This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json) Hash identifier: dzFWmgKv6id+QSc1d/nSeFey8t2D7HSAPs8wjajewZc= Subject key identifier: 8B:8F:0F:06:85:4C:0B:26:BD:E5:E4:E0:46:3E:39:01:FA:A8:A1:FB Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d Certificate serial: 019B3FED0503072A7B059FA3E1D864A759B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft Manifest number: 0E20 Signing time: Sun 21 Dec 2025 08:00:56 +0000 Manifest this update: Sun 21 Dec 2025 08:00:56 +0000 Manifest next update: Mon 22 Dec 2025 08:00:56 +0000 Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=) 2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 8pM0QXSRoZThHdH1yQKD2VcXBddj0UfoJ3Z1pQsSMHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:05:03:07:2a:7b:05:9f:a3:e1:d8:64:a7:59:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d Validity Not Before: Dec 21 08:00:56 2025 GMT Not After : Dec 22 08:00:56 2025 GMT Subject: CN=8b8f0f06854c0b26bde5e4e0463e3901faa8a1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:52:5f:20:07:02:eb:34:12:98:87:78:aa: 90:4f:b6:75:34:88:1f:38:31:be:cf:7d:86:b3:1a: fc:1e:67:da:ad:dd:91:c7:c3:50:68:79:4a:24:61: 77:e7:9e:e0:a4:c3:ed:ac:72:3b:f6:98:3d:80:79: a0:76:5f:80:7b:f8:28:9c:4e:1f:9a:c8:95:0d:0a: c4:12:5a:c4:d2:6c:5c:6d:31:b9:16:0e:22:9f:18: c4:36:85:d6:63:fd:3d:4e:38:60:bb:5d:ff:92:62: 82:cd:8c:ac:bf:18:66:01:ed:7a:98:5c:ad:4d:84: e8:7c:84:a3:fd:0a:fb:6f:f6:24:13:0d:89:60:ea: 60:27:da:65:95:37:57:a4:40:05:1e:23:d6:72:15: 51:3d:f2:59:3f:2e:c2:42:7b:28:6a:2f:e0:bf:69: 52:4d:f6:72:9f:ea:9b:2a:b8:68:2f:2e:80:46:5f: 14:7c:fb:e6:6f:95:36:ec:e2:6b:4d:fc:42:c6:7a: 87:49:f3:f4:a6:69:62:28:bd:81:d3:1e:33:88:5c: 90:33:21:63:4a:e4:32:7f:94:8a:c7:9d:b1:b4:5f: 6b:3c:eb:19:73:c1:22:69:5f:2f:24:b7:97:62:dc: c4:29:de:2c:09:36:5f:96:ca:d0:06:92:10:09:84: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8F:0F:06:85:4C:0B:26:BD:E5:E4:E0:46:3E:39:01:FA:A8:A1:FB X509v3 Authority Key Identifier: keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:63:1c:30:b9:e5:8a:e2:26:ec:b8:29:c2:07:14:92:b6:a9: 3a:e5:aa:c6:01:dd:30:8d:2c:b3:67:59:87:b0:ca:13:ee:c5: 8b:51:58:f9:d9:64:73:20:bf:c7:49:c9:a4:ff:b1:a3:3e:10: e5:ea:60:f5:22:b0:da:52:d8:d3:9e:eb:d1:9e:ea:ec:1d:b1: 5d:38:1d:ed:76:dd:ab:e0:db:7b:02:03:76:c0:bd:ad:f1:ef: 3b:08:4e:37:38:b0:43:4b:05:b0:4b:20:73:cb:37:6c:82:8e: e0:c0:2f:01:b5:77:b7:16:ae:fa:49:4f:16:97:dc:09:d3:c5: a1:ed:3e:b5:ce:9c:e6:00:e3:fa:75:29:93:7d:f4:69:29:d5: 51:cd:3f:c2:48:81:c5:ea:2a:a3:c1:31:60:6a:6d:b7:5f:47: 1c:f6:71:88:25:b1:45:01:cd:71:fa:53:67:28:8f:9f:41:f5: f7:80:ab:6b:d4:12:2c:b1:80:10:2f:94:38:39:fb:52:48:bc: d0:e1:e2:ab:3d:63:5b:59:92:82:f6:57:f0:1a:aa:47:a8:07: bf:e4:fd:e3:8e:4b:db:13:f1:b3:05:27:4c:2d:f2:90:8c:18: 01:1e:62:cb:92:e1:0d:7b:00:59:06:4e:0d:82:6c:94:b3:01: b3:23:d3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7QUDByp7BZ+j4dhkp1m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3 NzkxOWQwHhcNMjUxMjIxMDgwMDU2WhcNMjUxMjIyMDgwMDU2WjAzMTEwLwYDVQQD Eyg4YjhmMGYwNjg1NGMwYjI2YmRlNWU0ZTA0NjNlMzkwMWZhYThhMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqxSXyAHAus0EpiHeKqQT7Z1NIgf ODG+z32Gsxr8Hmfard2Rx8NQaHlKJGF3557gpMPtrHI79pg9gHmgdl+Ae/gonE4f msiVDQrEElrE0mxcbTG5Fg4inxjENoXWY/09Tjhgu13/kmKCzYysvxhmAe16mFyt TYTofISj/Qr7b/YkEw2JYOpgJ9pllTdXpEAFHiPWchVRPfJZPy7CQnsoai/gv2lS TfZyn+qbKrhoLy6ARl8UfPvmb5U27OJrTfxCxnqHSfP0pmliKL2B0x4ziFyQMyFj SuQyf5SKx52xtF9rPOsZc8EiaV8vJLeXYtzEKd4sCTZflsrQBpIQCYRsPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuPDwaFTAsmveXk4EY+OQH6qKH7MB8GA1UdIwQY MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt NTZjOTRmMzI2ZGMyLzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2McMLnl iuIm7LgpwgcUkrapOuWqxgHdMI0ss2dZh7DKE+7Fi1FY+dlkcyC/x0nJpP+xoz4Q 5epg9SKw2lLY057r0Z7q7B2xXTgd7Xbdq+DbewIDdsC9rfHvOwhONziwQ0sFsEsg c8s3bIKO4MAvAbV3txau+klPFpfcCdPFoe0+tc6c5gDj+nUpk330aSnVUc0/wkiB xeoqo8ExYGptt19HHPZxiCWxRQHNcfpTZyiPn0H194Cra9QSLLGAEC+UODn7Uki8 0OHiqz1jW1mSgvZX8BqqR6gHv+T9445L2xPxswUnTC3ykIwYAR5iy5LhDXsAWQZO DYJslLMBsyPTQA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:44 2025 by rpki-client