This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft File: _QwhhAzBSt9SamgcB25mxDQxWCw.mft (raw, json) Hash identifier: 9DBJn1Ho6QLGztF7nN/U8lckzY9PaF+iR/aIuoxgrGA= Subject key identifier: DE:92:73:BA:BE:34:23:01:14:D2:F4:C0:DA:2A:F3:E1:95:AC:92:FB Authority key identifier: FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C Certificate issuer: /CN=fd0c21840cc14adf526a681c076e66c43431582c Certificate serial: 019B59ACE0DACA85F9A097D90FAA45094A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft Manifest number: B1 Signing time: Fri 26 Dec 2025 08:01:00 +0000 Manifest this update: Fri 26 Dec 2025 08:01:00 +0000 Manifest next update: Sat 27 Dec 2025 08:01:00 +0000 Files and hashes: 1: _QwhhAzBSt9SamgcB25mxDQxWCw.crl (hash: 6Ouz20kEYnaNDMyUq/yHScZUPQ87MJW0UHerxV2gLH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e0:da:ca:85:f9:a0:97:d9:0f:aa:45:09:4a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c21840cc14adf526a681c076e66c43431582c Validity Not Before: Dec 26 08:01:00 2025 GMT Not After : Dec 27 08:01:00 2025 GMT Subject: CN=de9273babe34230114d2f4c0da2af3e195ac92fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:fb:f1:7e:4d:6e:50:b8:3e:14:49:53:77: 3d:78:68:c5:1c:3e:a8:28:78:fd:80:c4:f0:1f:47: 7c:0b:3a:e7:cd:e7:a2:22:ee:5a:40:6d:8a:31:e0: 7e:b5:5e:fe:0d:48:8a:cf:b7:d2:90:cb:29:8a:c2: 49:9b:1f:fe:71:a0:19:10:54:2e:7a:0f:08:32:82: b1:c8:19:7d:48:3c:95:ea:82:46:63:f1:a4:20:1a: 08:e8:96:07:08:70:cd:26:32:7c:b3:98:e0:3d:3a: 24:b8:04:86:b3:c4:a1:16:a5:ec:d6:a0:de:b8:ba: 87:ad:3a:8d:f7:8f:d6:e9:cc:cd:a5:66:b3:2a:d2: 59:21:f1:3b:c1:93:98:79:bc:89:8b:ea:ad:9c:15: 13:ab:b6:be:89:98:5e:2d:8f:43:b6:9a:60:af:5f: 2e:f6:48:75:bb:38:86:62:c4:c6:e8:c8:a1:54:51: f9:a7:3c:fa:e4:80:da:e5:9d:a8:2f:48:94:b3:1f: ad:c2:60:f3:fa:21:2c:34:d2:15:8e:12:92:a1:bd: 61:79:68:44:43:91:36:1a:02:7e:b6:82:01:9f:29: cc:d1:2e:27:81:d9:61:a1:03:d3:a7:9b:af:aa:52: da:78:1f:06:0f:c3:6c:ba:b1:9a:e0:71:fb:b9:66: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:92:73:BA:BE:34:23:01:14:D2:F4:C0:DA:2A:F3:E1:95:AC:92:FB X509v3 Authority Key Identifier: keyid:FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f7:81:9d:d8:24:72:c8:33:e6:70:32:59:f1:2e:61:39:da: 35:42:e0:d4:3c:8a:92:89:1f:df:88:61:b5:fe:92:aa:22:5e: 5d:bd:2f:2e:62:b5:1a:39:57:ec:6b:fb:ae:5a:1c:f0:12:fe: ec:dd:f9:7d:44:e4:ea:7e:2b:8e:e7:10:e9:7d:4d:22:51:61: 30:ac:33:cf:0e:24:69:2b:1d:0d:1d:05:dc:93:1f:c4:59:cd: 5a:43:ab:aa:7e:4d:56:83:10:54:bb:2a:07:d4:06:e3:63:a8: 1e:14:d6:f1:31:09:3a:36:c5:0d:ee:05:10:45:cd:f0:bc:cb: c6:40:f3:3e:d0:7d:fc:da:46:ef:00:04:b6:74:8f:88:e1:89: 94:72:c6:df:9b:92:91:db:35:ff:b9:87:44:eb:27:11:fc:50: 67:ab:41:69:2b:a3:15:3a:a3:59:90:6a:c1:8a:8d:b1:74:5e: 41:53:f6:46:f6:ac:60:f2:66:d5:1e:03:c5:c3:b8:c6:57:41: 7f:9f:64:a4:e0:bf:14:25:1a:64:01:5b:7a:3e:3b:85:6c:b3: be:bc:b2:2a:d0:63:a1:48:68:b3:1a:f8:8f:d0:eb:6b:87:80: 79:a6:f3:fd:5f:0d:f1:3c:d8:7b:32:d7:f5:14:8c:ea:5d:45: 72:fc:a5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrODayoX5oJfZD6pFCUqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGMyMTg0MGNjMTRhZGY1MjZhNjgxYzA3NmU2NmM0MzQz MTU4MmMwHhcNMjUxMjI2MDgwMTAwWhcNMjUxMjI3MDgwMTAwWjAzMTEwLwYDVQQD EyhkZTkyNzNiYWJlMzQyMzAxMTRkMmY0YzBkYTJhZjNlMTk1YWM5MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCT78X5NblC4PhRJU3c9eGjFHD6o KHj9gMTwH0d8CzrnzeeiIu5aQG2KMeB+tV7+DUiKz7fSkMspisJJmx/+caAZEFQu eg8IMoKxyBl9SDyV6oJGY/GkIBoI6JYHCHDNJjJ8s5jgPTokuASGs8ShFqXs1qDe uLqHrTqN94/W6czNpWazKtJZIfE7wZOYebyJi+qtnBUTq7a+iZheLY9Dtppgr18u 9kh1uziGYsTG6MihVFH5pzz65IDa5Z2oL0iUsx+twmDz+iEsNNIVjhKSob1heWhE Q5E2GgJ+toIBnynM0S4ngdlhoQPTp5uvqlLaeB8GD8NsurGa4HH7uWbWmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6Sc7q+NCMBFNL0wNoq8+GVrJL7MB8GA1UdIwQY MBaAFP0MIYQMwUrfUmpoHAduZsQ0MVgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zMGJkMTItZGU4Yy00OTJmLThhMTYt ZWU5NjFkYTk3MmRjLzEvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zMGJkMTItZGU4Yy00OTJmLThhMTYtZWU5NjFkYTk3MmRj LzEvX1F3aGhBekJTdDlTYW1nY0IyNW14RFF4V0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfeBndgk csgz5nAyWfEuYTnaNULg1DyKkokf34hhtf6SqiJeXb0vLmK1GjlX7Gv7rloc8BL+ 7N35fUTk6n4rjucQ6X1NIlFhMKwzzw4kaSsdDR0F3JMfxFnNWkOrqn5NVoMQVLsq B9QG42OoHhTW8TEJOjbFDe4FEEXN8LzLxkDzPtB9/NpG7wAEtnSPiOGJlHLG35uS kds1/7mHROsnEfxQZ6tBaSujFTqjWZBqwYqNsXReQVP2RvasYPJm1R4DxcO4xldB f59kpOC/FCUaZAFbej47hWyzvryyKtBjoUhosxr4j9Dra4eAeabz/V8N8TzYezLX 9RSM6l1Fcvyl5w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:22 2025 by rpki-client