This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json) Hash identifier: j2f3+1NEbBt7AEHo+gjjKiysK2oBdWsRr1tQ4rUkm2k= Subject key identifier: 46:D1:1E:B4:11:80:B5:DE:BE:1F:6B:8B:39:36:14:4D:97:CC:6C:FE Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa Certificate serial: 019B41DBC1F91BB2AB70FFA13AC355CE490F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft Manifest number: 0411 Signing time: Sun 21 Dec 2025 17:01:19 +0000 Manifest this update: Sun 21 Dec 2025 17:01:19 +0000 Manifest next update: Mon 22 Dec 2025 17:01:19 +0000 Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=) 2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: zKwcmgDthIuErli7IJw0/f06e7oyXWiFMCJpzEWp8pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:c1:f9:1b:b2:ab:70:ff:a1:3a:c3:55:ce:49:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa Validity Not Before: Dec 21 17:01:19 2025 GMT Not After : Dec 22 17:01:19 2025 GMT Subject: CN=46d11eb41180b5debe1f6b8b3936144d97cc6cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:d3:52:10:ed:03:ad:54:70:ab:97:ac:ff: b4:8b:4b:6a:22:98:ef:d2:72:ad:eb:cb:15:f0:58: 02:50:00:df:5a:81:24:04:56:9e:9f:99:ad:4d:06: 1c:71:4d:73:cd:8c:f3:e7:b3:81:d2:a5:6b:d3:6d: 87:1f:43:46:a5:1c:9f:03:90:1b:1b:1d:c9:f2:5c: 43:e5:0d:22:a2:47:0d:ec:18:2a:ce:51:d5:b7:fe: 98:ed:f0:5b:a2:59:c8:8f:cf:98:db:6c:19:67:00: 7d:91:45:3e:15:af:81:fa:65:41:a8:04:72:d6:d7: 6d:52:d2:e7:05:7a:8b:62:ce:a2:2f:55:0f:54:f1: f5:e0:8b:90:70:97:58:08:7d:78:a6:5c:91:29:f0: f4:e1:cf:fa:48:88:b6:3d:f3:e1:7e:0b:ab:53:e1: 55:7e:3d:d5:33:83:6f:ad:d5:9e:23:aa:52:1e:55: a7:21:c0:9d:79:a1:fb:55:7d:58:5e:95:d3:a2:d6: e5:f3:c3:56:0e:9f:54:5c:46:41:4d:4c:9c:12:89: 9c:a8:d1:35:2a:83:7f:3c:70:68:5e:99:0d:fe:9c: 01:5c:bd:1e:a8:a4:ce:aa:08:8f:4c:14:46:36:c8: bb:85:11:29:b2:eb:84:1c:6b:c9:91:f7:08:87:37: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D1:1E:B4:11:80:B5:DE:BE:1F:6B:8B:39:36:14:4D:97:CC:6C:FE X509v3 Authority Key Identifier: keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:d6:c1:f5:bf:d9:e1:76:7a:69:c0:d6:0a:d0:1d:ff:e6: bd:e1:46:82:a5:be:18:a5:7c:f2:68:b4:ce:90:32:c7:9b:05: e5:84:1f:1e:c8:56:6e:f3:e0:f5:39:cc:bf:07:c6:f3:42:4c: 82:2e:4d:35:d5:2a:17:c4:a0:92:92:6b:4f:54:3e:24:48:f1: d4:96:51:bd:3e:43:b2:d8:52:d2:23:4a:6c:33:14:41:49:08: 50:a4:7f:51:ef:95:f6:87:db:7d:eb:12:a9:bd:13:52:4c:45: 9a:c9:14:00:b2:50:ed:77:9f:30:78:42:97:8b:17:7a:1b:d4: 71:e8:24:3e:4f:60:ca:2c:b1:9d:98:e1:67:7e:82:76:7b:94: 46:d4:f6:51:bd:fa:fc:b7:12:0e:32:01:c0:43:8b:eb:5f:d5: 56:84:a5:01:b0:55:94:fe:14:b8:4f:33:c3:59:d3:45:56:71: 11:0f:12:3e:62:ae:21:4d:91:82:75:2f:27:25:d6:b0:46:b0: cb:6b:b7:6b:1d:9e:69:a4:60:a1:88:f0:5d:35:91:e9:14:f1: 18:4e:c6:9d:2f:1a:4b:f4:bd:f7:86:c1:74:b3:27:3c:47:0a: 93:e1:b4:ec:27:fe:79:0b:51:ba:b4:37:42:71:14:89:e3:8a: f8:48:4b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB28H5G7KrcP+hOsNVzkkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODViNTUyMWQyMDkwMTg4MjQ3OGYwZjA5NDE5NjJjM2U5 Yzk0ZmEwHhcNMjUxMjIxMTcwMTE5WhcNMjUxMjIyMTcwMTE5WjAzMTEwLwYDVQQD Eyg0NmQxMWViNDExODBiNWRlYmUxZjZiOGIzOTM2MTQ0ZDk3Y2M2Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY/TUhDtA61UcKuXrP+0i0tqIpjv 0nKt68sV8FgCUADfWoEkBFaen5mtTQYccU1zzYzz57OB0qVr022HH0NGpRyfA5Ab Gx3J8lxD5Q0iokcN7BgqzlHVt/6Y7fBbolnIj8+Y22wZZwB9kUU+Fa+B+mVBqARy 1tdtUtLnBXqLYs6iL1UPVPH14IuQcJdYCH14plyRKfD04c/6SIi2PfPhfgurU+FV fj3VM4NvrdWeI6pSHlWnIcCdeaH7VX1YXpXTotbl88NWDp9UXEZBTUycEomcqNE1 KoN/PHBoXpkN/pwBXL0eqKTOqgiPTBRGNsi7hREpsuuEHGvJkfcIhzd5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbRHrQRgLXevh9rizk2FE2XzGz+MB8GA1UdIwQY MBaAFKmFtVIdIJAYgkePDwlBliw+nJT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUt NjAwM2Q1YWVlZDFmLzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUtNjAwM2Q1YWVlZDFm LzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQ7WwfW/ 2eF2emnA1grQHf/mveFGgqW+GKV88mi0zpAyx5sF5YQfHshWbvPg9TnMvwfG80JM gi5NNdUqF8SgkpJrT1Q+JEjx1JZRvT5DsthS0iNKbDMUQUkIUKR/Ue+V9ofbfesS qb0TUkxFmskUALJQ7XefMHhCl4sXehvUcegkPk9gyiyxnZjhZ36CdnuURtT2Ub36 /LcSDjIBwEOL61/VVoSlAbBVlP4UuE8zw1nTRVZxEQ8SPmKuIU2RgnUvJyXWsEaw y2u3ax2eaaRgoYjwXTWR6RTxGE7GnS8aS/S994bBdLMnPEcKk+G07Cf+eQtRurQ3 QnEUieOK+EhLTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:48:46 2025 by rpki-client