This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json) Hash identifier: 4Yz7TRAagfNC6I82ITPtUofCV2n9SkxmbTs82r7afwA= Subject key identifier: 18:59:75:FB:99:A5:87:B8:EE:09:1E:00:CB:78:53:9F:42:5B:0A:34 Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Certificate serial: 019B3CEBD688E38E710F79EEC0A4AD17BC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft Manifest number: 0A53 Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=) 2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: e8mPO6ksj9/7gQgg//ZhW2vC3bkSngVDR3JoQc4YQOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d6:88:e3:8e:71:0f:79:ee:c0:a4:ad:17:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=185975fb99a587b8ee091e00cb78539f425b0a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:9e:08:b1:4c:7f:7f:50:fc:b9:df:1c:90: a6:77:2e:03:a1:70:7a:22:da:81:d5:d1:e8:c5:fd: 65:65:ee:e6:c8:15:a5:5b:0c:9f:91:6e:a5:73:15: 01:7e:96:54:a6:23:80:7c:2f:a8:10:76:6d:3e:0d: b7:d2:8d:fc:0c:ca:a6:47:5d:59:1e:21:ac:b2:20: f1:c3:fd:24:12:f6:b4:52:bf:31:52:f8:84:b2:35: aa:59:e0:58:91:67:d8:92:2e:04:78:9b:4f:28:5c: ba:bf:3e:ba:70:23:b9:8f:bb:91:85:6c:bd:11:b7: 1c:af:db:55:f9:a1:dd:48:9b:5a:d8:dd:09:92:54: 8b:43:07:72:e9:22:b1:3c:7a:86:68:2a:83:c7:a0: f6:0d:a3:8f:af:2c:59:9d:a4:f0:29:10:fa:3c:d7: eb:cf:17:47:d0:98:0c:95:c3:8c:ce:3d:97:22:9f: fc:a4:7d:12:5b:be:9f:22:d1:1d:f8:58:f8:2c:6b: 35:3d:7f:b1:af:95:4e:40:32:1b:85:02:00:d0:8c: 69:59:ef:dc:65:de:d5:96:e0:8b:43:8f:03:9c:11: 4d:fa:45:bf:7e:6e:e1:7d:1f:88:09:44:e3:3b:65: 97:2a:9e:61:70:ca:60:71:c9:01:aa:4b:df:e8:f6: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:75:FB:99:A5:87:B8:EE:09:1E:00:CB:78:53:9F:42:5B:0A:34 X509v3 Authority Key Identifier: keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:62:f3:2a:90:72:d2:6e:c3:e8:2f:80:3b:15:2c:3b:9f: 74:0b:29:61:dd:37:34:f9:13:e6:b9:e3:6a:33:4b:17:a0:41: 32:04:cc:55:89:13:21:0e:2f:bd:d7:6f:7f:99:b9:1f:1c:2d: 12:0b:75:70:d6:a7:d4:b7:6c:1f:8d:0e:96:68:37:f3:9d:22: f5:5d:3c:08:f6:93:23:c1:59:2f:ae:40:a4:ee:83:f6:7a:df: 4b:b1:4d:26:e7:30:c4:99:92:04:bc:04:f3:6b:cf:e9:d4:a2: 4c:8c:57:5f:e7:92:16:21:8c:15:af:1b:d9:34:35:3a:cf:41: 9c:17:d1:00:69:11:1c:1e:7e:4b:8f:5a:19:6a:01:e1:88:2a: af:d5:59:89:f4:c6:4d:f0:c5:57:43:61:9e:a6:c7:c8:1d:5e: 23:bd:6c:fe:4a:d4:c8:80:33:dc:33:ec:3d:9c:d8:ed:5f:d2: 6f:0a:99:58:dd:a6:b2:12:4f:d4:47:ec:6b:b4:19:dd:7a:b9: 3f:d3:3f:ae:26:f6:a5:17:fb:47:ea:fc:bc:b4:ad:ad:21:bb: 74:ac:ef:64:4e:46:28:46:8c:70:1d:3e:09:52:70:7b:f3:aa: 0c:3d:fe:95:7c:dc:13:b4:89:e6:3e:69:fd:18:d1:9b:3b:6f: 8d:7c:31:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869aI445xD3nuwKStF7wJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh ZmQ3MTIwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD EygxODU5NzVmYjk5YTU4N2I4ZWUwOTFlMDBjYjc4NTM5ZjQyNWIwYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ueCLFMf39Q/LnfHJCmdy4DoXB6 ItqB1dHoxf1lZe7myBWlWwyfkW6lcxUBfpZUpiOAfC+oEHZtPg230o38DMqmR11Z HiGssiDxw/0kEva0Ur8xUviEsjWqWeBYkWfYki4EeJtPKFy6vz66cCO5j7uRhWy9 Ebccr9tV+aHdSJta2N0JklSLQwdy6SKxPHqGaCqDx6D2DaOPryxZnaTwKRD6PNfr zxdH0JgMlcOMzj2XIp/8pH0SW76fItEd+Fj4LGs1PX+xr5VOQDIbhQIA0IxpWe/c Zd7VluCLQ48DnBFN+kW/fm7hfR+ICUTjO2WXKp5hcMpgcckBqkvf6PY+GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhZdfuZpYe47gkeAMt4U59CWwo0MB8GA1UdIwQY MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBZi8yqQ ctJuw+gvgDsVLDufdAspYd03NPkT5rnjajNLF6BBMgTMVYkTIQ4vvddvf5m5Hxwt Egt1cNan1LdsH40Olmg3850i9V08CPaTI8FZL65ApO6D9nrfS7FNJucwxJmSBLwE 82vP6dSiTIxXX+eSFiGMFa8b2TQ1Os9BnBfRAGkRHB5+S49aGWoB4Ygqr9VZifTG TfDFV0NhnqbHyB1eI71s/krUyIAz3DPsPZzY7V/SbwqZWN2mshJP1Efsa7QZ3Xq5 P9M/rib2pRf7R+r8vLStrSG7dKzvZE5GKEaMcB0+CVJwe/OqDD3+lXzcE7SJ5j5p /RjRmztvjXwxAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:17 2025 by rpki-client