This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft File: Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json) Hash identifier: RDxxD8Qt0jGPhA+6r4Cao1ytm4z5gwlXrzxWDHxHSSA= Subject key identifier: D7:1D:D9:8F:50:B9:68:71:02:94:8D:6B:91:67:96:02:A0:D7:5F:29 Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 Certificate issuer: /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Certificate serial: 019B559AA45530BBBD5E9DA9370482AD4593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft Manifest number: 0390 Signing time: Thu 25 Dec 2025 13:02:36 +0000 Manifest this update: Thu 25 Dec 2025 13:02:36 +0000 Manifest next update: Fri 26 Dec 2025 13:02:36 +0000 Files and hashes: 1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=) 2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: sfSXYvXm5bz9Blz6yj8vBK2S7tauyPj7CccxQmQ4Ni0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:a4:55:30:bb:bd:5e:9d:a9:37:04:82:ad:45:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Validity Not Before: Dec 25 13:02:36 2025 GMT Not After : Dec 26 13:02:36 2025 GMT Subject: CN=d71dd98f50b9687102948d6b91679602a0d75f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:ea:fa:1e:f4:51:d8:55:96:eb:ab:0c:eb: 11:73:af:df:f1:1d:8a:ae:b7:41:bc:26:8f:44:fa: 9c:91:14:7e:e6:6b:de:b6:55:6a:14:96:70:ec:96: 80:cb:6b:0b:aa:14:49:29:ea:c0:e6:48:70:10:b2: 65:db:83:bc:a2:56:f8:54:fe:63:f2:26:04:86:aa: 87:ef:9e:09:01:15:fa:92:69:20:6a:75:d9:81:71: 0c:c1:da:1d:bf:15:48:57:bd:7f:7e:e2:ab:86:7c: c4:e9:51:fc:57:9f:e6:5d:ad:cf:e9:39:a4:9d:f2: 53:62:6d:c4:03:52:c7:65:28:14:5f:58:0a:b6:f2: 4d:01:15:f0:b9:af:bd:af:e3:20:e3:ff:c0:43:b2: b1:5b:8b:d7:26:29:d1:31:53:5a:b9:f0:ca:3e:f6: 77:c4:b5:c7:0b:11:8c:dd:5f:3d:4a:95:af:5d:fb: 92:36:e3:94:43:4e:d4:ad:23:09:82:60:54:e9:f6: 6d:4e:20:45:0f:cc:d1:08:f3:44:95:5c:92:93:6e: 78:eb:aa:fd:54:d0:74:f6:69:c0:f6:45:85:ed:27: e1:4c:6f:81:d2:f1:cb:fa:57:15:8a:2d:cc:5e:ba: 31:cf:e3:93:d6:fa:60:6e:25:33:b4:a7:a6:19:5e: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:D9:8F:50:B9:68:71:02:94:8D:6B:91:67:96:02:A0:D7:5F:29 X509v3 Authority Key Identifier: keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fd:f9:91:70:30:1e:bc:c6:2b:4c:b6:30:80:62:85:f3:c1: 8a:e6:fb:43:bd:23:a6:f2:e8:df:00:72:a7:02:8e:95:0a:88: d3:bc:88:83:bc:5b:c9:4b:b0:7c:c2:0e:e5:79:82:6b:44:f6: 91:f3:af:35:5c:f7:2f:9e:55:07:05:b5:cc:55:70:27:ed:0a: 18:08:55:e4:88:e3:87:ce:36:85:45:64:46:20:cc:45:97:fd: d8:41:f0:cf:e3:bc:82:94:be:71:0c:ae:62:85:15:b0:fd:58: fa:17:4f:1f:25:8e:d8:18:35:5f:99:63:fe:eb:d6:2e:93:00: 6d:6a:cd:85:8b:26:5a:f9:75:5d:12:75:1a:d1:3b:05:af:b0: f2:cf:74:b9:c6:55:7b:b2:e7:5a:91:c5:e9:18:5e:01:db:fc: e2:d8:87:9a:08:f8:43:d7:f5:82:ca:ba:7f:36:7c:83:ee:1b: 15:ad:4e:c6:71:4a:ea:f8:f5:62:49:92:cf:72:da:a2:e8:bb: 48:f8:60:84:3a:d4:a3:7e:e3:ca:19:d1:2b:84:b6:9c:63:7d: 08:77:fb:47:a9:73:31:c8:3e:c7:3e:4b:f3:9c:e5:e8:4d:fa: f3:3a:93:6e:ac:38:6b:e0:af:53:84:4a:25:b2:c2:d7:cc:ff: 29:6d:46:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmqRVMLu9Xp2pNwSCrUWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQ3OTU1NzI1NTQxOWViN2ZkYzZkMGFmMzFmYTcwN2Zk ZmJhYzgwHhcNMjUxMjI1MTMwMjM2WhcNMjUxMjI2MTMwMjM2WjAzMTEwLwYDVQQD EyhkNzFkZDk4ZjUwYjk2ODcxMDI5NDhkNmI5MTY3OTYwMmEwZDc1ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N/q+h70UdhVluurDOsRc6/f8R2K rrdBvCaPRPqckRR+5mvetlVqFJZw7JaAy2sLqhRJKerA5khwELJl24O8olb4VP5j 8iYEhqqH754JARX6kmkganXZgXEMwdodvxVIV71/fuKrhnzE6VH8V5/mXa3P6Tmk nfJTYm3EA1LHZSgUX1gKtvJNARXwua+9r+Mg4//AQ7KxW4vXJinRMVNaufDKPvZ3 xLXHCxGM3V89SpWvXfuSNuOUQ07UrSMJgmBU6fZtTiBFD8zRCPNElVySk25466r9 VNB09mnA9kWF7SfhTG+B0vHL+lcVii3MXroxz+OT1vpgbiUztKemGV5FkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcd2Y9QuWhxApSNa5FnlgKg118pMB8GA1UdIwQY MBaAFEHdeVVyVUGet/3G0K8x+nB/37rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgt ZDBjNTViMGQ0NjM5LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgtZDBjNTViMGQ0NjM5 LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApP35kXAw HrzGK0y2MIBihfPBiub7Q70jpvLo3wBypwKOlQqI07yIg7xbyUuwfMIO5XmCa0T2 kfOvNVz3L55VBwW1zFVwJ+0KGAhV5Ijjh842hUVkRiDMRZf92EHwz+O8gpS+cQyu YoUVsP1Y+hdPHyWO2Bg1X5lj/uvWLpMAbWrNhYsmWvl1XRJ1GtE7Ba+w8s90ucZV e7LnWpHF6RheAdv84tiHmgj4Q9f1gsq6fzZ8g+4bFa1OxnFK6vj1YkmSz3Laoui7 SPhghDrUo37jyhnRK4S2nGN9CHf7R6lzMcg+xz5L85zl6E368zqTbqw4a+CvU4RK JbLC18z/KW1GFw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:27 2025 by rpki-client