This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json) Hash identifier: hKj3LMN/iz2+bV/6bG0BEPVAdj1HkJgZHNb/BJUigJQ= Subject key identifier: F7:35:FE:A3:3C:4F:C6:DF:A6:15:3F:70:02:84:6F:88:ED:C5:A1:EB Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2 Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2 Certificate serial: 019B3BA21110DAF265EE5D5A8957EC78D726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=) 2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=) 3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: YMjGcsQS0UZ6Yi/g+JD67Fd/XByoemqElFunzKLoBUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:11:10:da:f2:65:ee:5d:5a:89:57:ec:78:d7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2 Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=f735fea33c4fc6dfa6153f7002846f88edc5a1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:2a:23:c3:2b:aa:82:63:e7:9a:bd:31:22: c5:31:ab:4b:fd:46:a5:d6:b5:81:bc:ec:fc:72:8d: b3:79:ee:78:9e:8e:e2:9b:cd:f3:d7:5f:d8:62:3f: 97:2c:36:7e:a1:34:8e:1d:89:18:c8:c0:14:85:ee: ba:97:62:c0:e2:88:90:34:ab:25:12:0a:c8:05:b0: 85:ac:98:a0:7c:e3:26:42:60:46:c2:98:86:7e:63: 8b:de:35:e9:41:d5:de:07:20:b5:d7:e5:34:9e:2b: 30:ea:82:ac:43:c0:43:d3:b5:a0:8b:04:94:e6:8d: 30:45:29:b9:3b:00:a7:14:2b:c9:44:02:14:20:7d: a7:71:73:23:ee:91:56:0d:7b:a2:42:b0:15:cb:0a: 14:4d:1d:e0:5e:62:b2:a3:bc:24:55:9f:98:85:14: 9f:00:9b:63:b2:6f:63:82:ed:5f:a6:13:b7:9b:a3: ea:09:28:2a:f5:ec:96:04:e8:8f:dd:83:80:01:d0: 31:b6:6a:89:f2:60:03:76:0b:dd:57:07:4a:df:bc: 1c:64:77:a3:71:3a:01:c1:5a:b9:12:e6:32:8a:ea: e6:96:34:70:f6:93:0f:49:76:4c:22:cf:4a:33:f0: 55:6d:5a:73:f7:bf:04:26:3e:4d:70:70:b6:1d:60: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:35:FE:A3:3C:4F:C6:DF:A6:15:3F:70:02:84:6F:88:ED:C5:A1:EB X509v3 Authority Key Identifier: keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:06:96:99:9e:bb:3f:18:75:8a:25:65:26:5a:bd:5e:27:52: c2:63:ee:02:06:12:83:e6:ac:04:87:a5:d4:4a:18:db:8b:15: 37:ff:1d:85:15:d8:dc:e8:dc:04:b5:17:a7:14:a0:8d:c6:19: c7:7b:99:43:aa:bd:34:8d:34:76:54:cf:59:9a:c8:bd:6e:64: da:fb:b9:db:26:47:a7:f4:d7:a9:0b:49:05:70:bd:6e:ce:c7: 91:e0:98:4f:68:56:c2:03:70:06:eb:ba:04:62:16:89:64:62: 3a:5e:b0:e9:62:82:94:e2:d7:20:0d:37:1b:39:da:26:97:0c: 91:c7:02:a9:9a:e3:ed:a1:d1:24:8d:df:3d:47:9c:3f:d7:e9: 4d:a3:a4:52:eb:04:f7:ce:42:33:94:02:88:27:8f:3c:59:01: f2:0b:72:cd:c4:29:b9:07:37:89:47:0a:ae:14:22:d2:df:66: e3:d5:bc:b4:25:90:da:6a:59:2c:04:ce:28:df:c7:16:6b:b6: b7:ed:ea:55:ae:fb:90:7e:9e:6a:74:ed:be:24:2b:ae:d2:65: 1a:5d:b3:1b:9a:ce:8c:bb:7c:35:12:4a:3b:e2:7a:d9:9e:ca: f7:e3:e6:ed:65:2e:65:e6:68:50:57:40:2d:df:3b:5e:08:21: bf:03:d8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohEQ2vJl7l1aiVfseNcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTQwODhjNzdiZDEyNjg3ZmQ0YmE5ZmUzMTU5ZWE4MDU4 ODhlZDIwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD EyhmNzM1ZmVhMzNjNGZjNmRmYTYxNTNmNzAwMjg0NmY4OGVkYzVhMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAwqI8MrqoJj55q9MSLFMatL/Ual 1rWBvOz8co2zee54no7im83z11/YYj+XLDZ+oTSOHYkYyMAUhe66l2LA4oiQNKsl EgrIBbCFrJigfOMmQmBGwpiGfmOL3jXpQdXeByC11+U0nisw6oKsQ8BD07WgiwSU 5o0wRSm5OwCnFCvJRAIUIH2ncXMj7pFWDXuiQrAVywoUTR3gXmKyo7wkVZ+YhRSf AJtjsm9jgu1fphO3m6PqCSgq9eyWBOiP3YOAAdAxtmqJ8mADdgvdVwdK37wcZHej cToBwVq5EuYyiurmljRw9pMPSXZMIs9KM/BVbVpz978EJj5NcHC2HWDygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc1/qM8T8bfphU/cAKEb4jtxaHrMB8GA1UdIwQY MBaAFEIUCIx3vRJof9S6n+MVnqgFiI7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAt N2UyMWRiNWEyZWY5LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAtN2UyMWRiNWEyZWY5 LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAaWmZ67 Pxh1iiVlJlq9XidSwmPuAgYSg+asBIel1EoY24sVN/8dhRXY3OjcBLUXpxSgjcYZ x3uZQ6q9NI00dlTPWZrIvW5k2vu52yZHp/TXqQtJBXC9bs7HkeCYT2hWwgNwBuu6 BGIWiWRiOl6w6WKClOLXIA03GznaJpcMkccCqZrj7aHRJI3fPUecP9fpTaOkUusE 985CM5QCiCePPFkB8gtyzcQpuQc3iUcKrhQi0t9m49W8tCWQ2mpZLATOKN/HFmu2 t+3qVa77kH6eanTtviQrrtJlGl2zG5rOjLt8NRJKO+J62Z7K9+Pm7WUuZeZoUFdA Ld87XgghvwPYxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:49:02 2025 by rpki-client