This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json) Hash identifier: 6dbl36ntBNXZNb/sSyQx3DiLE5KsrAwYs2QCt7j/dsU= Subject key identifier: FD:45:75:44:74:BB:BB:10:6D:BE:7C:99:66:DF:97:BD:BE:8E:1C:7B Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B38A10F724E4DD930595AC3A4C51E8638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft Manifest number: 1321 Signing time: Fri 19 Dec 2025 22:00:37 +0000 Manifest this update: Fri 19 Dec 2025 22:00:37 +0000 Manifest next update: Sat 20 Dec 2025 22:00:37 +0000 Files and hashes: 1: AuKeMwICnv8GK3NJTUf6Verg3I8.roa (hash: kwdux9NYacYTU28nuaHLrfwEJdOFmVTpX4Lxa9A6UiM=) 2: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=) 3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: aB7nEEt6NU4MO+r7dF8BFpmOvSxOcQ4WQFbwwM0Tnnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:0f:72:4e:4d:d9:30:59:5a:c3:a4:c5:1e:86:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Dec 19 22:00:37 2025 GMT Not After : Dec 20 22:00:37 2025 GMT Subject: CN=fd45754474bbbb106dbe7c9966df97bdbe8e1c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:85:7b:be:8a:ad:65:eb:90:9d:f3:a2:c5: fc:91:27:06:2e:ba:c6:26:7f:2a:ff:d2:be:6d:74: 93:41:ba:af:03:27:f5:7d:05:c2:b4:17:46:cb:50: fd:47:f3:03:14:ce:36:9e:2e:a5:c8:f4:8e:9d:91: 26:21:49:8c:c2:fb:96:5e:a1:ea:47:dc:61:2f:24: f5:95:a2:07:a3:9d:b8:f2:34:0d:4c:44:95:38:49: 6f:28:36:a8:1b:3d:a4:4d:26:c4:cf:44:e3:11:30: 84:14:42:be:b2:02:cb:35:aa:d9:44:68:b1:4e:76: ca:3c:b5:4c:7c:8e:55:8e:8a:d1:e9:0b:23:a3:e9: b4:3a:8b:c7:80:70:41:8a:01:e5:65:d5:f1:df:d8: be:85:0c:0d:ed:40:e2:41:5c:55:5b:ec:32:52:18: 5a:f1:f8:90:eb:23:87:50:45:cd:94:4d:e8:23:f4: e8:e1:17:4d:c7:88:df:b9:9c:d1:7c:71:a7:91:12: b4:4e:62:77:c3:74:c8:b9:27:f2:60:35:aa:9a:f1: 28:87:ac:c4:9e:2f:06:35:db:4a:e9:38:a3:d4:19: bf:e8:48:f3:19:b2:74:8f:ef:0e:52:1e:0a:e9:51: 07:f5:3c:3e:7f:fd:60:24:77:b9:e0:0a:32:28:ad: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:75:44:74:BB:BB:10:6D:BE:7C:99:66:DF:97:BD:BE:8E:1C:7B X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9d:9d:4f:d7:4b:71:7e:d9:a7:9d:4c:17:30:ce:75:90:0e: af:14:98:93:ac:e1:ca:c0:7c:20:09:cc:1e:af:7e:52:fb:65: 0f:70:d2:40:57:7b:c9:5d:37:6f:92:f2:09:64:b1:9d:c6:c3: e4:2c:58:9a:fa:a0:b7:01:e6:05:24:03:85:5a:f7:5d:2b:a9: e9:a5:89:1e:6a:a3:e1:1e:26:f6:02:d7:34:ff:98:08:80:6d: 61:1f:71:7a:b9:a6:b3:e9:a4:eb:02:b1:2a:dd:9b:39:ae:4f: d8:da:0d:ac:87:4f:46:2b:2e:2d:bc:95:f0:92:65:ef:6b:85: 8d:1c:f5:d2:74:04:34:55:b1:c8:c4:6e:fb:15:da:8c:19:55: d3:96:9d:6e:ea:23:6e:f9:bf:03:f1:08:f8:01:50:ec:39:ce: 8a:30:72:1f:56:6b:51:bd:76:8e:08:c5:c9:20:80:64:65:ac: 6c:29:f1:c8:d7:7c:86:20:67:e0:88:03:d9:05:93:b6:72:93: 75:64:47:c7:7e:c0:fc:3b:85:81:3a:a5:65:15:66:48:f3:7c: ff:0a:fb:1b:83:ab:60:9c:e7:60:ca:c4:b0:c3:1c:41:04:4a: fb:91:3c:a9:46:4f:b0:9b:30:67:90:8d:2d:d3:0e:e2:d3:7a: f0:b6:f6:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oQ9yTk3ZMFlaw6TFHoY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjUxMjE5MjIwMDM3WhcNMjUxMjIwMjIwMDM3WjAzMTEwLwYDVQQD EyhmZDQ1NzU0NDc0YmJiYjEwNmRiZTdjOTk2NmRmOTdiZGJlOGUxYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo32Fe76KrWXrkJ3zosX8kScGLrrG Jn8q/9K+bXSTQbqvAyf1fQXCtBdGy1D9R/MDFM42ni6lyPSOnZEmIUmMwvuWXqHq R9xhLyT1laIHo5248jQNTESVOElvKDaoGz2kTSbEz0TjETCEFEK+sgLLNarZRGix TnbKPLVMfI5VjorR6Qsjo+m0OovHgHBBigHlZdXx39i+hQwN7UDiQVxVW+wyUhha 8fiQ6yOHUEXNlE3oI/To4RdNx4jfuZzRfHGnkRK0TmJ3w3TIuSfyYDWqmvEoh6zE ni8GNdtK6Tij1Bm/6EjzGbJ0j+8OUh4K6VEH9Tw+f/1gJHe54AoyKK0mOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1FdUR0u7sQbb58mWbfl72+jhx7MB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ2dT9dL cX7Zp51MFzDOdZAOrxSYk6zhysB8IAnMHq9+UvtlD3DSQFd7yV03b5LyCWSxncbD 5CxYmvqgtwHmBSQDhVr3XSup6aWJHmqj4R4m9gLXNP+YCIBtYR9xermms+mk6wKx Kt2bOa5P2NoNrIdPRisuLbyV8JJl72uFjRz10nQENFWxyMRu+xXajBlV05adbuoj bvm/A/EI+AFQ7DnOijByH1ZrUb12jgjFySCAZGWsbCnxyNd8hiBn4IgD2QWTtnKT dWRHx37A/DuFgTqlZRVmSPN8/wr7G4OrYJznYMrEsMMcQQRK+5E8qUZPsJswZ5CN LdMO4tN68Lb2Yg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:09 2025 by rpki-client