This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json) Hash identifier: AU4EY1jXZBM14MjO+EvpeIkC2piHJONCoR0bHL9uRUQ= Subject key identifier: 35:2D:AD:9F:8E:11:2C:F6:E1:5A:7F:F2:6F:DC:C1:D6:BF:C0:A2:1B Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Certificate serial: 019B34C5EBCBBBD1901D47077BD0DDB4AC47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft Manifest number: 16D8 Signing time: Fri 19 Dec 2025 04:02:24 +0000 Manifest this update: Fri 19 Dec 2025 04:02:24 +0000 Manifest next update: Sat 20 Dec 2025 04:02:24 +0000 Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: JdIlZ9Iu06tpdaQPgfc9mBUrCLtKC0jP+W8PGAmMhy8=) 2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:eb:cb:bb:d1:90:1d:47:07:7b:d0:dd:b4:ac:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Validity Not Before: Dec 19 04:02:24 2025 GMT Not After : Dec 20 04:02:24 2025 GMT Subject: CN=352dad9f8e112cf6e15a7ff26fdcc1d6bfc0a21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:9b:ba:3e:05:2c:78:15:4b:20:f7:c3:74: 78:61:32:f3:fb:3d:84:b7:e7:5a:cf:c3:f3:24:29: 72:a5:25:71:bd:cb:7a:05:99:d8:e2:f4:af:42:bb: 81:8e:17:36:04:2d:05:39:1b:6e:ec:4c:42:cb:84: 53:14:9c:c3:2f:a8:cb:b4:d5:d6:59:b2:73:1d:b6: b9:27:28:49:22:55:1f:6b:52:9a:6f:14:07:f6:45: 8f:1a:43:02:37:c9:bd:e9:67:93:e0:ff:10:16:a7: 98:8e:5b:d4:b6:60:7d:63:c8:4c:b5:c1:21:79:50: 22:59:4b:1c:79:51:56:c2:a4:fd:27:a6:2a:c6:79: d3:57:30:5d:05:c5:b4:d0:56:5a:33:1f:f7:12:7d: 08:9d:c9:5e:07:0b:e2:c0:47:6f:47:5e:5f:7f:be: d3:0b:1f:e5:28:78:24:ce:b1:2a:83:50:4c:ea:26: be:4f:59:0f:94:16:2e:2d:0a:42:63:03:ed:64:f3: 13:29:e2:4c:64:b6:7d:ce:64:11:3b:ba:b0:0e:b7: 8f:2c:cb:25:31:23:d0:ad:1b:b6:b6:8e:5c:75:25: ec:6e:cf:62:55:25:90:56:2c:ab:ab:ea:ee:b7:f6: ba:fb:70:d3:c2:16:f5:e5:cf:aa:41:b6:fa:36:3d: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:AD:9F:8E:11:2C:F6:E1:5A:7F:F2:6F:DC:C1:D6:BF:C0:A2:1B X509v3 Authority Key Identifier: keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4a:3d:b0:75:f1:15:5a:55:ac:4a:25:92:79:66:09:d2:66: f8:ab:67:10:4c:b8:e5:27:8f:75:7c:8e:ef:82:6c:77:a9:2e: e4:c2:39:b7:63:90:26:cc:8f:ac:59:55:f6:50:12:72:16:1d: e4:fa:68:cf:70:75:16:a6:a3:e1:e3:ab:c6:d7:61:08:83:bf: c2:58:52:3f:c5:30:77:54:39:7a:36:89:27:ec:93:35:7b:ed: a4:7a:f7:68:9a:e5:64:5b:05:d1:f8:fb:30:20:5b:02:47:21: 41:9f:61:93:e2:c1:ff:c7:5a:b3:f0:e0:07:e5:d1:39:08:74: d7:c4:cf:5c:8a:f9:42:6a:38:0b:99:45:21:6a:dd:26:bf:61: 40:37:68:2a:b1:7c:7f:95:b9:2d:1a:db:fe:28:c1:13:ae:56: a0:0b:8d:42:45:84:22:28:d3:4c:bf:51:c3:9c:ca:04:2d:41: e0:86:23:29:c9:d8:5f:c9:7e:bf:f0:f9:c3:d0:15:1e:ad:ec: 6f:aa:55:3a:51:a5:0c:99:6a:4d:0d:2e:19:6d:e0:6c:60:07: bf:21:5b:cd:37:59:30:19:18:b1:9e:2b:9a:dc:59:ea:68:2b: 3c:3d:29:f7:de:ee:0b:24:5e:f7:0a:73:29:9b:48:63:23:56: 56:56:f4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xevLu9GQHUcHe9DdtKxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm MmY3N2QwHhcNMjUxMjE5MDQwMjI0WhcNMjUxMjIwMDQwMjI0WjAzMTEwLwYDVQQD EygzNTJkYWQ5ZjhlMTEyY2Y2ZTE1YTdmZjI2ZmRjYzFkNmJmYzBhMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXObuj4FLHgVSyD3w3R4YTLz+z2E t+daz8PzJClypSVxvct6BZnY4vSvQruBjhc2BC0FORtu7ExCy4RTFJzDL6jLtNXW WbJzHba5JyhJIlUfa1KabxQH9kWPGkMCN8m96WeT4P8QFqeYjlvUtmB9Y8hMtcEh eVAiWUsceVFWwqT9J6YqxnnTVzBdBcW00FZaMx/3En0IncleBwviwEdvR15ff77T Cx/lKHgkzrEqg1BM6ia+T1kPlBYuLQpCYwPtZPMTKeJMZLZ9zmQRO7qwDrePLMsl MSPQrRu2to5cdSXsbs9iVSWQViyrq+rut/a6+3DTwhb15c+qQbb6Nj3d+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUtrZ+OESz24Vp/8m/cwda/wKIbMB8GA1UdIwQY MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEo9sHXx FVpVrEolknlmCdJm+KtnEEy45SePdXyO74Jsd6ku5MI5t2OQJsyPrFlV9lASchYd 5Ppoz3B1Fqaj4eOrxtdhCIO/wlhSP8Uwd1Q5ejaJJ+yTNXvtpHr3aJrlZFsF0fj7 MCBbAkchQZ9hk+LB/8das/DgB+XROQh018TPXIr5Qmo4C5lFIWrdJr9hQDdoKrF8 f5W5LRrb/ijBE65WoAuNQkWEIijTTL9Rw5zKBC1B4IYjKcnYX8l+v/D5w9AVHq3s b6pVOlGlDJlqTQ0uGW3gbGAHvyFbzTdZMBkYsZ4rmtxZ6mgrPD0p997uCyRe9wpz KZtIYyNWVlb0+A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:42:56 2025 by rpki-client