This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json) Hash identifier: 9a6B/lfmFk3E7reIrKpKm1D5iTn2jhplKvmFTmSAG0I= Subject key identifier: 62:3F:50:AB:28:9B:BA:C2:13:10:D0:8A:4E:F3:0A:6C:1F:89:F6:39 Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Certificate serial: 019B61D4094A28495CDD06D4E34D5DF56508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft Manifest number: 0E45 Signing time: Sat 27 Dec 2025 22:00:44 +0000 Manifest this update: Sat 27 Dec 2025 22:00:44 +0000 Manifest next update: Sun 28 Dec 2025 22:00:44 +0000 Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=) 2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: uhA89gCONjucwxtVL1m/uR0bVtXcdNIZMmjBblLicLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:09:4a:28:49:5c:dd:06:d4:e3:4d:5d:f5:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Validity Not Before: Dec 27 22:00:44 2025 GMT Not After : Dec 28 22:00:44 2025 GMT Subject: CN=623f50ab289bbac21310d08a4ef30a6c1f89f639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:24:b7:7c:05:60:78:dd:d6:30:34:ff:a5: 2e:8e:cb:73:cd:b1:0d:ad:30:b2:90:ab:73:4f:3a: 6b:08:83:fe:f3:1c:27:65:3d:12:2e:f9:22:b1:f7: 1b:95:7f:fc:cc:df:20:d3:ab:85:eb:3c:54:93:74: d7:40:9f:7d:43:16:73:8a:66:64:07:e1:d9:2a:91: 2a:1e:01:94:59:f3:f4:19:03:9c:9f:02:d3:a7:d0: c4:d7:0a:64:c3:6c:59:a3:6e:4d:e5:ad:b5:ba:c7: 46:72:4f:95:4a:3d:47:36:20:3c:7c:66:5f:fc:16: e2:c2:80:9a:39:ae:fb:89:96:0f:80:0f:a0:14:e5: c4:1e:72:62:d2:df:72:c6:7b:c6:28:00:a2:0c:c6: 36:36:18:37:9f:7f:0d:9a:87:b2:d1:b2:a2:fb:a0: 35:bc:10:92:45:3c:fb:f8:1f:a1:72:45:c2:bc:f0: fe:55:b0:63:45:6b:37:53:15:82:34:6e:da:d2:ad: e4:2a:1c:5b:64:33:ac:ec:58:83:16:4b:85:80:e0: 13:46:d4:35:ad:9e:49:57:ea:2e:58:97:84:52:dd: 1b:a4:f0:8d:04:0f:f7:e8:a6:d1:6f:fa:ad:25:48: 28:19:f0:8b:ee:67:41:8e:7b:c0:a0:28:a3:c9:b0: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:50:AB:28:9B:BA:C2:13:10:D0:8A:4E:F3:0A:6C:1F:89:F6:39 X509v3 Authority Key Identifier: keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5a:40:1f:d7:26:a6:e9:3f:ff:64:4a:b2:b5:5e:f2:98:68: bc:ee:cb:e2:19:47:05:bd:e6:61:c0:44:14:2f:cf:7b:51:65: 53:88:96:da:26:04:c5:b5:96:0c:37:c7:90:ae:b2:25:40:a6: 28:dc:2d:22:dc:67:0e:ba:ef:63:aa:a6:a8:87:42:43:72:07: df:e3:ca:d1:a1:b4:dc:f5:4a:6e:a1:0f:15:cd:22:e6:80:16: ff:61:a1:8c:5c:5d:3c:31:6d:da:da:09:f1:4b:3c:d5:3d:8c: 07:e9:2d:d9:1d:6e:09:ef:f9:b0:39:9e:8f:a3:d1:a6:fb:34: d7:91:61:cc:8b:42:f5:33:75:bf:7e:93:e2:a3:72:96:33:3f: 42:67:2e:a3:fa:be:ba:c0:9f:8a:44:31:5c:2e:eb:6f:9a:5e: c2:59:60:64:94:cd:23:98:4b:d2:24:1e:4a:7b:06:25:2f:61: 25:05:af:86:9c:c6:27:e1:73:80:01:00:5a:48:53:2f:b9:a8: 81:72:19:cc:f1:46:4f:9f:f6:80:0c:d6:69:7a:a0:19:d2:9a: aa:be:59:e4:56:be:29:fc:7b:a3:06:8e:b3:c4:4f:35:6a:6c: e7:c1:7a:7f:8d:0b:0e:0a:89:9a:1a:9d:c8:b3:6a:2d:88:c0: ee:24:99:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1AlKKElc3QbU401d9WUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm ZmUyZjgwHhcNMjUxMjI3MjIwMDQ0WhcNMjUxMjI4MjIwMDQ0WjAzMTEwLwYDVQQD Eyg2MjNmNTBhYjI4OWJiYWMyMTMxMGQwOGE0ZWYzMGE2YzFmODlmNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQkt3wFYHjd1jA0/6UujstzzbEN rTCykKtzTzprCIP+8xwnZT0SLvkisfcblX/8zN8g06uF6zxUk3TXQJ99QxZzimZk B+HZKpEqHgGUWfP0GQOcnwLTp9DE1wpkw2xZo25N5a21usdGck+VSj1HNiA8fGZf /BbiwoCaOa77iZYPgA+gFOXEHnJi0t9yxnvGKACiDMY2Nhg3n38Nmoey0bKi+6A1 vBCSRTz7+B+hckXCvPD+VbBjRWs3UxWCNG7a0q3kKhxbZDOs7FiDFkuFgOATRtQ1 rZ5JV+ouWJeEUt0bpPCNBA/36KbRb/qtJUgoGfCL7mdBjnvAoCijybBwuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI/UKsom7rCExDQik7zCmwfifY5MB8GA1UdIwQY MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1pAH9cm puk//2RKsrVe8phovO7L4hlHBb3mYcBEFC/Pe1FlU4iW2iYExbWWDDfHkK6yJUCm KNwtItxnDrrvY6qmqIdCQ3IH3+PK0aG03PVKbqEPFc0i5oAW/2GhjFxdPDFt2toJ 8Us81T2MB+kt2R1uCe/5sDmej6PRpvs015FhzItC9TN1v36T4qNyljM/Qmcuo/q+ usCfikQxXC7rb5pewllgZJTNI5hL0iQeSnsGJS9hJQWvhpzGJ+FzgAEAWkhTL7mo gXIZzPFGT5/2gAzWaXqgGdKaqr5Z5Fa+Kfx7owaOs8RPNWps58F6f40LDgqJmhqd yLNqLYjA7iSZRA== -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:37 2025 by rpki-client