This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json) Hash identifier: Dsi13TWd4wdTqgwxyx/a45rjx2F6sd5GXKkUf2ZiOZs= Subject key identifier: 25:5E:15:72:BD:5D:78:89:8E:1A:08:3A:D2:90:15:03:94:9C:14:E4 Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Certificate serial: 019B4A0283FD25AFE737F7D1FB1649883838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft Manifest number: 132A Signing time: Tue 23 Dec 2025 07:00:37 +0000 Manifest this update: Tue 23 Dec 2025 07:00:37 +0000 Manifest next update: Wed 24 Dec 2025 07:00:37 +0000 Files and hashes: 1: AuKeMwICnv8GK3NJTUf6Verg3I8.roa (hash: kwdux9NYacYTU28nuaHLrfwEJdOFmVTpX4Lxa9A6UiM=) 2: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=) 3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: iWy3x72xj9xJI+FujDeKCXIdiAox+/smivWOoY17v4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:83:fd:25:af:e7:37:f7:d1:fb:16:49:88:38:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b Validity Not Before: Dec 23 07:00:37 2025 GMT Not After : Dec 24 07:00:37 2025 GMT Subject: CN=255e1572bd5d78898e1a083ad2901503949c14e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:ff:7a:f5:25:2a:61:92:04:1c:57:7b:63: 6d:6f:1e:08:60:a0:60:34:6a:24:e4:c5:14:46:92: b4:b4:4d:f4:0b:23:d8:de:dc:46:e9:2f:39:b6:ea: df:82:cb:f8:3a:83:45:76:07:92:1a:cb:8b:b9:03: 93:33:2f:8c:36:d7:7e:02:e7:93:1f:2a:d5:9b:05: cc:7b:92:a5:0c:32:33:07:00:95:52:07:98:da:09: b3:b6:ba:15:5a:ab:78:2e:32:3a:3d:95:a2:33:e5: c2:10:33:03:6e:ce:fb:10:88:a3:9b:a7:9b:19:bf: 55:9f:15:3b:cc:a3:3c:e8:3f:1e:c9:9b:e1:fd:9c: 45:bc:61:15:7b:33:19:7c:ed:c2:6a:91:5c:77:e1: 88:8b:90:9e:62:76:a2:91:32:cf:50:9d:c1:91:7a: 99:22:e4:36:6a:89:50:ec:e0:78:13:b9:f5:7d:80: 74:90:6e:a0:6e:e2:a6:8d:bd:5e:42:35:fd:87:21: 91:02:4a:ca:70:56:8e:27:5b:11:e9:32:7c:f5:c9: 8a:c7:50:f9:e1:91:76:d5:b4:cf:6e:d4:b9:1b:96: be:4a:38:9c:58:df:a9:ae:6f:d5:c0:e9:ba:86:f0: 13:ac:ef:41:75:f9:87:f3:26:6c:6b:dd:12:fd:60: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5E:15:72:BD:5D:78:89:8E:1A:08:3A:D2:90:15:03:94:9C:14:E4 X509v3 Authority Key Identifier: keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1a:19:46:b2:ef:05:e8:47:cf:02:23:ae:e6:75:7d:70:dc: 0b:0b:2b:1e:2e:2a:89:a0:5c:b9:03:1d:9c:fa:0a:14:2c:a8: 61:78:2a:75:d1:8d:99:e2:6b:ad:db:70:95:e8:e4:11:2a:75: 66:50:14:9e:31:f0:81:9b:fc:08:d0:86:57:42:76:b9:d5:c5: 35:e8:6d:55:95:4e:4b:18:c6:ad:22:90:28:76:98:08:a1:55: 5b:93:7e:69:d6:f2:4a:ff:12:27:1d:59:01:25:bc:b8:17:5d: de:76:75:c2:4b:70:b7:e0:ed:1b:e3:62:ca:7d:6e:cd:5c:77: c7:f7:d2:d9:c0:3e:05:49:e5:10:2c:bd:35:b3:da:ee:6f:e8: a3:c5:95:0d:bc:4b:6c:ae:79:34:2d:92:22:9f:d2:44:bc:a8: b1:df:97:d4:0d:c6:90:b3:08:65:f6:e3:72:32:8f:19:75:c5: ff:4f:7d:15:dc:43:18:10:a6:5e:86:38:30:c9:46:b3:ad:5b: 5e:0f:7a:28:5c:a6:ca:44:7f:77:9d:d1:92:08:a1:60:0e:55: 0a:a6:70:b7:75:c6:43:b7:08:44:c4:d4:13:80:cf:a2:08:be: 55:a6:76:b5:61:36:a4:9b:50:30:7e:80:97:2b:df:b1:ea:f0: 88:8b:9e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAoP9Ja/nN/fR+xZJiDg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj ZTBmNmIwHhcNMjUxMjIzMDcwMDM3WhcNMjUxMjI0MDcwMDM3WjAzMTEwLwYDVQQD EygyNTVlMTU3MmJkNWQ3ODg5OGUxYTA4M2FkMjkwMTUwMzk0OWMxNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslH/evUlKmGSBBxXe2Ntbx4IYKBg NGok5MUURpK0tE30CyPY3txG6S85turfgsv4OoNFdgeSGsuLuQOTMy+MNtd+AueT HyrVmwXMe5KlDDIzBwCVUgeY2gmztroVWqt4LjI6PZWiM+XCEDMDbs77EIijm6eb Gb9VnxU7zKM86D8eyZvh/ZxFvGEVezMZfO3CapFcd+GIi5CeYnaikTLPUJ3BkXqZ IuQ2aolQ7OB4E7n1fYB0kG6gbuKmjb1eQjX9hyGRAkrKcFaOJ1sR6TJ89cmKx1D5 4ZF21bTPbtS5G5a+SjicWN+prm/VwOm6hvATrO9BdfmH8yZsa90S/WDHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVeFXK9XXiJjhoIOtKQFQOUnBTkMB8GA1UdIwQY MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2 LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRoZRrLv BehHzwIjruZ1fXDcCwsrHi4qiaBcuQMdnPoKFCyoYXgqddGNmeJrrdtwlejkESp1 ZlAUnjHwgZv8CNCGV0J2udXFNehtVZVOSxjGrSKQKHaYCKFVW5N+adbySv8SJx1Z ASW8uBdd3nZ1wktwt+DtG+Niyn1uzVx3x/fS2cA+BUnlECy9NbPa7m/oo8WVDbxL bK55NC2SIp/SRLyosd+X1A3GkLMIZfbjcjKPGXXF/099FdxDGBCmXoY4MMlGs61b Xg96KFymykR/d53RkgihYA5VCqZwt3XGQ7cIRMTUE4DPogi+VaZ2tWE2pJtQMH6A lyvfserwiIueIw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:18 2025 by rpki-client