This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json) Hash identifier: cWfj38nYNuN9zfipb+baicik3uEJXMqIEtPf3AX8pd8= Subject key identifier: 03:3A:24:85:BF:D4:49:67:EB:1D:5C:79:C6:6C:DB:54:6C:5A:E3:5F Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Certificate serial: 019B5907BE0F0FC10A32C047C60FF59B3EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft Manifest number: 7E Signing time: Fri 26 Dec 2025 05:00:38 +0000 Manifest this update: Fri 26 Dec 2025 05:00:38 +0000 Manifest next update: Sat 27 Dec 2025 05:00:38 +0000 Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: SlEtAWJpBz7mwzpb1egQSd2gotWLy9a2TTd6e4mYW7g=) 2: wlrDNqUnqUmmTYGmXbzC14oo_bE.roa (hash: l0cPMm9AaYNzGdZ4Sbd7mhVrwvyb06PQKB3ZfkcvkmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:be:0f:0f:c1:0a:32:c0:47:c6:0f:f5:9b:3e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Validity Not Before: Dec 26 05:00:38 2025 GMT Not After : Dec 27 05:00:38 2025 GMT Subject: CN=033a2485bfd44967eb1d5c79c66cdb546c5ae35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:b5:49:9e:a7:94:2a:9a:c2:45:48:94:30: 08:bd:74:a3:bf:e5:d6:fe:0d:2d:74:cb:d0:ea:08: 26:02:2c:0f:29:5e:27:3e:28:7c:55:a1:ee:c4:df: cd:d0:2d:d1:4f:1f:fd:16:dc:cd:49:42:85:b4:f6: f7:92:e4:4e:89:89:7d:9b:7e:73:65:5f:0a:40:43: 0b:c1:9f:7b:fe:f3:b3:b7:b5:61:f3:c8:8c:92:bb: 26:e6:52:0d:03:64:2c:92:70:c0:f4:82:f1:6f:95: 84:66:e6:aa:74:8f:64:99:6d:da:99:85:50:e5:3d: e1:4a:9b:d6:16:22:a1:c9:22:16:9f:b2:9e:03:7c: c5:1a:92:c7:fa:69:e9:57:06:9f:e1:f0:fc:08:60: b0:72:4c:4c:74:98:a6:e3:74:ad:1d:94:bf:d9:f5: 25:7b:96:ce:fc:6f:2f:91:11:c6:da:16:22:8f:8d: ab:8c:e4:7e:52:5d:99:de:65:ac:a3:bf:37:b2:fb: 66:33:f7:80:78:46:9a:96:fa:a6:a8:aa:92:ab:82: d7:20:b0:50:5f:2c:9b:5b:7c:f3:8e:33:05:5a:5d: 8c:0e:4e:50:65:12:09:76:85:b4:b2:f5:8e:b4:b1: 1d:d3:1d:cf:ff:ee:9e:ac:5f:ec:1e:de:40:58:9d: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:24:85:BF:D4:49:67:EB:1D:5C:79:C6:6C:DB:54:6C:5A:E3:5F X509v3 Authority Key Identifier: keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1a:a5:72:a3:89:8a:32:b7:ce:5a:36:e1:ac:6f:be:99:ad: 8c:19:17:ae:78:70:69:c0:26:bf:57:2a:c2:5a:52:bd:f4:73: a8:3a:b7:8d:82:de:bc:b4:3b:26:bd:fa:e9:38:d9:62:1f:08: 01:59:fd:90:99:3f:c0:b8:27:4b:d7:0b:1a:e9:7d:7a:2e:b0: 3f:19:e2:55:21:d1:09:85:7c:0d:d4:bd:a2:1b:f5:ba:e3:a0: 6e:a9:b8:3a:f8:1d:70:ae:a6:d3:e4:c6:ce:76:d7:d1:ab:9c: 74:ec:3b:a9:0c:bf:ef:69:0d:51:98:0a:00:bb:1a:bb:b7:29: 0f:ee:3f:c2:e8:67:88:7e:70:c5:35:67:ce:5a:8e:95:07:8b: d3:b5:a8:fb:67:86:c5:e5:23:09:9b:97:07:00:fc:dc:95:e2: de:c2:a5:fb:8d:35:86:8c:4a:4f:04:7a:33:5a:2c:45:b7:c7: 67:2c:68:47:dd:10:23:9e:34:75:2c:39:24:9f:89:a4:4f:5b: 24:a8:dd:52:25:f3:05:69:54:eb:c5:76:12:31:02:0e:0b:8f: ac:8f:d7:32:20:5c:71:f1:40:c1:31:ea:d8:be:b2:6a:a1:a6: ad:9e:a8:f7:3e:b3:e1:13:dd:80:5a:bd:f8:b9:1d:09:89:32: 0d:b6:13:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB74PD8EKMsBHxg/1mz7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4 MmVmZTYwHhcNMjUxMjI2MDUwMDM4WhcNMjUxMjI3MDUwMDM4WjAzMTEwLwYDVQQD EygwMzNhMjQ4NWJmZDQ0OTY3ZWIxZDVjNzljNjZjZGI1NDZjNWFlMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3y1SZ6nlCqawkVIlDAIvXSjv+XW /g0tdMvQ6ggmAiwPKV4nPih8VaHuxN/N0C3RTx/9FtzNSUKFtPb3kuROiYl9m35z ZV8KQEMLwZ97/vOzt7Vh88iMkrsm5lINA2QsknDA9ILxb5WEZuaqdI9kmW3amYVQ 5T3hSpvWFiKhySIWn7KeA3zFGpLH+mnpVwaf4fD8CGCwckxMdJim43StHZS/2fUl e5bO/G8vkRHG2hYij42rjOR+Ul2Z3mWso783svtmM/eAeEaalvqmqKqSq4LXILBQ XyybW3zzjjMFWl2MDk5QZRIJdoW0svWOtLEd0x3P/+6erF/sHt5AWJ3jYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM6JIW/1Eln6x1cecZs21RsWuNfMB8GA1UdIwQY MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRqlcqOJ ijK3zlo24axvvpmtjBkXrnhwacAmv1cqwlpSvfRzqDq3jYLevLQ7Jr366TjZYh8I AVn9kJk/wLgnS9cLGul9ei6wPxniVSHRCYV8DdS9ohv1uuOgbqm4OvgdcK6m0+TG znbX0aucdOw7qQy/72kNUZgKALsau7cpD+4/wuhniH5wxTVnzlqOlQeL07Wo+2eG xeUjCZuXBwD83JXi3sKl+401hoxKTwR6M1osRbfHZyxoR90QI540dSw5JJ+JpE9b JKjdUiXzBWlU68V2EjECDguPrI/XMiBccfFAwTHq2L6yaqGmrZ6o9z6z4RPdgFq9 +LkdCYkyDbYTnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:20 2025 by rpki-client