This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json) Hash identifier: N0PVCVkDRl1EmY9jr0vCYshdWif+oujoio/ivPgCMyk= Subject key identifier: 09:A1:CD:EC:80:13:6B:5C:15:26:92:6A:58:31:40:DE:7B:73:42:55 Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944 Certificate serial: 019B3DFE98F58B31D5AEBB467A7A885E92E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft Manifest number: 16D4 Signing time: Sat 20 Dec 2025 23:00:53 +0000 Manifest this update: Sat 20 Dec 2025 23:00:53 +0000 Manifest next update: Sun 21 Dec 2025 23:00:53 +0000 Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: j+7IxKeVnjvJSN4GeO4MLYsnkBw3HlSa6+pmvX/HfGk=) 2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:98:f5:8b:31:d5:ae:bb:46:7a:7a:88:5e:92:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944 Validity Not Before: Dec 20 23:00:53 2025 GMT Not After : Dec 21 23:00:53 2025 GMT Subject: CN=09a1cdec80136b5c1526926a583140de7b734255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:e7:69:df:0f:d7:f1:15:b5:2f:59:9c:0f: fd:9e:0f:c8:41:4e:44:40:f2:17:84:97:d0:f5:87: 30:ef:b8:06:4e:46:bc:ca:32:f1:00:7f:70:d1:8f: 7b:3e:6d:96:68:ad:9f:e7:dc:a4:7a:51:20:37:76: 40:04:33:8f:34:97:7c:ee:ab:04:6f:67:05:94:0c: b4:53:2e:70:41:ce:2a:32:e6:12:b5:93:fa:15:b8: fb:04:85:5a:fa:ba:b3:78:e7:15:e8:a1:80:fb:f3: cc:2c:4f:c5:bd:7c:bc:3c:ff:54:9d:bf:f0:5f:5e: ed:16:10:5a:54:76:ce:e1:1b:60:36:d0:65:4c:5b: 85:de:ab:f3:c5:e4:7e:f2:14:7c:72:62:03:e7:8c: 17:97:1e:3c:d9:25:1f:65:5f:9c:bc:0f:88:a8:26: 0c:1d:15:b8:0a:ce:18:81:61:3e:3e:66:d9:c4:4a: b3:c2:ea:76:67:ab:ea:41:e0:ba:9d:fb:01:58:3c: 11:ee:fd:2c:78:db:46:f2:ee:e8:6a:42:da:ed:eb: 23:f2:03:90:1b:f8:93:5e:98:b5:4b:18:83:49:28: cc:51:5e:0c:8f:24:28:85:6f:cc:cd:22:72:bf:85: d4:09:c5:2a:35:62:5e:8a:d7:cd:9d:d1:c1:d5:2f: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:CD:EC:80:13:6B:5C:15:26:92:6A:58:31:40:DE:7B:73:42:55 X509v3 Authority Key Identifier: keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e4:71:8d:f0:c1:c9:0e:3e:aa:b6:2b:56:2f:33:f4:4f:ed: 41:00:32:12:52:82:10:cd:f6:d6:0f:25:3d:05:af:3c:8e:a9: ee:fb:a6:f4:de:3c:fd:31:db:a0:62:d6:e5:f9:b4:33:1c:58: 3c:46:c4:e4:a8:be:f1:e7:1c:59:cc:80:c0:6d:76:56:85:b8: fe:64:7e:45:49:48:53:5f:09:f5:c5:2e:4c:14:59:e6:83:a7: 26:0d:ed:4d:40:b4:44:74:3b:91:20:2b:f6:a4:c7:ae:ce:92: 2d:08:6d:59:94:df:70:41:31:63:c6:38:f2:85:60:8c:1b:0d: 5e:13:59:fe:ff:67:5d:de:34:bb:68:fa:5c:5d:f6:09:a0:7d: 26:f3:c8:34:68:2e:ad:34:61:3b:68:d1:d9:1e:c2:a3:b5:f2: 6a:40:50:c8:29:27:ff:13:a1:c5:13:46:88:95:b4:eb:49:58: 65:1d:8c:52:05:7c:5b:10:bb:15:6e:c4:bd:df:23:ab:96:c7: ea:f8:d9:10:dc:6f:62:8a:96:74:b4:d2:2b:ac:0e:52:15:be: ea:52:0f:65:6d:09:76:2d:c0:c9:60:f6:8d:eb:34:09:63:09: fd:68:5a:d0:a2:fc:28:2f:6a:dd:e3:8b:04:1b:5b:d1:3e:91: ca:14:59:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pj1izHVrrtGenqIXpLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj NDc5NDQwHhcNMjUxMjIwMjMwMDUzWhcNMjUxMjIxMjMwMDUzWjAzMTEwLwYDVQQD EygwOWExY2RlYzgwMTM2YjVjMTUyNjkyNmE1ODMxNDBkZTdiNzM0MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzfnad8P1/EVtS9ZnA/9ng/IQU5E QPIXhJfQ9Ycw77gGTka8yjLxAH9w0Y97Pm2WaK2f59ykelEgN3ZABDOPNJd87qsE b2cFlAy0Uy5wQc4qMuYStZP6Fbj7BIVa+rqzeOcV6KGA+/PMLE/FvXy8PP9Unb/w X17tFhBaVHbO4RtgNtBlTFuF3qvzxeR+8hR8cmID54wXlx482SUfZV+cvA+IqCYM HRW4Cs4YgWE+PmbZxEqzwup2Z6vqQeC6nfsBWDwR7v0seNtG8u7oakLa7esj8gOQ G/iTXpi1SxiDSSjMUV4MjyQohW/MzSJyv4XUCcUqNWJeitfNndHB1S9sLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmhzeyAE2tcFSaSalgxQN57c0JVMB8GA1UdIwQY MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5 LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuRxjfDB yQ4+qrYrVi8z9E/tQQAyElKCEM321g8lPQWvPI6p7vum9N48/THboGLW5fm0MxxY PEbE5Ki+8eccWcyAwG12VoW4/mR+RUlIU18J9cUuTBRZ5oOnJg3tTUC0RHQ7kSAr 9qTHrs6SLQhtWZTfcEExY8Y48oVgjBsNXhNZ/v9nXd40u2j6XF32CaB9JvPINGgu rTRhO2jR2R7Co7XyakBQyCkn/xOhxRNGiJW060lYZR2MUgV8WxC7FW7Evd8jq5bH 6vjZENxvYoqWdLTSK6wOUhW+6lIPZW0Jdi3AyWD2jes0CWMJ/Wha0KL8KC9q3eOL BBtb0T6RyhRZ/w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:53 2025 by rpki-client