This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json) Hash identifier: u2Ciga5rFYvNtUrXEA7GLXyv5DTuM1iEml7xNFzwk/M= Subject key identifier: 58:EE:BA:04:00:D9:23:5A:7D:3C:52:A2:7B:A0:8F:DE:73:B7:07:02 Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Certificate serial: 019B582C34D76D47507DAF3F448F23A24261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft Manifest number: 0E40 Signing time: Fri 26 Dec 2025 01:00:50 +0000 Manifest this update: Fri 26 Dec 2025 01:00:50 +0000 Manifest next update: Sat 27 Dec 2025 01:00:50 +0000 Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=) 2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: rlVbEsCS1l+WeA5z9rwTGEGiA7ufZeJ9h901vYqARco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:34:d7:6d:47:50:7d:af:3f:44:8f:23:a2:42:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Validity Not Before: Dec 26 01:00:50 2025 GMT Not After : Dec 27 01:00:50 2025 GMT Subject: CN=58eeba0400d9235a7d3c52a27ba08fde73b70702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:32:35:4e:83:a3:55:c5:c6:b5:f2:44:03: a1:17:ec:9c:8e:15:b9:cc:2e:3f:10:18:e1:23:91: 94:2d:de:c9:fb:5a:03:7a:32:1d:e2:b7:c2:0f:11: 3a:11:43:bc:0c:33:ae:59:25:d2:bf:da:75:8c:7e: ed:89:6c:86:20:3f:39:35:e5:df:ee:84:96:16:0f: 22:57:bc:61:52:fa:41:79:4e:60:3c:f5:d2:74:d4: 65:72:67:c3:bc:ec:c8:2a:82:a4:ae:37:34:b2:d9: d6:d3:fe:e4:2e:bd:74:fe:5c:12:2c:d2:61:73:75: a5:51:c4:96:30:c6:b0:7e:f7:85:ba:71:37:b3:14: aa:e7:04:82:58:17:e7:9e:80:0f:41:5a:c4:97:fe: df:90:42:3c:ad:9a:5c:1d:72:9c:0b:52:bf:8f:92: f9:e9:e7:2f:8e:d0:88:c7:96:1a:f0:bc:8e:3e:c1: ed:78:56:58:32:b5:12:02:fb:85:e4:ea:15:08:17: c4:20:c4:e9:b7:17:fd:55:b6:26:47:4e:51:22:48: ec:ff:0d:73:88:63:72:cf:1d:34:03:70:8b:25:5c: 20:98:7d:e9:4d:41:2f:33:11:56:7b:c6:6c:3c:cf: c5:25:4f:b9:24:2f:e6:93:8b:49:ee:74:e5:92:49: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:BA:04:00:D9:23:5A:7D:3C:52:A2:7B:A0:8F:DE:73:B7:07:02 X509v3 Authority Key Identifier: keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:44:f8:46:ac:08:dc:c9:53:45:58:2a:44:08:89:9e:ad:48: 61:92:df:2c:01:88:70:3b:21:fc:95:b5:c8:a2:3c:85:a3:ff: d1:14:7e:50:fd:d3:b6:16:f0:80:a7:f8:ab:7c:7a:64:46:79: dd:e0:0f:98:c6:17:33:03:48:87:01:05:1f:8f:ac:9f:72:7d: ba:4e:60:47:9e:2b:d1:60:c8:d3:9e:8b:6b:70:8a:a4:83:d3: df:1b:2a:6b:64:f5:d0:3a:67:dc:56:6a:72:88:24:f1:27:61: 75:0e:89:8b:f9:b1:06:b3:2e:4a:19:f7:f5:cd:0b:b9:90:31: 44:3b:ba:42:68:72:52:dc:25:08:90:35:ef:d0:43:60:49:56: 8c:a3:80:45:9d:88:5e:b7:d9:df:ba:6a:68:3e:98:88:97:11: 16:ac:4b:a3:2a:aa:60:54:16:25:e0:e2:8f:4a:20:28:d3:60: 7c:fd:75:a0:65:ca:be:d2:b4:2f:75:bb:5f:84:41:16:71:bb: 73:a7:22:c6:40:fa:14:5e:86:1c:2e:8b:84:28:be:7b:30:1b: a5:d7:90:d2:28:37:b9:b1:92:7b:2a:8f:73:05:27:62:aa:23: 1c:a4:fc:14:6d:9d:68:e1:32:64:cc:52:1d:a6:06:8b:be:71: 8a:af:d7:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLDTXbUdQfa8/RI8jokJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm ZmUyZjgwHhcNMjUxMjI2MDEwMDUwWhcNMjUxMjI3MDEwMDUwWjAzMTEwLwYDVQQD Eyg1OGVlYmEwNDAwZDkyMzVhN2QzYzUyYTI3YmEwOGZkZTczYjcwNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLcyNU6Do1XFxrXyRAOhF+ycjhW5 zC4/EBjhI5GULd7J+1oDejId4rfCDxE6EUO8DDOuWSXSv9p1jH7tiWyGID85NeXf 7oSWFg8iV7xhUvpBeU5gPPXSdNRlcmfDvOzIKoKkrjc0stnW0/7kLr10/lwSLNJh c3WlUcSWMMawfveFunE3sxSq5wSCWBfnnoAPQVrEl/7fkEI8rZpcHXKcC1K/j5L5 6ecvjtCIx5Ya8LyOPsHteFZYMrUSAvuF5OoVCBfEIMTptxf9VbYmR05RIkjs/w1z iGNyzx00A3CLJVwgmH3pTUEvMxFWe8ZsPM/FJU+5JC/mk4tJ7nTlkkn9YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjuugQA2SNafTxSonugj95ztwcCMB8GA1UdIwQY MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkT4RqwI 3MlTRVgqRAiJnq1IYZLfLAGIcDsh/JW1yKI8haP/0RR+UP3TthbwgKf4q3x6ZEZ5 3eAPmMYXMwNIhwEFH4+sn3J9uk5gR54r0WDI056La3CKpIPT3xsqa2T10Dpn3FZq cogk8SdhdQ6Ji/mxBrMuShn39c0LuZAxRDu6QmhyUtwlCJA179BDYElWjKOARZ2I XrfZ37pqaD6YiJcRFqxLoyqqYFQWJeDij0ogKNNgfP11oGXKvtK0L3W7X4RBFnG7 c6cixkD6FF6GHC6LhCi+ezAbpdeQ0ig3ubGSeyqPcwUnYqojHKT8FG2daOEyZMxS HaYGi75xiq/XcQ== -----END CERTIFICATE-----Generated at Fri Dec 26 04:53:11 2025 by rpki-client