d:44:59:1d:20:19:e2:f0:98:d6:1c: 07:4e:f6:a4:aa:07:ba:92:ea:fd:4e:7a:36:dd:be:45:98:39: 74:0f:89:a5:ea:9d:88:a9:cb:f2:4e:8a:17:db:76:06:8d:52: 7d:a3:f6:85:76:ce:75:75:cb:f0:cb:01:e3:6d:6b:75:e5:be: 65:1b:04:96:1e:97:71:51:6d:79:e8:19:ef:03:ef:1c:dc:07: f2:f5:b5:31:f6:87:71:98:0f:98:5b:59:cb:57:4e:7e:c0:5a: 63:0e:6d:2c:40:44:19:d8:bd:7c:9f:c7:47:76:36:5a:79:70: 93:5d:e0:f0:8a:37:ec:86:04:30:dd:99:ff:b6:21:9c:e1:45: ca:08:36:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzHhEsu6NBj7wErsgUzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2 YjgyNGUwHhcNMjUxMjExMjEwMDM0WhcNMjUxMjEyMjEwMDM0WjAzMTEwLwYDVQQD EygwYzZmNWNkNzAwOGFjZDhjZTVmMzU4ZTQxNGI4YmUyMjJkM2M2YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2zPrfi3Kx2d6U/PjrhnMaUXde82 cTCyK/d6zMlnR8+3MRdDkcynzX+r9ziY2fcYJPMFwdcaT3PZTdIB096wSQb1pkYP 6ZFQBVzOsa9Jpp7XzOI+HrPVknY8Nz03ISgm0Tu0Wr47fQR6JYtHPlQpOgYsjmxV 18blmTUPoNYWF1Af0Kb0gpgVB5vM+qWfCKL6eEFNbgDNT/9muYEUuEn2B5Wk5ZAS 7nk1whMivH4FE40Z+lYVksBoVqfYss3ZjHyujh9UkbA36c7z9hhVzEhcgZxqcUsD KaTl+uYncQKBNIR0t1/49QGgS/Sttn6v4eaaJfU4BJ6cXLgcaC6jACJLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxvXNcAis2M5fNY5BS4viItPGonMB8GA1UdIwQY MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0tZemKI8 iSAwwNTNA2fk3JQ8zYu6AsO74SvbsmaQz4A6Lv9Mq5K7g88K1dzFQ6LAT8Fk4bKD pjZCNbkm6VskAMB6qGMHd622GzSXUjXat+PCO6y2bujIFKxc1T9H/ZYA5YU1nHvz pemX6juvyr+mSGUIG11EWR0gGeLwmNYcB072pKoHupLq/U56Nt2+RZg5dA+Jpeqd iKnL8k6KF9t2Bo1SfaP2hXbOdXXL8MsB421rdeW+ZRsElh6XcVFteegZ7wPvHNwH 8vW1MfaHcZgPmFtZy1dOfsBaYw5tLEBEGdi9fJ/HR3Y2Wnlwk13g8Io37IYEMN2Z /7YhnOFFygg2VQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:05 2025 by rpki-client