This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json) Hash identifier: AXTHLOsmTfOdINPG1EpjI082yX8kX3jBgBBG2fqJUm0= Subject key identifier: C2:F0:37:80:C8:B5:49:60:E3:28:FF:64:EE:F3:23:B7:7D:FD:3C:CD Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Certificate serial: 019B676813CCABC858B31C84CF1DA39A0547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft Manifest number: 17A6 Signing time: Mon 29 Dec 2025 00:00:32 +0000 Manifest this update: Mon 29 Dec 2025 00:00:32 +0000 Manifest next update: Tue 30 Dec 2025 00:00:32 +0000 Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=) 2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: l+CfSn63ZeTi2NV48R++8p0fC/upJziFJM7eXc66lvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:13:cc:ab:c8:58:b3:1c:84:cf:1d:a3:9a:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Validity Not Before: Dec 29 00:00:32 2025 GMT Not After : Dec 30 00:00:32 2025 GMT Subject: CN=c2f03780c8b54960e328ff64eef323b77dfd3ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:bd:05:3d:d6:12:b0:7e:d5:e5:29:a6:9b: 4f:75:58:a0:b7:ad:c4:08:f0:10:6c:58:27:66:8e: dc:e1:5f:58:aa:e4:b8:8d:67:d9:e9:ba:e5:42:7b: fb:3b:61:ed:fb:e3:ee:a2:26:93:59:77:2a:5d:8b: a4:0f:90:27:08:94:e1:0a:a7:f9:53:82:37:c1:55: 92:9c:8c:c7:88:aa:bc:f9:d0:86:47:79:a2:8c:8d: 07:ea:10:c3:1f:fc:4c:af:4b:86:32:8d:53:71:98: c0:bf:59:0a:6d:f0:85:90:1c:c7:4e:37:d9:dc:3c: 94:50:76:53:8a:a1:88:fb:6d:38:82:b6:e0:c4:03: a7:09:61:11:e7:13:cf:ae:6e:ea:3e:e6:1d:6e:7d: 9a:4f:20:1a:d2:77:ec:7a:a3:4c:46:52:01:7c:01: bc:2f:47:36:2b:0e:ef:9a:cb:d3:2f:de:46:89:bc: af:63:23:3c:f3:ea:17:c2:46:7e:b6:30:dd:2a:01: 38:35:e6:3d:0a:69:42:98:6e:9f:46:5b:f1:3f:3f: 05:44:0f:64:6b:d4:e7:a4:8d:b3:03:93:eb:3b:e5: f7:c5:cd:50:b8:fe:d1:96:97:a1:6f:4c:6a:d9:ea: 32:03:f5:0a:34:d4:c4:e7:ed:56:61:fa:67:e1:f9: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:37:80:C8:B5:49:60:E3:28:FF:64:EE:F3:23:B7:7D:FD:3C:CD X509v3 Authority Key Identifier: keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:cc:42:67:ba:c1:74:ea:a7:09:ff:31:42:8d:95:aa:5c: 3a:81:29:5f:a0:2b:c1:fd:56:9f:0c:6d:cb:de:80:95:14:62: 6f:89:0c:5e:96:08:5a:1e:00:b1:af:0a:f5:ec:90:f6:8e:25: d4:37:29:c0:74:b6:20:f3:87:b5:20:92:b7:90:f7:50:9f:49: 9a:33:4f:db:94:48:18:ec:aa:73:23:c1:f2:21:f7:7b:65:0e: 1b:74:35:cb:4c:f3:cd:da:62:81:34:0e:c6:e9:e8:8d:d0:fe: 1d:d5:e5:dc:2c:01:58:91:9d:10:9e:eb:91:19:98:6c:ea:5e: 56:8e:d2:62:fb:e2:a8:ee:f7:c0:ba:b7:c5:9e:a3:56:3f:c0: 4c:5e:86:10:68:5b:96:79:a2:df:1d:78:ea:e5:7e:59:d0:72: 94:ea:d9:24:3e:82:83:f9:20:29:b1:4a:85:d4:a3:37:18:f6: 57:ed:63:16:f8:82:bc:07:10:97:06:e9:53:4c:34:8a:45:99: cd:58:a7:54:78:d6:74:f7:b0:7d:ca:10:90:c1:6e:fb:32:81: fe:a2:af:f7:5a:bc:bf:f1:ca:48:ce:4c:8a:12:ae:b0:77:a1: 83:35:83:74:5a:b4:7b:0b:50:b4:f8:03:59:29:91:92:60:38: bd:93:f7:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaBPMq8hYsxyEzx2jmgVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw MGQ2ODQwHhcNMjUxMjI5MDAwMDMyWhcNMjUxMjMwMDAwMDMyWjAzMTEwLwYDVQQD EyhjMmYwMzc4MGM4YjU0OTYwZTMyOGZmNjRlZWYzMjNiNzdkZmQzY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuri9BT3WErB+1eUppptPdVigt63E CPAQbFgnZo7c4V9YquS4jWfZ6brlQnv7O2Ht++PuoiaTWXcqXYukD5AnCJThCqf5 U4I3wVWSnIzHiKq8+dCGR3mijI0H6hDDH/xMr0uGMo1TcZjAv1kKbfCFkBzHTjfZ 3DyUUHZTiqGI+204grbgxAOnCWER5xPPrm7qPuYdbn2aTyAa0nfseqNMRlIBfAG8 L0c2Kw7vmsvTL95GibyvYyM88+oXwkZ+tjDdKgE4NeY9CmlCmG6fRlvxPz8FRA9k a9TnpI2zA5PrO+X3xc1QuP7Rlpehb0xq2eoyA/UKNNTE5+1WYfpn4fkbkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLwN4DItUlg4yj/ZO7zI7d9/TzNMB8GA1UdIwQY MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4 LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXrMQme6 wXTqpwn/MUKNlapcOoEpX6Arwf1Wnwxty96AlRRib4kMXpYIWh4Asa8K9eyQ9o4l 1DcpwHS2IPOHtSCSt5D3UJ9JmjNP25RIGOyqcyPB8iH3e2UOG3Q1y0zzzdpigTQO xunojdD+HdXl3CwBWJGdEJ7rkRmYbOpeVo7SYvviqO73wLq3xZ6jVj/ATF6GEGhb lnmi3x146uV+WdBylOrZJD6Cg/kgKbFKhdSjNxj2V+1jFviCvAcQlwbpU0w0ikWZ zVinVHjWdPewfcoQkMFu+zKB/qKv91q8v/HKSM5MihKusHehgzWDdFq0ewtQtPgD WSmRkmA4vZP3Iw== -----END CERTIFICATE-----Generated at Mon Dec 29 10:07:01 2025 by rpki-client