This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json) Hash identifier: hmDxv4Xr7QZBabx/YgacdndmpsMTGCOkalWB/RYdL9g= Subject key identifier: F1:8C:54:1D:F8:FB:83:0F:33:1C:91:63:55:2E:4F:2A:53:8D:2E:4F Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Certificate serial: 019B3C10959C11F9E04026033597C0221A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft Manifest number: 6F Signing time: Sat 20 Dec 2025 14:01:18 +0000 Manifest this update: Sat 20 Dec 2025 14:01:18 +0000 Manifest next update: Sun 21 Dec 2025 14:01:18 +0000 Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: axXkq9OTM6NEG2wjkOj8Cpb/CGmcOGKHuANxgRq5R60=) 2: wlrDNqUnqUmmTYGmXbzC14oo_bE.roa (hash: l0cPMm9AaYNzGdZ4Sbd7mhVrwvyb06PQKB3ZfkcvkmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:95:9c:11:f9:e0:40:26:03:35:97:c0:22:1a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Validity Not Before: Dec 20 14:01:18 2025 GMT Not After : Dec 21 14:01:18 2025 GMT Subject: CN=f18c541df8fb830f331c9163552e4f2a538d2e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:22:49:6f:5e:bf:83:9d:ea:51:5d:be:bb: 10:b3:b5:6e:e2:49:43:5b:cc:05:68:1f:e8:56:eb: 91:a1:6a:10:61:a4:4e:ed:dc:48:9b:9d:55:fa:63: 66:b2:e8:27:05:0d:05:43:30:d8:6f:b3:af:0b:54: ba:aa:45:15:61:ac:dd:5d:14:98:2d:4a:d5:f7:0d: 54:6f:37:15:5c:13:12:83:c2:ff:8a:d9:da:5a:9e: eb:75:36:ad:e6:8f:20:1f:02:f5:4e:e5:db:cd:f7: 95:60:3c:0f:5d:c6:81:b7:13:e9:95:31:88:b5:70: b2:d9:66:fb:87:e9:4c:70:80:81:b2:60:3d:16:57: dc:99:a3:d6:17:a0:78:28:a0:45:c5:ad:82:aa:2f: 1c:e0:ac:04:c1:9d:6b:78:65:1d:50:bb:e7:59:cb: d2:c8:d0:fb:f9:60:2f:4c:34:61:75:05:91:58:e5: e9:83:62:0b:89:fd:ba:b5:35:3e:7e:78:db:64:39: 36:4e:be:4b:2f:11:3d:9c:b8:ad:05:f9:3e:ab:26: cd:86:a8:79:2e:4f:d3:54:f8:5d:85:cd:b8:0d:a4: 60:95:25:28:73:78:6c:e2:2c:0b:d5:c0:01:0f:8e: 00:c0:7e:4d:1d:ea:68:d7:a2:2b:7d:60:fa:50:d6: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8C:54:1D:F8:FB:83:0F:33:1C:91:63:55:2E:4F:2A:53:8D:2E:4F X509v3 Authority Key Identifier: keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:3b:7b:4f:ff:ba:f5:ad:85:79:d3:42:e2:2a:ca:31:f8: 27:4e:6b:e8:b2:0a:92:59:80:fb:2a:b5:7d:e7:ef:7e:31:b4: fd:f0:bf:bd:72:fd:24:b9:cb:f9:68:70:b8:79:ab:0b:40:b8: 6e:6e:dd:0c:ab:52:e9:29:09:7d:11:cc:09:94:58:16:8c:6d: 35:8a:ee:67:59:97:41:50:fa:e6:9d:a7:2e:fe:3a:5a:55:fc: d5:14:ac:ca:de:b8:fa:73:32:9b:b0:90:79:56:a4:39:db:33: 68:33:3a:d0:0c:90:9c:31:1a:49:72:e7:c2:3d:35:74:7d:62: 47:53:9e:95:89:84:c9:85:3b:dc:d8:78:87:42:56:d9:8d:7e: a2:71:a4:90:aa:c9:cc:33:5b:f9:4d:94:71:90:3a:06:1a:e0: ae:a9:2c:81:6f:cf:30:09:2e:c2:d5:ff:d0:a5:16:b0:7d:8a: e4:f7:92:6a:c6:f7:cd:77:c2:57:22:7e:94:ad:06:e5:63:a9: 00:29:7e:33:63:bf:86:55:ed:78:5a:95:c3:5c:e2:4f:14:27: 60:a6:66:77:bb:57:0d:c9:07:0e:5b:84:bc:ef:2b:66:cb:7b: 1e:0d:18:3d:37:f8:67:89:e9:a1:1e:85:6a:9c:c3:32:43:8d: d3:8d:5e:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJWcEfngQCYDNZfAIhplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4 MmVmZTYwHhcNMjUxMjIwMTQwMTE4WhcNMjUxMjIxMTQwMTE4WjAzMTEwLwYDVQQD EyhmMThjNTQxZGY4ZmI4MzBmMzMxYzkxNjM1NTJlNGYyYTUzOGQyZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4IiSW9ev4Od6lFdvrsQs7Vu4klD W8wFaB/oVuuRoWoQYaRO7dxIm51V+mNmsugnBQ0FQzDYb7OvC1S6qkUVYazdXRSY LUrV9w1UbzcVXBMSg8L/itnaWp7rdTat5o8gHwL1TuXbzfeVYDwPXcaBtxPplTGI tXCy2Wb7h+lMcICBsmA9FlfcmaPWF6B4KKBFxa2Cqi8c4KwEwZ1reGUdULvnWcvS yND7+WAvTDRhdQWRWOXpg2ILif26tTU+fnjbZDk2Tr5LLxE9nLitBfk+qybNhqh5 Lk/TVPhdhc24DaRglSUoc3hs4iwL1cABD44AwH5NHepo16IrfWD6UNYPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGMVB34+4MPMxyRY1UuTypTjS5PMB8GA1UdIwQY MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBQ7e0// uvWthXnTQuIqyjH4J05r6LIKklmA+yq1fefvfjG0/fC/vXL9JLnL+WhwuHmrC0C4 bm7dDKtS6SkJfRHMCZRYFoxtNYruZ1mXQVD65p2nLv46WlX81RSsyt64+nMym7CQ eVakOdszaDM60AyQnDEaSXLnwj01dH1iR1OelYmEyYU73Nh4h0JW2Y1+onGkkKrJ zDNb+U2UcZA6BhrgrqksgW/PMAkuwtX/0KUWsH2K5PeSasb3zXfCVyJ+lK0G5WOp ACl+M2O/hlXteFqVw1ziTxQnYKZmd7tXDckHDluEvO8rZst7Hg0YPTf4Z4npoR6F apzDMkON041eRw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:35 2025 by rpki-client