This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json) Hash identifier: JMyI8xavQksWcNqHzHg6kWaCqlHu8AhvxwN5tG2tAs0= Subject key identifier: C5:7D:A5:C8:DA:C3:C1:A8:AD:CB:4D:01:74:DA:42:CC:33:8A:45:38 Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019B48163B2C221EE8361BF7E19F4EFE38E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft Manifest number: 067D Signing time: Mon 22 Dec 2025 22:02:54 +0000 Manifest this update: Mon 22 Dec 2025 22:02:54 +0000 Manifest next update: Tue 23 Dec 2025 22:02:54 +0000 Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: JA50YVh1I0JW22RbpVrabOxvLFuPWhLI9FllsVV4Dso=) 2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:3b:2c:22:1e:e8:36:1b:f7:e1:9f:4e:fe:38:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Dec 22 22:02:54 2025 GMT Not After : Dec 23 22:02:54 2025 GMT Subject: CN=c57da5c8dac3c1a8adcb4d0174da42cc338a4538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:2a:db:06:4b:72:55:62:8f:77:07:fc:a3: 26:81:6f:fd:60:ff:fc:3f:38:cb:12:f0:c6:6d:a5: a6:70:92:7a:33:58:b0:2c:58:15:fc:62:25:5a:86: 11:1f:d2:0b:8f:a5:5d:e2:9c:72:11:10:4b:c5:fa: e2:3b:8f:be:39:fa:8b:5b:1f:51:72:87:93:91:88: 51:0a:90:88:7d:85:c7:29:1f:1d:be:6d:b5:cb:d3: 33:95:e8:6d:df:67:1d:05:7e:7b:e3:15:52:5c:4a: 0b:fd:6a:58:39:ab:19:5f:56:bc:ae:8b:71:cf:7f: 23:7f:59:a1:8b:14:3a:9c:8e:55:3e:a0:42:73:a1: e2:9d:5e:36:3d:41:b4:1a:7e:5c:ef:4a:6a:02:13: bf:77:cf:23:b1:41:87:9c:ef:fd:9e:b3:5b:0d:0a: 06:85:03:27:b9:4d:95:93:70:44:b6:28:6d:0e:bf: c6:f8:58:82:a0:ee:2a:7a:db:74:07:6b:ac:e4:11: fe:b9:15:9f:58:62:8b:47:3c:0b:ea:cb:d1:33:d4: 2c:b7:4a:ee:16:ca:8d:40:5b:ca:62:a8:85:74:67: 37:f4:86:56:f5:54:9d:ef:6d:88:96:74:76:ef:93: d0:3f:af:e9:f7:99:ab:86:ea:80:5d:56:e2:fc:f3: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:A5:C8:DA:C3:C1:A8:AD:CB:4D:01:74:DA:42:CC:33:8A:45:38 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d5:e6:21:4c:e5:8b:8a:1d:e0:8c:23:e6:bf:77:e9:20:42: f7:86:27:b0:52:b5:b3:6f:f3:da:1d:dd:ea:f2:3a:bb:c9:05: 0d:4d:63:b3:71:5d:90:44:5c:52:c1:ae:20:1e:e5:95:6d:53: d2:fb:51:1c:69:cc:c8:64:d5:44:7a:81:8f:2e:cc:4f:1a:f0: 13:87:bb:06:54:e5:92:ff:de:f2:ca:a9:82:14:15:9f:3c:b2: 9c:a5:65:28:51:52:a1:40:fa:e9:49:a0:e3:58:6f:5d:82:4a: cd:29:17:d3:32:a8:30:e1:66:26:ba:9e:5e:dc:1e:7e:2b:11: ec:2e:95:8a:a0:ba:cd:be:4b:c3:56:7a:bc:bf:8a:88:23:f6: 6a:60:0d:7a:b6:7c:3d:3d:e7:6d:df:00:a7:b6:9e:2b:3b:05: d3:35:c6:2c:8a:48:c1:d4:aa:aa:9d:9e:b0:a7:98:37:dd:3e: 43:32:39:6c:a2:9d:9c:f8:d6:8b:49:b3:4b:8d:41:42:68:23: f4:55:e0:74:a1:7f:cc:06:70:16:9b:47:20:8c:24:72:14:ee: c6:58:37:22:65:bd:1e:c6:2a:2f:0b:7b:56:a2:d3:3e:04:8e: de:2e:91:84:3e:9d:ba:f9:05:e5:26:d0:59:11:39:45:26:d9: e9:8c:7c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFjssIh7oNhv34Z9O/jjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjUxMjIyMjIwMjU0WhcNMjUxMjIzMjIwMjU0WjAzMTEwLwYDVQQD EyhjNTdkYTVjOGRhYzNjMWE4YWRjYjRkMDE3NGRhNDJjYzMzOGE0NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQq2wZLclVij3cH/KMmgW/9YP/8 PzjLEvDGbaWmcJJ6M1iwLFgV/GIlWoYRH9ILj6Vd4pxyERBLxfriO4++OfqLWx9R coeTkYhRCpCIfYXHKR8dvm21y9Mzleht32cdBX574xVSXEoL/WpYOasZX1a8rotx z38jf1mhixQ6nI5VPqBCc6HinV42PUG0Gn5c70pqAhO/d88jsUGHnO/9nrNbDQoG hQMnuU2Vk3BEtihtDr/G+FiCoO4qett0B2us5BH+uRWfWGKLRzwL6svRM9Qst0ru FsqNQFvKYqiFdGc39IZW9VSd722IlnR275PQP6/p95mrhuqAXVbi/PPV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV9pcjaw8GorctNAXTaQswzikU4MB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9XmIUzl i4od4Iwj5r936SBC94YnsFK1s2/z2h3d6vI6u8kFDU1js3FdkERcUsGuIB7llW1T 0vtRHGnMyGTVRHqBjy7MTxrwE4e7BlTlkv/e8sqpghQVnzyynKVlKFFSoUD66Umg 41hvXYJKzSkX0zKoMOFmJrqeXtwefisR7C6ViqC6zb5Lw1Z6vL+KiCP2amANerZ8 PT3nbd8Ap7aeKzsF0zXGLIpIwdSqqp2esKeYN90+QzI5bKKdnPjWi0mzS41BQmgj 9FXgdKF/zAZwFptHIIwkchTuxlg3ImW9HsYqLwt7VqLTPgSO3i6RhD6duvkF5SbQ WRE5RSbZ6Yx8RQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:55:36 2025 by rpki-client