This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json) Hash identifier: 2n8sJOaOlzOjFtVSkYC4Bw8UfbnjNmeDaF5psUQleaI= Subject key identifier: 79:D3:B2:2B:F3:A7:24:79:E8:99:70:DC:58:5D:9E:44:13:78:9E:0D Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d Certificate serial: 019B5A5221F886D2FA3708C2D32D18916B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft Manifest number: 0E Signing time: Fri 26 Dec 2025 11:01:30 +0000 Manifest this update: Fri 26 Dec 2025 11:01:30 +0000 Manifest next update: Sat 27 Dec 2025 11:01:30 +0000 Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: Mpkk++rHklJw6I4/YzOWH7Sfk6KWLdlwPAo0Ybvx2I8=) 2: YnDgGdGNIaHfL90rxrXGV2dS074.roa (hash: RJDrcH0GO4/uZ5S6vlgfqnLGtMCiNg9TBfHtJfZZyQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:21:f8:86:d2:fa:37:08:c2:d3:2d:18:91:6b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d Validity Not Before: Dec 26 11:01:30 2025 GMT Not After : Dec 27 11:01:30 2025 GMT Subject: CN=79d3b22bf3a72479e89970dc585d9e4413789e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8e:07:22:84:3b:db:22:46:47:ae:be:73:ae: 10:6e:3b:c8:ac:27:17:28:0d:fb:ac:47:4b:fa:fc: 82:6b:0f:10:30:28:31:df:2e:c9:3e:9e:0a:d5:a3: 06:1e:3d:fd:e1:c5:27:85:98:b1:85:2d:7b:33:0b: 0a:37:92:9e:f5:dc:61:38:e5:2a:29:58:70:35:ab: a9:1c:2f:35:01:3e:ee:18:27:53:27:67:4b:7a:9b: b0:2e:51:de:5f:9f:74:2d:a9:b5:b8:fe:49:84:15: c7:c7:bb:23:a4:8d:a8:23:d1:bc:1e:7c:a9:86:23: 7e:b3:d0:80:c7:aa:e8:57:e3:e0:83:e8:c0:12:cb: dc:80:27:b2:a6:9d:d3:9a:d4:a2:32:85:30:c5:60: 17:98:3e:f1:bb:44:b1:8a:8c:5e:11:7f:d8:80:ed: 97:36:02:f2:96:4e:fd:bd:7e:33:d1:1c:0f:55:06: 7a:95:f0:c3:c2:70:c1:73:2c:d2:e9:80:94:37:25: 6e:56:3b:f0:31:32:c2:2f:c5:7b:65:af:c7:2c:99: 7a:52:57:0b:3b:d5:36:11:c1:ca:16:50:cf:51:e0: ca:56:93:6e:2c:ca:f4:e5:d3:c1:6a:af:50:39:e6: ea:fd:2e:52:63:d3:ce:8e:03:f3:21:34:fc:7f:15: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:B2:2B:F3:A7:24:79:E8:99:70:DC:58:5D:9E:44:13:78:9E:0D X509v3 Authority Key Identifier: keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c7:6c:e9:50:4f:48:13:0d:0f:a0:27:e4:18:89:50:65:0e: ed:fc:90:57:12:93:e6:ea:1f:3b:bb:62:a0:03:f2:77:5f:9b: ad:c8:2b:a3:6c:9c:c0:ee:2d:1e:55:79:6d:93:8b:80:1c:df: dc:a0:3c:72:c0:f0:72:54:98:21:31:1b:30:6c:90:f1:d4:a9: c3:11:54:87:bc:f6:c5:7f:1d:b8:c9:56:e9:f4:8f:32:2d:4e: 9c:83:cf:f1:7a:18:24:2a:dc:1d:14:2e:0f:20:73:42:83:fc: e2:22:21:e0:2e:29:89:50:94:61:23:75:3f:90:50:8d:cb:0c: f1:b8:1d:6e:83:05:f8:48:93:50:d4:63:5e:a8:99:b4:7d:ab: 40:28:b8:2f:cc:0f:91:14:94:a9:80:93:dd:2a:04:d3:4b:ba: 37:ef:cf:57:57:db:53:91:3b:34:b2:65:0c:41:90:9d:97:cd: 7c:b3:25:41:4f:e4:66:f2:01:c3:51:5d:84:bd:78:b7:37:62: 00:f0:f4:5d:c1:1b:57:8d:d6:5d:24:e2:7a:26:05:25:14:cf: b3:27:37:96:9b:82:8b:ae:07:a9:72:6f:19:2c:80:ab:f0:38: f2:19:43:ea:3f:dd:4c:98:aa:55:98:28:ef:f4:80:b3:34:79: 67:43:11:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUiH4htL6NwjC0y0YkWtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjA0NzViNjgwYTE4ZTRkYTM0YjJhMjg5OTA2MjgzZTI4 NWQ4MmQwHhcNMjUxMjI2MTEwMTMwWhcNMjUxMjI3MTEwMTMwWjAzMTEwLwYDVQQD Eyg3OWQzYjIyYmYzYTcyNDc5ZTg5OTcwZGM1ODVkOWU0NDEzNzg5ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o4HIoQ72yJGR66+c64QbjvIrCcX KA37rEdL+vyCaw8QMCgx3y7JPp4K1aMGHj394cUnhZixhS17MwsKN5Ke9dxhOOUq KVhwNaupHC81AT7uGCdTJ2dLepuwLlHeX590Lam1uP5JhBXHx7sjpI2oI9G8Hnyp hiN+s9CAx6roV+Pgg+jAEsvcgCeypp3TmtSiMoUwxWAXmD7xu0SxioxeEX/YgO2X NgLylk79vX4z0RwPVQZ6lfDDwnDBcyzS6YCUNyVuVjvwMTLCL8V7Za/HLJl6UlcL O9U2EcHKFlDPUeDKVpNuLMr05dPBaq9QOebq/S5SY9POjgPzITT8fxXwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnTsivzpyR56Jlw3FhdnkQTeJ4NMB8GA1UdIwQY MBaAFEIgR1toChjk2jSyoomQYoPihdgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEt NDViOGU0OWJkMTQzLzEvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEtNDViOGU0OWJkMTQz LzEvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMds6VBP SBMND6An5BiJUGUO7fyQVxKT5uofO7tioAPyd1+brcgro2ycwO4tHlV5bZOLgBzf 3KA8csDwclSYITEbMGyQ8dSpwxFUh7z2xX8duMlW6fSPMi1OnIPP8XoYJCrcHRQu DyBzQoP84iIh4C4piVCUYSN1P5BQjcsM8bgdboMF+EiTUNRjXqiZtH2rQCi4L8wP kRSUqYCT3SoE00u6N+/PV1fbU5E7NLJlDEGQnZfNfLMlQU/kZvIBw1FdhL14tzdi APD0XcEbV43WXSTieiYFJRTPsyc3lpuCi64HqXJvGSyAq/A48hlD6j/dTJiqVZgo 7/SAszR5Z0MRfQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client