This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json) Hash identifier: DKDodjAs4mqqZLGnxXHPwQhPHEzhAuXW71Ny4uf9FN0= Subject key identifier: FB:F6:71:73:02:7C:5D:EB:2E:6C:2C:14:9C:5F:45:5D:0D:26:4E:1D Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Certificate serial: 019B66FC03DE6187980738B249084786ECAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft Manifest number: 0633 Signing time: Sun 28 Dec 2025 22:02:30 +0000 Manifest this update: Sun 28 Dec 2025 22:02:30 +0000 Manifest next update: Mon 29 Dec 2025 22:02:30 +0000 Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=) 2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: guQIkFCMI8uqjBQq/PAuZJMN259uyyPTstv3KMoOhLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:03:de:61:87:98:07:38:b2:49:08:47:86:ec:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05 Validity Not Before: Dec 28 22:02:30 2025 GMT Not After : Dec 29 22:02:30 2025 GMT Subject: CN=fbf67173027c5deb2e6c2c149c5f455d0d264e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:f8:b1:88:6e:bc:7c:6f:76:a5:9c:04:ca: 60:8d:ce:19:f3:4e:6d:7f:e0:ae:d9:96:84:33:24: af:44:bb:c4:f1:9f:46:9f:74:42:70:da:0f:f5:51: 3c:de:56:5b:ca:62:76:22:35:31:85:0f:75:f7:92: 1a:d9:8a:6e:1e:20:4e:da:74:5c:23:24:20:6b:9a: 3a:ab:af:ed:f6:95:99:83:17:be:51:d4:24:fc:b6: 34:af:9d:c4:e1:4c:d7:1d:d9:3a:ec:10:b0:2b:ea: 2d:94:75:f8:0d:91:eb:96:68:e6:52:b5:df:b2:34: 60:c0:5d:04:68:70:9e:41:6b:86:2e:1f:b9:c0:c9: ce:09:05:ec:f2:1a:23:4c:d2:96:c2:88:e8:bb:c3: 4b:b7:9a:46:ee:69:ac:9b:6a:be:03:12:cb:9c:c4: c5:74:96:78:f6:0b:d5:74:c4:0c:58:11:db:80:5d: 50:9f:9f:3a:be:e3:1a:ac:75:da:4b:10:b6:b2:7c: 5e:1b:41:12:71:11:9f:43:84:78:b4:0f:fe:c3:3f: 33:61:00:34:27:dd:78:e5:a8:d9:3f:ac:b5:37:4a: 3a:c8:78:08:ae:30:20:5b:e1:d6:52:13:f1:66:78: 7a:fe:d5:a9:eb:9e:51:36:06:cb:c8:3b:8f:32:fd: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F6:71:73:02:7C:5D:EB:2E:6C:2C:14:9C:5F:45:5D:0D:26:4E:1D X509v3 Authority Key Identifier: keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:a9:07:1e:3d:5f:6c:89:89:1e:a6:3a:42:7b:05:e4:cf: 3f:11:5f:79:c2:5f:21:8e:f3:c3:c2:9b:f7:fd:be:60:4f:0e: d3:1c:16:16:f2:0d:93:8e:01:28:97:63:6e:2c:b5:1b:91:76: e2:c6:3b:e1:ee:52:02:c9:89:32:7b:16:34:4b:8f:96:37:7f: 5c:e3:fc:08:81:4f:ea:9b:11:6a:43:a1:26:5b:28:eb:1e:e4: 5c:b5:06:fd:31:f8:b6:76:49:db:5b:5f:c8:42:15:6a:d8:68: 03:06:b2:2b:e9:c5:a1:be:45:06:9e:ef:cd:3d:b7:da:95:9a: 41:41:eb:05:f2:e8:d8:61:3e:35:7a:d8:10:8b:7a:7f:d2:70: 98:60:10:46:89:d1:b2:d0:6c:e2:44:12:da:4a:85:9f:49:2e: 47:e4:8e:b1:7a:dd:d2:91:66:38:42:d2:d9:a7:65:69:81:2c: a3:04:e8:fd:b9:2b:0e:63:4c:b5:b2:81:db:32:35:f3:95:ea: 1f:de:75:f6:35:ee:2c:36:54:15:61:bc:22:d8:2f:d1:26:05: 69:64:97:80:0f:9f:30:dc:77:33:43:c0:54:33:e9:cd:3c:82: 9f:d5:01:20:1b:af:01:3b:db:a3:85:c0:79:ee:ed:ba:13:ae: b9:43:65:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/APeYYeYBziySQhHhuyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGYyZDE4MjlkNmZiOGQyNDdmYTRlOTY1OGVhMTdmMDZj MDBiMDUwHhcNMjUxMjI4MjIwMjMwWhcNMjUxMjI5MjIwMjMwWjAzMTEwLwYDVQQD EyhmYmY2NzE3MzAyN2M1ZGViMmU2YzJjMTQ5YzVmNDU1ZDBkMjY0ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinn4sYhuvHxvdqWcBMpgjc4Z805t f+Cu2ZaEMySvRLvE8Z9Gn3RCcNoP9VE83lZbymJ2IjUxhQ9195Ia2YpuHiBO2nRc IyQga5o6q6/t9pWZgxe+UdQk/LY0r53E4UzXHdk67BCwK+otlHX4DZHrlmjmUrXf sjRgwF0EaHCeQWuGLh+5wMnOCQXs8hojTNKWwojou8NLt5pG7mmsm2q+AxLLnMTF dJZ49gvVdMQMWBHbgF1Qn586vuMarHXaSxC2snxeG0EScRGfQ4R4tA/+wz8zYQA0 J9145ajZP6y1N0o6yHgIrjAgW+HWUhPxZnh6/tWp655RNgbLyDuPMv0KMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv2cXMCfF3rLmwsFJxfRV0NJk4dMB8GA1UdIwQY MBaAFKsPLRgp1vuNJH+k6WWOoX8GwAsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUt NTcwZmVjMjlkMTM5LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUtNTcwZmVjMjlkMTM5 LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7CpBx49 X2yJiR6mOkJ7BeTPPxFfecJfIY7zw8Kb9/2+YE8O0xwWFvINk44BKJdjbiy1G5F2 4sY74e5SAsmJMnsWNEuPljd/XOP8CIFP6psRakOhJlso6x7kXLUG/TH4tnZJ21tf yEIVathoAwayK+nFob5FBp7vzT232pWaQUHrBfLo2GE+NXrYEIt6f9JwmGAQRonR stBs4kQS2kqFn0kuR+SOsXrd0pFmOELS2adlaYEsowTo/bkrDmNMtbKB2zI185Xq H9519jXuLDZUFWG8Itgv0SYFaWSXgA+fMNx3M0PAVDPpzTyCn9UBIBuvATvbo4XA ee7tuhOuuUNl5g== -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:54 2025 by rpki-client