This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json) Hash identifier: bIB01KoEgVsDrMBjQTVq5uxYh9n2RN4YDox5phUYuBE= Subject key identifier: BB:3A:BF:06:52:E1:E3:17:79:A2:80:CF:0A:32:2F:8F:3F:EC:E6:E7 Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Certificate serial: 019B28C0560A8EAF9C6696A7A461CB172E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft Manifest number: 170F Signing time: Tue 16 Dec 2025 20:00:51 +0000 Manifest this update: Tue 16 Dec 2025 20:00:51 +0000 Manifest next update: Wed 17 Dec 2025 20:00:51 +0000 Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=) 2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: HtHW99FZ77xsKwzgaQJ6irdOqCEhagvpQ0tpPyjAudM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:56:0a:8e:af:9c:66:96:a7:a4:61:cb:17:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Validity Not Before: Dec 16 20:00:51 2025 GMT Not After : Dec 17 20:00:51 2025 GMT Subject: CN=bb3abf0652e1e31779a280cf0a322f8f3fece6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:53:d5:d5:a5:c5:6c:c8:d0:d5:39:8b:37: b3:eb:41:9d:b0:8d:70:06:6e:4d:69:ce:b9:ef:fa: 49:30:02:cc:44:15:9c:3f:c4:42:9c:34:34:86:bd: f6:16:7f:8e:a5:75:95:b1:78:f6:5b:01:04:d7:4e: 3c:6a:4f:75:bb:13:5c:5f:ac:ed:22:60:11:e1:a8: 29:eb:be:fb:f7:5f:6a:0f:24:45:19:64:72:6c:fb: 98:aa:14:d6:18:0b:01:a6:1c:26:00:fa:a0:4d:40: 92:d0:db:63:a7:50:e8:2f:3f:20:69:cf:34:dc:a3: 1b:96:eb:ae:b1:07:1a:b2:f4:c1:45:34:ca:78:f7: ca:16:9b:51:f9:23:d1:56:e3:70:5d:36:f0:71:93: b8:68:76:32:55:fe:51:4a:c5:c9:49:4c:75:ec:0f: a9:69:5d:b9:4f:2e:36:52:94:88:85:9c:69:86:f5: 72:19:15:13:c0:b8:f0:e5:5b:10:dd:61:c1:4b:fa: 44:c9:7f:09:bd:f6:da:9f:de:18:e2:a9:89:c0:0e: 61:07:4b:74:02:11:1a:37:6e:c7:d1:88:31:42:a8: 9d:8e:77:79:0e:35:ea:14:67:1d:d8:96:d1:79:a4: 2b:d2:ae:a3:3f:7f:00:5a:91:b7:ec:cf:5c:63:d5: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:BF:06:52:E1:E3:17:79:A2:80:CF:0A:32:2F:8F:3F:EC:E6:E7 X509v3 Authority Key Identifier: keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6b:c7:99:29:a6:10:06:6d:0a:06:12:88:88:cc:41:8f:db: d6:f3:51:b1:46:9f:d8:20:eb:32:54:1e:fd:10:93:31:72:d9: db:91:48:02:67:49:bc:65:91:8a:2e:5d:32:8d:39:09:28:ad: 9e:fb:d2:fc:a8:c3:f6:2d:d6:f2:8f:65:3f:de:06:b7:0b:1f: b6:f9:ee:a6:33:0f:03:ce:57:77:44:08:29:1c:04:3a:a6:a1: 5e:62:b9:cf:42:bd:9b:4b:6f:06:65:4b:19:a7:b4:25:b0:2a: 1a:eb:4f:51:3a:26:39:8b:6c:79:5c:ea:0f:9b:39:e0:20:1b: ca:7f:9a:fd:29:3c:d4:58:a8:b6:25:4d:04:f4:60:da:11:70: 50:cb:02:4c:65:f5:a9:1c:59:cf:e2:ac:e1:4b:e1:92:1d:ea: 62:f2:af:2b:46:47:5d:ba:65:94:18:73:1d:ca:90:34:30:5f: dd:88:de:12:83:dd:87:3f:97:ff:48:d9:a5:25:b1:d3:00:01: 39:14:b1:d6:20:0c:cc:96:8e:ec:8c:35:1e:60:2b:6e:ed:03: 7e:e3:de:9a:f9:3c:98:04:17:bc:3f:03:11:31:cf:74:dd:55: 92:c6:15:6b:0a:29:ae:5c:aa:da:3c:11:2c:39:24:34:2f:59: 59:61:7a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowFYKjq+cZpanpGHLFy5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl MzlhYzYwHhcNMjUxMjE2MjAwMDUxWhcNMjUxMjE3MjAwMDUxWjAzMTEwLwYDVQQD EyhiYjNhYmYwNjUyZTFlMzE3NzlhMjgwY2YwYTMyMmY4ZjNmZWNlNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNT1dWlxWzI0NU5izez60GdsI1w Bm5Nac657/pJMALMRBWcP8RCnDQ0hr32Fn+OpXWVsXj2WwEE1048ak91uxNcX6zt ImAR4agp6777919qDyRFGWRybPuYqhTWGAsBphwmAPqgTUCS0Ntjp1DoLz8gac80 3KMbluuusQcasvTBRTTKePfKFptR+SPRVuNwXTbwcZO4aHYyVf5RSsXJSUx17A+p aV25Ty42UpSIhZxphvVyGRUTwLjw5VsQ3WHBS/pEyX8Jvfban94Y4qmJwA5hB0t0 AhEaN27H0YgxQqidjnd5DjXqFGcd2JbReaQr0q6jP38AWpG37M9cY9WXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLs6vwZS4eMXeaKAzwoyL48/7ObnMB8GA1UdIwQY MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWvHmSmm EAZtCgYSiIjMQY/b1vNRsUaf2CDrMlQe/RCTMXLZ25FIAmdJvGWRii5dMo05CSit nvvS/KjD9i3W8o9lP94GtwsftvnupjMPA85Xd0QIKRwEOqahXmK5z0K9m0tvBmVL Gae0JbAqGutPUTomOYtseVzqD5s54CAbyn+a/Sk81FiotiVNBPRg2hFwUMsCTGX1 qRxZz+Ks4Uvhkh3qYvKvK0ZHXbpllBhzHcqQNDBf3YjeEoPdhz+X/0jZpSWx0wAB ORSx1iAMzJaO7Iw1HmArbu0DfuPemvk8mAQXvD8DETHPdN1VksYVawoprlyq2jwR LDkkNC9ZWWF6Vg== -----END CERTIFICATE-----Generated at Wed Dec 17 03:35:51 2025 by rpki-client