This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json) Hash identifier: VxPdO70UcQ1cKLkDOzwrwPKzBiCqwi5kOlKhB9seIiA= Subject key identifier: DE:65:8B:03:B4:D5:7B:05:3E:0E:FA:CD:C2:9A:DA:33:0A:DD:89:1C Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Certificate serial: 019B476F78C420A5298ED4A818AE46E6190C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 19:00:46 +0000 Manifest this update: Mon 22 Dec 2025 19:00:46 +0000 Manifest next update: Tue 23 Dec 2025 19:00:46 +0000 Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: QNuLeIzwL5P9fQgt20lZ+5VyvO8DCdsja0vLjQn01qA=) 2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:78:c4:20:a5:29:8e:d4:a8:18:ae:46:e6:19:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Validity Not Before: Dec 22 19:00:46 2025 GMT Not After : Dec 23 19:00:46 2025 GMT Subject: CN=de658b03b4d57b053e0efacdc29ada330add891c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:42:08:da:e8:83:12:3c:b9:96:7b:9a:12: b8:f0:ba:10:6b:62:7f:1f:6b:7c:38:65:63:1d:1d: 73:90:dd:bf:d2:c9:8e:cd:e2:0d:f8:1e:6a:dc:33: a2:a8:7a:18:61:a9:80:40:f2:c4:23:d1:c7:8d:24: bc:64:8f:40:52:81:6a:11:2c:1d:18:60:ee:6b:46: 76:49:d9:7b:42:72:38:e2:69:e9:63:ce:49:16:94: c0:07:5f:71:99:66:0a:24:e8:e0:59:a7:c5:06:4a: 3c:18:3c:83:88:f7:78:ce:47:dd:9f:55:b2:08:11: d6:8a:d9:7f:38:8d:af:e3:6a:80:c9:70:1a:9e:07: c8:1d:55:1a:9d:bd:92:d4:65:12:71:bc:4a:6a:06: 17:cb:5e:16:37:d0:ec:f8:78:a0:e5:c6:ae:a1:cb: 28:99:ce:0a:c4:fc:4c:e9:54:7a:e9:41:6a:9b:9d: e4:ba:da:ec:a6:91:eb:aa:22:7b:e5:de:f5:81:23: dc:14:5f:01:58:7b:7e:af:d8:0e:ff:61:6a:b7:c7: ef:6f:1c:8e:b3:09:ac:88:a8:b3:8b:0f:5b:7a:52: b8:57:2d:1a:47:c0:b0:2a:50:62:1c:24:43:57:1e: 16:79:f1:63:cf:a5:62:e0:68:68:3b:02:74:87:58: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:65:8B:03:B4:D5:7B:05:3E:0E:FA:CD:C2:9A:DA:33:0A:DD:89:1C X509v3 Authority Key Identifier: keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:50:b3:d2:b7:77:2e:15:db:db:ac:f6:22:83:64:12:cb:cb: 8e:fa:7e:10:89:84:53:7e:4b:b8:be:ed:84:cd:a8:44:d2:48: 43:d4:07:3a:bf:20:97:ce:1c:35:bc:99:ee:08:28:b5:37:a4: ca:a9:c4:e5:fc:b8:cd:55:ec:3e:ae:01:cd:ac:0a:0f:74:ff: f1:10:1a:1e:8f:17:a1:5c:f2:4d:52:52:92:20:ec:79:a5:11: df:b3:50:51:2d:d0:b7:36:21:18:5f:89:e2:ed:3a:35:80:af: ff:96:4f:76:bc:8b:2a:7c:3b:96:fc:cd:8c:cb:d0:62:9f:95: a5:d9:2e:8a:d2:fa:ee:74:18:40:14:f6:18:a6:f5:ea:e0:31: ca:a5:6b:48:bc:e8:f7:9b:ce:ce:63:bb:14:79:78:6a:bc:58: cc:d9:b3:0c:71:2c:85:27:ce:c0:d8:11:79:04:a9:c3:81:68: 8a:ed:f4:e2:d1:2d:bc:60:03:46:38:ab:e1:34:fe:0f:d5:85: 75:fa:30:f6:4e:7a:99:62:ab:ad:99:66:27:b4:cd:03:22:4a: aa:a5:1a:3c:cb:a7:05:4a:49:c0:61:88:60:53:a5:c9:ad:1f: b7:a4:13:e4:b6:e4:2e:98:2c:cf:fc:1f:3b:82:54:18:b1:39: 62:88:ee:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb3jEIKUpjtSoGK5G5hkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz MTJhYmYwHhcNMjUxMjIyMTkwMDQ2WhcNMjUxMjIzMTkwMDQ2WjAzMTEwLwYDVQQD EyhkZTY1OGIwM2I0ZDU3YjA1M2UwZWZhY2RjMjlhZGEzMzBhZGQ4OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz9CCNrogxI8uZZ7mhK48LoQa2J/ H2t8OGVjHR1zkN2/0smOzeIN+B5q3DOiqHoYYamAQPLEI9HHjSS8ZI9AUoFqESwd GGDua0Z2Sdl7QnI44mnpY85JFpTAB19xmWYKJOjgWafFBko8GDyDiPd4zkfdn1Wy CBHWitl/OI2v42qAyXAangfIHVUanb2S1GUScbxKagYXy14WN9Ds+Hig5cauocso mc4KxPxM6VR66UFqm53kutrsppHrqiJ75d71gSPcFF8BWHt+r9gO/2Fqt8fvbxyO swmsiKiziw9belK4Vy0aR8CwKlBiHCRDVx4WefFjz6Vi4GhoOwJ0h1j/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5liwO01XsFPg76zcKa2jMK3YkcMB8GA1UdIwQY MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5 LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglCz0rd3 LhXb26z2IoNkEsvLjvp+EImEU35LuL7thM2oRNJIQ9QHOr8gl84cNbyZ7ggotTek yqnE5fy4zVXsPq4BzawKD3T/8RAaHo8XoVzyTVJSkiDseaUR37NQUS3QtzYhGF+J 4u06NYCv/5ZPdryLKnw7lvzNjMvQYp+VpdkuitL67nQYQBT2GKb16uAxyqVrSLzo 95vOzmO7FHl4arxYzNmzDHEshSfOwNgReQSpw4Foiu304tEtvGADRjir4TT+D9WF dfow9k56mWKrrZlmJ7TNAyJKqqUaPMunBUpJwGGIYFOlya0ft6QT5LbkLpgsz/wf O4JUGLE5Yoju9w== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:47 2025 by rpki-client