This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json) Hash identifier: DnOcXNZoEwRVrjVZQIw8T3iWxQNvZtLa0CA3iRPdt80= Subject key identifier: DD:5C:82:CE:86:E9:CD:76:5B:B3:DE:D0:D3:37:1E:D9:87:DF:D0:73 Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595 Certificate serial: 019B3DFEF00EDD2821B2B3A953BC28B757A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft Manifest number: 0C95 Signing time: Sat 20 Dec 2025 23:01:16 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sun 21 Dec 2025 23:01:16 +0000 Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: Hyl0dBrPZ0ZPfqafrikSh7Dinb6R37Vr+s6hYsyRwrI=) 2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=) 3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f0:0e:dd:28:21:b2:b3:a9:53:bc:28:b7:57:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595 Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 21 23:01:16 2025 GMT Subject: CN=dd5c82ce86e9cd765bb3ded0d3371ed987dfd073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:e3:f5:fd:92:49:60:a1:c3:5d:05:7c:e8: 07:b5:18:22:e1:07:06:0e:28:59:da:6e:b4:ea:d5: 5a:87:3e:e2:9b:ed:27:a2:cb:6a:65:3c:37:ae:35: 74:a3:d3:8c:8d:d6:e6:0d:b9:30:46:0e:b7:98:fc: 88:03:6d:b2:02:82:23:72:ca:0a:06:2f:26:f4:d6: 6d:eb:90:f2:aa:40:16:4b:5e:53:c6:ee:a3:6d:3a: b4:6c:b2:c1:79:61:d9:a5:d4:03:a8:7c:30:76:ba: 5f:3e:e5:87:32:cf:7c:ea:39:c9:1a:16:1f:d1:ab: 7e:5a:b1:2b:10:1e:7a:19:fd:f9:2b:73:9a:68:b1: c6:f7:d8:ea:01:ce:6b:10:c9:7b:a2:fe:6c:cc:09: c6:77:63:38:88:d0:af:3c:8a:39:8a:5c:24:5d:91: 91:b6:4b:cd:7c:a2:71:11:5a:f1:9d:23:f9:a3:44: 12:a1:f6:b5:f3:21:5f:6c:cf:a1:22:f7:8e:de:63: 25:6f:1b:f0:a6:75:12:54:ee:ff:98:76:df:a3:0a: 14:77:44:95:d4:53:d4:62:89:c9:74:13:82:41:76: 6a:d8:af:35:d0:51:e2:19:86:4d:1d:98:ac:7d:f4: 21:da:3d:59:87:aa:e3:c4:15:de:ea:72:93:29:bb: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5C:82:CE:86:E9:CD:76:5B:B3:DE:D0:D3:37:1E:D9:87:DF:D0:73 X509v3 Authority Key Identifier: keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:db:94:7d:a4:7e:18:e2:d4:eb:eb:ba:9c:f0:46:33:61:08: e6:f0:bb:bd:af:d7:ab:40:ba:96:97:c9:37:ef:0d:89:9c:37: 8c:fb:f4:2a:55:5f:bc:73:8a:c4:bd:43:06:86:91:2e:c2:f8: 08:9c:c5:7a:fc:ec:ea:37:27:c5:07:e8:47:bb:96:73:f2:03: 6f:47:3e:a1:52:79:96:06:e4:9e:dd:64:69:e3:4e:ed:85:c9: 99:aa:e7:cd:6d:d6:f7:91:09:60:c7:2e:07:ff:f4:5a:c6:36: fb:fd:92:58:70:8f:96:1a:68:3d:e1:7c:a7:2e:24:2b:1b:63: 45:89:69:76:ec:ed:c3:c3:b9:6b:92:19:e3:09:e4:b1:e3:ba: 49:97:95:75:5c:b1:c5:52:6c:c6:68:6b:4c:e7:b8:d4:08:00: ce:99:55:bd:6d:8f:80:da:08:0d:f0:63:0f:02:61:38:7a:b8: 83:80:a2:18:03:16:41:28:e9:b4:1a:ba:2e:29:41:3e:41:76: 75:42:42:a9:19:49:99:5b:7e:ac:d5:e0:89:bc:bb:37:c1:83: d3:64:69:64:b2:aa:30:56:7f:42:e1:ca:b2:33:38:35:f1:63: 1c:b2:d1:23:a2:c7:ce:39:71:77:46:e5:96:6a:af:46:f3:e5: 7d:c7:22:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vAO3SghsrOpU7wot1epMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1 ZGQ1OTUwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjIxMjMwMTE2WjAzMTEwLwYDVQQD EyhkZDVjODJjZTg2ZTljZDc2NWJiM2RlZDBkMzM3MWVkOTg3ZGZkMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbjj9f2SSWChw10FfOgHtRgi4QcG DihZ2m606tVahz7im+0nostqZTw3rjV0o9OMjdbmDbkwRg63mPyIA22yAoIjcsoK Bi8m9NZt65DyqkAWS15Txu6jbTq0bLLBeWHZpdQDqHwwdrpfPuWHMs986jnJGhYf 0at+WrErEB56Gf35K3OaaLHG99jqAc5rEMl7ov5szAnGd2M4iNCvPIo5ilwkXZGR tkvNfKJxEVrxnSP5o0QSofa18yFfbM+hIveO3mMlbxvwpnUSVO7/mHbfowoUd0SV 1FPUYonJdBOCQXZq2K810FHiGYZNHZisffQh2j1Zh6rjxBXe6nKTKbuoFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1cgs6G6c12W7Pe0NM3HtmH39BzMB8GA1UdIwQY MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9uUfaR+ GOLU6+u6nPBGM2EI5vC7va/Xq0C6lpfJN+8NiZw3jPv0KlVfvHOKxL1DBoaRLsL4 CJzFevzs6jcnxQfoR7uWc/IDb0c+oVJ5lgbknt1kaeNO7YXJmarnzW3W95EJYMcu B//0WsY2+/2SWHCPlhpoPeF8py4kKxtjRYlpduztw8O5a5IZ4wnkseO6SZeVdVyx xVJsxmhrTOe41AgAzplVvW2PgNoIDfBjDwJhOHq4g4CiGAMWQSjptBq6LilBPkF2 dUJCqRlJmVt+rNXgiby7N8GD02RpZLKqMFZ/QuHKsjM4NfFjHLLRI6LHzjlxd0bl lmqvRvPlfccipQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:27 2025 by rpki-client