This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json) Hash identifier: OFuV1NrHZLx5a9EsnZkXsD0lOdjxEOnNvLomsJC/joA= Subject key identifier: DC:01:45:86:0C:04:04:AE:0C:0C:49:09:DB:D0:09:38:94:5B:AF:FE Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Certificate serial: 019B32D6D1B42A49CBAD0A5281183B310130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 19:01:37 +0000 Manifest this update: Thu 18 Dec 2025 19:01:37 +0000 Manifest next update: Fri 19 Dec 2025 19:01:37 +0000 Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: yUvMDDh11WURwljD6rHCZDw2xeEZpQ7u2L4/dAfnpqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:d1:b4:2a:49:cb:ad:0a:52:81:18:3b:31:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Validity Not Before: Dec 18 19:01:37 2025 GMT Not After : Dec 19 19:01:37 2025 GMT Subject: CN=dc0145860c0404ae0c0c4909dbd00938945baffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:17:df:1e:b9:1f:a9:17:13:37:4a:2c:08: 61:05:d0:d2:ee:c6:9b:8a:cd:de:16:41:3b:08:76: 53:ec:45:0c:4a:f8:f3:33:6c:ef:b4:48:e7:b9:cb: 26:40:60:de:0e:31:9a:10:31:12:27:94:aa:3b:94: 99:c6:f4:c1:81:c3:b7:47:ed:c6:0d:e5:e4:f2:5e: 66:19:df:38:8c:05:cb:da:8e:74:2e:d6:4b:2c:af: 11:3d:9b:3e:cf:bc:42:53:62:29:3d:b1:7d:81:15: 82:0d:60:01:a3:90:08:c0:c6:3b:9e:8b:9b:eb:ab: 22:52:79:2b:1d:53:6a:11:15:67:3e:94:3f:60:57: 37:6f:a8:8f:39:38:37:e0:ff:a5:e9:99:ca:af:86: f5:d8:b1:b2:d2:88:d1:66:94:2d:27:bd:a2:ba:a9: b6:6c:52:09:52:5f:05:2b:38:44:3d:c3:fc:c9:e1: 9b:c2:14:d2:60:5f:f9:bd:59:83:14:d4:2f:e0:b3: b6:55:d1:0b:c7:a2:30:72:b2:dd:f0:79:66:51:bc: 3e:e3:94:2a:b3:9d:a7:b1:d3:72:43:45:17:3d:01: 19:0f:0d:00:b1:af:cd:58:5c:8b:e4:6d:c7:4d:ab: 0d:b6:43:61:9c:a9:46:0d:97:9a:b0:69:e8:0b:ea: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:01:45:86:0C:04:04:AE:0C:0C:49:09:DB:D0:09:38:94:5B:AF:FE X509v3 Authority Key Identifier: keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:09:18:1b:f8:d6:65:76:60:e6:a4:cb:b4:b3:83:cd:a6:34: 14:9b:cd:82:0c:4c:75:24:c6:ed:ae:85:c3:31:e5:17:13:ee: 3e:3b:d3:8e:eb:f3:57:bd:d8:cd:23:a5:13:73:29:12:0f:ee: 05:5f:8c:0b:a8:38:f2:5f:a9:32:fd:38:2b:48:cb:f6:29:86: 8c:6a:0d:94:d6:dc:2a:86:f1:bc:76:34:57:55:85:b4:c1:9d: 29:24:57:b6:a9:86:07:4c:58:b6:3e:98:05:4d:90:1d:55:76: 16:0a:cc:81:c6:af:db:b8:52:4f:1e:8b:d2:b9:a0:13:a1:87: f6:3e:ed:dc:3f:f2:1d:5b:91:24:aa:33:5b:2e:65:1e:86:a5: 77:ca:44:7d:54:5e:ea:ae:a2:07:f6:0f:5d:59:49:c5:52:59: 83:d6:aa:ea:82:d3:16:19:13:cd:49:b9:b4:4a:19:60:4c:44: f4:b2:0f:fe:d9:a1:3d:9a:b8:0e:32:ed:1a:89:90:0e:31:fe: 0b:ff:7b:d9:a1:14:e0:28:d4:1d:4a:51:2a:f6:8d:12:5a:a2: 57:42:2c:74:48:7c:78:58:3c:39:db:a5:ab:ca:78:4c:19:83: 51:67:6c:1e:6c:75:90:d4:86:e4:ef:8b:6b:90:2d:18:28:69: c2:1b:51:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1tG0KknLrQpSgRg7MQEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4 MWFiM2EwHhcNMjUxMjE4MTkwMTM3WhcNMjUxMjE5MTkwMTM3WjAzMTEwLwYDVQQD EyhkYzAxNDU4NjBjMDQwNGFlMGMwYzQ5MDlkYmQwMDkzODk0NWJhZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9oX3x65H6kXEzdKLAhhBdDS7sab is3eFkE7CHZT7EUMSvjzM2zvtEjnucsmQGDeDjGaEDESJ5SqO5SZxvTBgcO3R+3G DeXk8l5mGd84jAXL2o50LtZLLK8RPZs+z7xCU2IpPbF9gRWCDWABo5AIwMY7noub 66siUnkrHVNqERVnPpQ/YFc3b6iPOTg34P+l6ZnKr4b12LGy0ojRZpQtJ72iuqm2 bFIJUl8FKzhEPcP8yeGbwhTSYF/5vVmDFNQv4LO2VdELx6IwcrLd8HlmUbw+45Qq s52nsdNyQ0UXPQEZDw0Asa/NWFyL5G3HTasNtkNhnKlGDZeasGnoC+qsYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwBRYYMBASuDAxJCdvQCTiUW6/+MB8GA1UdIwQY MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQkYG/jW ZXZg5qTLtLODzaY0FJvNggxMdSTG7a6FwzHlFxPuPjvTjuvzV73YzSOlE3MpEg/u BV+MC6g48l+pMv04K0jL9imGjGoNlNbcKobxvHY0V1WFtMGdKSRXtqmGB0xYtj6Y BU2QHVV2FgrMgcav27hSTx6L0rmgE6GH9j7t3D/yHVuRJKozWy5lHoald8pEfVRe 6q6iB/YPXVlJxVJZg9aq6oLTFhkTzUm5tEoZYExE9LIP/tmhPZq4DjLtGomQDjH+ C/972aEU4CjUHUpRKvaNElqiV0IsdEh8eFg8Odulq8p4TBmDUWdsHmx1kNSG5O+L a5AtGChpwhtRjw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:50 2025 by rpki-client