This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json) Hash identifier: xS7a1EtBzsJyj+7Sp0J1HmerRRqbbDjiI16mO/52teM= Subject key identifier: 25:DF:5D:80:9C:09:0A:92:D3:8D:0F:16:81:19:19:42:1A:33:84:D7 Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019B52CEA4B8923B4DC26DFF6F0952CE3E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft Manifest number: 0D04 Signing time: Thu 25 Dec 2025 00:00:32 +0000 Manifest this update: Thu 25 Dec 2025 00:00:32 +0000 Manifest next update: Fri 26 Dec 2025 00:00:32 +0000 Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=) 2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: IcL3jvr/jEh7ivqcTOXqgTe5o9iLrn2xzzeFZIPFBrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:a4:b8:92:3b:4d:c2:6d:ff:6f:09:52:ce:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Dec 25 00:00:32 2025 GMT Not After : Dec 26 00:00:32 2025 GMT Subject: CN=25df5d809c090a92d38d0f16811919421a3384d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:4e:86:91:58:cf:bc:15:36:49:9b:05:03: 37:ac:3d:c6:84:f0:7e:eb:6a:ee:26:62:55:90:25: 83:ff:5f:a6:12:37:cf:06:7a:2b:3f:d2:9d:01:40: a6:bc:2b:0e:90:35:c9:78:24:cd:27:2f:e7:f3:57: 43:99:d2:d5:55:9b:41:35:66:79:f6:cd:07:20:58: 7f:d1:ae:59:b2:3b:95:71:db:c3:35:28:f0:8e:0b: 9b:00:6c:69:af:14:f3:25:ae:90:3a:08:67:a9:3b: 03:11:72:7d:aa:48:11:59:af:f2:a9:40:24:1e:74: 56:6e:c0:6a:e3:48:c0:d0:db:de:c1:b3:1d:42:0a: bf:a8:6b:a4:be:53:01:e8:4d:23:d9:74:2f:ff:d5: 60:5e:ce:37:7f:a6:83:f6:bc:d5:be:62:f7:81:f3: a3:f3:09:77:2e:d2:b4:8b:89:d5:f1:93:75:32:c7: cb:d8:c8:31:13:09:c9:ea:d7:36:61:37:b2:57:4b: 55:a4:14:69:9b:01:43:be:ce:fa:00:8c:9b:4c:37: 42:f5:4a:97:77:9e:00:e0:a1:1b:69:8c:71:b5:0e: 47:ef:61:78:aa:31:4e:8e:ad:85:e9:fd:39:5f:57: 30:bb:2f:5c:62:d9:f8:f1:c5:8e:16:fb:0e:bb:9c: 0d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:5D:80:9C:09:0A:92:D3:8D:0F:16:81:19:19:42:1A:33:84:D7 X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:da:3c:43:6c:ea:e1:cb:d1:6e:90:8c:1c:63:fb:4e:d0:17: b2:3e:2c:81:ae:25:82:a9:5c:cf:92:c6:f9:fd:58:37:45:49: 6a:ea:52:a0:29:f9:aa:6e:ab:3f:51:6e:f6:73:a5:a6:bf:0d: 99:9a:5c:51:00:18:cd:58:33:c9:ce:bb:da:6e:66:44:68:96: 7d:19:ad:d5:43:62:a2:5a:31:9a:01:e8:28:5f:89:0d:23:b6: a5:f9:80:72:24:05:45:f0:f7:9a:ff:d8:a4:22:5a:e4:0a:1d: d5:e5:69:26:58:01:c2:d1:d9:54:19:50:4a:ab:c4:46:15:5d: 9f:79:53:5c:55:07:cd:40:42:f1:e0:30:91:4e:33:66:1f:02: 4e:8c:9c:6a:2f:c5:fa:0f:86:04:72:bb:1c:8e:3b:dd:01:92: a2:77:9c:e3:29:12:a8:94:d6:1e:d5:04:51:e2:db:e2:8d:d4: 9d:a4:64:93:9b:a5:51:ff:b0:be:25:0d:cd:d0:de:87:d9:40: f5:16:28:a6:9c:4a:f0:54:c4:24:4d:e6:98:96:fe:4a:2a:aa: 8c:20:b1:c5:38:00:5c:0c:f7:9f:7d:b9:28:f3:da:23:ce:56: 53:c2:55:25:cc:02:e9:57:50:31:10:b8:05:25:9e:99:9c:f9: 59:95:46:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzqS4kjtNwm3/bwlSzj4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjUxMjI1MDAwMDMyWhcNMjUxMjI2MDAwMDMyWjAzMTEwLwYDVQQD EygyNWRmNWQ4MDljMDkwYTkyZDM4ZDBmMTY4MTE5MTk0MjFhMzM4NGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkVOhpFYz7wVNkmbBQM3rD3GhPB+ 62ruJmJVkCWD/1+mEjfPBnorP9KdAUCmvCsOkDXJeCTNJy/n81dDmdLVVZtBNWZ5 9s0HIFh/0a5ZsjuVcdvDNSjwjgubAGxprxTzJa6QOghnqTsDEXJ9qkgRWa/yqUAk HnRWbsBq40jA0NvewbMdQgq/qGukvlMB6E0j2XQv/9VgXs43f6aD9rzVvmL3gfOj 8wl3LtK0i4nV8ZN1MsfL2MgxEwnJ6tc2YTeyV0tVpBRpmwFDvs76AIybTDdC9UqX d54A4KEbaYxxtQ5H72F4qjFOjq2F6f05X1cwuy9cYtn48cWOFvsOu5wNZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXfXYCcCQqS040PFoEZGUIaM4TXMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9o8Q2zq 4cvRbpCMHGP7TtAXsj4sga4lgqlcz5LG+f1YN0VJaupSoCn5qm6rP1Fu9nOlpr8N mZpcUQAYzVgzyc672m5mRGiWfRmt1UNioloxmgHoKF+JDSO2pfmAciQFRfD3mv/Y pCJa5Aod1eVpJlgBwtHZVBlQSqvERhVdn3lTXFUHzUBC8eAwkU4zZh8CToycai/F +g+GBHK7HI473QGSonec4ykSqJTWHtUEUeLb4o3UnaRkk5ulUf+wviUNzdDeh9lA 9RYoppxK8FTEJE3mmJb+SiqqjCCxxTgAXAz3n325KPPaI85WU8JVJcwC6VdQMRC4 BSWemZz5WZVGEw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:06 2025 by rpki-client