This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json) Hash identifier: RdMorDVr4/qY4b77LFnguA/cqFLDT9qeBskJ37ZCkIw= Subject key identifier: 74:04:57:06:25:A1:41:1C:87:C1:3D:4C:4B:8B:E0:D1:2C:6E:19:58 Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Certificate serial: 019B3A21CCE920F9C5D2090B8B896F5C6CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 05:00:52 +0000 Manifest this update: Sat 20 Dec 2025 05:00:52 +0000 Manifest next update: Sun 21 Dec 2025 05:00:52 +0000 Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=) 2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: pwHsvw3suHvEebPCiIp5KvkOhAuv2cssqD7ZqevprRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:cc:e9:20:f9:c5:d2:09:0b:8b:89:6f:5c:6c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Validity Not Before: Dec 20 05:00:52 2025 GMT Not After : Dec 21 05:00:52 2025 GMT Subject: CN=7404570625a1411c87c13d4c4b8be0d12c6e1958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:eb:c5:ea:ea:cc:73:41:07:de:09:34:4f:9e: 8a:2f:17:df:0b:cb:e6:f8:f0:43:66:21:9a:17:e8: 8c:ec:f9:08:43:31:cf:e5:70:4a:17:47:6a:41:70: 2b:72:92:eb:6c:db:f9:4f:c6:67:50:9b:d5:13:f6: 16:4b:9c:41:e9:be:f6:24:5b:cf:58:d3:4a:01:0f: 2d:78:2e:3f:3f:0c:20:ea:87:f7:61:12:2b:80:35: 0d:6a:df:d7:30:da:a2:56:44:98:1f:e3:80:03:30: 7d:c3:32:fd:77:fb:71:db:26:ef:59:36:58:55:c4: 5c:51:b6:9d:5e:a7:c4:64:01:04:38:cf:1c:37:ea: a7:ee:dd:3b:6e:37:af:ac:4c:35:02:56:39:58:cc: 48:1f:8f:65:d8:ef:28:11:9d:a1:39:90:d3:64:9e: b7:ce:ad:39:51:e8:8f:2f:af:67:6d:3d:9e:6b:4b: 35:f5:36:7e:0a:82:75:ea:d8:09:10:a9:b6:89:e0: c2:77:93:61:19:32:45:d2:58:05:48:ae:21:e0:41: 78:57:72:05:ef:86:4b:e0:38:88:13:4a:70:a1:45: a8:1f:93:93:5a:5a:d3:60:0e:89:bf:21:02:35:55: 40:a5:14:74:e9:09:a9:dc:96:cc:45:8b:ef:0a:32: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:57:06:25:A1:41:1C:87:C1:3D:4C:4B:8B:E0:D1:2C:6E:19:58 X509v3 Authority Key Identifier: keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:29:9e:ec:0c:fd:54:59:40:53:85:3a:75:b5:74:8e:7c:39: 95:2d:1d:24:d6:09:99:45:c4:a1:bb:36:53:f8:e6:d3:cf:d4: c9:3b:9d:80:51:dc:91:0b:ff:f8:a5:b4:e3:48:b7:2d:dd:a0: fd:7f:c0:56:6f:eb:ae:5d:29:f2:93:42:e5:4c:b3:6e:72:a1: 1c:9c:b2:e7:66:02:72:d5:69:fa:fa:32:b5:f5:00:4b:e5:4b: 3b:75:f2:2d:89:ef:3a:fd:a8:14:bc:fc:46:a8:c9:7a:59:0b: c8:22:b1:1f:7a:89:6d:0d:57:bc:f5:a5:7c:a8:9f:47:fc:e4: a9:10:0e:88:e7:36:b1:05:fa:6c:2e:19:18:e9:e9:ba:63:06: 26:31:74:d2:e9:88:09:d1:da:60:63:3e:ea:86:bd:0f:74:c8: af:0f:13:68:d5:d0:f3:2d:13:07:25:93:ce:13:36:c0:08:59: 02:4f:f8:68:14:42:4e:a7:d2:10:55:26:d8:58:ba:e2:82:8b: cf:e5:c4:21:e7:58:f9:ea:e1:9b:e2:a5:72:f0:a5:9f:e2:3a: fe:cc:d9:94:5e:88:31:8c:e2:61:7c:66:b8:7a:07:2f:34:be: 3b:c9:dc:08:57:61:98:88:20:17:31:17:f2:79:b2:8e:e2:d7: ed:47:a2:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IczpIPnF0gkLi4lvXGzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl MzlhYzYwHhcNMjUxMjIwMDUwMDUyWhcNMjUxMjIxMDUwMDUyWjAzMTEwLwYDVQQD Eyg3NDA0NTcwNjI1YTE0MTFjODdjMTNkNGM0YjhiZTBkMTJjNmUxOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOvF6urMc0EH3gk0T56KLxffC8vm +PBDZiGaF+iM7PkIQzHP5XBKF0dqQXArcpLrbNv5T8ZnUJvVE/YWS5xB6b72JFvP WNNKAQ8teC4/Pwwg6of3YRIrgDUNat/XMNqiVkSYH+OAAzB9wzL9d/tx2ybvWTZY VcRcUbadXqfEZAEEOM8cN+qn7t07bjevrEw1AlY5WMxIH49l2O8oEZ2hOZDTZJ63 zq05UeiPL69nbT2ea0s19TZ+CoJ16tgJEKm2ieDCd5NhGTJF0lgFSK4h4EF4V3IF 74ZL4DiIE0pwoUWoH5OTWlrTYA6JvyECNVVApRR06Qmp3JbMRYvvCjJIewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQEVwYloUEch8E9TEuL4NEsbhlYMB8GA1UdIwQY MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcime7Az9 VFlAU4U6dbV0jnw5lS0dJNYJmUXEobs2U/jm08/UyTudgFHckQv/+KW040i3Ld2g /X/AVm/rrl0p8pNC5UyzbnKhHJyy52YCctVp+voytfUAS+VLO3XyLYnvOv2oFLz8 RqjJelkLyCKxH3qJbQ1XvPWlfKifR/zkqRAOiOc2sQX6bC4ZGOnpumMGJjF00umI CdHaYGM+6oa9D3TIrw8TaNXQ8y0TByWTzhM2wAhZAk/4aBRCTqfSEFUm2Fi64oKL z+XEIedY+erhm+KlcvCln+I6/szZlF6IMYziYXxmuHoHLzS+O8ncCFdhmIggFzEX 8nmyjuLX7UeipA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:51 2025 by rpki-client