This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json) Hash identifier: qfXSpyF5QmYx2JNyk7CCgF9QjVBDvQNd/pdq84WSXj0= Subject key identifier: B2:11:98:17:05:19:12:27:7A:49:7E:79:0D:94:EC:E3:88:A7:B4:AC Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8 Certificate serial: 019B3A2213139A15C1E236273931E6C0E329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft Manifest number: 0754 Signing time: Sat 20 Dec 2025 05:01:10 +0000 Manifest this update: Sat 20 Dec 2025 05:01:10 +0000 Manifest next update: Sun 21 Dec 2025 05:01:10 +0000 Files and hashes: 1: 8ydd8JZX5EAnrnnw2HV2rHK_3p4.roa (hash: j4GR32txclZSQHedOrcHnmy9IerE3851xb5yxFpNcdg=) 2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: nWJohE5X9QYjzHCsS09RIR1I4W4v/GrCNSehtJ3izkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:13:13:9a:15:c1:e2:36:27:39:31:e6:c0:e3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8 Validity Not Before: Dec 20 05:01:10 2025 GMT Not After : Dec 21 05:01:10 2025 GMT Subject: CN=b2119817051912277a497e790d94ece388a7b4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:43:81:29:84:76:7b:8b:1c:65:3e:e9:19: bc:64:56:e9:bd:87:b2:f6:ac:f2:c6:12:dc:98:93: 5f:be:16:1d:60:69:31:76:ad:18:f3:30:46:0e:f5: 12:ad:33:a2:d8:bd:14:94:cf:64:49:0c:07:5d:fe: f5:42:8c:62:3c:89:55:89:23:cb:9f:95:38:a6:a0: 89:6a:01:ca:59:f3:c8:6c:d7:ad:f7:64:55:0b:b2: b6:e5:27:85:88:00:50:b4:43:4d:b9:19:55:a4:94: 09:20:68:11:54:8f:90:63:f4:97:2b:cc:7e:b5:a5: 17:84:87:2f:e2:9f:f4:bf:70:f3:6f:e9:a6:b6:98: 10:5a:cc:38:54:8d:3b:89:36:04:dc:54:bc:c8:9a: dc:f5:dd:0c:de:6b:3a:b9:94:d4:a5:0a:dc:d9:ee: 10:c9:d3:9c:18:a5:ad:40:ac:64:f5:6f:82:dd:b6: 75:d0:43:bd:c5:d7:94:09:e0:dc:52:34:fc:10:e4: 81:83:a4:92:2b:b7:ab:49:a5:73:ea:39:7b:15:cc: 76:90:e4:3b:c1:fb:43:4b:39:93:8d:04:9c:84:9f: 4e:5c:49:db:79:17:96:12:88:ad:65:9d:af:bf:ed: 8f:44:65:20:5e:de:0a:45:63:b3:2e:16:57:9d:26: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:98:17:05:19:12:27:7A:49:7E:79:0D:94:EC:E3:88:A7:B4:AC X509v3 Authority Key Identifier: keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:e6:f2:8b:23:e3:6d:44:f4:bf:d8:bd:4d:ce:90:8c:61: 07:51:8e:d5:9d:5c:d7:ed:0b:db:a0:1a:62:0e:d9:3e:ac:28: 85:6e:9f:24:1c:da:b2:f2:af:0b:61:64:5b:b3:36:0c:a9:e7: 47:1d:67:bc:28:ee:fe:dd:05:bd:81:3d:f3:4e:ed:2c:74:5a: fd:82:cc:e5:94:5c:5f:f6:0a:0f:ce:6a:54:49:e5:7e:0f:fc: ae:6a:38:db:ec:e5:23:6a:6d:98:19:5e:93:e6:93:76:bb:c8: e5:82:13:eb:0e:07:8b:c0:0c:69:85:85:bb:84:1b:5e:fa:01: 2b:21:35:d2:41:63:ad:9d:c4:f9:3e:07:4d:b3:be:04:a8:35: ad:51:88:7e:a3:22:32:fa:74:b8:ca:36:28:ee:30:8b:9d:7a: b9:cc:f6:e6:d1:58:5b:89:8a:bb:0a:b4:3a:2d:3e:8a:4b:d0: af:3b:45:09:c7:ee:36:5c:93:45:e7:8e:9c:fa:0d:54:aa:3b: 69:93:b6:8e:85:d2:41:d4:09:e7:78:21:c8:66:2f:70:42:f3: 6d:a6:d3:de:2a:3f:1d:bd:64:ab:b6:bb:f3:eb:27:1d:4c:7d: f4:ca:eb:bb:2a:01:c3:1c:70:73:ac:17:89:a5:27:0d:cb:88: b1:fa:41:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IhMTmhXB4jYnOTHmwOMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy ZTM0ZjgwHhcNMjUxMjIwMDUwMTEwWhcNMjUxMjIxMDUwMTEwWjAzMTEwLwYDVQQD EyhiMjExOTgxNzA1MTkxMjI3N2E0OTdlNzkwZDk0ZWNlMzg4YTdiNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJFDgSmEdnuLHGU+6Rm8ZFbpvYey 9qzyxhLcmJNfvhYdYGkxdq0Y8zBGDvUSrTOi2L0UlM9kSQwHXf71QoxiPIlViSPL n5U4pqCJagHKWfPIbNet92RVC7K25SeFiABQtENNuRlVpJQJIGgRVI+QY/SXK8x+ taUXhIcv4p/0v3Dzb+mmtpgQWsw4VI07iTYE3FS8yJrc9d0M3ms6uZTUpQrc2e4Q ydOcGKWtQKxk9W+C3bZ10EO9xdeUCeDcUjT8EOSBg6SSK7erSaVz6jl7Fcx2kOQ7 wftDSzmTjQSchJ9OXEnbeReWEoitZZ2vv+2PRGUgXt4KRWOzLhZXnSYD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIRmBcFGRInekl+eQ2U7OOIp7SsMB8GA1UdIwQY MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5 LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3fm8osj 421E9L/YvU3OkIxhB1GO1Z1c1+0L26AaYg7ZPqwohW6fJBzasvKvC2FkW7M2DKnn Rx1nvCju/t0FvYE9807tLHRa/YLM5ZRcX/YKD85qVEnlfg/8rmo42+zlI2ptmBle k+aTdrvI5YIT6w4Hi8AMaYWFu4QbXvoBKyE10kFjrZ3E+T4HTbO+BKg1rVGIfqMi Mvp0uMo2KO4wi516ucz25tFYW4mKuwq0Oi0+ikvQrztFCcfuNlyTReeOnPoNVKo7 aZO2joXSQdQJ53ghyGYvcELzbabT3io/Hb1kq7a78+snHUx99MrruyoBwxxwc6wX iaUnDcuIsfpBIg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:55:05 2025 by rpki-client