This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft File: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft (raw, json) Hash identifier: IED61fIoAnJMci3u5pKuiqU1TazpLAgZVIgYJZ7NEhk= Subject key identifier: 0F:90:92:F3:37:54:CF:DF:2E:26:FF:F7:12:38:8F:41:6F:E5:98:F7 Authority key identifier: A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01 Certificate issuer: /CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101 Certificate serial: 019B5ABF3B72A6B236022B7C1348C6D7DF6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft Manifest number: 31 Signing time: Fri 26 Dec 2025 13:00:40 +0000 Manifest this update: Fri 26 Dec 2025 13:00:40 +0000 Manifest next update: Sat 27 Dec 2025 13:00:40 +0000 Files and hashes: 1: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl (hash: jeLiLnHoEG++zizRkoX6lqDNy4kDfhrbN8ILEF4rUik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:3b:72:a6:b2:36:02:2b:7c:13:48:c6:d7:df:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101 Validity Not Before: Dec 26 13:00:40 2025 GMT Not After : Dec 27 13:00:40 2025 GMT Subject: CN=0f9092f33754cfdf2e26fff712388f416fe598f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:07:4b:dd:94:35:64:c4:35:60:bd:52:e3: 01:86:e2:a7:1d:97:cb:cb:04:f6:8a:16:92:d9:18: 01:69:0c:eb:88:41:95:0c:48:01:a9:5b:22:6a:23: ea:a2:b0:38:a0:aa:04:bd:13:54:0b:68:79:cf:b6: f6:c7:bf:51:a4:f4:c2:fa:22:c3:6a:43:16:33:da: d9:72:77:69:7c:6b:52:b5:b3:dc:cf:2e:e4:0b:38: ca:97:36:90:d2:0d:3d:61:50:d6:93:28:0a:c4:2c: d1:8a:31:b6:70:42:cb:f2:90:b0:e0:8c:1f:2d:81: ba:3e:ae:35:3d:ce:1d:d5:c2:96:3b:8e:54:be:00: 5d:de:d7:3c:58:96:cf:35:46:0b:4c:a4:10:61:92: 33:73:3d:07:e3:6e:3b:e5:86:3d:7c:4f:83:8e:ac: cb:e5:b4:e1:61:26:fa:ff:43:e9:34:95:62:4b:b8: 68:30:ba:2f:5c:4e:12:be:4d:81:bf:d6:8c:2c:33: 79:2c:1c:15:d1:26:48:e9:98:f9:a9:54:1d:4f:e2: ec:b0:de:8a:85:3e:44:39:35:da:b7:16:f5:77:b9: 4d:11:50:30:ee:21:9d:35:a9:13:73:37:39:4d:a3: 43:52:44:97:be:08:7a:dd:6d:cf:65:70:b1:93:fe: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:92:F3:37:54:CF:DF:2E:26:FF:F7:12:38:8F:41:6F:E5:98:F7 X509v3 Authority Key Identifier: keyid:A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f1:96:52:16:e0:9f:1e:19:06:a2:61:d9:d2:00:64:cc:71: 73:91:f3:8e:b2:0f:f1:a3:53:1c:79:c2:32:17:59:d6:d4:ec: de:a1:9d:5b:94:dd:a1:25:5e:de:d2:ff:b6:7c:62:b1:9b:19: e8:3f:e0:fe:35:64:79:a2:3e:11:4e:72:63:e8:72:ac:14:6e: 10:f9:1b:0d:99:05:7f:71:b3:3f:95:cd:30:16:be:da:16:0b: ba:cb:a5:cc:1a:d7:7d:c5:3f:3e:41:d7:5d:44:59:f1:33:71: 2b:02:a5:d5:f6:30:9b:1a:99:6f:40:35:03:2b:09:dd:61:0d: 9c:13:43:2f:b6:a5:18:62:6c:7a:f4:72:59:d5:47:b9:33:4d: 8f:81:7d:88:91:6e:bc:80:e2:37:c9:f1:01:99:0c:b8:cc:b0: 11:54:45:f6:63:44:bc:d1:3a:10:04:ae:72:59:63:58:39:22: 20:b5:cd:52:f4:3f:f6:8d:4d:73:56:43:a7:43:79:b0:38:4d: 12:0e:3d:90:e7:1f:b1:65:14:a7:bf:ab:b8:f6:8e:c6:9c:83: aa:22:4e:e2:7e:19:2a:24:55:c1:7a:e3:70:7b:28:02:c2:41: 44:85:c3:bb:da:7c:db:e8:fe:a2:9a:0d:37:15:4a:7d:f5:c0: a6:ea:55:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavztyprI2Ait8E0jG199rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjA4MGEzZTllYTQxMGQxYjhmMDY1Y2MyOTIzYTU5ZmY2 YWMxMDEwHhcNMjUxMjI2MTMwMDQwWhcNMjUxMjI3MTMwMDQwWjAzMTEwLwYDVQQD EygwZjkwOTJmMzM3NTRjZmRmMmUyNmZmZjcxMjM4OGY0MTZmZTU5OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk8HS92UNWTENWC9UuMBhuKnHZfL ywT2ihaS2RgBaQzriEGVDEgBqVsiaiPqorA4oKoEvRNUC2h5z7b2x79RpPTC+iLD akMWM9rZcndpfGtStbPczy7kCzjKlzaQ0g09YVDWkygKxCzRijG2cELL8pCw4Iwf LYG6Pq41Pc4d1cKWO45UvgBd3tc8WJbPNUYLTKQQYZIzcz0H42475YY9fE+DjqzL 5bThYSb6/0PpNJViS7hoMLovXE4Svk2Bv9aMLDN5LBwV0SZI6Zj5qVQdT+LssN6K hT5EOTXatxb1d7lNEVAw7iGdNakTczc5TaNDUkSXvgh63W3PZXCxk/5TRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+QkvM3VM/fLib/9xI4j0Fv5Zj3MB8GA1UdIwQY MBaAFKnwgKPp6kENG48GXMKSOln/asEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZDQW8tbnFRUTBiandaY3dwSTZXZjlxd1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMDEwZGUtMWVlNC00M2FlLTg2YWQt OGM4NTIzMzMwZmY1LzEvcWZDQW8tbnFRUTBiandaY3dwSTZXZjlxd1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMDEwZGUtMWVlNC00M2FlLTg2YWQtOGM4NTIzMzMwZmY1 LzEvcWZDQW8tbnFRUTBiandaY3dwSTZXZjlxd1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/GWUhbg nx4ZBqJh2dIAZMxxc5HzjrIP8aNTHHnCMhdZ1tTs3qGdW5TdoSVe3tL/tnxisZsZ 6D/g/jVkeaI+EU5yY+hyrBRuEPkbDZkFf3GzP5XNMBa+2hYLusulzBrXfcU/PkHX XURZ8TNxKwKl1fYwmxqZb0A1AysJ3WENnBNDL7alGGJsevRyWdVHuTNNj4F9iJFu vIDiN8nxAZkMuMywEVRF9mNEvNE6EASuclljWDkiILXNUvQ/9o1Nc1ZDp0N5sDhN Eg49kOcfsWUUp7+ruPaOxpyDqiJO4n4ZKiRVwXrjcHsoAsJBRIXDu9p82+j+opoN NxVKffXApupVmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client