This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json) Hash identifier: lQo7+tTyI2etB3WtB4sD1NXdzBm8+FM9hIf4FlzdyyM= Subject key identifier: 79:6A:85:77:FB:8F:60:3F:47:CA:6F:AB:20:A2:CF:E1:BF:F4:69:E1 Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Certificate serial: 019B3ED9F67197304DE5E2AB936B2460440A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft Manifest number: 0B71 Signing time: Sun 21 Dec 2025 03:00:30 +0000 Manifest this update: Sun 21 Dec 2025 03:00:30 +0000 Manifest next update: Mon 22 Dec 2025 03:00:30 +0000 Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: +1fn3SKXlVjf1/iEQ/kPMshK2hMIDkuykQJFV9LIwWk=) 2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:d9:f6:71:97:30:4d:e5:e2:ab:93:6b:24:60:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Validity Not Before: Dec 21 03:00:30 2025 GMT Not After : Dec 22 03:00:30 2025 GMT Subject: CN=796a8577fb8f603f47ca6fab20a2cfe1bff469e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:dc:fa:b6:ca:99:c4:38:0d:b0:7d:23:48: 04:5d:03:7c:9e:81:a8:2f:9e:f6:a5:ce:ea:7c:df: 66:5b:78:5c:58:8d:52:70:75:60:5f:8b:35:96:a6: 34:dc:c0:82:4d:24:a6:f3:82:af:c2:2a:ea:e1:ea: 39:1f:07:93:85:bb:93:22:c9:16:4f:e5:a2:b4:a0: 31:5a:2d:cd:4d:93:e2:7d:ff:af:ec:4a:8e:76:b2: 33:a2:80:a0:f5:2e:92:0b:d1:4a:42:27:49:2a:50: 49:26:2e:27:e7:a0:e6:7b:68:a8:de:4f:64:8c:1a: b7:ce:db:43:54:5c:1e:6f:6e:4a:f4:81:c6:b3:71: dc:4a:01:3c:f4:2d:cb:27:5a:26:7f:ed:92:71:35: 8f:4e:10:77:48:8d:8e:8c:8d:a7:8c:db:77:2e:18: 4b:a8:bf:b8:f3:7a:1a:3c:9c:19:ec:2a:a4:6c:60: cf:9d:48:86:4f:4b:f1:36:ed:c4:bb:b7:72:7e:5f: b5:65:cd:f5:fc:75:17:6e:63:24:22:bc:51:e5:7a: aa:b3:db:1f:39:f1:a6:63:4a:d1:34:fa:e9:b1:9f: 5b:4f:ea:a2:36:60:61:95:94:9a:68:d7:ee:f4:93: 38:45:75:0a:6a:c3:ca:e0:ab:d1:78:22:a8:44:d2: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:85:77:FB:8F:60:3F:47:CA:6F:AB:20:A2:CF:E1:BF:F4:69:E1 X509v3 Authority Key Identifier: keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:22:47:6c:73:26:dd:ab:ee:56:64:21:d9:9c:36:1f:c4:62: 2f:c9:0f:d2:d6:0a:a8:25:83:44:68:c3:03:43:e3:49:5c:5e: f1:3b:9a:1f:d8:ae:a6:82:ad:f1:83:ff:ed:35:c3:89:9a:11: 1a:3d:ee:b4:8c:75:a4:f4:43:2c:5c:03:24:a3:ab:4f:19:fa: fd:48:0b:bd:65:a9:04:6f:78:ab:0c:d6:aa:03:f8:0c:25:ca: 84:33:62:5f:a6:f8:1d:0f:ae:1a:37:7f:1e:0e:a2:bd:3b:ea: 46:82:6b:87:4e:54:a2:29:8d:3e:9f:be:08:cc:70:b4:39:34: 21:86:a8:9f:33:f0:70:f8:b3:2e:79:8d:5d:60:84:b7:3e:7e: c5:10:d3:aa:77:b5:f1:55:2b:eb:a6:3b:0e:78:1a:92:c9:44: 03:a9:c1:84:57:69:d3:5e:98:11:b0:7b:53:18:22:d9:42:a5: 27:a6:63:14:c5:92:00:96:0e:a1:c9:c4:e4:37:96:7f:67:a7: a3:b8:0f:3b:05:8d:3b:22:95:2c:6a:9f:2e:30:d7:3d:f2:3e: fa:92:45:40:9c:f4:39:8e:4e:dd:dd:8b:2b:21:03:df:ae:87: 33:ef:2b:f0:60:64:56:74:ae:58:62:a5:0e:18:14:27:80:01: e3:0e:b9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2fZxlzBN5eKrk2skYEQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl YTQ3NDMwHhcNMjUxMjIxMDMwMDMwWhcNMjUxMjIyMDMwMDMwWjAzMTEwLwYDVQQD Eyg3OTZhODU3N2ZiOGY2MDNmNDdjYTZmYWIyMGEyY2ZlMWJmZjQ2OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bjc+rbKmcQ4DbB9I0gEXQN8noGo L572pc7qfN9mW3hcWI1ScHVgX4s1lqY03MCCTSSm84Kvwirq4eo5HweThbuTIskW T+WitKAxWi3NTZPiff+v7EqOdrIzooCg9S6SC9FKQidJKlBJJi4n56Dme2io3k9k jBq3zttDVFweb25K9IHGs3HcSgE89C3LJ1omf+2ScTWPThB3SI2OjI2njNt3LhhL qL+483oaPJwZ7CqkbGDPnUiGT0vxNu3Eu7dyfl+1Zc31/HUXbmMkIrxR5Xqqs9sf OfGmY0rRNPrpsZ9bT+qiNmBhlZSaaNfu9JM4RXUKasPK4KvReCKoRNL93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlqhXf7j2A/R8pvqyCiz+G/9GnhMB8GA1UdIwQY MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4 LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliJHbHMm 3avuVmQh2Zw2H8RiL8kP0tYKqCWDRGjDA0PjSVxe8TuaH9iupoKt8YP/7TXDiZoR Gj3utIx1pPRDLFwDJKOrTxn6/UgLvWWpBG94qwzWqgP4DCXKhDNiX6b4HQ+uGjd/ Hg6ivTvqRoJrh05UoimNPp++CMxwtDk0IYaonzPwcPizLnmNXWCEtz5+xRDTqne1 8VUr66Y7DngakslEA6nBhFdp016YEbB7Uxgi2UKlJ6ZjFMWSAJYOocnE5DeWf2en o7gPOwWNOyKVLGqfLjDXPfI++pJFQJz0OY5O3d2LKyED366HM+8r8GBkVnSuWGKl DhgUJ4AB4w65Mg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:14:29 2025 by rpki-client