This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft File: QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json) Hash identifier: dhm+tjBGoWlJy3OWuwQWSq+QGSwhUrID6OkmJhKabKA= Subject key identifier: FC:FA:E7:9B:5A:43:D9:0E:65:8F:DF:BA:EC:A9:70:B1:BB:AC:CE:85 Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6 Certificate issuer: /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6 Certificate serial: 019B631E01648C06DC7C44D106883D2FCA04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft Manifest number: 02B5 Signing time: Sun 28 Dec 2025 04:01:09 +0000 Manifest this update: Sun 28 Dec 2025 04:01:09 +0000 Manifest next update: Mon 29 Dec 2025 04:01:09 +0000 Files and hashes: 1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: +1IP0A3WkSJrubud4vENd99dE+SG9Pgzg7psCOSWJtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:01:64:8c:06:dc:7c:44:d1:06:88:3d:2f:ca:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6 Validity Not Before: Dec 28 04:01:09 2025 GMT Not After : Dec 29 04:01:09 2025 GMT Subject: CN=fcfae79b5a43d90e658fdfbaeca970b1bbacce85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:88:65:20:c6:5f:fc:b3:04:43:cf:be:7f: 19:89:c0:06:04:80:1f:58:69:22:b3:d8:e3:36:6d: ae:c6:bb:af:06:47:23:e8:86:76:ce:f6:56:e2:58: a5:bd:02:5f:d0:d6:fc:36:73:77:17:b9:f5:82:41: 79:76:65:3b:78:00:c9:e1:e6:20:91:1e:a0:d1:58: 03:50:48:48:c0:72:b3:e6:b0:63:70:fa:ce:cd:2f: d6:2e:c6:23:91:b2:ab:16:87:42:57:c0:ab:b9:7c: 18:a5:fa:49:6b:0b:50:ba:fc:f0:e4:21:6e:58:8b: ae:6a:16:9a:f9:81:ef:cc:ad:88:e3:41:60:52:65: 8f:ba:3d:92:77:0b:d6:e1:a4:ae:20:4e:92:7c:7f: 0c:df:6d:24:f7:46:18:a5:c2:2f:34:75:f6:86:c9: 81:03:82:db:8c:8c:79:6e:cd:eb:b0:81:af:3d:c3: e1:5b:0f:34:b1:c9:4f:8a:63:b3:4a:26:6e:ab:e3: 1e:5d:66:fc:da:28:0d:32:88:8a:53:ab:ca:23:26: 30:1f:10:10:1b:1f:64:6e:ef:a2:0b:e3:ed:3d:c5: 34:4f:58:0b:99:d6:ab:c0:be:a7:25:8b:ca:bc:f6: 4e:6d:e6:9d:b2:cf:0f:98:a9:3c:2e:18:a6:a9:e1: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:E7:9B:5A:43:D9:0E:65:8F:DF:BA:EC:A9:70:B1:BB:AC:CE:85 X509v3 Authority Key Identifier: keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7e:8d:4e:cc:b3:a3:52:9b:82:48:6f:87:13:c3:93:76:52: 92:15:bd:13:ae:96:fe:eb:2a:4e:14:99:28:74:2d:26:c7:5a: 61:d4:41:eb:12:5d:7d:94:fa:ab:3a:ed:71:74:6c:55:ce:60: a8:6d:84:ab:b0:a0:a8:3e:fa:97:13:d7:7d:c1:a9:4e:1a:5b: f8:0e:e3:ba:87:0f:76:66:64:e2:08:53:87:4c:2a:60:93:15: 3a:c6:8e:33:45:6b:56:70:15:33:df:25:4a:01:49:69:6f:7a: 02:dd:fc:d5:78:83:8b:27:c9:53:f3:1e:e5:14:06:22:37:37: cb:18:e1:16:29:17:a9:4b:48:4c:54:a8:67:f3:fa:06:95:8e: ff:4b:ae:92:22:f1:c3:79:18:ef:6e:4e:29:5e:6a:a3:ea:9d: e8:8e:90:c3:55:2d:71:47:4c:6e:14:88:9b:51:e5:d1:c5:4c: 90:72:c3:4e:de:16:bd:27:39:f9:67:2f:33:85:b7:c8:17:93: a1:9f:62:bd:28:aa:12:ff:40:67:75:c4:b5:f6:26:6b:2c:b1: 81:31:d6:d2:ed:da:8f:24:7f:18:5c:85:55:f9:b6:01:81:cb: ab:27:f5:d4:ac:70:32:10:4f:52:80:89:b3:30:7f:ae:8b:60: 3f:fc:ec:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHgFkjAbcfETRBog9L8oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzI3MjJmNjZmMjdhYzkwNzJmZGM3ZTkzMWY2ZTFhODUx M2NmYzYwHhcNMjUxMjI4MDQwMTA5WhcNMjUxMjI5MDQwMTA5WjAzMTEwLwYDVQQD EyhmY2ZhZTc5YjVhNDNkOTBlNjU4ZmRmYmFlY2E5NzBiMWJiYWNjZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rKIZSDGX/yzBEPPvn8ZicAGBIAf WGkis9jjNm2uxruvBkcj6IZ2zvZW4lilvQJf0Nb8NnN3F7n1gkF5dmU7eADJ4eYg kR6g0VgDUEhIwHKz5rBjcPrOzS/WLsYjkbKrFodCV8CruXwYpfpJawtQuvzw5CFu WIuuahaa+YHvzK2I40FgUmWPuj2SdwvW4aSuIE6SfH8M320k90YYpcIvNHX2hsmB A4LbjIx5bs3rsIGvPcPhWw80sclPimOzSiZuq+MeXWb82igNMoiKU6vKIyYwHxAQ Gx9kbu+iC+PtPcU0T1gLmdarwL6nJYvKvPZObeadss8PmKk8LhimqeELrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz655taQ9kOZY/fuuypcLG7rM6FMB8GA1UdIwQY MBaAFEEyci9m8nrJBy/cfpMfbhqFE8/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85ODUwNTYtNzQ4Zi00YjkyLWI2ZmUt NTRjMzdjMDJiN2VlLzEvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My85ODUwNTYtNzQ4Zi00YjkyLWI2ZmUtNTRjMzdjMDJiN2Vl LzEvUVRKeUwyYnllc2tITDl4LWt4OXVHb1VUejhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA36NTsyz o1KbgkhvhxPDk3ZSkhW9E66W/usqThSZKHQtJsdaYdRB6xJdfZT6qzrtcXRsVc5g qG2Eq7CgqD76lxPXfcGpThpb+A7juocPdmZk4ghTh0wqYJMVOsaOM0VrVnAVM98l SgFJaW96At381XiDiyfJU/Me5RQGIjc3yxjhFikXqUtITFSoZ/P6BpWO/0uukiLx w3kY725OKV5qo+qd6I6Qw1UtcUdMbhSIm1Hl0cVMkHLDTt4WvSc5+WcvM4W3yBeT oZ9ivSiqEv9AZ3XEtfYmayyxgTHW0u3ajyR/GFyFVfm2AYHLqyf11KxwMhBPUoCJ szB/rotgP/zsaw== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:50 2025 by rpki-client