This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json) Hash identifier: DOnEF1FU3Ak8uexacI3eY4kg17TizCuQxNAWxKUdnMs= Subject key identifier: F9:8F:62:1B:50:B8:25:C7:BD:D6:B4:F8:BD:E7:4C:68:C1:67:7E:69 Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Certificate serial: 019B0EC95D51CFD196B23337299BC1A9761F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft Manifest number: 0935 Signing time: Thu 11 Dec 2025 19:00:36 +0000 Manifest this update: Thu 11 Dec 2025 19:00:36 +0000 Manifest next update: Fri 12 Dec 2025 19:00:36 +0000 Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: 5yZOZfYTsZHHKinqkCW/HqB3PQ1mwHWPSiZOiN0zNPY=) 2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:5d:51:cf:d1:96:b2:33:37:29:9b:c1:a9:76:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Validity Not Before: Dec 11 19:00:36 2025 GMT Not After : Dec 12 19:00:36 2025 GMT Subject: CN=f98f621b50b825c7bdd6b4f8bde74c68c1677e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:ff:e9:6a:5c:23:73:87:85:28:30:ce:8f: 65:d2:e4:bd:16:30:81:0f:7e:bb:75:1d:0e:84:b9: 0c:ce:e8:57:23:85:fb:4d:93:9d:7c:8e:a8:00:b6: 5b:6a:2e:ee:15:ea:83:e0:16:cd:a7:d3:02:61:c8: ff:01:58:98:d4:a5:bf:17:b2:6b:8d:99:2d:4f:a6: 97:62:41:73:a3:d0:14:0d:0b:34:a7:1b:0a:3e:c2: a0:0e:21:ea:6a:01:b2:7b:3a:21:77:74:75:81:b5: 03:05:b7:0a:5d:d8:e7:12:95:32:df:65:83:6a:74: b2:29:a5:e2:57:e7:52:cd:e4:ba:a1:e2:04:d2:d5: 6f:95:45:12:31:0a:2c:51:65:37:29:e5:94:52:25: 38:0b:85:de:e3:dc:85:29:3b:3d:fb:23:58:55:3b: fb:ef:f4:7d:67:31:e3:1e:3e:d2:a9:12:4f:f4:28: dc:f6:77:a0:0e:e8:28:da:af:55:3d:0d:c9:af:a5: 22:59:9f:ac:4b:e9:85:8f:3a:fd:6c:0c:f0:81:3f: 29:f1:79:a3:86:18:91:26:e4:be:8f:cd:2f:80:29: 45:3a:85:5c:06:53:7b:88:d5:ab:03:c5:25:a4:7f: 34:a4:f3:f0:45:70:ce:ce:dd:1d:10:b0:1f:9d:22: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8F:62:1B:50:B8:25:C7:BD:D6:B4:F8:BD:E7:4C:68:C1:67:7E:69 X509v3 Authority Key Identifier: keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:c0:4f:e6:bf:6a:bf:a0:4a:6a:d2:4b:93:0e:61:29:7d: bc:1e:dd:c8:46:b0:ed:5f:fd:e2:97:f6:c4:ed:40:f1:1d:fe: 19:5b:7a:ee:3a:78:97:a5:4c:c9:c2:d2:3c:6b:c5:6c:0f:0a: b2:de:a3:4d:1e:f0:f3:be:98:bd:1c:8e:a3:cf:bf:d2:49:e2: cd:7a:ff:d8:da:ec:3f:a0:a6:08:ea:47:68:83:08:d3:dd:fe: fc:42:9d:b9:8d:ab:bd:8e:2b:4f:33:13:46:1c:34:f5:ad:a9: a6:dc:9e:95:dd:18:6a:f1:4c:fb:15:88:1c:41:b7:a7:c8:a7: fa:bf:cc:c6:aa:3c:31:63:bc:e5:15:44:24:99:65:d3:49:0a: 7a:9e:79:af:5b:68:50:49:6d:48:0a:bc:b8:de:e1:0c:3f:78: 26:20:74:52:fc:6a:36:21:60:af:75:5f:5c:74:e8:ae:e2:ea: b6:02:67:d2:54:43:43:3d:0d:8d:5b:52:f5:05:4d:a9:57:43: 3c:45:a3:7a:18:57:8a:eb:9e:97:19:57:c8:37:a2:4e:69:12: 4e:d6:c2:c1:f6:ac:60:25:e7:0e:5c:82:b7:15:d2:96:4b:70: f0:5d:8d:d8:82:b5:06:97:de:60:72:2a:59:a8:d1:5f:a6:fd: 3c:6f:c4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyV1Rz9GWsjM3KZvBqXYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3 ODNhODYwHhcNMjUxMjExMTkwMDM2WhcNMjUxMjEyMTkwMDM2WjAzMTEwLwYDVQQD EyhmOThmNjIxYjUwYjgyNWM3YmRkNmI0ZjhiZGU3NGM2OGMxNjc3ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G//6WpcI3OHhSgwzo9l0uS9FjCB D367dR0OhLkMzuhXI4X7TZOdfI6oALZbai7uFeqD4BbNp9MCYcj/AViY1KW/F7Jr jZktT6aXYkFzo9AUDQs0pxsKPsKgDiHqagGyezohd3R1gbUDBbcKXdjnEpUy32WD anSyKaXiV+dSzeS6oeIE0tVvlUUSMQosUWU3KeWUUiU4C4Xe49yFKTs9+yNYVTv7 7/R9ZzHjHj7SqRJP9Cjc9negDugo2q9VPQ3Jr6UiWZ+sS+mFjzr9bAzwgT8p8Xmj hhiRJuS+j80vgClFOoVcBlN7iNWrA8UlpH80pPPwRXDOzt0dELAfnSKqeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmPYhtQuCXHvda0+L3nTGjBZ35pMB8GA1UdIwQY MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4 LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj3AT+a/ ar+gSmrSS5MOYSl9vB7dyEaw7V/94pf2xO1A8R3+GVt67jp4l6VMycLSPGvFbA8K st6jTR7w876YvRyOo8+/0knizXr/2NrsP6CmCOpHaIMI093+/EKduY2rvY4rTzMT Rhw09a2pptyeld0YavFM+xWIHEG3p8in+r/Mxqo8MWO85RVEJJll00kKep55r1to UEltSAq8uN7hDD94JiB0UvxqNiFgr3VfXHToruLqtgJn0lRDQz0NjVtS9QVNqVdD PEWjehhXiuuelxlXyDeiTmkSTtbCwfasYCXnDlyCtxXSlktw8F2N2IK1BpfeYHIq WajRX6b9PG/Ecg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:10:38 2025 by rpki-client