This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json) Hash identifier: 9UfRFvz8juyXynbTUtsKNoU7h49TkdnPVrmSU4P2R4U= Subject key identifier: BE:C3:FA:FF:AC:9D:EE:4F:E3:7E:62:8B:AB:35:08:6A:1C:F8:43:0A Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Certificate serial: 019B5117DF2A62E13D391879D9E96111BDB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 16:01:17 +0000 Manifest this update: Wed 24 Dec 2025 16:01:17 +0000 Manifest next update: Thu 25 Dec 2025 16:01:17 +0000 Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: 2flbGdZHONuqH2F0cDu6UPF5cZKK2WkQM79FziPybHw=) 2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:df:2a:62:e1:3d:39:18:79:d9:e9:61:11:bd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Validity Not Before: Dec 24 16:01:17 2025 GMT Not After : Dec 25 16:01:17 2025 GMT Subject: CN=bec3faffac9dee4fe37e628bab35086a1cf8430a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:9b:0d:17:de:ef:0f:82:24:c2:e5:50:d5: 01:b6:b1:0d:2a:4d:c8:55:18:b9:b2:4a:f9:91:7c: d0:f2:3e:0d:58:21:73:df:82:4a:39:5f:ca:de:12: 98:7d:34:c7:80:3b:71:d7:66:07:5c:69:58:ae:20: ae:f5:02:91:67:20:4c:9b:d5:22:ba:ca:0c:b8:e8: 2b:ce:20:17:79:f8:50:ce:44:13:72:3b:39:f0:55: 26:c7:05:7a:28:ef:ef:7a:ee:c2:8a:9c:0a:ab:e6: d8:60:63:e2:03:50:45:f7:b4:ea:bb:16:ea:bc:42: ed:5f:fc:ec:89:26:84:a3:ff:e3:0c:e3:fa:a6:1f: 63:d9:6b:d7:f0:b6:87:0a:4a:f4:b4:a6:d6:81:56: 62:c0:41:b1:09:71:2a:c0:55:d2:68:31:56:cf:d7: 25:7b:ea:a6:6b:b2:47:8b:95:41:e6:ff:fd:18:74: 73:61:c7:73:fb:68:7f:ea:e7:a1:64:8d:f1:61:75: 45:e5:be:03:84:88:b3:67:2d:ba:20:16:af:78:b8: bd:75:6f:fa:57:bb:9d:97:a0:44:57:5e:8a:3d:1f: 31:09:f1:82:6e:6f:a6:dc:83:ff:66:1a:96:48:bf: b6:6c:02:d1:56:b1:e3:37:36:c3:f4:a8:fc:80:82: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C3:FA:FF:AC:9D:EE:4F:E3:7E:62:8B:AB:35:08:6A:1C:F8:43:0A X509v3 Authority Key Identifier: keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0f:d4:c6:4c:03:d4:20:29:4d:28:f2:d1:f8:2b:a6:21:5a: 04:f0:90:91:5b:ba:55:83:f3:cf:57:64:c3:0c:78:3d:86:54: e7:c5:b0:fb:94:48:ff:6d:92:3e:29:f8:85:1b:37:15:9a:64: f9:16:cb:14:8a:e0:b9:36:5d:e0:1b:7c:43:c6:bb:1d:50:41: 19:7a:ca:cb:a1:c7:c4:67:ec:07:d9:d6:96:5c:e9:2f:7d:94: 81:0b:3e:39:9f:f6:3f:39:c6:80:6e:75:03:c7:0f:8f:28:6b: 53:87:cd:85:6e:72:dc:e9:0d:b9:2e:62:ed:5f:62:88:c5:c9: f6:26:18:af:16:09:33:f5:03:c4:88:ff:f3:fc:8e:da:c7:c1: 9a:a5:ff:69:18:5b:3b:6c:c4:e4:70:71:34:54:1a:fc:66:de: 1e:21:31:8b:6f:41:95:a2:b8:9c:87:d7:85:c8:c1:d4:20:71: 4b:3b:f7:bb:ed:6d:95:1a:70:ed:89:ee:eb:5b:c5:e8:65:52: 8d:2d:5e:80:c1:1f:c4:0e:fe:b0:29:11:67:21:d2:0a:b1:d5: 0f:70:96:d9:da:f5:36:e5:bd:ca:16:95:5d:a6:11:24:4a:35: 22:57:ac:65:55:60:4b:95:6b:5b:c9:b1:53:a8:e1:c0:77:d8: db:1d:90:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF98qYuE9ORh52elhEb22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz MTJhYmYwHhcNMjUxMjI0MTYwMTE3WhcNMjUxMjI1MTYwMTE3WjAzMTEwLwYDVQQD EyhiZWMzZmFmZmFjOWRlZTRmZTM3ZTYyOGJhYjM1MDg2YTFjZjg0MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyWbDRfe7w+CJMLlUNUBtrENKk3I VRi5skr5kXzQ8j4NWCFz34JKOV/K3hKYfTTHgDtx12YHXGlYriCu9QKRZyBMm9Ui usoMuOgrziAXefhQzkQTcjs58FUmxwV6KO/veu7CipwKq+bYYGPiA1BF97Tquxbq vELtX/zsiSaEo//jDOP6ph9j2WvX8LaHCkr0tKbWgVZiwEGxCXEqwFXSaDFWz9cl e+qma7JHi5VB5v/9GHRzYcdz+2h/6uehZI3xYXVF5b4DhIizZy26IBaveLi9dW/6 V7udl6BEV16KPR8xCfGCbm+m3IP/ZhqWSL+2bALRVrHjNzbD9Kj8gIKY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7D+v+sne5P435ii6s1CGoc+EMKMB8GA1UdIwQY MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5 LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg/UxkwD 1CApTSjy0fgrpiFaBPCQkVu6VYPzz1dkwwx4PYZU58Ww+5RI/22SPin4hRs3FZpk +RbLFIrguTZd4Bt8Q8a7HVBBGXrKy6HHxGfsB9nWllzpL32UgQs+OZ/2PznGgG51 A8cPjyhrU4fNhW5y3OkNuS5i7V9iiMXJ9iYYrxYJM/UDxIj/8/yO2sfBmqX/aRhb O2zE5HBxNFQa/GbeHiExi29BlaK4nIfXhcjB1CBxSzv3u+1tlRpw7Ynu61vF6GVS jS1egMEfxA7+sCkRZyHSCrHVD3CW2dr1NuW9yhaVXaYRJEo1IlesZVVgS5VrW8mx U6jhwHfY2x2QLw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:39 2025 by rpki-client