This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json) Hash identifier: 8DL12WOvScdvLv5Z/9sOOEaysv/rGDAkVDriOXMSpvA= Subject key identifier: 7F:74:AB:67:F1:3C:B5:39:6C:45:02:C5:E9:2C:0C:97:DC:F4:5D:12 Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43 Certificate serial: 019B5787FBA995070D4D990F232B31E2FD74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft Manifest number: 179D Signing time: Thu 25 Dec 2025 22:01:28 +0000 Manifest this update: Thu 25 Dec 2025 22:01:28 +0000 Manifest next update: Fri 26 Dec 2025 22:01:28 +0000 Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: MHUYf3k0HwkNoa/RKbaYEby4pD0TvIvlE5kT6uHe9Rw=) 2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:fb:a9:95:07:0d:4d:99:0f:23:2b:31:e2:fd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43 Validity Not Before: Dec 25 22:01:28 2025 GMT Not After : Dec 26 22:01:28 2025 GMT Subject: CN=7f74ab67f13cb5396c4502c5e92c0c97dcf45d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:5a:0e:1d:f1:c0:87:8d:46:d1:fd:f5:a2: cf:57:9a:1a:4f:d5:f1:b5:fc:6e:9d:ba:31:19:35: 73:f4:a8:83:78:2f:a5:83:e4:a5:39:af:c5:bd:b4: 2f:ce:4d:46:26:f0:b6:b3:da:08:03:c6:75:a3:9b: c2:3b:40:c9:55:2f:bd:8f:c7:a1:e9:ab:3f:c5:78: 52:4d:87:a2:9a:29:ce:54:dc:51:85:cf:fa:a6:39: 54:c4:a5:75:18:97:56:89:c7:aa:49:bb:41:99:f4: 37:87:15:7e:8e:6c:47:5c:d6:58:22:45:f1:c9:82: 12:6a:f6:38:e8:45:6a:3a:60:6a:03:4b:f7:e2:7e: fb:a4:65:bd:15:92:ef:59:3a:37:90:2a:5c:8f:ba: 04:1b:2e:40:7b:8f:3a:b5:71:cd:76:e6:c5:c1:99: ff:86:b0:e8:b4:be:a8:7d:84:4c:50:95:6e:18:10: 05:e0:a6:9a:86:80:a9:ff:1e:03:b5:11:36:78:3e: 2b:73:c2:6e:9d:d4:d0:fa:f7:a5:b0:c1:01:a2:e5: 43:9a:9f:5e:b5:37:44:b8:55:44:bf:a5:71:e8:db: ea:8d:b8:ce:7d:15:ea:0d:f1:e5:68:7e:d4:e3:76: df:e2:44:54:dc:4e:16:a8:0f:93:c9:6a:ea:f5:f8: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:74:AB:67:F1:3C:B5:39:6C:45:02:C5:E9:2C:0C:97:DC:F4:5D:12 X509v3 Authority Key Identifier: keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:54:8d:a0:6d:2b:f4:e0:05:7f:f0:42:4c:c6:ec:ab:c6:cd: 18:0c:02:0b:6a:89:ff:25:f8:f2:cf:04:d1:a0:58:d7:c7:fa: 6b:1b:6b:c5:12:95:ee:79:88:3a:3d:58:d0:58:4b:8a:45:39: 39:3b:c8:fe:ed:2b:c2:7c:2a:bb:85:8c:7b:b1:af:10:29:31: 03:c2:b6:53:50:7b:05:57:92:8d:3c:8d:f4:04:8c:49:a1:18: 6b:84:cd:b0:d4:2e:87:eb:7c:10:75:6d:ce:6a:7f:87:68:61: 43:37:ab:67:8a:f7:15:82:b5:a0:0b:9f:b0:16:bb:ce:dd:1e: af:8f:ab:ab:4a:1f:bf:50:a9:f1:ff:23:ec:e0:52:cb:78:eb: 77:75:03:41:a9:eb:36:ec:54:1a:ef:1b:9c:fc:66:3e:0f:59: f7:6f:f0:ae:ba:9c:7b:28:bb:be:e7:a8:46:e9:f9:71:21:84: 9b:4a:ad:9c:0f:d3:7e:5a:cb:d1:e7:29:7b:9c:6b:77:fa:4a: 31:f8:76:b4:35:7d:df:5e:a0:2d:cd:0b:3d:d0:ca:18:44:a3: 47:60:9b:cd:62:a3:6b:2f:3d:37:4e:46:3d:0d:5f:56:40:3b: 8c:a0:7d:eb:b5:6f:7a:47:e1:bf:1b:79:62:c7:0a:db:cb:5c: 0b:50:2c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh/uplQcNTZkPIysx4v10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0 MDZkNDMwHhcNMjUxMjI1MjIwMTI4WhcNMjUxMjI2MjIwMTI4WjAzMTEwLwYDVQQD Eyg3Zjc0YWI2N2YxM2NiNTM5NmM0NTAyYzVlOTJjMGM5N2RjZjQ1ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT1aDh3xwIeNRtH99aLPV5oaT9Xx tfxunboxGTVz9KiDeC+lg+SlOa/FvbQvzk1GJvC2s9oIA8Z1o5vCO0DJVS+9j8eh 6as/xXhSTYeiminOVNxRhc/6pjlUxKV1GJdWiceqSbtBmfQ3hxV+jmxHXNZYIkXx yYISavY46EVqOmBqA0v34n77pGW9FZLvWTo3kCpcj7oEGy5Ae486tXHNdubFwZn/ hrDotL6ofYRMUJVuGBAF4KaahoCp/x4DtRE2eD4rc8JundTQ+velsMEBouVDmp9e tTdEuFVEv6Vx6NvqjbjOfRXqDfHlaH7U43bf4kRU3E4WqA+TyWrq9fhnBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH90q2fxPLU5bEUCxeksDJfc9F0SMB8GA1UdIwQY MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt ZTNlZWNmOWRmYWFkLzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFSNoG0r 9OAFf/BCTMbsq8bNGAwCC2qJ/yX48s8E0aBY18f6axtrxRKV7nmIOj1Y0FhLikU5 OTvI/u0rwnwqu4WMe7GvECkxA8K2U1B7BVeSjTyN9ASMSaEYa4TNsNQuh+t8EHVt zmp/h2hhQzerZ4r3FYK1oAufsBa7zt0er4+rq0ofv1Cp8f8j7OBSy3jrd3UDQanr NuxUGu8bnPxmPg9Z92/wrrqceyi7vueoRun5cSGEm0qtnA/TflrL0ecpe5xrd/pK Mfh2tDV9316gLc0LPdDKGESjR2CbzWKjay89N05GPQ1fVkA7jKB967Vvekfhvxt5 YscK28tcC1Asog== -----END CERTIFICATE-----Generated at Thu Dec 25 23:52:40 2025 by rpki-client