This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json) Hash identifier: jyszZxsisLBoQ1/AZHkhTjYrynL9DUE3eSfz7MmcSBs= Subject key identifier: A8:1D:59:F3:B1:23:AC:A4:A5:03:64:65:7E:FB:6A:D1:61:65:24:78 Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Certificate serial: 019B3343D47F9785E62F6DB12FEEF0B1C44A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 21:00:41 +0000 Manifest this update: Thu 18 Dec 2025 21:00:41 +0000 Manifest next update: Fri 19 Dec 2025 21:00:41 +0000 Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=) 2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: ji0wO0PU1HARNDsbtGdRNhYrChOwLRsrnqbw8G7plXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:d4:7f:97:85:e6:2f:6d:b1:2f:ee:f0:b1:c4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e Validity Not Before: Dec 18 21:00:41 2025 GMT Not After : Dec 19 21:00:41 2025 GMT Subject: CN=a81d59f3b123aca4a50364657efb6ad161652478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:d1:34:f3:8a:4a:3d:b3:c7:b6:e0:31:91: fe:14:a9:33:c9:44:92:ad:fd:73:ff:d2:28:f2:2e: f5:85:8a:d1:25:56:69:51:b1:c7:aa:fe:1b:51:c1: d7:bd:3c:27:43:5a:39:5e:74:da:74:40:6d:03:94: 4b:31:ae:e9:86:db:fb:dc:d3:00:6c:9d:b0:5a:30: 06:fc:ee:a5:aa:1d:33:78:5b:af:02:e6:2e:ec:c9: fa:a7:9c:ac:4a:8a:0b:c0:08:3f:8d:f4:c7:5b:ae: af:75:39:b3:a3:7d:a9:db:57:05:c4:86:f8:2e:fd: 26:ec:19:f3:4a:fc:18:93:40:d7:20:50:f7:18:4f: 68:51:53:ba:75:93:f9:46:a6:5b:de:4a:76:f7:b0: eb:cf:00:9c:e1:7c:5c:63:ee:d4:ef:8e:ae:a0:cb: 23:0c:18:c7:9b:da:99:1d:30:f3:e5:e6:f7:1a:76: a4:d0:3d:64:52:8d:c6:ed:50:f2:35:e4:68:8d:4c: 16:43:76:98:a8:d1:d5:9f:e0:a8:26:ed:95:94:82: 24:ea:d4:06:76:f9:da:14:7a:9c:36:fc:63:29:73: ae:c5:1d:7a:70:38:40:49:d9:a2:05:b0:e1:ff:fe: 0c:27:0d:e6:5f:16:c2:37:c7:05:a4:d8:99:45:c0: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1D:59:F3:B1:23:AC:A4:A5:03:64:65:7E:FB:6A:D1:61:65:24:78 X509v3 Authority Key Identifier: keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e0:6f:ce:06:70:1c:19:f7:b6:85:18:b5:87:33:57:3d:1c: 96:43:32:2f:fb:d3:b6:b1:32:0e:06:61:59:5f:1d:73:24:dc: 97:35:e2:5f:c3:8a:4d:c4:05:44:2d:27:40:d9:04:b4:9c:66: a6:5d:da:18:6b:13:8e:dc:19:6b:36:93:89:ee:15:26:24:ef: 59:4e:bb:28:f5:96:8e:9a:75:a6:a7:3b:cd:51:cc:63:70:35: 4c:09:1d:73:cc:5d:cf:3f:be:45:b6:e9:58:ac:a1:56:2f:ae: 83:fe:d0:24:51:6b:7b:97:38:ff:16:80:c8:5e:46:6a:f3:ee: 91:24:c5:66:86:97:e6:5d:4e:6f:88:c0:61:07:ea:6a:3a:47: b9:88:59:99:87:6a:b9:34:10:f1:8d:75:7a:5d:1f:b3:19:9e: 22:10:38:68:ae:1e:e8:c8:13:0c:79:93:46:24:17:37:80:7c: a6:53:66:f2:83:87:9d:45:41:ce:1a:b5:93:ba:a5:71:20:d4: ee:e1:11:2f:af:1e:f9:d1:fe:6b:d2:b2:77:ca:07:11:42:fc: 62:63:ed:28:c7:0d:4e:3a:cb:20:d5:29:d4:2c:bf:c5:22:fc: 09:44:2f:8b:19:e2:b1:a3:18:e0:d4:67:9b:11:35:6f:c0:1e: 0a:df:f6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9R/l4XmL22xL+7wscRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxODZlNmI5ZDFmNzhjOTRkNjNmYWM5MzRhYjlhYWRjMGM5 NmQ0M2UwHhcNMjUxMjE4MjEwMDQxWhcNMjUxMjE5MjEwMDQxWjAzMTEwLwYDVQQD EyhhODFkNTlmM2IxMjNhY2E0YTUwMzY0NjU3ZWZiNmFkMTYxNjUyNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0HRNPOKSj2zx7bgMZH+FKkzyUSS rf1z/9Io8i71hYrRJVZpUbHHqv4bUcHXvTwnQ1o5XnTadEBtA5RLMa7phtv73NMA bJ2wWjAG/O6lqh0zeFuvAuYu7Mn6p5ysSooLwAg/jfTHW66vdTmzo32p21cFxIb4 Lv0m7BnzSvwYk0DXIFD3GE9oUVO6dZP5RqZb3kp297DrzwCc4XxcY+7U746uoMsj DBjHm9qZHTDz5eb3Gnak0D1kUo3G7VDyNeRojUwWQ3aYqNHVn+CoJu2VlIIk6tQG dvnaFHqcNvxjKXOuxR16cDhASdmiBbDh//4MJw3mXxbCN8cFpNiZRcCo9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgdWfOxI6ykpQNkZX77atFhZSR4MB8GA1UdIwQY MBaAFEGG5rnR94yU1j+sk0q5qtwMltQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQt ZDc4NzY2ZDhjODU4LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQtZDc4NzY2ZDhjODU4 LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOBvzgZw HBn3toUYtYczVz0clkMyL/vTtrEyDgZhWV8dcyTclzXiX8OKTcQFRC0nQNkEtJxm pl3aGGsTjtwZazaTie4VJiTvWU67KPWWjpp1pqc7zVHMY3A1TAkdc8xdzz++Rbbp WKyhVi+ug/7QJFFre5c4/xaAyF5GavPukSTFZoaX5l1Ob4jAYQfqajpHuYhZmYdq uTQQ8Y11el0fsxmeIhA4aK4e6MgTDHmTRiQXN4B8plNm8oOHnUVBzhq1k7qlcSDU 7uERL68e+dH+a9Kyd8oHEUL8YmPtKMcNTjrLINUp1Cy/xSL8CUQvixnisaMY4NRn mxE1b8AeCt/2UA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:32:50 2025 by rpki-client