This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json) Hash identifier: /wQ49InuGPpMbsugmU42YGvk3YLNCubEWA80RiNGYXc= Subject key identifier: 55:DF:BD:26:2A:2E:57:FD:A0:5E:E6:25:75:FF:B1:A6:4D:B9:88:2C Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Certificate serial: 019B0E936A50A2D4C9FFA154DAD28315D1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft Manifest number: 1779 Signing time: Thu 11 Dec 2025 18:01:40 +0000 Manifest this update: Thu 11 Dec 2025 18:01:40 +0000 Manifest next update: Fri 12 Dec 2025 18:01:40 +0000 Files and hashes: 1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=) 2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: JC4cYxSg89flFQjm2nQr4uCSxj60Kx+U06tiq0ntoxM=) 3: m4vwb_vLvLwWZv59QfZMuAiiFNs.roa (hash: AwAbQWg0+7hyRgYG8ZOhFhixr4yr2ULlCvoBBwWvoDo=) 4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=) 5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:6a:50:a2:d4:c9:ff:a1:54:da:d2:83:15:d1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Validity Not Before: Dec 11 18:01:40 2025 GMT Not After : Dec 12 18:01:40 2025 GMT Subject: CN=55dfbd262a2e57fda05ee62575ffb1a64db9882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:76:1e:25:ab:a7:4c:23:d3:34:e9:ed:25: bd:2f:ab:e5:3e:a6:aa:ed:48:c0:6d:db:8f:65:e7: 98:54:f2:d3:97:31:40:91:3c:d0:ef:45:f3:01:12: d7:3c:45:ef:4f:a6:02:a9:1d:18:b5:2a:3c:29:62: 94:22:3e:88:40:3a:44:00:45:5c:6a:b1:77:e4:a4: a1:48:58:3f:15:62:a7:00:f3:25:83:71:c0:3f:d1: 7e:f3:d7:9f:f0:9c:92:c2:ab:4f:ed:a6:0a:84:a5: 7b:c2:80:2d:25:2c:e4:9e:a3:ce:b8:2f:b8:10:5e: 46:6a:9a:e8:24:35:ba:6b:ef:20:86:97:ea:8d:44: 68:50:98:5a:a3:2c:d6:3c:0d:35:54:8c:b0:5f:02: 9c:3a:6f:d9:75:ea:af:bf:3d:7b:07:fe:7c:cf:88: b2:da:8f:03:1e:cc:48:c2:d7:40:9c:d4:55:fb:09: 88:c7:3b:7f:94:af:87:89:53:47:ae:f5:ac:26:47: ae:e3:0a:69:66:41:10:d2:c1:41:e6:3c:ec:f7:40: 60:ee:4e:9b:95:4c:01:23:d4:08:6a:0c:a3:0b:f4: 23:01:19:97:1b:3a:a5:ae:ec:c2:cd:0c:b3:50:dd: 13:6f:e6:a7:b5:35:a9:8b:61:79:d4:bf:6e:fb:a1: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:BD:26:2A:2E:57:FD:A0:5E:E6:25:75:FF:B1:A6:4D:B9:88:2C X509v3 Authority Key Identifier: keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:39:4b:f6:4a:62:b0:75:60:3b:de:25:0a:7f:d7:ec:6e:e8: 9f:12:f7:2b:9f:4c:24:bf:8e:b7:1c:45:1d:d0:ae:69:35:ef: e4:44:00:d6:ea:e9:b6:9d:34:2b:d1:34:b2:56:ce:31:57:e0: 7e:38:4c:fc:1f:55:ac:f8:6f:8e:f2:8f:d2:eb:69:8f:cf:0f: c0:80:90:2e:9d:51:60:13:86:0f:ff:d5:f7:f8:dc:3e:81:5d: 1d:ab:a0:39:f8:2b:a5:1d:94:cf:a7:d4:e7:ff:21:39:a3:c4: 89:d9:a0:75:3a:b3:37:8d:29:ce:9c:c3:01:e8:f9:1f:76:dc: d1:7e:0b:d9:e6:13:88:08:b8:fc:c7:1d:d5:69:32:ec:39:df: c0:1b:e4:f4:45:4b:32:f3:9f:ff:52:34:16:af:c6:fd:27:41: e3:1c:0d:6e:86:93:c1:ef:99:8d:4c:ba:c0:d2:94:aa:2e:d5: c1:89:5c:93:e6:62:96:91:ba:c5:29:9d:b8:e7:43:df:52:6c: a8:eb:98:06:01:1f:e1:c8:c3:c5:c2:04:75:ee:c5:20:4b:e2: d2:88:d9:d5:51:99:79:ca:20:ca:1d:bf:94:6d:c3:5e:84:ad: 4f:16:c0:28:76:82:d8:d9:dc:66:1c:11:e7:92:18:20:1f:8a: 83:a0:a1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk2pQotTJ/6FU2tKDFdH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2 NTFjNDMwHhcNMjUxMjExMTgwMTQwWhcNMjUxMjEyMTgwMTQwWjAzMTEwLwYDVQQD Eyg1NWRmYmQyNjJhMmU1N2ZkYTA1ZWU2MjU3NWZmYjFhNjRkYjk4ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxN2HiWrp0wj0zTp7SW9L6vlPqaq 7UjAbduPZeeYVPLTlzFAkTzQ70XzARLXPEXvT6YCqR0YtSo8KWKUIj6IQDpEAEVc arF35KShSFg/FWKnAPMlg3HAP9F+89ef8JySwqtP7aYKhKV7woAtJSzknqPOuC+4 EF5GaproJDW6a+8ghpfqjURoUJhaoyzWPA01VIywXwKcOm/Zdeqvvz17B/58z4iy 2o8DHsxIwtdAnNRV+wmIxzt/lK+HiVNHrvWsJkeu4wppZkEQ0sFB5jzs90Bg7k6b lUwBI9QIagyjC/QjARmXGzqlruzCzQyzUN0Tb+antTWpi2F51L9u+6FIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXfvSYqLlf9oF7mJXX/saZNuYgsMB8GA1UdIwQY MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt MjgxOGY2NTc4ZDFiLzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujlL9kpi sHVgO94lCn/X7G7onxL3K59MJL+OtxxFHdCuaTXv5EQA1urptp00K9E0slbOMVfg fjhM/B9VrPhvjvKP0utpj88PwICQLp1RYBOGD//V9/jcPoFdHaugOfgrpR2Uz6fU 5/8hOaPEidmgdTqzN40pzpzDAej5H3bc0X4L2eYTiAi4/Mcd1Wky7DnfwBvk9EVL MvOf/1I0Fq/G/SdB4xwNboaTwe+ZjUy6wNKUqi7VwYlck+ZilpG6xSmduOdD31Js qOuYBgEf4cjDxcIEde7FIEvi0ojZ1VGZecogyh2/lG3DXoStTxbAKHaC2NncZhwR 55IYIB+Kg6Chuw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:29 2025 by rpki-client