This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft File: pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json) Hash identifier: WP84XOJDJLPIzhYESUHVg9K8yK/Ka1yTNFADOSM14Do= Subject key identifier: 78:4B:1F:67:65:15:77:55:6B:4A:75:E7:61:5B:41:DE:34:C1:C5:3F Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD Certificate issuer: /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd Certificate serial: 019B5607210FC675DE12EE33FFD4F3A2BB53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft Manifest number: 07D6 Signing time: Thu 25 Dec 2025 15:01:06 +0000 Manifest this update: Thu 25 Dec 2025 15:01:06 +0000 Manifest next update: Fri 26 Dec 2025 15:01:06 +0000 Files and hashes: 1: hnNizGmD5_kLKz6dLya2VuA4UIw.roa (hash: jIIE53bnDtwqS2dFWJrfKRkElyY5vTQ/kFSnuPVB9e8=) 2: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: 2PiwBzc1eClJ+VSaCSSkgBeuozDjGWaOSgJAX8DdEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:21:0f:c6:75:de:12:ee:33:ff:d4:f3:a2:bb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd Validity Not Before: Dec 25 15:01:06 2025 GMT Not After : Dec 26 15:01:06 2025 GMT Subject: CN=784b1f67651577556b4a75e7615b41de34c1c53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:57:91:38:ed:8e:9d:62:ac:6b:60:f1:fd: f0:58:a7:1c:46:a9:cf:ba:d0:d9:5a:05:0c:aa:55: 98:15:fc:e9:cb:30:29:64:aa:ad:2a:f2:07:0d:53: 7d:43:41:5d:9e:43:7c:2f:5d:8c:16:d7:61:86:8d: ba:ff:74:23:d8:1f:ce:74:74:dc:d0:f0:29:59:45: 0f:12:aa:fa:d1:4a:09:dd:28:6b:6b:c9:2a:46:0e: 09:77:5d:01:01:96:fe:38:da:a1:e0:d0:85:9e:d6: 46:0b:7c:53:cb:4a:aa:cf:04:58:47:02:21:b7:94: 91:41:96:c7:49:c4:69:de:e1:04:50:be:b4:e7:75: ce:c3:74:a5:fa:91:23:e7:6f:58:ca:d6:86:48:b4: 3a:50:6d:fb:a5:9e:df:f6:3a:85:bd:3c:ae:27:8f: 3a:01:5c:90:2b:7d:a2:bb:75:41:a8:7e:32:76:fb: 7e:b0:b2:93:b6:5a:8f:fd:0b:ca:7c:e8:33:62:df: 2b:4a:6b:da:cf:4b:8a:9a:32:5c:ea:b8:05:be:8e: 41:33:4a:36:6e:3e:7d:e2:d7:2e:70:10:3c:37:1e: 70:07:d2:69:72:4d:cc:48:86:fe:d3:67:5f:7d:28: fc:16:3e:d8:76:3a:4e:96:98:c4:fa:c2:cc:8d:57: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:1F:67:65:15:77:55:6B:4A:75:E7:61:5B:41:DE:34:C1:C5:3F X509v3 Authority Key Identifier: keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8d:93:bd:08:91:78:c8:ef:49:0d:c8:c5:a2:77:ac:68:0e: 79:3a:db:bd:f4:09:bc:38:f2:48:b2:2f:67:3d:1d:ca:2d:41: d5:8a:fc:09:35:a0:94:a6:ae:f6:3c:8e:dd:c4:05:f2:bb:1e: 04:1d:d4:a3:9e:11:04:59:a6:dc:c5:96:13:a0:a7:76:dd:87: a8:36:42:a9:37:72:c8:64:aa:a0:3e:a2:1e:04:d3:97:01:f2: 6c:ce:25:69:4b:6a:27:2c:4c:23:a9:d7:0b:e9:c8:f7:58:38: 11:99:5f:41:f1:d1:6a:fe:bd:c8:3f:56:56:e2:5e:a7:94:32: 55:6d:61:b6:5a:e5:cc:83:15:8e:95:29:3d:4e:5b:5f:f9:27: 4e:8e:35:12:35:20:92:36:a9:a6:4e:4d:57:aa:e3:06:70:33: ac:f0:04:fc:9e:4c:41:0b:23:7c:00:d4:6d:ef:b0:f7:74:76: 7b:b2:6f:f7:40:39:9e:3c:f7:b7:fa:6f:7c:65:51:32:c1:cb: 5d:61:5d:fe:bc:91:da:72:2b:75:9a:dd:65:67:11:34:d6:20: 71:8b:ea:60:ff:ba:95:27:a4:27:be:1d:dd:9e:17:4c:20:ce: d0:57:2b:b3:9f:82:76:dd:0a:ea:01:e4:c5:3c:26:f8:81:98: 68:27:7b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWByEPxnXeEu4z/9TzortTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTg4YjA4ODdjMzJkZTU5NjZmODFmZjkxNWQ2YjVmZjMx NTMyZGQwHhcNMjUxMjI1MTUwMTA2WhcNMjUxMjI2MTUwMTA2WjAzMTEwLwYDVQQD Eyg3ODRiMWY2NzY1MTU3NzU1NmI0YTc1ZTc2MTViNDFkZTM0YzFjNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qZXkTjtjp1irGtg8f3wWKccRqnP utDZWgUMqlWYFfzpyzApZKqtKvIHDVN9Q0FdnkN8L12MFtdhho26/3Qj2B/OdHTc 0PApWUUPEqr60UoJ3Shra8kqRg4Jd10BAZb+ONqh4NCFntZGC3xTy0qqzwRYRwIh t5SRQZbHScRp3uEEUL6053XOw3Sl+pEj529YytaGSLQ6UG37pZ7f9jqFvTyuJ486 AVyQK32iu3VBqH4ydvt+sLKTtlqP/QvKfOgzYt8rSmvaz0uKmjJc6rgFvo5BM0o2 bj594tcucBA8Nx5wB9Jpck3MSIb+02dffSj8Fj7YdjpOlpjE+sLMjVdDPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhLH2dlFXdVa0p152FbQd40wcU/MB8GA1UdIwQY MBaAFKaoiwiHwy3llm+B/5Fda1/zFTLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYt NmEyOWJjOWY4YTc4LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYtNmEyOWJjOWY4YTc4 LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI2TvQiR eMjvSQ3IxaJ3rGgOeTrbvfQJvDjySLIvZz0dyi1B1Yr8CTWglKau9jyO3cQF8rse BB3Uo54RBFmm3MWWE6Cndt2HqDZCqTdyyGSqoD6iHgTTlwHybM4laUtqJyxMI6nX C+nI91g4EZlfQfHRav69yD9WVuJep5QyVW1htlrlzIMVjpUpPU5bX/knTo41EjUg kjappk5NV6rjBnAzrPAE/J5MQQsjfADUbe+w93R2e7Jv90A5njz3t/pvfGVRMsHL XWFd/ryR2nIrdZrdZWcRNNYgcYvqYP+6lSekJ74d3Z4XTCDO0Fcrs5+Cdt0K6gHk xTwm+IGYaCd7kQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:57 2025 by rpki-client