This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json) Hash identifier: QmCZMtVkxx1+gGTaQuNY2hkaaFo0F0PhIigzMVl0rFo= Subject key identifier: 6F:57:ED:8C:34:44:F2:1D:D8:4D:CD:40:9A:CB:2A:22:57:BF:39:00 Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Certificate serial: 019B59AC9C9806CB40617BBF5A4D9DF6320A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft Manifest number: 03A3 Signing time: Fri 26 Dec 2025 08:00:43 +0000 Manifest this update: Fri 26 Dec 2025 08:00:43 +0000 Manifest next update: Sat 27 Dec 2025 08:00:43 +0000 Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: aKkVZy36hXSHbfEx8wOR+iK1uoFEquaOUNL+bslus9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:9c:98:06:cb:40:61:7b:bf:5a:4d:9d:f6:32:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Validity Not Before: Dec 26 08:00:43 2025 GMT Not After : Dec 27 08:00:43 2025 GMT Subject: CN=6f57ed8c3444f21dd84dcd409acb2a2257bf3900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:6b:61:dc:aa:98:c7:fd:e5:bc:6c:89:52: 0d:ba:1f:ef:f5:7c:e2:e3:80:4c:d1:fc:68:3b:7d: 3a:00:d6:bc:e8:51:fd:f1:e5:c8:4e:d0:14:4c:42: 90:4c:f4:6d:ad:09:0b:ab:c8:97:cf:4d:6f:ee:e1: 16:ea:d4:0f:5a:8d:9c:29:68:8a:73:d3:6f:5d:83: 19:7f:d0:c5:32:8e:e4:db:c5:b4:65:a8:77:49:8e: 6e:db:8b:ac:1d:3e:6f:dc:c5:39:bd:ac:cb:7d:14: 7e:df:9a:cd:6e:27:0d:03:bb:4a:b2:4c:68:97:c9: 63:25:d1:b4:a2:8f:86:2d:f4:5a:34:93:16:0a:3b: 0b:94:fb:f1:27:6d:36:2f:9b:5c:35:4f:f2:eb:81: 71:b6:af:96:f7:b2:cc:66:0e:cd:3c:6a:96:a9:c3: 2a:5d:5f:89:e9:e4:ab:19:27:db:fe:46:88:87:9d: e4:25:ec:6d:2a:f1:81:ce:0b:15:c1:09:fc:ae:ae: 7d:1d:51:2f:3d:81:60:0a:04:bb:27:2e:6a:b4:34: d2:33:78:5d:a9:93:b2:ce:3f:64:cb:07:7f:7c:ac: 1e:e6:38:1a:d6:21:01:39:62:3b:c9:a8:a5:01:d2: 03:e4:3e:19:31:15:53:dc:2a:4c:96:df:29:52:07: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:ED:8C:34:44:F2:1D:D8:4D:CD:40:9A:CB:2A:22:57:BF:39:00 X509v3 Authority Key Identifier: keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:36:f6:93:d4:50:d2:6b:42:18:a9:c5:17:8c:3a:2d:8f:88: 1a:be:fb:4f:dd:db:b6:74:44:8d:4d:4c:c2:41:68:5a:5c:d3: 73:4d:97:99:e5:e8:47:7f:58:f0:ff:fa:c1:1b:10:9c:1b:9f: 0a:c3:0b:6c:91:06:19:8d:ef:17:00:2b:a8:b1:95:a2:25:99: d8:6b:50:56:c1:ab:47:54:7c:97:b4:12:bf:53:ee:63:a2:9e: 02:52:a0:cc:93:a2:7f:b0:f0:e6:26:06:36:02:20:64:0c:b0: 0e:4d:09:2d:38:03:15:96:b7:f4:78:bf:f3:3a:68:71:38:90: 6b:52:f7:0a:5d:87:df:1b:f2:1b:1e:1d:7a:98:60:ad:ca:c9: 05:8c:f4:68:bb:f7:ea:8a:1e:4e:18:da:00:58:09:9e:54:35: a4:75:ab:de:2b:b3:25:0a:b1:14:53:b7:04:bb:f9:c2:56:a4: 33:3d:f4:2d:2d:63:39:f9:d1:81:4a:8f:68:b4:cc:9c:e7:b8: 24:13:1c:0f:51:64:35:9b:22:80:ce:95:ad:31:62:b0:72:f9: 35:39:ae:e1:b3:7d:f8:c9:83:4b:9e:30:01:e5:39:91:0a:8e: f7:01:c4:20:41:9c:06:d2:2b:b7:c5:6a:4e:10:3c:8f:8e:3c: af:9e:cd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJyYBstAYXu/Wk2d9jIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDMzZmUxMWI5OTQ5NTE2YzFmMWRkODE0ZTI0ZTQ3NDUz YTllOTYwHhcNMjUxMjI2MDgwMDQzWhcNMjUxMjI3MDgwMDQzWjAzMTEwLwYDVQQD Eyg2ZjU3ZWQ4YzM0NDRmMjFkZDg0ZGNkNDA5YWNiMmEyMjU3YmYzOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz1rYdyqmMf95bxsiVINuh/v9Xzi 44BM0fxoO306ANa86FH98eXITtAUTEKQTPRtrQkLq8iXz01v7uEW6tQPWo2cKWiK c9NvXYMZf9DFMo7k28W0Zah3SY5u24usHT5v3MU5vazLfRR+35rNbicNA7tKskxo l8ljJdG0oo+GLfRaNJMWCjsLlPvxJ202L5tcNU/y64Fxtq+W97LMZg7NPGqWqcMq XV+J6eSrGSfb/kaIh53kJextKvGBzgsVwQn8rq59HVEvPYFgCgS7Jy5qtDTSM3hd qZOyzj9kywd/fKwe5jga1iEBOWI7yailAdID5D4ZMRVT3CpMlt8pUgdLbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9X7Yw0RPId2E3NQJrLKiJXvzkAMB8GA1UdIwQY MBaAFKnTP+EbmUlRbB8d2BTiTkdFOp6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDkt NjgwMjA4M2RlMjExLzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDktNjgwMjA4M2RlMjEx LzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjb2k9RQ 0mtCGKnFF4w6LY+IGr77T93btnREjU1MwkFoWlzTc02XmeXoR39Y8P/6wRsQnBuf CsMLbJEGGY3vFwArqLGVoiWZ2GtQVsGrR1R8l7QSv1PuY6KeAlKgzJOif7Dw5iYG NgIgZAywDk0JLTgDFZa39Hi/8zpocTiQa1L3Cl2H3xvyGx4dephgrcrJBYz0aLv3 6ooeThjaAFgJnlQ1pHWr3iuzJQqxFFO3BLv5wlakMz30LS1jOfnRgUqPaLTMnOe4 JBMcD1FkNZsigM6VrTFisHL5NTmu4bN9+MmDS54wAeU5kQqO9wHEIEGcBtIrt8Vq ThA8j448r57Ntw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:25 2025 by rpki-client