This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json) Hash identifier: UBfIoaMM8VCRmL1dgof6rsb3TRM5Y8RqNCGwlBkVE2g= Subject key identifier: 76:14:C8:2A:E5:C0:E7:49:B9:64:B7:91:31:FF:53:70:77:2C:80:25 Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Certificate serial: 019B59777914DCFAF22AC5E883DD5A0EAA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft Manifest number: 0C05 Signing time: Fri 26 Dec 2025 07:02:40 +0000 Manifest this update: Fri 26 Dec 2025 07:02:40 +0000 Manifest next update: Sat 27 Dec 2025 07:02:40 +0000 Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: XfP7aGMvUgpvlBiojzR4W0hlg8GYJAqFvkvTfKqOE0E=) 2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=) 3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:79:14:dc:fa:f2:2a:c5:e8:83:dd:5a:0e:aa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Validity Not Before: Dec 26 07:02:40 2025 GMT Not After : Dec 27 07:02:40 2025 GMT Subject: CN=7614c82ae5c0e749b964b79131ff5370772c8025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:32:5e:b7:b0:47:ca:83:ab:f8:d4:d0:51: 9e:f3:9e:15:ae:4d:00:44:3f:e0:98:d6:d7:0c:ab: f3:b9:d0:36:cc:20:9a:a9:50:ba:ee:8a:4d:3f:43: 3f:89:eb:c1:c2:4e:62:ec:29:b6:bb:7c:81:df:10: bd:dc:04:b2:b2:ac:6e:ee:12:40:bf:43:b8:87:74: d7:4c:c5:a3:fe:6d:b4:c9:1c:06:d7:1f:0f:41:06: ae:71:4a:70:12:ee:ec:d5:09:e0:81:de:6d:fa:38: e9:c8:c6:1a:4f:41:9f:2a:f0:19:27:b1:b8:28:30: 07:0d:9a:54:b9:d3:6e:9f:a5:0e:6d:ec:09:27:01: f2:c8:69:6e:e6:28:0a:ce:30:d8:08:85:ce:98:87: 50:fb:6b:d0:25:fb:a5:b7:92:c4:94:83:59:2a:14: c3:8d:80:a2:50:ed:25:bf:89:df:cf:15:3b:ac:33: ae:46:ee:ff:9a:b6:77:3a:c6:43:7c:3e:2e:fe:7f: 31:a3:9f:3e:6b:44:52:a9:31:2d:b8:52:f7:f8:5f: b7:53:4e:e3:84:8a:d6:93:bb:86:ff:75:96:59:5a: 7e:a7:89:c1:ce:22:c7:c4:aa:ec:3c:96:63:86:de: 58:a2:f1:ad:f2:56:32:0c:d7:b0:5c:05:77:e7:66: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:14:C8:2A:E5:C0:E7:49:B9:64:B7:91:31:FF:53:70:77:2C:80:25 X509v3 Authority Key Identifier: keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:51:8b:76:56:0d:7e:c1:77:01:61:74:c4:52:78:21:c5:0d: 06:87:70:10:b3:64:58:a3:23:8a:52:a8:d8:7b:b6:49:03:eb: e8:49:e6:74:54:4e:0d:e1:9e:75:58:27:0c:71:e6:51:c2:be: 90:14:5d:80:ea:69:fc:e7:01:7d:03:68:c5:eb:33:48:39:e2: 3c:fb:50:49:77:3f:25:a6:aa:68:95:22:c7:34:c1:6e:b2:56: a5:19:98:bd:26:72:3e:f6:07:69:7d:ab:44:70:a2:e6:5d:b6: e0:e9:2e:75:dd:8f:da:12:21:cd:65:cb:90:9c:f0:29:18:3a: 94:d7:86:13:05:b5:23:81:a4:9c:2f:74:fe:3c:33:a7:73:59: 22:77:1e:31:c9:26:1e:1f:36:9d:6a:03:6e:01:a7:fb:c9:aa: 0c:85:b0:11:d2:79:cc:69:61:9e:b8:d0:a4:a1:f6:74:de:21: 51:e8:f1:56:37:24:d7:cc:b3:ba:d1:9c:d0:57:c9:1e:04:a9: b7:81:d8:9c:c7:44:6c:91:a9:8c:42:4c:f6:68:5e:07:17:d8: 0e:da:bc:00:8b:a5:bb:01:0c:54:3a:0b:f3:c5:e2:77:18:a1: 6e:ea:d8:4c:30:3a:12:83:df:44:eb:32:a8:b9:5d:d0:70:56: 03:f5:7c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3kU3PryKsXog91aDqqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2NlNzhmNGFjM2JhOTAyYTBjMzhkYzAxYTBjNWYyMTI2 NTE5YjAwHhcNMjUxMjI2MDcwMjQwWhcNMjUxMjI3MDcwMjQwWjAzMTEwLwYDVQQD Eyg3NjE0YzgyYWU1YzBlNzQ5Yjk2NGI3OTEzMWZmNTM3MDc3MmM4MDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S4yXrewR8qDq/jU0FGe854Vrk0A RD/gmNbXDKvzudA2zCCaqVC67opNP0M/ievBwk5i7Cm2u3yB3xC93ASysqxu7hJA v0O4h3TXTMWj/m20yRwG1x8PQQaucUpwEu7s1Qnggd5t+jjpyMYaT0GfKvAZJ7G4 KDAHDZpUudNun6UObewJJwHyyGlu5igKzjDYCIXOmIdQ+2vQJfult5LElINZKhTD jYCiUO0lv4nfzxU7rDOuRu7/mrZ3OsZDfD4u/n8xo58+a0RSqTEtuFL3+F+3U07j hIrWk7uG/3WWWVp+p4nBziLHxKrsPJZjht5YovGt8lYyDNewXAV352ZfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYUyCrlwOdJuWS3kTH/U3B3LIAlMB8GA1UdIwQY MBaAFEB8549Kw7qQKgw43AGgxfISZRmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMt YTk3MWEzMzRmYWE0LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMtYTk3MWEzMzRmYWE0 LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1GLdlYN fsF3AWF0xFJ4IcUNBodwELNkWKMjilKo2Hu2SQPr6EnmdFRODeGedVgnDHHmUcK+ kBRdgOpp/OcBfQNoxeszSDniPPtQSXc/JaaqaJUixzTBbrJWpRmYvSZyPvYHaX2r RHCi5l224Okudd2P2hIhzWXLkJzwKRg6lNeGEwW1I4GknC90/jwzp3NZInceMckm Hh82nWoDbgGn+8mqDIWwEdJ5zGlhnrjQpKH2dN4hUejxVjck18yzutGc0FfJHgSp t4HYnMdEbJGpjEJM9mheBxfYDtq8AIuluwEMVDoL88XidxihburYTDA6EoPfROsy qLld0HBWA/V8+g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:53 2025 by rpki-client