This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json) Hash identifier: ciAmCvYzwoeG4NCLSLtiwXhU/HYSkGyJoczpMpqBpOk= Subject key identifier: 80:87:A8:78:4F:5A:FD:FA:FE:32:DE:2D:E8:FF:8D:30:0A:49:6D:3A Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4 Certificate serial: 019B4EF2088CD286CED885035315650873E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft Manifest number: 179F Signing time: Wed 24 Dec 2025 06:00:43 +0000 Manifest this update: Wed 24 Dec 2025 06:00:43 +0000 Manifest next update: Thu 25 Dec 2025 06:00:43 +0000 Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=) 2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: pOAIbaSCjZmYk6DaB2sAUI8tH9y071SLKtG+fE4Tc1A=) 3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:08:8c:d2:86:ce:d8:85:03:53:15:65:08:73:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4 Validity Not Before: Dec 24 06:00:43 2025 GMT Not After : Dec 25 06:00:43 2025 GMT Subject: CN=8087a8784f5afdfafe32de2de8ff8d300a496d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:c3:ef:88:a4:c4:94:65:82:82:c6:4b:60: e0:45:d0:37:a3:62:e7:bf:f3:a0:40:75:49:13:d8: ee:c7:18:95:ed:df:f5:09:48:93:e0:1e:8a:4c:e7: e5:8d:e2:3d:f6:a9:1d:49:10:e9:dc:58:61:64:ae: 25:70:8d:dc:cf:71:18:c1:a9:a7:b5:11:8b:07:8c: d2:fa:14:2f:b7:dc:c3:81:e3:cb:dc:9b:bc:1f:2f: 17:d0:5a:9a:9e:26:09:81:18:77:82:c8:a5:4f:26: f0:96:63:35:37:b4:17:2c:35:f6:94:e0:a7:ca:83: 4d:c7:fb:7c:d3:31:c8:c2:b6:fd:35:07:bd:1b:6d: 72:a6:c4:d4:9a:c5:e6:d4:a2:7a:3e:dd:47:61:8b: d8:52:6d:30:8e:ea:87:c0:21:46:f8:d9:c3:f1:7d: 4f:8f:25:63:63:20:3a:aa:5d:97:4c:c2:26:79:1c: 80:5f:cb:fc:18:90:d7:b6:e5:84:a4:a3:f4:8e:53: fb:ac:a0:f4:7e:3e:15:72:f4:28:2d:87:b5:b2:de: 44:e4:8a:5a:cb:69:d6:1b:f5:54:33:f4:a2:6d:ec: ed:36:9b:4d:db:0a:3f:e7:a3:89:92:86:81:b3:b4: 05:ce:b9:88:74:89:4c:9c:9f:3d:58:6b:90:a9:37: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:A8:78:4F:5A:FD:FA:FE:32:DE:2D:E8:FF:8D:30:0A:49:6D:3A X509v3 Authority Key Identifier: keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:04:ae:f8:dd:f2:b8:85:8a:cf:42:11:4d:aa:60:28:dc:f8: 29:44:da:0b:7d:4e:0a:89:33:70:07:1f:77:bf:03:a7:30:5d: ae:8c:d6:7d:55:9e:36:5c:c9:2c:f6:0b:3e:da:8f:08:d4:e4: 6f:9a:79:08:ac:7c:99:4d:03:a6:69:77:c5:8f:66:0d:a3:e0: 9f:63:e1:24:b6:6d:05:d7:96:a6:66:2b:fc:0e:8b:67:cf:9d: 44:75:83:f0:a7:cd:67:87:20:6d:ff:dd:47:99:34:b5:d3:92: 13:da:d9:1c:ee:e1:91:ac:44:19:e6:a8:5a:a1:ee:d2:0f:0a: bd:b7:34:37:8a:54:9e:39:6d:36:92:8d:eb:ce:4a:19:4c:56: 5f:41:73:bf:9c:20:87:53:b9:c9:65:57:ef:36:de:21:8b:f4: e0:ac:76:3d:4c:ce:6a:fe:3e:ba:fb:a4:ca:05:99:16:c6:fa: e3:59:2d:c6:ae:45:fd:10:b6:20:a5:38:70:de:74:ee:5b:e0: a9:c9:59:07:f1:75:cf:97:f5:42:5d:20:f0:81:b1:b5:51:ff: 5c:95:47:00:ce:74:62:22:0b:d1:37:5d:df:13:2e:79:a8:1c: dd:eb:72:7e:c1:aa:d6:91:ff:65:27:3c:f1:1d:62:a2:88:69: 3f:08:c2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8giM0obO2IUDUxVlCHPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1 NjJmYTQwHhcNMjUxMjI0MDYwMDQzWhcNMjUxMjI1MDYwMDQzWjAzMTEwLwYDVQQD Eyg4MDg3YTg3ODRmNWFmZGZhZmUzMmRlMmRlOGZmOGQzMDBhNDk2ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RnD74ikxJRlgoLGS2DgRdA3o2Ln v/OgQHVJE9juxxiV7d/1CUiT4B6KTOfljeI99qkdSRDp3FhhZK4lcI3cz3EYwamn tRGLB4zS+hQvt9zDgePL3Ju8Hy8X0FqaniYJgRh3gsilTybwlmM1N7QXLDX2lOCn yoNNx/t80zHIwrb9NQe9G21ypsTUmsXm1KJ6Pt1HYYvYUm0wjuqHwCFG+NnD8X1P jyVjYyA6ql2XTMImeRyAX8v8GJDXtuWEpKP0jlP7rKD0fj4VcvQoLYe1st5E5Ipa y2nWG/VUM/SibeztNptN2wo/56OJkoaBs7QFzrmIdIlMnJ89WGuQqTcN1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICHqHhPWv36/jLeLej/jTAKSW06MB8GA1UdIwQY MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0 LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiASu+N3y uIWKz0IRTapgKNz4KUTaC31OCokzcAcfd78DpzBdrozWfVWeNlzJLPYLPtqPCNTk b5p5CKx8mU0Dpml3xY9mDaPgn2PhJLZtBdeWpmYr/A6LZ8+dRHWD8KfNZ4cgbf/d R5k0tdOSE9rZHO7hkaxEGeaoWqHu0g8Kvbc0N4pUnjltNpKN685KGUxWX0Fzv5wg h1O5yWVX7zbeIYv04Kx2PUzOav4+uvukygWZFsb641ktxq5F/RC2IKU4cN507lvg qclZB/F1z5f1Ql0g8IGxtVH/XJVHAM50YiIL0Tdd3xMueagc3etyfsGq1pH/ZSc8 8R1ioohpPwjCyA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:51:57 2025 by rpki-client