This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json) Hash identifier: SkxTwiZCsjNqQjneXaaTLcwfiQbMU54CuISjZunNMMQ= Subject key identifier: 23:E8:F3:D3:FF:F4:37:B2:C3:D7:AD:74:56:2C:E7:F7:AA:42:14:13 Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c Certificate serial: 019B39B410CCC5083619F2BC4D6163678A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 03:01:00 +0000 Manifest this update: Sat 20 Dec 2025 03:01:00 +0000 Manifest next update: Sun 21 Dec 2025 03:01:00 +0000 Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=) 2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: q5uRvOLVj4DO+mnryXf1KX9VoyXmksb/ECUBebF/onk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:10:cc:c5:08:36:19:f2:bc:4d:61:63:67:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c Validity Not Before: Dec 20 03:01:00 2025 GMT Not After : Dec 21 03:01:00 2025 GMT Subject: CN=23e8f3d3fff437b2c3d7ad74562ce7f7aa421413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:b7:39:42:ab:37:1c:9e:f2:97:eb:c4:38: be:be:f4:de:4b:0c:fe:ec:67:d7:ac:03:b7:d6:6f: 66:05:49:1b:84:e3:d1:3b:95:2e:52:01:b7:56:e4: d3:1d:ba:05:1d:17:b8:9c:c6:e2:a5:90:df:86:e0: 23:f8:2d:ca:7c:35:5f:80:11:77:04:ae:5d:b0:63: 4a:3e:a2:ab:42:ea:cd:25:a7:4b:cc:01:0d:86:ba: b1:7c:76:a3:13:e0:7c:e6:38:ea:0f:7d:dd:d9:89: 34:0b:95:db:0b:df:13:b7:e1:1e:d4:31:fc:e7:be: 03:e9:ca:4f:05:21:57:bd:c8:1f:0b:10:48:c1:c8: 7f:13:9c:b6:63:f2:14:c2:c3:bb:37:6d:07:65:e5: 4c:44:e5:eb:54:cd:00:49:a9:ae:02:af:83:dd:bd: c4:f7:60:22:ee:9d:f8:d8:4d:cc:85:43:52:9e:19: 40:4d:3b:c5:38:81:59:e3:50:4e:a1:0a:a0:18:15: 13:d9:1d:a7:93:cb:5f:5b:bb:aa:ec:37:d8:3e:c7: e8:e6:f2:ae:69:6e:b8:2e:e4:b4:b2:1d:a2:6f:dd: 87:6f:69:80:8c:16:b7:c9:db:81:e4:fb:8f:d4:03: ce:f1:db:d0:c4:b7:cf:57:6c:77:76:79:13:8c:fe: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E8:F3:D3:FF:F4:37:B2:C3:D7:AD:74:56:2C:E7:F7:AA:42:14:13 X509v3 Authority Key Identifier: keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fe:ed:12:7b:e3:b2:4d:44:48:ec:94:72:0d:44:a6:c0:87: ce:a7:cf:32:6b:88:83:dc:aa:76:a4:45:e9:69:a2:88:ed:7f: a8:ee:42:ea:16:c6:7d:6c:3d:df:fa:77:f2:6b:8c:97:21:3f: 6b:8a:16:1b:1d:e9:9c:a0:73:9c:77:67:fc:5c:98:ad:34:3d: 13:fd:8e:79:ab:53:b6:1d:f6:ad:fc:f7:3f:f3:99:ef:26:0a: b7:27:d8:44:b1:bb:29:75:0d:0c:0b:bf:60:2a:0b:98:0e:48: f2:2f:fe:d5:c8:ed:56:eb:fb:b2:58:21:33:f0:87:36:64:f0: 47:95:0c:bc:ff:41:20:d0:32:4e:53:74:92:d7:c3:92:f6:0e: 82:cb:e4:79:14:a3:9a:ed:b6:16:fa:1f:2a:03:35:ff:be:58: 92:b1:04:f8:7f:fb:10:ee:53:8f:1b:39:f4:7c:65:ec:da:05: 83:96:5c:6f:c9:83:5c:39:fb:80:11:88:fc:bd:8d:18:5f:74: 4e:17:d4:a4:77:c4:b1:27:bd:9b:a6:4f:13:3a:c5:d1:1b:98: 2a:70:01:ec:83:4c:f9:8f:b4:60:bb:87:34:68:16:ca:10:5c: d2:b5:b6:9b:d1:01:f1:75:4a:49:01:8c:ba:d3:4a:78:92:99: d2:71:a6:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBDMxQg2GfK8TWFjZ4oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MWZlMjY3MmM4ZjFjMTJiMjdhZGEwZmNjYmFhN2MyMTJj YmQ3MWMwHhcNMjUxMjIwMDMwMTAwWhcNMjUxMjIxMDMwMTAwWjAzMTEwLwYDVQQD EygyM2U4ZjNkM2ZmZjQzN2IyYzNkN2FkNzQ1NjJjZTdmN2FhNDIxNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPy3OUKrNxye8pfrxDi+vvTeSwz+ 7GfXrAO31m9mBUkbhOPRO5UuUgG3VuTTHboFHRe4nMbipZDfhuAj+C3KfDVfgBF3 BK5dsGNKPqKrQurNJadLzAENhrqxfHajE+B85jjqD33d2Yk0C5XbC98Tt+Ee1DH8 574D6cpPBSFXvcgfCxBIwch/E5y2Y/IUwsO7N20HZeVMROXrVM0ASamuAq+D3b3E 92Ai7p342E3MhUNSnhlATTvFOIFZ41BOoQqgGBUT2R2nk8tfW7uq7DfYPsfo5vKu aW64LuS0sh2ib92Hb2mAjBa3yduB5PuP1APO8dvQxLfPV2x3dnkTjP6qcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPo89P/9Deyw9etdFYs5/eqQhQTMB8GA1UdIwQY MBaAFKkf4mcsjxwSsnraD8y6p8ISy9ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODkt OWJmMjI2NDAyZmQ0LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODktOWJmMjI2NDAyZmQ0 LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP7tEnvj sk1ESOyUcg1EpsCHzqfPMmuIg9yqdqRF6WmiiO1/qO5C6hbGfWw93/p38muMlyE/ a4oWGx3pnKBznHdn/FyYrTQ9E/2OeatTth32rfz3P/OZ7yYKtyfYRLG7KXUNDAu/ YCoLmA5I8i/+1cjtVuv7slghM/CHNmTwR5UMvP9BINAyTlN0ktfDkvYOgsvkeRSj mu22FvofKgM1/75YkrEE+H/7EO5Tjxs59Hxl7NoFg5Zcb8mDXDn7gBGI/L2NGF90 ThfUpHfEsSe9m6ZPEzrF0RuYKnAB7INM+Y+0YLuHNGgWyhBc0rW2m9EB8XVKSQGM utNKeJKZ0nGmdw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:27:52 2025 by rpki-client