This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft File: QvZoAOPk7qCxeqfOG-anEIW7C7U.mft (raw, json) Hash identifier: V8PXpSeeFnxu+0SStkQOtxObssrYJOF9sWdpleFtxo0= Subject key identifier: 4F:96:44:70:2D:E9:7C:3F:BF:EB:16:D0:DA:98:72:57:0B:33:BB:F5 Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5 Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5 Certificate serial: 019B59ACCBEA3CBD56889382A5CE6DD69204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft Manifest number: E4 Signing time: Fri 26 Dec 2025 08:00:55 +0000 Manifest this update: Fri 26 Dec 2025 08:00:55 +0000 Manifest next update: Sat 27 Dec 2025 08:00:55 +0000 Files and hashes: 1: QvZoAOPk7qCxeqfOG-anEIW7C7U.crl (hash: jB1zlAlCkFyeAGG0yi6FHSM19Y2hxW57+5vbzGkcW5g=) 2: taBuGNscecueOGdxDI5_sp5Q64s.roa (hash: jfs6i9kfrvsOmGXfhBNY9aaIV6kpwF4dvrqA21q44KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:cb:ea:3c:bd:56:88:93:82:a5:ce:6d:d6:92:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5 Validity Not Before: Dec 26 08:00:55 2025 GMT Not After : Dec 27 08:00:55 2025 GMT Subject: CN=4f9644702de97c3fbfeb16d0da9872570b33bbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:c1:79:ec:40:1a:f5:bc:32:78:47:34:14: b2:d5:f1:58:b3:a8:52:cf:3f:c2:23:5a:89:59:ee: 33:38:ca:38:c3:2b:ba:a0:9e:fa:8d:fa:cb:06:b2: 42:eb:a1:c0:c6:fd:72:67:2b:eb:3c:f4:07:1d:08: 7b:07:34:c6:0f:e7:ac:9d:47:c9:e0:a7:bd:59:b2: d8:77:9c:46:77:e3:7d:19:f7:ab:cd:b6:6f:b6:e9: a0:a2:d4:63:78:f4:0b:d6:d9:d5:ba:33:31:c9:d3: eb:93:fb:b4:5f:ca:83:1e:6b:26:7c:e1:fe:a5:57: 56:57:96:52:f4:1c:1a:90:8d:c2:23:10:23:1c:2d: 39:56:a2:e3:af:5a:23:09:08:fa:88:30:5c:4a:63: 3d:60:da:5c:b4:29:af:25:f4:7c:4b:44:4b:de:be: 14:4b:07:4c:6f:08:ed:6b:9c:ab:4c:51:64:c0:34: f8:e3:d1:7c:a8:71:35:43:24:fb:7b:96:f2:93:ca: dc:f0:1b:2a:4f:b7:9e:a1:f2:cf:5f:b6:52:88:86: 46:e1:84:93:5a:dc:12:0c:90:13:41:c5:9d:9a:7d: 72:e4:2c:4d:6a:de:0c:b4:a3:ee:61:15:00:f8:19: af:d8:c5:bc:38:b2:ed:49:db:83:06:ce:c1:a4:3c: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:96:44:70:2D:E9:7C:3F:BF:EB:16:D0:DA:98:72:57:0B:33:BB:F5 X509v3 Authority Key Identifier: keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d4:2a:00:4a:d2:7c:bd:9a:27:e9:3b:8f:4e:41:df:ab:b9: 5f:76:8b:8e:07:b5:0e:3c:91:a1:27:77:0b:84:c9:b8:c0:f6: a0:d7:9b:e6:d4:f2:25:de:cf:ad:84:f1:ce:6c:f9:35:5d:fd: 