This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json) Hash identifier: eXCljk6LzGP7HJAhfgm1AOVjyARysym9ZRq7MvxI1YM= Subject key identifier: 79:3A:9B:4D:41:21:5E:0C:47:E2:AB:0A:38:14:A4:BD:0B:74:52:D0 Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Certificate serial: 019B085B024C31821EAAD5E694ECB0D8CAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft Manifest number: 16C1 Signing time: Wed 10 Dec 2025 13:02:20 +0000 Manifest this update: Wed 10 Dec 2025 13:02:20 +0000 Manifest next update: Thu 11 Dec 2025 13:02:20 +0000 Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: xs9o3XNc2ZLEJeyLQeppk4MjH6SvYY53OOf7MINdkcU=) 2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:02:4c:31:82:1e:aa:d5:e6:94:ec:b0:d8:ca:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Validity Not Before: Dec 10 13:02:20 2025 GMT Not After : Dec 11 13:02:20 2025 GMT Subject: CN=793a9b4d41215e0c47e2ab0a3814a4bd0b7452d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:e8:7c:ae:a6:77:70:c5:55:0b:73:b6:4d: ac:1d:06:4f:1e:0c:fb:48:f8:1f:73:7e:72:d3:85: 9c:7a:ef:7a:a7:84:93:69:1c:da:e8:49:d4:37:4f: 9d:66:cd:c6:d9:29:63:4d:6d:ab:96:ae:2e:f9:f9: 50:54:9f:64:f1:e3:12:4f:8f:4d:ea:6d:0e:16:a3: d8:f4:ae:3e:ce:4d:75:9a:72:e9:ff:42:f6:0d:6d: ec:cf:e2:01:fd:85:ef:21:06:5c:0e:de:58:f5:30: 02:39:19:96:1b:a6:40:13:60:66:27:4a:2d:cb:69: cd:3d:bd:42:a7:2a:08:46:fd:3d:63:13:ae:ad:3e: f3:6e:9d:7d:18:f0:dd:24:7a:5c:79:4f:fd:36:fb: fd:2f:3c:0f:4c:1f:5c:42:ac:ea:a4:db:cd:bf:08: da:72:b9:be:cb:fc:f9:dc:a1:cc:c9:b4:9c:64:47: 42:7b:0a:be:9f:8f:59:24:f4:27:c3:22:a0:ff:29: 18:45:82:17:1f:60:6d:0b:61:16:d3:3b:f1:df:3e: 4b:0f:ce:8d:c2:7e:0e:8d:88:aa:4f:23:99:30:97: 4d:b3:fc:a2:bc:66:bf:a5:02:63:e5:eb:4b:df:1f: ca:80:47:67:63:89:12:8c:9c:5e:0f:4a:c5:58:b9: b6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:9B:4D:41:21:5E:0C:47:E2:AB:0A:38:14:A4:BD:0B:74:52:D0 X509v3 Authority Key Identifier: keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bc:4a:72:dd:6f:50:4f:3d:30:3f:7e:8d:42:57:31:1b:ca: 5d:c7:b3:d5:57:35:c8:b9:de:67:27:40:37:61:af:61:04:ec: ad:1c:95:27:e5:6c:79:32:1d:60:0a:8e:3a:0d:06:83:9a:7f: 1f:4e:7a:20:5e:41:97:fb:9f:6d:fa:3e:1d:84:d0:24:1a:36: cb:b7:57:42:70:e3:b3:26:83:f1:07:dd:71:8c:14:4e:d3:a4: ff:9f:bf:24:b5:69:0d:8d:7c:b6:a6:80:f8:3c:b4:19:8b:29: 67:dc:26:f0:c5:7b:a2:32:82:32:6a:ab:f7:4a:21:57:1c:39: 1a:47:2c:e8:00:95:73:70:c3:71:50:ee:4a:a5:6f:65:14:b5: 4d:b4:87:ff:28:9b:70:da:42:c7:2f:8e:7c:9e:d8:82:17:37: e7:a1:85:fa:eb:a1:2c:f1:b8:2f:73:e0:cd:d5:c8:1f:d5:da: de:d5:fe:8c:44:57:21:34:1a:f1:db:c8:fc:8b:a9:1d:64:03: a3:31:38:7e:cb:1f:8f:9e:9d:84:c6:e4:9f:02:42:29:47:26: 49:e8:1c:77:f9:7b:9d:0b:5e:44:dd:67:d4:22:a5:fd:77:55: a1:06:18:59:ab:52:e0:80:0e:fe:2a:b3:02:09:1a:9f:87:82: 6e:cf:c3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWwJMMYIeqtXmlOyw2MrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm MmY3N2QwHhcNMjUxMjEwMTMwMjIwWhcNMjUxMjExMTMwMjIwWjAzMTEwLwYDVQQD Eyg3OTNhOWI0ZDQxMjE1ZTBjNDdlMmFiMGEzODE0YTRiZDBiNzQ1MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjozofK6md3DFVQtztk2sHQZPHgz7 SPgfc35y04Wceu96p4STaRza6EnUN0+dZs3G2SljTW2rlq4u+flQVJ9k8eMST49N 6m0OFqPY9K4+zk11mnLp/0L2DW3sz+IB/YXvIQZcDt5Y9TACORmWG6ZAE2BmJ0ot y2nNPb1CpyoIRv09YxOurT7zbp19GPDdJHpceU/9Nvv9LzwPTB9cQqzqpNvNvwja crm+y/z53KHMybScZEdCewq+n49ZJPQnwyKg/ykYRYIXH2BtC2EW0zvx3z5LD86N wn4OjYiqTyOZMJdNs/yivGa/pQJj5etL3x/KgEdnY4kSjJxeD0rFWLm2jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk6m01BIV4MR+KrCjgUpL0LdFLQMB8GA1UdIwQY MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7xKct1v UE89MD9+jUJXMRvKXcez1Vc1yLneZydAN2GvYQTsrRyVJ+VseTIdYAqOOg0Gg5p/ H056IF5Bl/ufbfo+HYTQJBo2y7dXQnDjsyaD8QfdcYwUTtOk/5+/JLVpDY18tqaA +Dy0GYspZ9wm8MV7ojKCMmqr90ohVxw5Gkcs6ACVc3DDcVDuSqVvZRS1TbSH/yib cNpCxy+OfJ7Yghc356GF+uuhLPG4L3PgzdXIH9Xa3tX+jERXITQa8dvI/IupHWQD ozE4fssfj56dhMbknwJCKUcmSegcd/l7nQteRN1n1CKl/XdVoQYYWatS4IAO/iqz Agkan4eCbs/DmA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:40 2025 by rpki-client