This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft File: QapYrSjgocFk2w1i1SplaRMeYW8.mft (raw, json) Hash identifier: uBk100J2U9GNNAI6bYSSKFeAt66p806A3H2r1y1AzlI= Subject key identifier: 6E:5E:74:16:00:1F:76:99:A8:C6:3A:8A:B8:14:BF:8B:64:E7:92:BC Authority key identifier: 41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F Certificate issuer: /CN=41aa58ad28e0a1c164db0d62d52a6569131e616f Certificate serial: 019B59778D4E4FEB703573C36BF17931A4FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft Manifest number: 2E Signing time: Fri 26 Dec 2025 07:02:45 +0000 Manifest this update: Fri 26 Dec 2025 07:02:45 +0000 Manifest next update: Sat 27 Dec 2025 07:02:45 +0000 Files and hashes: 1: QapYrSjgocFk2w1i1SplaRMeYW8.crl (hash: JK7GKBioo/UKU+cwhwaSkTuKbZOVa7BCbbWBc7/zBM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:8d:4e:4f:eb:70:35:73:c3:6b:f1:79:31:a4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41aa58ad28e0a1c164db0d62d52a6569131e616f Validity Not Before: Dec 26 07:02:45 2025 GMT Not After : Dec 27 07:02:45 2025 GMT Subject: CN=6e5e7416001f7699a8c63a8ab814bf8b64e792bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:87:13:2c:02:dd:7e:54:3e:be:97:8b:7f: 85:85:2f:76:55:4f:8a:32:a0:93:51:8d:b5:85:68: e9:5f:e8:38:23:4c:d3:e4:8c:44:8d:de:12:e8:f0: 28:bd:9e:0b:e4:71:14:5c:ec:b5:c1:32:fa:43:a6: 67:9b:4e:90:8d:df:e3:af:36:9a:3c:d2:f2:36:63: 1d:e4:e8:7c:c8:64:62:ea:1a:56:47:1c:0c:88:63: 01:2b:82:7b:42:9c:46:bb:00:07:b9:93:42:45:d2: 13:a8:c1:65:96:12:d7:1c:75:14:02:ab:71:aa:98: 7d:38:33:eb:6b:81:75:1c:84:83:15:d1:c4:ae:94: d5:20:8b:e8:61:90:0f:52:a5:e9:5f:9b:37:f5:e5: d3:fc:0b:92:3d:89:fa:3e:7e:a7:c9:7d:88:cb:13: 04:b6:50:c2:ac:9b:43:c3:b5:dd:f9:2a:84:cc:4c: d0:1b:ce:6b:b3:55:02:d4:e2:c2:ca:a3:7e:49:76: 7c:a3:85:98:42:a9:ff:d3:fc:1b:89:e3:22:e2:bb: e4:28:84:0d:ed:16:60:55:9b:47:b2:42:35:d7:7e: a3:27:dc:0c:dc:f0:45:67:0b:34:ae:52:68:35:fc: 65:dd:ac:a3:7e:9f:df:b9:1c:cf:09:d5:87:b4:9a: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5E:74:16:00:1F:76:99:A8:C6:3A:8A:B8:14:BF:8B:64:E7:92:BC X509v3 Authority Key Identifier: keyid:41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:c5:6e:d1:7a:65:29:9d:95:70:db:52:15:4a:a6:36:8d: ab:a2:48:19:3b:54:77:af:d7:33:75:36:91:8e:38:17:1b:94: 61:21:04:fe:0a:d1:ca:39:1d:8f:30:8d:e8:b0:80:13:bb:c0: 8e:bd:5d:a0:96:28:da:14:72:90:04:fa:90:92:91:23:53:d3: f1:3a:47:45:19:e4:94:70:38:83:ec:2a:dd:77:3e:1e:8c:29: d7:32:c1:ef:76:c5:74:22:53:14:16:e6:70:ca:d3:4e:da:95: 2c:f2:b5:2c:f5:be:10:27:41:34:03:b3:5f:a8:2f:d1:98:f8: 9e:77:43:f0:3c:eb:e4:20:d9:37:b5:a5:25:62:a4:77:9a:fa: f1:84:57:db:f6:f5:6e:d7:9e:6c:13:8d:82:86:59:e6:b3:af: d7:1e:3d:14:2b:17:92:1d:ca:1d:06:51:91:31:87:0a:2c:ee: dc:5e:33:6d:49:0c:f4:06:73:c7:d3:a3:16:df:93:5b:c1:08: 41:1d:bd:25:a2:5f:08:72:a7:a3:70:92:3a:36:3e:01:40:2e: 55:77:5c:8b:a4:3c:f6:82:74:74:fd:6f:02:fc:78:78:30:e4: 7b:ee:d0:83:d8:ab:01:04:38:3e:74:90:b0:ff:1c:48:34:76: 16:bc:80:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd41OT+twNXPDa/F5MaT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYWE1OGFkMjhlMGExYzE2NGRiMGQ2MmQ1MmE2NTY5MTMx ZTYxNmYwHhcNMjUxMjI2MDcwMjQ1WhcNMjUxMjI3MDcwMjQ1WjAzMTEwLwYDVQQD Eyg2ZTVlNzQxNjAwMWY3Njk5YThjNjNhOGFiODE0YmY4YjY0ZTc5MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTGHEywC3X5UPr6Xi3+FhS92VU+K MqCTUY21hWjpX+g4I0zT5IxEjd4S6PAovZ4L5HEUXOy1wTL6Q6Znm06Qjd/jrzaa PNLyNmMd5Oh8yGRi6hpWRxwMiGMBK4J7QpxGuwAHuZNCRdITqMFllhLXHHUUAqtx qph9ODPra4F1HISDFdHErpTVIIvoYZAPUqXpX5s39eXT/AuSPYn6Pn6nyX2IyxME tlDCrJtDw7Xd+SqEzEzQG85rs1UC1OLCyqN+SXZ8o4WYQqn/0/wbieMi4rvkKIQN 7RZgVZtHskI1136jJ9wM3PBFZws0rlJoNfxl3ayjfp/fuRzPCdWHtJr4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5edBYAH3aZqMY6irgUv4tk55K8MB8GA1UdIwQY MBaAFEGqWK0o4KHBZNsNYtUqZWkTHmFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFwWXJTamdvY0ZrMncxaTFTcGxhUk1lWVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wZmM1YjMtOTdkNi00NjdiLWJlZDYt MzJjMmMyNjE5Y2ZhLzEvUWFwWXJTamdvY0ZrMncxaTFTcGxhUk1lWVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8wZmM1YjMtOTdkNi00NjdiLWJlZDYtMzJjMmMyNjE5Y2Zh LzEvUWFwWXJTamdvY0ZrMncxaTFTcGxhUk1lWVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOjFbtF6 ZSmdlXDbUhVKpjaNq6JIGTtUd6/XM3U2kY44FxuUYSEE/grRyjkdjzCN6LCAE7vA jr1doJYo2hRykAT6kJKRI1PT8TpHRRnklHA4g+wq3Xc+Howp1zLB73bFdCJTFBbm cMrTTtqVLPK1LPW+ECdBNAOzX6gv0Zj4nndD8Dzr5CDZN7WlJWKkd5r68YRX2/b1 bteebBONgoZZ5rOv1x49FCsXkh3KHQZRkTGHCizu3F4zbUkM9AZzx9OjFt+TW8EI QR29JaJfCHKno3CSOjY+AUAuVXdci6Q89oJ0dP1vAvx4eDDke+7Qg9irAQQ4PnSQ sP8cSDR2FryABg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client