This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json) Hash identifier: zda0ZrJZ0s5YG5G+7HoDioiWj4lcI5KWK2GpUnR0r6k= Subject key identifier: 25:EA:49:7F:22:95:8C:5F:B1:A7:9E:55:B7:66:49:62:B0:01:5D:9E Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3 Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3 Certificate serial: 019B3945EC24228244B04E1D083CE4EAB984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft Manifest number: 0AA6 Signing time: Sat 20 Dec 2025 01:00:42 +0000 Manifest this update: Sat 20 Dec 2025 01:00:42 +0000 Manifest next update: Sun 21 Dec 2025 01:00:42 +0000 Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: MTcNwWa6s3PJN5tAxCcrNjf1ag3NsCLw14NN2l6uK7o=) 2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:ec:24:22:82:44:b0:4e:1d:08:3c:e4:ea:b9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3 Validity Not Before: Dec 20 01:00:42 2025 GMT Not After : Dec 21 01:00:42 2025 GMT Subject: CN=25ea497f22958c5fb1a79e55b7664962b0015d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8a:9d:48:dd:24:50:84:2d:81:85:b1:aa:39: bf:cf:0c:59:34:71:ef:97:89:a4:6d:40:d7:a7:80: 15:6c:cd:79:e9:82:74:5a:59:9b:72:2f:12:60:9b: 6d:f6:87:3e:57:85:39:f9:9d:35:49:53:04:98:61: ec:3c:9f:7c:22:b4:e9:9a:36:23:84:e6:37:da:f3: ac:94:a9:66:26:2e:60:e9:fb:15:ba:a4:91:79:b3: 03:a9:41:a7:a6:82:b1:a2:b0:c0:dc:cb:05:82:0c: f3:74:bf:21:c7:35:a6:68:f2:6b:34:ea:c3:eb:21: a5:75:42:c8:da:7c:26:35:83:94:91:0c:35:fc:bd: 87:67:e2:b8:10:28:79:b0:eb:28:c5:19:da:aa:a6: 33:44:e8:c1:8e:9e:d0:05:a7:17:40:a2:91:11:8c: 6b:08:1d:77:a7:a7:59:7c:d2:2e:4f:02:4e:7f:29: 0c:fa:2a:e9:e0:e2:89:93:48:c3:ee:39:09:6e:a5: 55:43:8b:41:73:f9:98:e5:d5:b8:8c:09:dd:1f:37: f2:7d:ad:c6:ce:5e:d7:12:bf:08:8b:f7:5c:11:7e: 40:e8:8c:03:c7:d6:9f:f6:24:38:20:89:6e:71:d6: 3f:d8:f8:4f:c1:f2:78:3d:30:b0:bb:83:8a:b7:ca: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:49:7F:22:95:8C:5F:B1:A7:9E:55:B7:66:49:62:B0:01:5D:9E X509v3 Authority Key Identifier: keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5a:05:fe:e1:53:8a:b5:f0:5a:b0:75:f9:71:dc:82:cf:40: 3e:f4:8a:68:fc:32:f0:94:3b:a7:c6:c9:48:0c:b5:c3:a8:08: 69:08:ba:fa:25:34:b3:87:b5:d3:63:1a:92:9f:3b:52:b8:ea: 04:f6:2a:b8:de:0f:15:17:83:41:f5:59:b5:3b:43:52:40:1b: 33:23:cf:4a:f7:8a:93:86:92:4b:55:1c:8f:c4:82:61:2d:c9: 90:03:41:c8:60:9d:28:fe:70:0c:bf:40:b3:a3:5a:e0:d7:ff: 43:8e:ed:27:34:90:5c:d2:4d:bb:8b:f2:b9:15:e4:17:f0:21: ec:c9:d7:b0:3d:dc:15:a4:d7:4b:45:e2:ab:ac:20:50:cd:35: 17:4f:2d:9e:b1:59:08:1d:18:6d:03:3b:33:db:da:ec:cc:8e: db:9e:42:f4:50:a0:bf:18:b7:22:9a:b8:80:61:f3:6f:c5:7d: 9e:62:16:92:28:a3:d5:c6:68:a4:8c:19:e0:66:75:bc:a8:58: 63:5c:ff:e9:72:41:99:17:3a:88:c8:5e:ed:b8:e8:e0:33:55: f2:e8:14:86:9c:71:52:78:b1:0e:ec:a3:7b:44:9c:42:42:49: b0:07:a9:15:d5:37:8e:5a:44:24:8d:87:f2:53:fb:a7:e6:d9: 2f:92:65:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RewkIoJEsE4dCDzk6rmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5 M2U2ZTMwHhcNMjUxMjIwMDEwMDQyWhcNMjUxMjIxMDEwMDQyWjAzMTEwLwYDVQQD EygyNWVhNDk3ZjIyOTU4YzVmYjFhNzllNTViNzY2NDk2MmIwMDE1ZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYqdSN0kUIQtgYWxqjm/zwxZNHHv l4mkbUDXp4AVbM156YJ0Wlmbci8SYJtt9oc+V4U5+Z01SVMEmGHsPJ98IrTpmjYj hOY32vOslKlmJi5g6fsVuqSRebMDqUGnpoKxorDA3MsFggzzdL8hxzWmaPJrNOrD 6yGldULI2nwmNYOUkQw1/L2HZ+K4ECh5sOsoxRnaqqYzROjBjp7QBacXQKKREYxr CB13p6dZfNIuTwJOfykM+irp4OKJk0jD7jkJbqVVQ4tBc/mY5dW4jAndHzfyfa3G zl7XEr8Ii/dcEX5A6IwDx9af9iQ4IIlucdY/2PhPwfJ4PTCwu4OKt8oCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXqSX8ilYxfsaeeVbdmSWKwAV2eMB8GA1UdIwQY MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFoF/uFT irXwWrB1+XHcgs9APvSKaPwy8JQ7p8bJSAy1w6gIaQi6+iU0s4e102Makp87Urjq BPYquN4PFReDQfVZtTtDUkAbMyPPSveKk4aSS1Ucj8SCYS3JkANByGCdKP5wDL9A s6Na4Nf/Q47tJzSQXNJNu4vyuRXkF/Ah7MnXsD3cFaTXS0Xiq6wgUM01F08tnrFZ CB0YbQM7M9va7MyO255C9FCgvxi3Ipq4gGHzb8V9nmIWkiij1cZopIwZ4GZ1vKhY Y1z/6XJBmRc6iMhe7bjo4DNV8ugUhpxxUnixDuyje0ScQkJJsAepFdU3jlpEJI2H 8lP7p+bZL5JliQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:57 2025 by rpki-client