This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json) Hash identifier: ykq9ONbkWB0aBCs1QdnAoPKeWsWrjRvl7fX1h5mQ8js= Subject key identifier: B2:23:BD:76:5D:25:FC:6C:66:FF:51:10:B5:E5:EB:DC:BC:29:17:9F Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7 Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7 Certificate serial: 019B3F484C6511A255EE6C72D4EC9E93868F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft Manifest number: 0F8C Signing time: Sun 21 Dec 2025 05:01:01 +0000 Manifest this update: Sun 21 Dec 2025 05:01:01 +0000 Manifest next update: Mon 22 Dec 2025 05:01:01 +0000 Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=) 2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: 9BcQ62JLgku70IMwxt87N9/vDAClW15x3d0MogS70gM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:4c:65:11:a2:55:ee:6c:72:d4:ec:9e:93:86:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7 Validity Not Before: Dec 21 05:01:01 2025 GMT Not After : Dec 22 05:01:01 2025 GMT Subject: CN=b223bd765d25fc6c66ff5110b5e5ebdcbc29179f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6f:81:fd:0c:ad:2a:5d:7c:25:43:f5:88:12: fe:c2:9d:ff:e3:af:49:49:88:dc:b3:27:03:c6:8f: a0:74:28:3d:25:ed:1f:00:b1:a5:e5:3c:87:23:41: 81:72:18:22:90:3f:b5:4d:b3:e4:ce:c4:e4:e5:c3: 2b:88:92:ef:b4:ad:ed:93:2a:52:ec:da:b7:63:ba: 12:5f:b1:2d:6c:93:b2:62:60:40:8f:cb:bd:df:73: a6:97:16:6d:ac:6f:90:0d:69:1d:e7:9a:6a:36:b5: d3:0d:1e:ee:5d:1b:7f:5d:ff:7a:1f:63:82:78:f2: b5:b7:08:08:08:e3:2d:ed:47:d6:72:61:82:8a:2e: 6c:17:92:25:5f:00:8f:76:ec:3d:f8:9d:5b:f2:f7: 1c:df:91:85:10:05:58:76:79:6e:6e:63:be:dc:9a: 07:44:fa:7e:d9:b3:0e:3f:84:74:a3:f9:27:37:1e: 95:75:ca:d6:8b:e1:d3:52:47:f5:f4:51:77:42:8b: f6:e0:d4:38:f9:10:d4:46:85:a6:12:9c:0b:b0:30: 4f:da:d2:b0:f4:d0:e6:b7:22:e9:3a:24:b5:06:bd: b5:58:ce:ab:dd:65:6e:d0:8d:2c:f1:41:68:57:69: 58:1f:1b:de:9e:4d:a0:a5:01:69:70:74:ed:84:db: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:23:BD:76:5D:25:FC:6C:66:FF:51:10:B5:E5:EB:DC:BC:29:17:9F X509v3 Authority Key Identifier: keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b1:6b:f0:e9:a7:76:0e:01:83:34:be:e4:57:16:8d:e5:0d: e8:31:6e:2d:38:ff:45:1a:26:5c:44:69:fa:a0:e9:32:bc:8c: 1f:3d:a9:d7:24:81:0e:80:4f:4f:99:01:35:0e:47:ff:65:97: b0:66:d8:71:6b:bc:f1:52:07:d0:c9:90:93:34:df:74:73:46: e5:33:0f:a9:7e:d8:df:f3:a4:1e:1c:82:a7:c3:a8:e3:21:53: 55:dd:76:1c:16:f6:6a:96:2b:a9:c4:12:61:df:d1:dc:20:2b: 27:0b:cb:b6:1d:e1:9b:c6:d1:0c:6c:08:79:0d:71:f4:bd:ef: 01:1c:1e:e7:98:8b:52:62:07:9a:e4:04:5b:69:a7:8c:53:a6: e5:98:89:da:0f:62:31:62:89:b3:0b:81:37:46:91:47:1d:a7: fc:30:80:b0:57:a6:4b:7f:e4:a6:2c:96:ba:0c:de:2c:d2:0f: 36:63:2f:88:42:cb:ea:bb:32:04:2c:88:4d:d2:8a:b5:a3:da: d5:08:d4:9a:56:99:75:a2:d0:08:8f:08:6d:82:43:ab:5d:34: 4d:2b:2b:1a:64:4b:e8:f9:42:8a:00:34:8a:97:6a:53:46:6a: 89:46:69:28:6c:ac:49:d5:78:fd:a5:84:5f:b6:e5:70:46:64: 18:38:6c:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SExlEaJV7mxy1Oyek4aPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjYyNzMzYmM4NzNkMTNlMWY5ZjY2ZThkZmY3NWM4MjBk NWQyZjcwHhcNMjUxMjIxMDUwMTAxWhcNMjUxMjIyMDUwMTAxWjAzMTEwLwYDVQQD EyhiMjIzYmQ3NjVkMjVmYzZjNjZmZjUxMTBiNWU1ZWJkY2JjMjkxNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG+B/QytKl18JUP1iBL+wp3/469J SYjcsycDxo+gdCg9Je0fALGl5TyHI0GBchgikD+1TbPkzsTk5cMriJLvtK3tkypS 7Nq3Y7oSX7EtbJOyYmBAj8u933OmlxZtrG+QDWkd55pqNrXTDR7uXRt/Xf96H2OC ePK1twgICOMt7UfWcmGCii5sF5IlXwCPduw9+J1b8vcc35GFEAVYdnlubmO+3JoH RPp+2bMOP4R0o/knNx6VdcrWi+HTUkf19FF3Qov24NQ4+RDURoWmEpwLsDBP2tKw 9NDmtyLpOiS1Br21WM6r3WVu0I0s8UFoV2lYHxvenk2gpQFpcHTthNuRrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIjvXZdJfxsZv9RELXl69y8KRefMB8GA1UdIwQY MBaAFEBmJzO8hz0T4fn2bo3/dcgg1dL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYt OWNiNTFlNTFmZjc3LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYtOWNiNTFlNTFmZjc3 LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7Fr8Omn dg4BgzS+5FcWjeUN6DFuLTj/RRomXERp+qDpMryMHz2p1ySBDoBPT5kBNQ5H/2WX sGbYcWu88VIH0MmQkzTfdHNG5TMPqX7Y3/OkHhyCp8Oo4yFTVd12HBb2apYrqcQS Yd/R3CArJwvLth3hm8bRDGwIeQ1x9L3vARwe55iLUmIHmuQEW2mnjFOm5ZiJ2g9i MWKJswuBN0aRRx2n/DCAsFemS3/kpiyWugzeLNIPNmMviELL6rsyBCyITdKKtaPa 1QjUmlaZdaLQCI8IbYJDq100TSsrGmRL6PlCigA0ipdqU0ZqiUZpKGysSdV4/aWE X7blcEZkGDhsBg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:03:02 2025 by rpki-client