This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json) Hash identifier: p2/jMp3Tr6L1IzHKVZtXvXFf0MDzeSRKeDggBQ9eJf4= Subject key identifier: C9:85:83:39:F1:26:BB:4A:94:98:34:61:4F:7B:10:F6:48:2F:1F:9D Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf Certificate serial: 019B4D3A819B2BA33CFA535C070F6853E526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft Manifest number: 16E5 Signing time: Tue 23 Dec 2025 22:00:38 +0000 Manifest this update: Tue 23 Dec 2025 22:00:38 +0000 Manifest next update: Wed 24 Dec 2025 22:00:38 +0000 Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: lqk7/sbJYfAI/ME0Svuehp/uesbsnrBOKX2S3Lx58mA=) 2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:81:9b:2b:a3:3c:fa:53:5c:07:0f:68:53:e5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf Validity Not Before: Dec 23 22:00:38 2025 GMT Not After : Dec 24 22:00:38 2025 GMT Subject: CN=c9858339f126bb4a949834614f7b10f6482f1f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:ac:f6:c8:ad:69:67:c7:4d:53:ab:f3:66: b3:91:7b:8e:08:d8:e0:bc:73:0b:b5:15:d9:b5:02: 74:c6:9a:25:4c:86:00:0f:e3:bf:11:c6:de:8d:6b: 93:4d:fd:9f:f0:14:c8:54:5e:cb:a3:6e:3c:fa:48: df:c9:9a:df:60:3b:dd:1d:95:cf:cc:f3:66:4d:da: b4:5a:72:00:53:cd:36:c3:e6:4a:95:41:74:8a:af: 7c:ca:bd:ee:69:34:ed:45:3a:a8:f1:26:9a:99:2c: 82:8d:72:a2:bd:a9:9f:48:bc:b4:cb:f3:f5:71:a8: 63:d7:df:49:ff:aa:3a:cf:af:b9:d8:69:e1:25:fc: f7:b8:c8:9e:48:98:84:df:e8:87:ab:3a:3c:6e:d7: 33:f5:5d:47:44:11:7e:c7:73:e0:42:70:11:05:dc: 5c:e3:b7:8d:db:e1:0d:96:56:79:d1:1c:fb:7f:4b: c2:ff:0d:43:0f:f4:e7:a5:14:8f:8e:ee:83:cc:8a: 5c:13:d3:7f:5d:a5:16:b3:6b:83:f5:8e:67:06:24: 3c:58:68:43:db:b9:3c:48:12:9b:7d:c4:e8:07:33: 83:d8:59:35:dc:b1:9e:41:ef:a2:8a:d5:7c:b9:78: 73:04:e1:ff:13:77:87:f7:f8:5a:fe:1a:a4:d9:cf: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:83:39:F1:26:BB:4A:94:98:34:61:4F:7B:10:F6:48:2F:1F:9D X509v3 Authority Key Identifier: keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e3:98:8d:96:c5:cd:68:8e:ef:3c:34:0b:90:18:9d:89:8c: 7b:51:44:0b:69:6c:f8:a5:49:e2:da:ba:af:9c:4f:97:78:da: a7:fe:d8:4d:70:a2:1a:11:22:b2:b4:0b:04:f4:4d:fa:3f:01: f1:44:14:98:90:36:b4:e9:fc:bc:53:be:ea:ad:fd:1e:1d:11: fa:b3:5d:81:41:b7:e6:bb:6f:e6:bb:c2:6c:fc:81:89:d5:0d: 41:7d:9a:77:cf:79:f8:f5:48:2e:7f:d6:4a:9d:10:66:e9:77: 6e:62:16:d9:4f:31:99:e9:3f:6b:5f:05:61:c3:94:41:ca:ab: 80:f7:0a:06:38:a3:d5:6f:94:7c:dc:44:92:ea:48:d6:1e:c2: 9e:4c:19:a0:c7:00:3a:f2:ba:d7:23:82:09:61:13:36:bc:7e: 6e:f4:a2:2b:9b:a4:0d:04:4d:76:06:3d:ee:8d:d0:39:a2:fb: d3:58:70:f4:40:33:04:6a:98:f5:dd:bf:58:0c:91:ea:78:a4: 3b:a6:19:6b:f9:5a:fa:bf:0f:06:9f:36:42:f6:f3:2a:e2:a9: a9:03:e7:58:56:af:1c:07:b4:54:1a:58:30:b5:c0:8c:e8:02: 98:d9:3d:a2:94:a4:55:fd:bc:4f:70:e7:a1:ef:c8:2c:4b:37: 8a:cb:f0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOoGbK6M8+lNcBw9oU+UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODI2ZWU5MDI3MGZkZDE0MjNhZjgwOTA3MjYwMDY3MThk ZmM2Y2YwHhcNMjUxMjIzMjIwMDM4WhcNMjUxMjI0MjIwMDM4WjAzMTEwLwYDVQQD EyhjOTg1ODMzOWYxMjZiYjRhOTQ5ODM0NjE0ZjdiMTBmNjQ4MmYxZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyGs9sitaWfHTVOr82azkXuOCNjg vHMLtRXZtQJ0xpolTIYAD+O/EcbejWuTTf2f8BTIVF7Lo248+kjfyZrfYDvdHZXP zPNmTdq0WnIAU802w+ZKlUF0iq98yr3uaTTtRTqo8SaamSyCjXKivamfSLy0y/P1 cahj199J/6o6z6+52GnhJfz3uMieSJiE3+iHqzo8btcz9V1HRBF+x3PgQnARBdxc 47eN2+ENllZ50Rz7f0vC/w1DD/TnpRSPju6DzIpcE9N/XaUWs2uD9Y5nBiQ8WGhD 27k8SBKbfcToBzOD2Fk13LGeQe+iitV8uXhzBOH/E3eH9/ha/hqk2c/EtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmFgznxJrtKlJg0YU97EPZILx+dMB8GA1UdIwQY MBaAFEGCbukCcP3RQjr4CQcmAGcY38bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEt ZWU1ODZkMzc1YTU4LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEtZWU1ODZkMzc1YTU4 LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeOYjZbF zWiO7zw0C5AYnYmMe1FEC2ls+KVJ4tq6r5xPl3jap/7YTXCiGhEisrQLBPRN+j8B 8UQUmJA2tOn8vFO+6q39Hh0R+rNdgUG35rtv5rvCbPyBidUNQX2ad895+PVILn/W Sp0QZul3bmIW2U8xmek/a18FYcOUQcqrgPcKBjij1W+UfNxEkupI1h7CnkwZoMcA OvK61yOCCWETNrx+bvSiK5ukDQRNdgY97o3QOaL701hw9EAzBGqY9d2/WAyR6nik O6YZa/la+r8PBp82QvbzKuKpqQPnWFavHAe0VBpYMLXAjOgCmNk9opSkVf28T3Dn oe/ILEs3isvwuA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:19:19 2025 by rpki-client