This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json) Hash identifier: dcQQ7r0Fmi5Q6H4evtOODTiRBJDXs0Hn6+YjQGxt14E= Subject key identifier: 3C:FE:AE:57:98:14:53:72:28:31:DE:60:43:08:13:7B:F9:13:50:A1 Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Certificate serial: 019B522A1482D31B98E6A8FAC7CBDFDAB098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 21:00:47 +0000 Manifest this update: Wed 24 Dec 2025 21:00:47 +0000 Manifest next update: Thu 25 Dec 2025 21:00:47 +0000 Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=) 2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: L2UIDH0IZvyBTfRwz+zce/BDjMs9dRGpWxdNt4UX+U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:14:82:d3:1b:98:e6:a8:fa:c7:cb:df:da:b0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Validity Not Before: Dec 24 21:00:47 2025 GMT Not After : Dec 25 21:00:47 2025 GMT Subject: CN=3cfeae57981453722831de604308137bf91350a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:fd:47:61:79:ed:a7:91:12:de:b9:6b:6b: 1d:bb:44:fc:46:ae:69:fe:0e:3c:cc:f8:61:8c:4a: 7d:50:4d:be:0f:5e:cf:48:77:f8:99:07:0b:1b:63: d7:2a:7a:f7:32:4c:4b:14:23:23:e1:ce:7f:0f:86: 60:4e:81:a8:a9:3d:0d:e0:0c:cd:6f:c8:e5:eb:7c: 3d:96:6c:3f:a2:bc:4d:6b:2e:c6:43:e9:fe:5b:29: 30:cd:e4:21:ec:58:4e:18:ee:da:bf:7d:53:e9:a7: db:64:33:a9:52:f5:50:dd:2d:3d:4c:77:67:af:db: 07:1c:18:22:65:6b:7a:ac:26:b4:05:ef:3d:7c:ad: 2c:2b:52:4b:75:24:8e:fe:1e:06:35:07:d4:2c:69: 0e:d6:3e:46:9e:9c:8d:ce:2b:36:25:63:e5:2d:cc: a7:1d:c4:db:0b:9c:87:60:da:84:df:4f:60:5c:ad: c2:75:79:0f:18:ee:65:22:7a:e6:7c:fd:93:e0:0d: 6d:cc:88:82:8c:15:cf:07:7a:02:38:a9:ae:d3:44: 69:c2:ab:be:16:3c:4a:05:26:21:07:55:fd:51:7b: 38:63:f4:58:3b:fb:15:26:04:ea:e6:73:f9:9b:50: ed:fd:06:f4:43:42:46:96:ae:da:fb:b4:1b:e5:13: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:AE:57:98:14:53:72:28:31:DE:60:43:08:13:7B:F9:13:50:A1 X509v3 Authority Key Identifier: keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:af:54:86:bb:ae:09:93:0e:25:8b:cb:5b:84:75:fc:6f:e6: 4e:3c:b9:c9:80:50:40:40:86:de:8e:3c:68:50:91:88:e8:ed: 7f:af:b2:6e:0d:ea:67:5a:b9:27:00:d4:ad:32:f0:64:df:21: aa:f9:6c:f3:c8:14:6b:ef:e7:1c:6a:53:08:76:16:e4:d9:e1: 42:f5:8a:6f:95:aa:8c:cd:a5:72:e9:c3:b2:32:16:eb:3b:35: b9:d2:3b:e0:6a:8a:f0:63:80:d2:c6:99:c8:99:4c:ad:e8:dd: 7c:20:bb:89:2d:77:7b:8b:23:af:66:5e:6c:f2:2d:06:f0:5a: ed:91:74:40:a0:f3:27:44:93:7f:6d:7d:f7:5d:e3:e5:9c:0a: c7:67:3d:b1:4d:d7:ae:0a:71:ed:56:24:3f:53:5c:85:09:6c: 98:fa:c2:88:63:fb:51:da:79:f5:ea:87:55:71:d1:3e:16:8d: 67:ee:d6:8f:b4:d7:ca:54:4f:ea:d4:f6:00:c8:e0:f8:4e:6e: 12:c5:99:f0:10:70:01:06:b9:d7:4b:b0:71:f6:24:9b:83:1f: 72:ba:12:f3:d7:b0:46:c3:69:a6:48:24:ea:3a:ca:ba:6d:0a: 67:f3:99:24:be:30:7d:46:5a:f9:6b:63:a0:e5:ed:13:f3:da: bb:df:58:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKhSC0xuY5qj6x8vf2rCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODZlNmI5ZDFmNzhjOTRkNjNmYWM5MzRhYjlhYWRjMGM5 NmQ0M2UwHhcNMjUxMjI0MjEwMDQ3WhcNMjUxMjI1MjEwMDQ3WjAzMTEwLwYDVQQD EygzY2ZlYWU1Nzk4MTQ1MzcyMjgzMWRlNjA0MzA4MTM3YmY5MTM1MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxX9R2F57aeREt65a2sdu0T8Rq5p /g48zPhhjEp9UE2+D17PSHf4mQcLG2PXKnr3MkxLFCMj4c5/D4ZgToGoqT0N4AzN b8jl63w9lmw/orxNay7GQ+n+WykwzeQh7FhOGO7av31T6afbZDOpUvVQ3S09THdn r9sHHBgiZWt6rCa0Be89fK0sK1JLdSSO/h4GNQfULGkO1j5GnpyNzis2JWPlLcyn HcTbC5yHYNqE309gXK3CdXkPGO5lInrmfP2T4A1tzIiCjBXPB3oCOKmu00Rpwqu+ FjxKBSYhB1X9UXs4Y/RYO/sVJgTq5nP5m1Dt/Qb0Q0JGlq7a+7Qb5ROv1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz+rleYFFNyKDHeYEMIE3v5E1ChMB8GA1UdIwQY MBaAFEGG5rnR94yU1j+sk0q5qtwMltQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQt ZDc4NzY2ZDhjODU4LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQtZDc4NzY2ZDhjODU4 LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH69Uhruu CZMOJYvLW4R1/G/mTjy5yYBQQECG3o48aFCRiOjtf6+ybg3qZ1q5JwDUrTLwZN8h qvls88gUa+/nHGpTCHYW5NnhQvWKb5WqjM2lcunDsjIW6zs1udI74GqK8GOA0saZ yJlMrejdfCC7iS13e4sjr2ZebPItBvBa7ZF0QKDzJ0STf219913j5ZwKx2c9sU3X rgpx7VYkP1NchQlsmPrCiGP7Udp59eqHVXHRPhaNZ+7Wj7TXylRP6tT2AMjg+E5u EsWZ8BBwAQa510uwcfYkm4MfcroS89ewRsNppkgk6jrKum0KZ/OZJL4wfUZa+Wtj oOXtE/Pau99YHg== -----END CERTIFICATE-----Generated at Thu Dec 25 02:45:49 2025 by rpki-client