This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json) Hash identifier: qxawVnizQcXEyuqnSt92x7N8yZbwlpY4iY3CEAs8fkY= Subject key identifier: 7C:D7:F2:90:43:2C:A2:FE:22:F6:EA:78:FD:FF:A0:EE:15:A1:EC:4B Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Certificate serial: 019B3569FBFC4AC11E5D8927FEE2058E53CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft Manifest number: 12C8 Signing time: Fri 19 Dec 2025 07:01:36 +0000 Manifest this update: Fri 19 Dec 2025 07:01:36 +0000 Manifest next update: Sat 20 Dec 2025 07:01:36 +0000 Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=) 2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: rz5TE1IKANM2xwT8yfxDIDC+iPeqyCc6HJYFoc6iwTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:fb:fc:4a:c1:1e:5d:89:27:fe:e2:05:8e:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564 Validity Not Before: Dec 19 07:01:36 2025 GMT Not After : Dec 20 07:01:36 2025 GMT Subject: CN=7cd7f290432ca2fe22f6ea78fdffa0ee15a1ec4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:53:58:0e:99:b9:69:53:51:8c:91:f5:02: 7e:6e:10:14:53:a3:32:d5:08:63:6b:e7:65:16:1f: db:85:db:95:ce:5f:83:30:8b:cc:08:a9:f0:70:5c: cf:14:fe:01:39:dd:ff:0e:f7:21:94:ac:42:b5:5e: df:28:f0:1d:19:bf:ab:48:51:fc:39:a3:de:5f:f2: e4:95:4a:a8:2f:ae:27:68:dc:e2:d0:8b:e4:8e:d7: eb:a8:86:21:5a:7c:97:b2:2d:fd:54:4b:41:47:ff: 13:bf:f5:b7:38:78:ed:1d:c5:6b:02:ca:e6:74:2a: 33:c7:92:65:a2:34:f3:9b:57:23:17:aa:1f:b7:3d: 04:fb:67:71:30:82:79:2b:0b:52:f8:06:67:0c:e4: e8:4a:2f:54:96:1e:87:c8:3c:94:76:b7:ca:33:4b: 00:9a:a8:f7:2f:de:c6:8f:09:3a:4c:62:27:64:fe: 29:99:77:b2:28:ac:1b:0b:e0:b3:97:04:a7:11:7a: 49:c1:1b:c2:93:28:75:00:cf:e2:fb:a3:9c:84:8a: 1c:f2:b7:f7:a8:3b:25:47:92:92:a3:56:81:d6:0f: 6a:4b:87:2c:50:3f:10:e7:43:ba:34:4a:00:8c:23: 05:8c:00:ae:c2:ec:b0:77:84:28:73:32:19:9d:7f: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:F2:90:43:2C:A2:FE:22:F6:EA:78:FD:FF:A0:EE:15:A1:EC:4B X509v3 Authority Key Identifier: keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:23:7f:37:27:52:45:35:c3:d4:c8:7e:d4:9e:b8:db:3f:46: 29:82:8c:15:e1:82:62:66:b7:68:70:86:9a:86:35:20:53:d0: 8e:69:7b:75:20:8d:3c:33:f0:f7:f6:8f:07:ca:b6:56:e3:32: 4d:30:39:0b:29:5f:0d:2b:e1:38:59:c7:b3:9d:7d:e4:96:74: 23:42:2d:9a:ab:38:e1:da:b8:36:09:9b:36:38:82:d3:ef:aa: 72:83:8f:4c:84:a3:c9:a0:63:4c:86:68:96:29:5a:af:37:1a: a8:7b:d3:dd:37:7b:7a:f9:c1:74:7c:63:5b:ac:b8:64:49:8c: 08:00:31:f8:26:b8:36:51:ed:2e:95:83:63:ff:45:2f:ba:e7: 47:91:80:3b:a9:b9:11:0e:61:b3:56:72:1b:34:5c:1d:00:b5: fd:c2:ff:13:14:34:27:4e:6b:d0:e0:a8:8d:c3:fc:d7:60:03: 36:80:08:6c:70:74:e2:82:57:da:76:27:57:b4:98:7c:3e:90: 95:70:ec:09:e3:9c:f1:2c:56:67:32:24:21:4a:35:33:78:78: b5:ec:3a:25:d0:1b:51:a6:bc:ca:51:27:8a:c4:1c:83:59:68: 66:f1:ff:fc:98:0d:8e:15:f1:66:42:0c:b7:62:9c:84:d9:8f: f9:c6:8f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1afv8SsEeXYkn/uIFjlPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDBkMDZlMmE2OWEzNjY0YjZhYmNmZTIyYmQyZDA2YjUz MzY1NjQwHhcNMjUxMjE5MDcwMTM2WhcNMjUxMjIwMDcwMTM2WjAzMTEwLwYDVQQD Eyg3Y2Q3ZjI5MDQzMmNhMmZlMjJmNmVhNzhmZGZmYTBlZTE1YTFlYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR1TWA6ZuWlTUYyR9QJ+bhAUU6My 1Qhja+dlFh/bhduVzl+DMIvMCKnwcFzPFP4BOd3/DvchlKxCtV7fKPAdGb+rSFH8 OaPeX/LklUqoL64naNzi0IvkjtfrqIYhWnyXsi39VEtBR/8Tv/W3OHjtHcVrAsrm dCozx5JlojTzm1cjF6oftz0E+2dxMIJ5KwtS+AZnDOToSi9Ulh6HyDyUdrfKM0sA mqj3L97Gjwk6TGInZP4pmXeyKKwbC+CzlwSnEXpJwRvCkyh1AM/i+6OchIoc8rf3 qDslR5KSo1aB1g9qS4csUD8Q50O6NEoAjCMFjACuwuywd4QoczIZnX9CiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzX8pBDLKL+IvbqeP3/oO4VoexLMB8GA1UdIwQY MBaAFEMA0G4qaaNmS2q8/iK9LQa1M2VkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYt MjkwYTNmYzRiYjYwLzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYtMjkwYTNmYzRiYjYw LzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyN/NydS RTXD1Mh+1J642z9GKYKMFeGCYma3aHCGmoY1IFPQjml7dSCNPDPw9/aPB8q2VuMy TTA5CylfDSvhOFnHs5195JZ0I0Itmqs44dq4NgmbNjiC0++qcoOPTISjyaBjTIZo lilarzcaqHvT3Td7evnBdHxjW6y4ZEmMCAAx+Ca4NlHtLpWDY/9FL7rnR5GAO6m5 EQ5hs1ZyGzRcHQC1/cL/ExQ0J05r0OCojcP812ADNoAIbHB04oJX2nYnV7SYfD6Q lXDsCeOc8SxWZzIkIUo1M3h4tew6JdAbUaa8ylEnisQcg1loZvH//JgNjhXxZkIM t2KchNmP+caPNA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:14:25 2025 by rpki-client