This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json) Hash identifier: 0+gnn3nDuXFHXibJFDDPU6dLFqcof0904yMUdgEssqo= Subject key identifier: 7E:89:7C:4B:A6:EE:6F:AF:FA:ED:2D:2D:51:1A:03:19:79:A3:D1:54 Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99 Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99 Certificate serial: 019B72FE8273A6FEC2FF2DDA775F2E073F4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft Manifest number: 1374 Signing time: Wed 31 Dec 2025 06:00:40 +0000 Manifest this update: Wed 31 Dec 2025 06:00:40 +0000 Manifest next update: Thu 01 Jan 2026 06:00:40 +0000 Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: HqZAvAeqabfYUIV9YnXoAlFJk9ZP6tbSmM1C+lZZ/T4=) 2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:82:73:a6:fe:c2:ff:2d:da:77:5f:2e:07:3f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99 Validity Not Before: Dec 31 06:00:40 2025 GMT Not After : Jan 1 06:00:40 2026 GMT Subject: CN=7e897c4ba6ee6faffaed2d2d511a031979a3d154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:91:1c:f2:ce:39:1f:14:49:4e:3a:da:de: 98:47:27:c2:58:df:0f:47:d5:52:fd:ad:49:a4:54: 36:41:8d:e4:49:28:7d:49:ec:f8:18:b6:a9:71:31: 3f:d8:26:1c:88:e3:62:32:b9:0e:9c:20:8f:be:29: 3d:39:ba:44:a3:f0:5e:1a:4b:fd:7a:6a:2e:ad:be: a2:cc:1d:dd:14:85:f4:cc:fa:4d:4f:27:44:97:ad: 87:71:6a:40:d2:2d:70:6d:4a:39:f0:84:a8:22:24: 2f:a2:63:59:b9:37:01:6a:11:bc:b4:88:b5:98:31: 48:65:1d:2d:70:60:c7:01:2e:cb:72:5c:63:eb:38: 3f:db:3e:16:d8:a8:88:61:71:8e:7e:b0:0f:98:b3: 96:f8:b4:dd:3e:c0:5f:0b:8c:80:ea:28:58:32:af: 5d:11:3e:d1:e9:f9:48:23:b1:a2:54:95:7e:55:c9: c0:74:99:61:9d:8c:7d:43:f7:14:3b:d5:33:44:98: 45:60:f4:eb:7a:8d:bf:fc:66:69:25:3e:a4:c1:5d: 0f:de:7c:e1:5d:b3:25:31:68:db:7b:d5:fc:53:e0: 2d:b5:95:e4:af:77:ef:fd:64:f8:80:73:90:d4:ab: f0:d3:a4:75:6d:e6:f0:3e:09:dc:47:63:c8:5b:e8: fb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:7C:4B:A6:EE:6F:AF:FA:ED:2D:2D:51:1A:03:19:79:A3:D1:54 X509v3 Authority Key Identifier: keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:89:27:7f:8f:40:96:e9:d5:ff:d0:90:68:f6:07:f7:e7: c0:24:9e:d5:13:bd:22:10:39:48:cd:da:73:ab:1d:30:9b:ca: 5e:ec:5d:58:9f:70:f6:d0:bf:db:b5:14:7e:65:a3:29:d7:94: bd:e1:76:ac:2c:88:f9:c0:78:1c:86:4d:28:be:32:c9:6e:8d: 1f:94:98:70:62:d9:f8:58:d1:84:11:75:2a:29:63:0a:0e:25: 9e:4e:d8:1c:aa:56:27:87:0f:ce:b1:42:eb:01:35:c5:ce:3d: 62:61:29:3c:84:57:27:9b:6d:cb:40:d7:ea:d0:32:12:71:65: 80:6c:44:28:e4:31:0a:79:c3:89:4a:10:f5:09:c1:a1:30:9d: 1f:c6:03:80:3e:0a:6a:45:f9:90:af:b1:ee:f5:af:eb:cd:60: cf:c3:af:b1:b0:78:e1:a6:30:a9:b2:6d:77:2c:7d:d9:4a:6b: 38:d7:84:50:cd:9a:91:b1:5d:9e:db:15:09:e0:9e:04:ab:07: f7:e7:73:91:c5:bf:f7:72:fb:5c:6c:68:6f:9c:24:e9:38:d0: 7f:ab:69:e0:cc:87:b2:85:2c:03:b8:c1:c4:64:a8:d0:72:f5: 8d:86:c4:bf:c7:b3:eb:c6:4f:a7:01:d8:75:c3:98:23:b9:aa: d3:a6:7d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/oJzpv7C/y3ad18uBz9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk Y2NlOTkwHhcNMjUxMjMxMDYwMDQwWhcNMjYwMTAxMDYwMDQwWjAzMTEwLwYDVQQD Eyg3ZTg5N2M0YmE2ZWU2ZmFmZmFlZDJkMmQ1MTFhMDMxOTc5YTNkMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphWRHPLOOR8USU462t6YRyfCWN8P R9VS/a1JpFQ2QY3kSSh9Sez4GLapcTE/2CYciONiMrkOnCCPvik9ObpEo/BeGkv9 emourb6izB3dFIX0zPpNTydEl62HcWpA0i1wbUo58ISoIiQvomNZuTcBahG8tIi1 mDFIZR0tcGDHAS7Lclxj6zg/2z4W2KiIYXGOfrAPmLOW+LTdPsBfC4yA6ihYMq9d ET7R6flII7GiVJV+VcnAdJlhnYx9Q/cUO9UzRJhFYPTreo2//GZpJT6kwV0P3nzh XbMlMWjbe9X8U+AttZXkr3fv/WT4gHOQ1Kvw06R1bebwPgncR2PIW+j7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6JfEum7m+v+u0tLVEaAxl5o9FUMB8GA1UdIwQY MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3 LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE02JJ3+P QJbp1f/QkGj2B/fnwCSe1RO9IhA5SM3ac6sdMJvKXuxdWJ9w9tC/27UUfmWjKdeU veF2rCyI+cB4HIZNKL4yyW6NH5SYcGLZ+FjRhBF1KiljCg4lnk7YHKpWJ4cPzrFC 6wE1xc49YmEpPIRXJ5tty0DX6tAyEnFlgGxEKOQxCnnDiUoQ9QnBoTCdH8YDgD4K akX5kK+x7vWv681gz8OvsbB44aYwqbJtdyx92UprONeEUM2akbFdntsVCeCeBKsH 9+dzkcW/93L7XGxob5wk6TjQf6tp4MyHsoUsA7jBxGSo0HL1jYbEv8ez68ZPpwHY dcOYI7mq06Z9Pw== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:51 2025 by rpki-client