This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json) Hash identifier: o474Kk6xoW+NXAsp5IOJu2VMptYz4fqEZNNHXxSQZH8= Subject key identifier: 75:6F:96:FA:DC:B3:24:8E:5D:A7:3F:BA:38:0C:78:B2:92:6A:31:72 Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Certificate serial: 019B4DE105AF650C4D65DA8E5A1197FD1552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft Manifest number: 0D26 Signing time: Wed 24 Dec 2025 01:02:30 +0000 Manifest this update: Wed 24 Dec 2025 01:02:30 +0000 Manifest next update: Thu 25 Dec 2025 01:02:30 +0000 Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: 1FqHBWOmmwSjrXVjUBTO6o6bCwfMDeZ6vxzrpd5hE9o=) 2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:05:af:65:0c:4d:65:da:8e:5a:11:97:fd:15:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Validity Not Before: Dec 24 01:02:30 2025 GMT Not After : Dec 25 01:02:30 2025 GMT Subject: CN=756f96fadcb3248e5da73fba380c78b2926a3172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9c:11:91:3a:24:4a:b6:68:06:20:98:12:31: 7c:fe:c0:c0:ce:2c:a3:2a:cd:d4:4b:c2:5e:7a:62: 5f:64:cd:91:f7:67:f2:3f:f8:21:fe:4d:2d:7d:17: 5e:05:77:14:4a:ee:bd:f7:2f:fc:ba:c2:c0:12:31: 00:8e:ec:9c:d6:00:e2:b5:d8:17:f4:4f:51:0f:d6: c6:67:6c:a3:24:3b:3e:ad:76:d6:44:3c:fc:85:58: a1:77:73:13:fe:f8:b7:f8:c1:f0:fc:f4:1d:f6:f6: 21:4d:6f:69:64:71:c3:54:74:59:76:ef:5c:7e:ce: ea:f2:c2:e1:fe:0e:48:65:8b:98:85:38:d2:75:27: 29:c8:f8:47:5b:78:13:a6:d4:6e:f6:62:f3:20:8d: 3f:c1:b7:45:0c:52:97:fe:29:29:8f:a9:30:0e:2c: 73:51:3d:46:da:6e:df:65:0a:24:19:5f:0c:6b:e4: 84:91:f0:bf:a3:8c:25:f5:bf:37:c0:c7:c2:23:e9: 57:75:df:c1:49:f7:7c:dc:78:c3:28:b9:e2:aa:0a: 44:71:0b:3e:cc:65:27:17:22:7c:ee:08:15:b8:e6: c0:bf:48:68:87:85:d0:d0:c6:40:9c:83:a9:76:2f: e4:a9:bd:34:5a:57:51:fc:b9:46:8d:19:a2:26:87: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:96:FA:DC:B3:24:8E:5D:A7:3F:BA:38:0C:78:B2:92:6A:31:72 X509v3 Authority Key Identifier: keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:65:6d:41:33:a5:7a:34:bc:76:e8:f3:fe:8c:16:25:9e:4b: e5:1e:07:e7:b0:2a:03:d6:c6:43:cd:41:c6:5d:a5:70:06:54: d8:21:96:2e:8a:fc:99:4a:56:13:f5:1b:8c:b9:7a:3c:8e:87: 0b:b5:a5:d1:47:90:2d:ea:0f:15:f8:98:17:2c:af:2f:cd:81: 6e:5b:92:47:12:09:3e:72:0d:f5:8e:26:2c:fa:d0:2d:fa:0e: fb:c8:07:a5:cb:cb:db:4a:05:96:9e:80:37:a2:97:e9:90:5f: 23:b4:99:4d:57:56:15:11:b2:4c:0c:e8:c3:19:f0:b3:49:41: d0:26:28:a0:e6:7d:15:66:9b:85:fa:20:ba:50:a9:c7:e9:5a: c4:00:96:d9:d4:80:38:ef:95:31:6c:cf:9d:21:33:f1:eb:14: b8:1c:ec:c3:50:11:35:19:b0:e5:c7:60:d8:44:8e:83:41:dd: f7:15:2f:11:d9:35:f5:8d:14:5c:e7:39:fd:1d:9e:ea:d0:7b: 89:96:3e:6c:80:f5:b9:17:82:c2:6c:67:f2:41:33:13:3e:e3: c2:0c:ab:7b:b7:e9:15:f3:82:f0:a1:58:ad:73:52:32:c9:29: f8:10:cf:e3:b6:a1:e7:00:85:a0:9a:98:12:4c:43:16:de:89: d1:1d:e7:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4QWvZQxNZdqOWhGX/RVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2 ZDlmZGQwHhcNMjUxMjI0MDEwMjMwWhcNMjUxMjI1MDEwMjMwWjAzMTEwLwYDVQQD Eyg3NTZmOTZmYWRjYjMyNDhlNWRhNzNmYmEzODBjNzhiMjkyNmEzMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZwRkTokSrZoBiCYEjF8/sDAziyj Ks3US8JeemJfZM2R92fyP/gh/k0tfRdeBXcUSu699y/8usLAEjEAjuyc1gDitdgX 9E9RD9bGZ2yjJDs+rXbWRDz8hVihd3MT/vi3+MHw/PQd9vYhTW9pZHHDVHRZdu9c fs7q8sLh/g5IZYuYhTjSdScpyPhHW3gTptRu9mLzII0/wbdFDFKX/ikpj6kwDixz UT1G2m7fZQokGV8Ma+SEkfC/o4wl9b83wMfCI+lXdd/BSfd83HjDKLniqgpEcQs+ zGUnFyJ87ggVuObAv0hoh4XQ0MZAnIOpdi/kqb00WldR/LlGjRmiJofSCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVvlvrcsySOXac/ujgMeLKSajFyMB8GA1UdIwQY MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt MjQwZDFmZmQwOWI4LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4 LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2VtQTOl ejS8dujz/owWJZ5L5R4H57AqA9bGQ81Bxl2lcAZU2CGWLor8mUpWE/UbjLl6PI6H C7Wl0UeQLeoPFfiYFyyvL82BbluSRxIJPnIN9Y4mLPrQLfoO+8gHpcvL20oFlp6A N6KX6ZBfI7SZTVdWFRGyTAzowxnws0lB0CYooOZ9FWabhfogulCpx+laxACW2dSA OO+VMWzPnSEz8esUuBzsw1ARNRmw5cdg2ESOg0Hd9xUvEdk19Y0UXOc5/R2e6tB7 iZY+bID1uReCwmxn8kEzEz7jwgyre7fpFfOC8KFYrXNSMskp+BDP47ah5wCFoJqY EkxDFt6J0R3nVg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:01 2025 by rpki-client