This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json) Hash identifier: dHyXJ/0FdYciXqggPBwtKyTyg4/x+v1jjbvKscwTkkw= Subject key identifier: B5:0A:F3:DF:C9:39:C9:08:F2:6C:0A:CC:3A:F0:7B:9F:3F:F6:6F:AB Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Certificate serial: 019B4438EB48B2E5887FC22920AF9CEFBCBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft Manifest number: 16DF Signing time: Mon 22 Dec 2025 04:02:19 +0000 Manifest this update: Mon 22 Dec 2025 04:02:19 +0000 Manifest next update: Tue 23 Dec 2025 04:02:19 +0000 Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: /8JjL0UPLu43cxVwNsryZ//eS43kJzzqkbt5wp+f/IY=) 2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:eb:48:b2:e5:88:7f:c2:29:20:af:9c:ef:bc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Validity Not Before: Dec 22 04:02:19 2025 GMT Not After : Dec 23 04:02:19 2025 GMT Subject: CN=b50af3dfc939c908f26c0acc3af07b9f3ff66fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:08:86:21:88:97:fc:05:03:8a:74:08:51: da:b7:a5:e5:59:17:7c:43:50:3d:6c:62:6b:0c:76: fc:85:e9:19:5c:34:de:b2:79:82:23:b9:55:3e:a4: 06:45:e1:68:28:70:f4:66:35:c6:a2:ff:71:ac:bf: ef:e4:75:11:ee:44:53:ac:7c:a3:73:41:4f:f0:ae: 74:5c:3d:6b:9a:06:32:7d:25:b7:7d:89:f2:50:e0: 57:42:62:fd:f5:cf:24:e5:37:e6:10:6a:ca:73:f9: f3:36:b2:40:5b:63:e3:d7:a1:9d:e8:42:50:5e:d5: 26:90:12:86:1c:08:d5:d6:df:5e:5c:cc:71:cf:fd: a0:b4:a6:53:ee:a1:8f:b0:d3:03:36:55:78:81:60: 8b:d5:c3:92:c5:34:5b:c0:ed:fe:d3:f2:88:13:15: 42:36:9f:e5:ec:f1:dc:6f:ea:67:4e:95:05:08:8e: 0b:18:f8:c2:dc:c4:f1:21:1d:33:f2:14:91:a6:4a: f4:a4:68:05:91:a9:2b:e4:16:c7:51:91:66:26:86: 6b:f7:63:f3:71:b2:b2:92:ef:04:23:f2:cf:60:a5: 76:e8:f2:86:f8:4e:de:d2:cc:e9:82:02:65:89:c6: c2:97:37:a3:6f:ad:c0:a0:37:7a:b7:9d:88:86:c4: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0A:F3:DF:C9:39:C9:08:F2:6C:0A:CC:3A:F0:7B:9F:3F:F6:6F:AB X509v3 Authority Key Identifier: keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6e:93:a3:df:fe:26:5b:b7:d2:5e:a8:72:3d:66:31:3c:77: 7d:9d:7d:48:02:1b:e2:58:c3:a2:b0:50:df:ce:77:f2:da:da: 0e:a0:e8:9b:2c:1d:70:14:5a:66:42:ff:3a:34:45:26:e9:bd: 8e:f7:51:d1:68:d2:08:70:ed:0a:9b:a3:8f:b0:50:a6:73:2f: 70:96:c9:63:91:fc:76:27:e1:22:9e:b4:b0:2c:3e:e6:0f:72: 72:38:c4:32:7b:2a:8e:53:92:bf:aa:70:9a:fe:9d:6b:10:94: 12:17:e0:1c:43:5c:5c:5a:3a:d5:a2:9c:47:1c:46:65:50:eb: b0:bf:22:b2:0f:07:15:b0:e3:ef:93:b7:ea:0f:77:0e:b6:46: c0:af:ff:7a:1f:95:5b:e4:22:ba:6c:c2:0a:a5:41:73:a1:1a: 9f:f9:f5:af:3d:11:8f:e6:55:3f:b8:04:9a:dc:09:b6:94:f1: 50:65:48:51:63:8e:59:7c:15:76:8a:9a:d7:4a:8b:33:b0:df: ff:e9:8f:a4:87:da:21:3f:fe:00:26:94:3f:d7:24:01:cd:58: 84:17:88:b7:dd:f4:f4:e9:ab:82:4d:23:e8:4d:a1:18:4e:93: 37:b9:9d:c5:f9:01:a9:b1:c1:a6:a5:5f:37:4f:a2:df:1f:b6: d1:6d:1b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOtIsuWIf8IpIK+c77y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5 ODdmYzYwHhcNMjUxMjIyMDQwMjE5WhcNMjUxMjIzMDQwMjE5WjAzMTEwLwYDVQQD EyhiNTBhZjNkZmM5MzljOTA4ZjI2YzBhY2MzYWYwN2I5ZjNmZjY2ZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VsIhiGIl/wFA4p0CFHat6XlWRd8 Q1A9bGJrDHb8hekZXDTesnmCI7lVPqQGReFoKHD0ZjXGov9xrL/v5HUR7kRTrHyj c0FP8K50XD1rmgYyfSW3fYnyUOBXQmL99c8k5TfmEGrKc/nzNrJAW2Pj16Gd6EJQ XtUmkBKGHAjV1t9eXMxxz/2gtKZT7qGPsNMDNlV4gWCL1cOSxTRbwO3+0/KIExVC Np/l7PHcb+pnTpUFCI4LGPjC3MTxIR0z8hSRpkr0pGgFkakr5BbHUZFmJoZr92Pz cbKyku8EI/LPYKV26PKG+E7e0szpggJlicbClzejb63AoDd6t52IhsS3qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUK89/JOckI8mwKzDrwe58/9m+rMB8GA1UdIwQY MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt MTFmMWI1YTRiMGRjLzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW26To9/+ Jlu30l6ocj1mMTx3fZ19SAIb4ljDorBQ38538traDqDomywdcBRaZkL/OjRFJum9 jvdR0WjSCHDtCpujj7BQpnMvcJbJY5H8difhIp60sCw+5g9ycjjEMnsqjlOSv6pw mv6daxCUEhfgHENcXFo61aKcRxxGZVDrsL8isg8HFbDj75O36g93DrZGwK//eh+V W+QiumzCCqVBc6Ean/n1rz0Rj+ZVP7gEmtwJtpTxUGVIUWOOWXwVdoqa10qLM7Df /+mPpIfaIT/+ACaUP9ckAc1YhBeIt9309Omrgk0j6E2hGE6TN7mdxfkBqbHBpqVf N0+i3x+20W0b1g== -----END CERTIFICATE-----Generated at Mon Dec 22 10:06:06 2025 by rpki-client