This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json) Hash identifier: 9o/uNbsHD1hz12ff7eWXj0a5+ThiYOpAoXhunoF/Jic= Subject key identifier: 9C:F8:26:3C:4A:85:1B:3C:DF:3A:27:F1:95:CB:8F:2C:2C:D5:87:2F Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Certificate serial: 019B1EE1A1CE06357DD0F14221780CC288E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft Manifest number: 067E Signing time: Sun 14 Dec 2025 22:01:02 +0000 Manifest this update: Sun 14 Dec 2025 22:01:02 +0000 Manifest next update: Mon 15 Dec 2025 22:01:02 +0000 Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=) 2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: mfnyCSogWRB0AAQHrXTAtdh+vd7okLJRg4AACo2rj+4=) 3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:a1:ce:06:35:7d:d0:f1:42:21:78:0c:c2:88:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Validity Not Before: Dec 14 22:01:02 2025 GMT Not After : Dec 15 22:01:02 2025 GMT Subject: CN=9cf8263c4a851b3cdf3a27f195cb8f2c2cd5872f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:62:cc:07:bc:f9:de:b1:bb:bc:4e:4d:af: 95:c5:d9:13:72:ed:08:bf:02:60:63:2f:2d:b1:1b: 05:b7:c5:73:f4:dd:e2:68:50:ef:3f:55:53:37:2b: f3:74:ab:c6:f4:6b:0b:c4:12:49:83:4a:77:1c:5c: 9d:8c:35:17:3e:a1:1b:b2:93:85:92:ee:a6:a1:07: 5c:6c:cf:0b:0c:73:c3:a2:f5:ab:ff:88:ff:8a:8a: a2:6a:5a:d5:83:17:3b:99:42:8f:78:10:60:dc:85: f3:d0:13:9b:73:6e:22:19:f7:b2:9d:29:0c:f5:8f: 43:16:e2:c0:30:40:5b:10:ad:7e:e5:f0:8c:d7:e3: 69:3d:27:8f:81:1c:81:7f:60:b8:24:fb:0f:7c:82: 6c:1b:58:44:56:5f:04:69:8f:eb:20:f4:1e:e2:6f: 3a:29:59:64:9e:57:3b:60:8f:1b:e8:c4:99:78:64: 2f:a5:dc:b4:0d:3f:4c:46:2b:05:73:29:9f:54:a2: e3:86:bf:e2:b3:a7:64:a5:13:c7:76:c9:a5:30:21: d8:b6:f9:12:76:c1:8d:57:a9:83:9e:77:b3:cb:d8: ca:49:8e:ee:4b:b0:6c:94:5f:2b:37:2d:31:15:bf: e9:0c:3a:99:8e:42:3a:03:8e:38:53:9b:6d:99:a3: 1c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F8:26:3C:4A:85:1B:3C:DF:3A:27:F1:95:CB:8F:2C:2C:D5:87:2F X509v3 Authority Key Identifier: keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e7:aa:dc:c6:cc:64:85:f0:b8:e7:64:be:2b:7a:01:d9:10: 1a:58:2d:91:90:d9:3b:94:78:e0:d6:92:00:cf:48:a7:d6:67: c3:61:55:73:23:d0:29:dd:02:84:df:a5:19:d3:af:34:45:5d: 24:87:25:9b:09:0c:75:a1:ff:37:83:67:90:b8:fc:a5:2c:79: 92:ac:68:ea:68:9f:21:26:05:bf:f1:7c:3e:b7:9d:70:7b:a2: b5:ec:bc:68:28:36:28:e1:99:2c:4c:c8:6a:af:d8:89:10:1a: a3:b5:6d:9e:a7:15:5b:0e:df:23:c3:c0:a7:49:48:48:da:50: 2a:38:cf:ef:97:d1:32:1b:0a:23:86:a7:e2:1f:26:0c:9d:a8: 35:57:14:24:90:e8:37:5f:82:8a:ef:20:c4:6e:9f:50:ac:03: 64:af:16:cc:e5:82:34:bc:b7:0f:ab:c9:59:c9:b1:e8:7b:53: 10:b4:fd:bb:05:1f:12:5e:bf:1a:70:bd:d5:18:6c:9f:8e:48: 04:5b:6c:6e:7e:6b:0e:31:d8:c1:df:3f:db:40:d3:0a:93:76: a7:ab:22:45:e9:23:a3:75:54:9c:d1:d2:bd:5f:dd:85:c1:ed: 7d:7c:2a:a9:cc:33:15:8c:4b:b1:00:f2:32:c0:21:39:51:91: 11:28:7d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4aHOBjV90PFCIXgMwojjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx MTcxZjEwHhcNMjUxMjE0MjIwMTAyWhcNMjUxMjE1MjIwMTAyWjAzMTEwLwYDVQQD Eyg5Y2Y4MjYzYzRhODUxYjNjZGYzYTI3ZjE5NWNiOGYyYzJjZDU4NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNFizAe8+d6xu7xOTa+VxdkTcu0I vwJgYy8tsRsFt8Vz9N3iaFDvP1VTNyvzdKvG9GsLxBJJg0p3HFydjDUXPqEbspOF ku6moQdcbM8LDHPDovWr/4j/ioqialrVgxc7mUKPeBBg3IXz0BObc24iGfeynSkM 9Y9DFuLAMEBbEK1+5fCM1+NpPSePgRyBf2C4JPsPfIJsG1hEVl8EaY/rIPQe4m86 KVlknlc7YI8b6MSZeGQvpdy0DT9MRisFcymfVKLjhr/is6dkpRPHdsmlMCHYtvkS dsGNV6mDnnezy9jKSY7uS7BslF8rNy0xFb/pDDqZjkI6A444U5ttmaMcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz4JjxKhRs83zon8ZXLjyws1YcvMB8GA1UdIwQY MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReeq3MbM ZIXwuOdkvit6AdkQGlgtkZDZO5R44NaSAM9Ip9Znw2FVcyPQKd0ChN+lGdOvNEVd JIclmwkMdaH/N4NnkLj8pSx5kqxo6mifISYFv/F8PredcHuitey8aCg2KOGZLEzI aq/YiRAao7VtnqcVWw7fI8PAp0lISNpQKjjP75fRMhsKI4an4h8mDJ2oNVcUJJDo N1+Ciu8gxG6fUKwDZK8WzOWCNLy3D6vJWcmx6HtTELT9uwUfEl6/GnC91Rhsn45I BFtsbn5rDjHYwd8/20DTCpN2p6siRekjo3VUnNHSvV/dhcHtfXwqqcwzFYxLsQDy MsAhOVGRESh9eA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:47:08 2025 by rpki-client