This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json) Hash identifier: HNKjtHG5aV6bmEn1n+l7sFsWvi7wAwnvuoJDtb5DNL0= Subject key identifier: FD:55:B9:48:ED:96:86:63:6F:CC:92:A5:B6:78:2F:BE:AA:6E:39:9C Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Certificate serial: 019B4E4DCBF8B5DB53926DEC105204947398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 03:01:19 +0000 Manifest this update: Wed 24 Dec 2025 03:01:19 +0000 Manifest next update: Thu 25 Dec 2025 03:01:19 +0000 Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=) 2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: WW2K8w0SKKP9QbqRlaRox771xhc1KSNIsJ7deCpkqOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:cb:f8:b5:db:53:92:6d:ec:10:52:04:94:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Validity Not Before: Dec 24 03:01:19 2025 GMT Not After : Dec 25 03:01:19 2025 GMT Subject: CN=fd55b948ed9686636fcc92a5b6782fbeaa6e399c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:cc:9f:36:54:b5:7c:a9:b9:4c:3b:00:75: 3b:c6:75:2a:6f:fb:a5:4b:a8:03:ac:d1:99:32:8d: 47:4c:82:b8:97:41:5d:20:64:7f:e5:81:06:54:62: ba:78:06:7d:40:8a:9b:38:20:a3:fc:31:bf:66:63: 80:8d:8e:91:05:dc:c1:22:92:2d:0c:62:46:6b:ae: 90:b9:4c:5d:96:25:8a:9f:54:00:70:32:27:72:12: d5:79:b2:c2:ca:e1:29:74:9a:fe:98:be:83:fb:a4: ec:ce:7b:eb:09:7f:d1:03:f5:ed:54:d7:0d:9a:02: be:5f:c5:0a:6c:c9:a7:34:52:7c:e3:18:af:84:1b: ce:e0:93:7d:7e:73:b6:70:80:f9:a9:be:f5:be:4d: f1:45:21:dc:43:07:78:ba:83:c3:60:36:53:3d:fd: 25:97:95:10:ea:73:73:a7:00:18:87:45:00:b5:cf: d2:08:70:a6:f5:c1:4b:3a:23:f3:1e:c7:81:0e:ee: 61:9a:fa:f3:ee:fc:58:f7:c3:25:86:41:4d:6f:40: 70:37:4d:ca:e0:3a:02:5d:10:02:be:87:c8:08:3e: 21:5e:e3:7d:e0:fd:b1:57:8f:c5:09:c9:53:0f:ec: 64:26:26:da:a2:65:db:4a:21:03:aa:60:4f:57:b0: fc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:B9:48:ED:96:86:63:6F:CC:92:A5:B6:78:2F:BE:AA:6E:39:9C X509v3 Authority Key Identifier: keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:66:98:bd:d0:31:25:c3:e3:c1:a4:59:3a:ab:d7:bc:e1:90: 6d:4b:50:eb:8c:c1:04:36:ee:3a:86:e9:1d:3b:69:e5:c6:5e: 8b:b6:f0:2d:f9:cd:a7:9e:56:6b:df:7b:99:c6:5b:f3:7f:07: 0e:e8:75:4a:89:66:ef:2f:30:61:52:bb:e7:2e:8f:82:04:1d: 07:be:76:82:c3:fe:2f:d1:7f:ca:08:79:b6:b1:2e:56:76:bb: fb:4c:70:60:c5:c6:71:c3:62:da:4f:9e:d0:80:a9:3c:09:2b: 37:cd:d7:9b:81:c1:d8:bb:1c:46:0b:19:42:0c:61:25:5f:25: 77:ea:b9:6e:7e:c6:54:f6:42:20:97:da:f0:d5:7b:e5:9f:b8: ec:0f:fb:24:8f:cb:d9:7f:98:28:2c:e3:df:4f:4e:94:08:fe: 80:29:03:44:7e:a1:d9:b9:28:49:58:f1:62:6c:a3:a2:cb:70: 08:6a:a3:4d:49:1d:d2:4a:d2:a7:50:df:c4:ad:ef:63:cd:d4: bb:79:6c:5d:b1:16:51:fc:f1:2e:0a:9a:1c:d8:3e:ef:10:28: 2c:31:4b:14:f0:53:98:27:12:85:82:8e:91:c5:c3:2e:bf:7e: 73:7f:d8:98:48:56:ea:55:bc:a8:a6:b3:2f:84:e0:0d:78:77: eb:a4:a5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcv4tdtTkm3sEFIElHOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4 OThlY2IwHhcNMjUxMjI0MDMwMTE5WhcNMjUxMjI1MDMwMTE5WjAzMTEwLwYDVQQD EyhmZDU1Yjk0OGVkOTY4NjYzNmZjYzkyYTViNjc4MmZiZWFhNmUzOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEvMnzZUtXypuUw7AHU7xnUqb/ul S6gDrNGZMo1HTIK4l0FdIGR/5YEGVGK6eAZ9QIqbOCCj/DG/ZmOAjY6RBdzBIpIt DGJGa66QuUxdliWKn1QAcDInchLVebLCyuEpdJr+mL6D+6TsznvrCX/RA/XtVNcN mgK+X8UKbMmnNFJ84xivhBvO4JN9fnO2cID5qb71vk3xRSHcQwd4uoPDYDZTPf0l l5UQ6nNzpwAYh0UAtc/SCHCm9cFLOiPzHseBDu5hmvrz7vxY98MlhkFNb0BwN03K 4DoCXRACvofICD4hXuN94P2xV4/FCclTD+xkJibaomXbSiEDqmBPV7D8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1VuUjtloZjb8ySpbZ4L76qbjmcMB8GA1UdIwQY MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4 LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2aYvdAx JcPjwaRZOqvXvOGQbUtQ64zBBDbuOobpHTtp5cZei7bwLfnNp55Wa997mcZb838H Duh1Solm7y8wYVK75y6PggQdB752gsP+L9F/ygh5trEuVna7+0xwYMXGccNi2k+e 0ICpPAkrN83Xm4HB2LscRgsZQgxhJV8ld+q5bn7GVPZCIJfa8NV75Z+47A/7JI/L 2X+YKCzj309OlAj+gCkDRH6h2bkoSVjxYmyjostwCGqjTUkd0krSp1DfxK3vY83U u3lsXbEWUfzxLgqaHNg+7xAoLDFLFPBTmCcShYKOkcXDLr9+c3/YmEhW6lW8qKaz L4TgDXh366Sl5A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:26 2025 by rpki-client