This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json) Hash identifier: z1b/xh4fCejrTvZVY0bOiDzfRT4J8ob9jpmNy6XSt94= Subject key identifier: BE:01:14:C9:EC:11:3A:DF:33:21:24:C7:23:E5:B9:8C:A4:64:23:9C Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Certificate serial: 019B495DCA8D30B31052307AE992DF015273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft Manifest number: 10C2 Signing time: Tue 23 Dec 2025 04:00:42 +0000 Manifest this update: Tue 23 Dec 2025 04:00:42 +0000 Manifest next update: Wed 24 Dec 2025 04:00:42 +0000 Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: Rb0+MBp01NWm5Yc/drFFbEWlyBxSmlqJ9h/04dRwmWg=) 2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:ca:8d:30:b3:10:52:30:7a:e9:92:df:01:52:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Validity Not Before: Dec 23 04:00:42 2025 GMT Not After : Dec 24 04:00:42 2025 GMT Subject: CN=be0114c9ec113adf332124c723e5b98ca464239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:2b:82:c8:94:74:74:d2:31:1a:f9:29:5b: ea:a2:2e:d9:79:a2:bb:57:f0:a1:a2:75:8e:75:b0: 92:52:06:50:d7:07:6e:04:20:4f:c5:15:9a:06:80: 10:e3:0b:0a:b6:ca:16:00:6a:ca:0d:7f:81:6f:f7: 8c:a6:4f:9f:e7:f9:60:cc:64:a6:db:a4:2c:4a:a0: cb:d9:19:0e:d5:57:e5:67:86:c3:28:da:d2:4b:1a: 31:dd:73:fd:fe:d7:c7:47:55:11:fd:55:ff:26:d3: 4b:9a:39:bc:55:7f:c8:b7:a6:cb:41:30:ef:9e:60: 7c:88:b3:c6:41:2b:c9:5c:0f:a4:87:a4:17:a9:98: 8e:02:09:7b:f8:5b:78:fe:95:4f:74:7d:94:97:29: 3a:3f:6a:fb:27:7f:ef:ea:cf:f0:c6:91:b0:91:f5: 7d:0b:7f:d0:6b:18:e0:2a:89:41:ee:ab:c5:cf:b8: c8:18:cd:e6:55:f4:42:43:bf:1d:e7:76:d5:b9:8e: fd:81:89:19:9d:93:8b:9f:0e:e0:fa:b9:f6:47:8b: ae:12:e3:de:1f:0f:58:b8:a5:a5:e5:44:bc:2f:a1: da:35:89:df:54:2a:5a:af:b0:ca:3e:37:25:c4:c4: ad:36:be:ef:87:9f:9a:c8:a0:15:a7:63:2b:ad:86: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:14:C9:EC:11:3A:DF:33:21:24:C7:23:E5:B9:8C:A4:64:23:9C X509v3 Authority Key Identifier: keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:68:bb:95:c8:d5:9f:ec:aa:9d:a9:45:19:68:a7:fb:63:22: 05:bb:02:34:28:89:60:2f:53:a9:4a:1b:53:47:6a:59:6e:0d: 17:d8:56:24:95:38:7e:1d:6d:fd:2a:73:21:0e:90:ee:a8:87: 9e:89:97:7e:18:f9:b3:ce:0e:f9:51:e3:45:d3:13:55:b3:cf: 9c:ee:e4:4c:02:54:24:c4:b4:22:c5:2d:9c:f4:d5:f3:3b:80: 24:35:61:57:d1:f4:4c:93:ee:6e:8b:80:b8:d1:d8:29:c8:d8: a2:a9:e5:7b:9f:30:1a:fd:cc:2f:f5:51:10:02:c8:e4:c2:aa: 1a:b5:05:5a:ea:cc:31:91:6c:ac:51:c2:03:2e:86:00:64:cb: c0:59:bd:db:11:0a:05:20:81:f2:9b:62:bf:76:2a:c6:7b:8d: 89:d8:bd:e7:ed:a1:25:6c:a3:19:6b:0b:87:75:a2:c6:23:c6: 74:33:2e:a5:5b:5f:0e:96:39:64:2a:8a:c4:5d:20:7b:e3:d7: a5:e0:5c:c2:de:f2:d7:42:b1:9f:0a:32:f3:41:04:3d:1f:85: 28:ba:33:5c:c7:34:bb:1e:1d:f3:dc:1e:b2:9b:34:f3:58:4c: db:70:6e:37:33:d0:13:c8:df:61:ee:56:f0:d5:f0:66:e5:e5: c1:85:66:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXcqNMLMQUjB66ZLfAVJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGExMGQ2NjVjMTBlMWNiNmVjNmMyMTUwZTNlNjAyNDA0 NWI5ZGEwHhcNMjUxMjIzMDQwMDQyWhcNMjUxMjI0MDQwMDQyWjAzMTEwLwYDVQQD EyhiZTAxMTRjOWVjMTEzYWRmMzMyMTI0YzcyM2U1Yjk4Y2E0NjQyMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz4rgsiUdHTSMRr5KVvqoi7ZeaK7 V/ChonWOdbCSUgZQ1wduBCBPxRWaBoAQ4wsKtsoWAGrKDX+Bb/eMpk+f5/lgzGSm 26QsSqDL2RkO1VflZ4bDKNrSSxox3XP9/tfHR1UR/VX/JtNLmjm8VX/It6bLQTDv nmB8iLPGQSvJXA+kh6QXqZiOAgl7+Ft4/pVPdH2Ulyk6P2r7J3/v6s/wxpGwkfV9 C3/QaxjgKolB7qvFz7jIGM3mVfRCQ78d53bVuY79gYkZnZOLnw7g+rn2R4uuEuPe Hw9YuKWl5US8L6HaNYnfVCpar7DKPjclxMStNr7vh5+ayKAVp2MrrYY0jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4BFMnsETrfMyEkxyPluYykZCOcMB8GA1UdIwQY MBaAFEHaENZlwQ4ctuxsIVDj5gJARbnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQt YmIxZmM0NTQ3MDMzLzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQtYmIxZmM0NTQ3MDMz LzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2i7lcjV n+yqnalFGWin+2MiBbsCNCiJYC9TqUobU0dqWW4NF9hWJJU4fh1t/SpzIQ6Q7qiH nomXfhj5s84O+VHjRdMTVbPPnO7kTAJUJMS0IsUtnPTV8zuAJDVhV9H0TJPubouA uNHYKcjYoqnle58wGv3ML/VREALI5MKqGrUFWurMMZFsrFHCAy6GAGTLwFm92xEK BSCB8ptiv3YqxnuNidi95+2hJWyjGWsLh3WixiPGdDMupVtfDpY5ZCqKxF0ge+PX peBcwt7y10Kxnwoy80EEPR+FKLozXMc0ux4d89wesps081hM23BuNzPQE8jfYe5W 8NXwZuXlwYVmGg== -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:54 2025 by rpki-client