This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json) Hash identifier: 7k1+WTdtMoqctXB8CPWizLaYygq4SjM19Gz5dLiUD+o= Subject key identifier: 10:B6:67:ED:66:4C:6A:32:6A:3E:2D:55:E9:ED:95:5A:B9:DC:49:F9 Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Certificate serial: 019B2D0BC63B54407448D24159765B3DF520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft Manifest number: 0B8D Signing time: Wed 17 Dec 2025 16:01:44 +0000 Manifest this update: Wed 17 Dec 2025 16:01:44 +0000 Manifest next update: Thu 18 Dec 2025 16:01:44 +0000 Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: 2RHIkeNPH1KDGdlC3sHkwmdKrrxhtITp6TC65qweX4M=) 2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:c6:3b:54:40:74:48:d2:41:59:76:5b:3d:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80 Validity Not Before: Dec 17 16:01:44 2025 GMT Not After : Dec 18 16:01:44 2025 GMT Subject: CN=10b667ed664c6a326a3e2d55e9ed955ab9dc49f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:1a:ef:ae:5a:df:dc:3c:8c:8f:e5:52:24: f9:84:09:a9:b4:5d:a0:4c:f9:93:be:e8:7b:2f:44: 51:c1:22:70:6b:28:84:e0:1c:21:e3:bc:b5:6a:ff: 82:0c:94:c2:e0:82:dd:fd:ca:8d:04:67:c5:64:fb: de:71:67:0a:87:2e:43:36:6d:cf:76:42:06:ec:bf: dd:36:d7:49:cb:5d:03:19:26:eb:22:b8:a5:65:d1: dd:a2:bb:6b:74:95:58:ab:0c:21:ab:f8:7a:71:87: 1a:d5:67:18:d2:0f:5b:14:18:0a:20:ba:32:99:dc: e1:ef:9d:d4:de:08:48:89:1c:12:e8:76:7a:0b:38: 9b:9c:58:41:d6:e6:f2:33:8a:aa:e3:a4:71:69:1d: 40:d0:46:84:49:18:d5:d6:8a:93:c4:ae:13:d7:29: f5:91:66:47:6c:5f:0c:be:44:7d:d3:ab:57:f9:dc: e2:a2:7e:1e:74:46:cf:1c:01:a6:f1:27:e3:39:0e: ad:a7:ab:cd:ea:b5:7b:38:54:98:ea:9a:c4:7b:67: 9a:7f:fd:89:4a:cb:0b:71:57:ab:33:bd:29:0e:2e: 27:96:db:22:dd:d1:57:d6:99:47:20:f6:0c:81:53: 5c:81:09:35:17:7c:c0:f1:28:af:23:d7:2b:0a:72: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B6:67:ED:66:4C:6A:32:6A:3E:2D:55:E9:ED:95:5A:B9:DC:49:F9 X509v3 Authority Key Identifier: keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c7:a8:2e:76:8a:ef:4d:fd:c7:94:80:26:3c:ca:4c:e0:a9: 2d:4b:2c:e8:bb:3d:d9:04:51:c8:41:52:98:06:6c:7d:d9:d2: ed:b0:b2:34:3e:96:a2:1d:09:99:82:60:25:f4:56:a1:d0:57: 5a:e2:c4:73:bb:a0:99:39:35:21:24:55:6e:5f:41:bb:1a:9d: 21:b0:ad:0d:69:41:e4:b6:6a:d2:1e:78:97:1b:53:f6:d5:4f: a3:6d:1d:f6:6f:2f:d6:24:d0:da:1a:cb:51:a8:56:fe:f2:96: b6:28:99:8e:d5:5d:57:96:d7:f3:68:5c:c8:1c:a8:22:18:cd: de:ac:e2:9c:1a:e2:fa:2e:04:19:a0:ee:27:cf:18:f6:a3:39: 3a:d8:da:19:40:b3:15:5a:08:4b:52:d9:10:a4:a5:6c:30:13: 7f:ab:f6:6b:ac:fe:05:48:7b:e8:61:5e:38:32:fb:6d:03:29: 9f:62:de:01:4a:39:b7:56:37:89:09:ab:8f:f9:9e:e2:f1:28: 5a:de:dc:5c:2e:22:a5:c5:90:4b:3a:c7:e5:e6:ea:8c:f1:4e: c7:10:94:8a:37:78:db:18:27:ef:a4:db:b9:66:bf:e9:29:9e: 34:9a:11:ee:99:70:e8:13:fe:c1:73:c3:f8:39:6f:ce:24:d3: 8f:6b:18:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC8Y7VEB0SNJBWXZbPfUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0 MTJjODAwHhcNMjUxMjE3MTYwMTQ0WhcNMjUxMjE4MTYwMTQ0WjAzMTEwLwYDVQQD EygxMGI2NjdlZDY2NGM2YTMyNmEzZTJkNTVlOWVkOTU1YWI5ZGM0OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBwa765a39w8jI/lUiT5hAmptF2g TPmTvuh7L0RRwSJwayiE4Bwh47y1av+CDJTC4ILd/cqNBGfFZPvecWcKhy5DNm3P dkIG7L/dNtdJy10DGSbrIrilZdHdortrdJVYqwwhq/h6cYca1WcY0g9bFBgKILoy mdzh753U3ghIiRwS6HZ6CzibnFhB1ubyM4qq46RxaR1A0EaESRjV1oqTxK4T1yn1 kWZHbF8MvkR906tX+dzion4edEbPHAGm8SfjOQ6tp6vN6rV7OFSY6prEe2eaf/2J SssLcVerM70pDi4nltsi3dFX1plHIPYMgVNcgQk1F3zA8SivI9crCnKboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC2Z+1mTGoyaj4tVentlVq53En5MB8GA1UdIwQY MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnceoLnaK 7039x5SAJjzKTOCpLUss6Ls92QRRyEFSmAZsfdnS7bCyND6Woh0JmYJgJfRWodBX WuLEc7ugmTk1ISRVbl9BuxqdIbCtDWlB5LZq0h54lxtT9tVPo20d9m8v1iTQ2hrL UahW/vKWtiiZjtVdV5bX82hcyByoIhjN3qzinBri+i4EGaDuJ88Y9qM5OtjaGUCz FVoIS1LZEKSlbDATf6v2a6z+BUh76GFeODL7bQMpn2LeAUo5t1Y3iQmrj/me4vEo Wt7cXC4ipcWQSzrH5ebqjPFOxxCUijd42xgn76TbuWa/6SmeNJoR7plw6BP+wXPD +DlvziTTj2sYkQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:48 2025 by rpki-client