This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json) Hash identifier: UQXQoEuwy+hwRA5oLrBT1nM+yHE43+VX3J8E8RzczDk= Subject key identifier: E5:49:42:B6:76:F5:55:64:CA:AD:A8:24:A3:36:62:4D:42:46:08:CE Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Certificate serial: 019B2E549F19A15394B78D79F1F9F7ACBED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft Manifest number: 1614 Signing time: Wed 17 Dec 2025 22:00:56 +0000 Manifest this update: Wed 17 Dec 2025 22:00:56 +0000 Manifest next update: Thu 18 Dec 2025 22:00:56 +0000 Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: iA3ZRzKUgMMB3QWJQsHwQtAvimBb0TAfPdnDZw3BFOM=) 2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=) 3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:9f:19:a1:53:94:b7:8d:79:f1:f9:f7:ac:be:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Validity Not Before: Dec 17 22:00:56 2025 GMT Not After : Dec 18 22:00:56 2025 GMT Subject: CN=e54942b676f55564caada824a336624d424608ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:a4:e7:a2:7f:c6:03:66:d7:e6:7d:47:0f: e8:db:6d:7e:6a:59:9b:7a:5e:c1:0e:47:ae:10:ae: 45:7d:c9:48:dc:4c:c3:69:f9:45:f8:39:2f:b7:80: 8d:bd:db:a6:49:8c:71:2b:34:df:a9:bf:59:67:55: 92:67:c8:a1:bd:e2:73:85:41:da:27:d0:87:2b:80: 2a:1f:ec:5c:1f:f5:d5:19:50:c6:2e:b9:17:34:42: 68:66:b9:05:8f:2d:d5:52:6f:c1:17:f4:6b:a8:b4: 83:28:bb:87:f1:ad:c6:fa:c2:2e:5f:b9:a9:de:e9: 10:ce:5f:36:0e:a7:7e:8d:5b:f2:26:7d:18:8f:e1: 1d:47:0c:ba:a4:a8:6c:71:4a:4e:aa:03:bc:0e:07: 82:33:60:e2:65:1b:fa:86:b9:8e:19:ad:3b:8a:04: 4e:5f:11:75:f0:c5:a1:f2:6e:f9:9d:11:3a:fb:05: e2:ed:3f:f6:ed:ed:37:de:03:3b:82:be:33:67:53: c3:76:68:50:d5:4f:55:13:8a:28:64:e3:9a:3f:ea: a4:bf:48:a9:f3:4b:ed:9f:b9:b1:c6:cd:10:3a:70: f1:b6:b5:d5:da:a9:03:d4:87:a7:70:0a:46:ca:ef: 5b:78:f1:f0:70:af:82:7e:f2:01:1e:c7:22:bf:6d: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:49:42:B6:76:F5:55:64:CA:AD:A8:24:A3:36:62:4D:42:46:08:CE X509v3 Authority Key Identifier: keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:73:dd:6c:3e:61:63:24:72:b6:1a:db:3e:9b:05:0f:d2: 4f:d2:27:af:47:35:59:50:f1:ed:eb:68:57:b4:d8:40:bc:b5: 96:c5:c3:2e:77:5d:c2:ad:f4:17:5d:b3:f3:22:6b:ea:4a:c5: ce:28:70:48:1f:32:ea:9b:08:0b:97:4a:3e:1d:4f:c8:49:f7: 5a:b7:c6:95:16:e9:40:0a:d9:05:c5:6e:8c:59:38:29:bd:b8: 7c:f0:a7:06:9e:ff:d7:05:48:62:87:d3:23:08:ff:78:8e:68: a2:09:48:0e:d4:07:f2:e9:2f:41:bc:15:bd:f4:99:5c:dc:ba: 4c:59:fe:00:b9:a5:93:f2:a8:7c:79:34:70:b3:ab:3f:7c:bb: 4b:d9:e4:4a:e0:1a:04:0b:3c:da:f2:fe:50:08:f5:96:29:03: 43:45:fd:00:69:99:d4:01:bd:72:3f:3e:75:93:57:f2:26:92: b5:53:13:74:c1:c1:eb:9a:76:5e:16:0f:64:02:0a:fe:7e:c4: 3c:4a:7b:8f:8f:a9:31:37:ba:6d:bf:00:3e:e0:7d:ef:2d:b3: c9:cf:6d:82:2a:14:9c:a5:16:a4:5e:22:76:bc:d6:ff:6a:83: 9d:75:75:1f:95:3c:5c:dd:27:5b:3c:52:10:21:c2:98:85:2c: 19:ca:b0:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVJ8ZoVOUt4158fn3rL7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1 OTI2ZmQwHhcNMjUxMjE3MjIwMDU2WhcNMjUxMjE4MjIwMDU2WjAzMTEwLwYDVQQD EyhlNTQ5NDJiNjc2ZjU1NTY0Y2FhZGE4MjRhMzM2NjI0ZDQyNDYwOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKyk56J/xgNm1+Z9Rw/o221+almb el7BDkeuEK5FfclI3EzDaflF+Dkvt4CNvdumSYxxKzTfqb9ZZ1WSZ8ihveJzhUHa J9CHK4AqH+xcH/XVGVDGLrkXNEJoZrkFjy3VUm/BF/RrqLSDKLuH8a3G+sIuX7mp 3ukQzl82Dqd+jVvyJn0Yj+EdRwy6pKhscUpOqgO8DgeCM2DiZRv6hrmOGa07igRO XxF18MWh8m75nRE6+wXi7T/27e033gM7gr4zZ1PDdmhQ1U9VE4ooZOOaP+qkv0ip 80vtn7mxxs0QOnDxtrXV2qkD1IencApGyu9bePHwcK+CfvIBHsciv22vHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVJQrZ29VVkyq2oJKM2Yk1CRgjOMB8GA1UdIwQY MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq5z3Ww+ YWMkcrYa2z6bBQ/ST9Inr0c1WVDx7etoV7TYQLy1lsXDLnddwq30F12z8yJr6krF zihwSB8y6psIC5dKPh1PyEn3WrfGlRbpQArZBcVujFk4Kb24fPCnBp7/1wVIYofT Iwj/eI5ooglIDtQH8ukvQbwVvfSZXNy6TFn+ALmlk/KofHk0cLOrP3y7S9nkSuAa BAs82vL+UAj1likDQ0X9AGmZ1AG9cj8+dZNX8iaStVMTdMHB65p2XhYPZAIK/n7E PEp7j4+pMTe6bb8APuB97y2zyc9tgioUnKUWpF4idrzW/2qDnXV1H5U8XN0nWzxS ECHCmIUsGcqwAw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:02 2025 by rpki-client