This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json) Hash identifier: Z3tkdfkRM+bhv6wwPKrz9WR6gct6HBgcgMif0gWYj1Y= Subject key identifier: 95:24:4D:33:B4:12:34:83:27:67:B7:31:57:70:37:B6:A2:52:C0:6A Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45 Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145 Certificate serial: 019B3C7E123BC506EB9AC5A9F1BEAA800972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft Manifest number: 0FA9 Signing time: Sat 20 Dec 2025 16:00:53 +0000 Manifest this update: Sat 20 Dec 2025 16:00:53 +0000 Manifest next update: Sun 21 Dec 2025 16:00:53 +0000 Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=) 2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: aWsIF43InbGXwtHFV4gFXozQy13sx81XFZ3do5kuuXE=) 3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:12:3b:c5:06:eb:9a:c5:a9:f1:be:aa:80:09:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145 Validity Not Before: Dec 20 16:00:53 2025 GMT Not After : Dec 21 16:00:53 2025 GMT Subject: CN=95244d33b41234832767b731577037b6a252c06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:39:66:62:94:c3:1a:bf:d3:d8:22:91:14: 7e:7c:c2:7f:6c:80:54:0e:26:8d:b5:e1:f6:30:a5: f6:6b:46:e3:24:07:7d:13:f4:80:6c:60:47:72:2d: a3:41:a4:03:f8:91:c9:b8:95:8b:80:e8:b1:13:a9: ff:31:3e:88:69:c8:68:f0:f9:f3:01:bc:a7:19:c2: ac:9a:12:d8:1c:e5:2e:e2:2c:c2:4f:fe:43:82:4d: 7a:db:13:11:30:4d:e4:74:f3:f6:8e:80:c9:2b:9b: f1:f8:e0:f1:30:2a:19:04:9b:de:74:43:26:4b:88: b4:7e:21:b0:10:3e:54:5c:0e:2d:64:c3:12:5f:93: f1:02:52:2c:9f:e2:85:1f:03:37:fd:7e:d2:bd:ad: a2:ee:0a:9b:0f:3d:0f:49:f1:b0:6e:53:4c:87:06: 27:00:39:f0:1c:63:4a:90:d7:47:b8:01:a1:12:da: 75:00:9a:ce:90:44:d3:df:c8:56:f9:af:6c:53:3b: 35:96:77:c8:35:5d:7a:10:12:c7:13:9e:4a:99:7f: 99:d5:62:26:bc:b1:c4:52:54:60:ea:c1:b7:8b:aa: 28:e7:17:d3:ec:bb:d6:c5:b5:05:ce:bb:1f:b1:62: 5d:ed:a9:62:b9:4e:bd:24:86:30:51:95:aa:74:84: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:4D:33:B4:12:34:83:27:67:B7:31:57:70:37:B6:A2:52:C0:6A X509v3 Authority Key Identifier: keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:71:c5:95:f9:82:b2:21:d5:b4:ec:d1:d1:f5:55:f1:52:a4: 97:78:cd:4f:65:ec:36:d9:a7:4e:dc:f5:bc:98:7f:f1:59:65: 77:1e:83:26:f0:81:d4:04:40:30:53:e8:8f:a0:ab:ad:4d:28: 32:a0:1a:9f:4e:0e:36:92:cd:08:3a:c1:80:b6:16:9f:16:0f: 2b:b1:c4:7f:ec:26:61:80:9b:9a:0a:90:eb:ee:24:87:d8:e1: d1:b1:a7:c9:be:2a:d0:28:6f:22:68:66:9f:94:b9:64:0a:80: cc:c1:99:77:60:b0:94:dd:4c:48:c6:65:83:c1:f6:02:5a:b1: cf:0e:4d:8a:91:cd:2c:95:cc:9a:fd:58:b8:7d:7d:01:26:41: 7d:73:06:1d:93:fc:36:f8:48:0d:f5:90:e7:bc:31:b2:cb:ac: 4b:42:60:2c:cb:2e:0e:32:52:8d:bc:bc:b4:b3:0c:06:fe:0d: 56:1f:e7:a1:05:4d:9e:40:99:82:ed:04:34:65:7b:41:d7:bc: d8:37:ac:d3:7f:45:55:1b:c2:1f:ec:50:06:f0:8e:26:cd:7e: cf:dc:f3:99:60:7b:79:72:ff:7a:dc:7d:36:73:1a:67:28:b4: 3a:23:ea:3b:19:6e:3d:e8:ea:1b:e3:7a:11:f2:90:df:ee:f4: 30:38:13:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhI7xQbrmsWp8b6qgAlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk MzUxNDUwHhcNMjUxMjIwMTYwMDUzWhcNMjUxMjIxMTYwMDUzWjAzMTEwLwYDVQQD Eyg5NTI0NGQzM2I0MTIzNDgzMjc2N2I3MzE1NzcwMzdiNmEyNTJjMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx05ZmKUwxq/09gikRR+fMJ/bIBU DiaNteH2MKX2a0bjJAd9E/SAbGBHci2jQaQD+JHJuJWLgOixE6n/MT6Iacho8Pnz AbynGcKsmhLYHOUu4izCT/5Dgk162xMRME3kdPP2joDJK5vx+ODxMCoZBJvedEMm S4i0fiGwED5UXA4tZMMSX5PxAlIsn+KFHwM3/X7Sva2i7gqbDz0PSfGwblNMhwYn ADnwHGNKkNdHuAGhEtp1AJrOkETT38hW+a9sUzs1lnfINV16EBLHE55KmX+Z1WIm vLHEUlRg6sG3i6oo5xfT7LvWxbUFzrsfsWJd7aliuU69JIYwUZWqdIR6YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUkTTO0EjSDJ2e3MVdwN7aiUsBqMB8GA1UdIwQY MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2 LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXHFlfmC siHVtOzR0fVV8VKkl3jNT2XsNtmnTtz1vJh/8Vlldx6DJvCB1ARAMFPoj6CrrU0o MqAan04ONpLNCDrBgLYWnxYPK7HEf+wmYYCbmgqQ6+4kh9jh0bGnyb4q0ChvImhm n5S5ZAqAzMGZd2CwlN1MSMZlg8H2Alqxzw5NipHNLJXMmv1YuH19ASZBfXMGHZP8 NvhIDfWQ57wxssusS0JgLMsuDjJSjby8tLMMBv4NVh/noQVNnkCZgu0ENGV7Qde8 2Des039FVRvCH+xQBvCOJs1+z9zzmWB7eXL/etx9NnMaZyi0OiPqOxluPejqG+N6 EfKQ3+70MDgTqA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:51 2025 by rpki-client