67:ef:44:4b:89:4e:0e:4a:70:fa:f6:51:09:d2:b3:0e:ab:42: f1:d4:8a:2e:dc:97:c6:28:e5:0c:0f:21:65:d9:db:36:6e:54: fd:e5:78:a3:0a:a5:59:a8:eb:56:22:a1:de:28:17:f7:f8:06: 95:af:31:de:77:23:0e:f3:61:4b:b6:8e:8a:b0:d0:4e:11:db: cb:86:7f:6b:88:47:68:76:5a:20:31:b8:0f:34:45:a3:31:98: 3a:d4:8f:2f:ac:3e:b7:43:9c:6c:6d:06:c3:1a:47:31:8d:5c: bd:03:b3:ae:24:2b:80:9e:75:0e:8d:0c:bb:ae:88:12:7e:e8: 5f:38:69:9c:ea:e3:25:51:fe:b8:a7:82:d2:af:37:ac:f1:bc: 1f:2c:9e:d4:0b:2b:a1:e8:88:a0:47:2f:c7:06:4a:5a:b5:4e: 58:54:cf:83:b8:63:f0:dd:86:12:62:3f:32:aa:07:ea:c1:5f: 46:f1:0b:39:90:ff:41:d2:43:00:55:e7:1e:36:ae:f0:e3:90: 5a:00:03:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMvqPL1WiJOCpc5t1pIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjY2ODAwZTNlNGVlYTBiMTdhYTdjZTFiZTZhNzEwODVi YjBiYjUwHhcNMjUxMjI2MDgwMDU1WhcNMjUxMjI3MDgwMDU1WjAzMTEwLwYDVQQD Eyg0Zjk2NDQ3MDJkZTk3YzNmYmZlYjE2ZDBkYTk4NzI1NzBiMzNiYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+HBeexAGvW8MnhHNBSy1fFYs6hS zz/CI1qJWe4zOMo4wyu6oJ76jfrLBrJC66HAxv1yZyvrPPQHHQh7BzTGD+esnUfJ 4Ke9WbLYd5xGd+N9GferzbZvtumgotRjePQL1tnVujMxydPrk/u0X8qDHmsmfOH+ pVdWV5ZS9BwakI3CIxAjHC05VqLjr1ojCQj6iDBcSmM9YNpctCmvJfR8S0RL3r4U SwdMbwjta5yrTFFkwDT449F8qHE1QyT7e5byk8rc8BsqT7eeofLPX7ZSiIZG4YST WtwSDJATQcWdmn1y5CxNat4MtKPuYRUA+Bmv2MW8OLLtSduDBs7BpDxt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+WRHAt6Xw/v+sW0NqYclcLM7v1MB8GA1UdIwQY MBaAFEL2aADj5O6gsXqnzhvmpxCFuwu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZab0FPUGs3cUN4ZXFmT0ctYW5FSVc3QzdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWQ1ZTgtNWM0ZC00ZjY3LWFmN2Yt YWIyOTI0MmFiOTMzLzEvUXZab0FPUGs3cUN4ZXFmT0ctYW5FSVc3QzdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWQ1ZTgtNWM0ZC00ZjY3LWFmN2YtYWIyOTI0MmFiOTMz LzEvUXZab0FPUGs3cUN4ZXFmT0ctYW5FSVc3QzdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtQqAErS fL2aJ+k7j05B36u5X3aLjge1DjyRoSd3C4TJuMD2oNeb5tTyJd7PrYTxzmz5NV39 Z+9ES4lODkpw+vZRCdKzDqtC8dSKLtyXxijlDA8hZdnbNm5U/eV4owqlWajrViKh 3igX9/gGla8x3ncjDvNhS7aOirDQThHby4Z/a4hHaHZaIDG4DzRFozGYOtSPL6w+ t0OcbG0GwxpHMY1cvQOzriQrgJ51Do0Mu66IEn7oXzhpnOrjJVH+uKeC0q83rPG8 Hyye1AsroeiIoEcvxwZKWrVOWFTPg7hj8N2GEmI/MqoH6sFfRvELOZD/QdJDAFXn Hjau8OOQWgADbg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:16 2025 by rpki-client