This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json) Hash identifier: Q370s2ixamyz9MhHUIULEc87qte6hyMgF9IuA22HZp0= Subject key identifier: 23:41:3C:FC:74:B4:48:DF:D5:3C:B4:74:D7:8A:94:1F:16:ED:D7:8E Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c Certificate serial: 019B481563D08FC44A369763FD1E72065274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft Manifest number: 1288 Signing time: Mon 22 Dec 2025 22:01:59 +0000 Manifest this update: Mon 22 Dec 2025 22:01:59 +0000 Manifest next update: Tue 23 Dec 2025 22:01:59 +0000 Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: N4KQnyc/KiyuF/riLs8xbUtM04gjUf4Qo/oIwZuY8Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:63:d0:8f:c4:4a:36:97:63:fd:1e:72:06:52:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c Validity Not Before: Dec 22 22:01:59 2025 GMT Not After : Dec 23 22:01:59 2025 GMT Subject: CN=23413cfc74b448dfd53cb474d78a941f16edd78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:17:54:30:8a:d4:f2:20:15:21:d3:f6:a8: cf:98:37:0d:7f:a1:f6:5a:53:85:ba:19:d0:0f:77: 40:33:66:ba:55:6d:f6:08:ec:46:aa:b5:29:03:3a: 04:e5:9a:25:8b:c6:53:9f:d5:a2:05:95:59:e1:0e: 6b:69:36:d9:e5:5e:47:fa:cb:b8:93:60:b2:9d:cd: 2f:bc:d1:8a:bd:5f:91:a7:cb:c2:2f:5c:18:8c:2d: e4:15:26:12:19:57:2e:e9:70:fc:7a:20:24:22:0f: 82:3d:c2:38:11:1d:ea:e4:46:6f:12:25:5d:8a:11: bf:51:79:c9:ba:45:fa:77:62:e3:d7:50:38:80:e4: 50:9a:49:ef:70:c3:0f:74:ef:7e:d5:42:52:16:98: 3b:64:b8:c3:9c:ba:81:6b:24:7f:0e:0a:84:f0:64: 40:5e:28:7a:5f:e9:6b:9f:4b:5e:23:7d:c9:6e:c8: 31:25:9a:ee:fe:0f:17:6c:63:98:ac:5f:b4:6c:c8: 70:87:95:55:e9:6a:33:86:f5:bd:d2:cd:52:63:37: eb:70:9a:50:b2:d6:44:6e:73:96:a8:c1:3b:23:e9: fd:86:97:18:bd:35:f8:5f:ab:e1:6b:74:51:a4:c4: 53:9d:c9:b1:02:bc:c9:9c:d9:48:c8:fa:0d:9c:ba: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:3C:FC:74:B4:48:DF:D5:3C:B4:74:D7:8A:94:1F:16:ED:D7:8E X509v3 Authority Key Identifier: keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e7:a9:07:82:e8:95:3a:10:9c:05:88:dd:55:2a:27:0c:b3: 84:0c:2c:6c:6c:38:c0:48:96:94:c7:b0:bf:f2:48:29:5b:b0: e9:39:33:df:7b:5c:54:0f:04:d2:43:92:a0:8b:ee:eb:e3:c9: 35:cd:16:b0:0a:43:a9:b7:19:79:01:ff:54:f8:c5:43:0f:8a: d2:4d:9b:8d:88:bb:a8:43:10:47:08:70:a1:d4:42:f2:0a:16: 29:1a:3f:82:f4:3a:63:be:04:77:68:47:97:51:82:89:af:f3: d9:e1:71:a6:b2:45:4e:a3:0d:34:ac:ee:e8:54:1e:95:4b:c3: cf:da:83:9f:59:8c:d5:ef:4a:68:a7:73:00:ba:7d:0b:58:92: e8:c3:3a:e9:b1:e1:a8:1d:36:37:e1:79:3f:b2:ae:4c:5e:59: d5:c6:3f:62:64:8e:67:7b:82:9a:d2:f8:e3:96:0f:07:e2:91: 07:eb:75:e5:20:c2:d5:d1:a8:a4:63:a2:df:c3:85:18:8e:75: 4c:23:8b:b1:bd:da:cb:01:ed:06:e8:0d:3e:6c:0b:00:0a:fc: 23:2f:28:c9:24:59:88:37:9d:66:94:33:24:d9:08:7f:ab:d9: 50:a9:71:4b:56:0d:c5:fc:64:41:3c:14:3f:3f:9a:66:35:f8: 05:25:94:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFWPQj8RKNpdj/R5yBlJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWE2MWI1OGMxZDUyZGU1MjJlMDQxMDA5Y2JmY2QxZjdl NTJiN2MwHhcNMjUxMjIyMjIwMTU5WhcNMjUxMjIzMjIwMTU5WjAzMTEwLwYDVQQD EygyMzQxM2NmYzc0YjQ0OGRmZDUzY2I0NzRkNzhhOTQxZjE2ZWRkNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXUXVDCK1PIgFSHT9qjPmDcNf6H2 WlOFuhnQD3dAM2a6VW32COxGqrUpAzoE5Zoli8ZTn9WiBZVZ4Q5raTbZ5V5H+su4 k2Cync0vvNGKvV+Rp8vCL1wYjC3kFSYSGVcu6XD8eiAkIg+CPcI4ER3q5EZvEiVd ihG/UXnJukX6d2Lj11A4gORQmknvcMMPdO9+1UJSFpg7ZLjDnLqBayR/DgqE8GRA Xih6X+lrn0teI33JbsgxJZru/g8XbGOYrF+0bMhwh5VV6WozhvW90s1SYzfrcJpQ stZEbnOWqME7I+n9hpcYvTX4X6vha3RRpMRTncmxArzJnNlIyPoNnLqTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNBPPx0tEjf1Ty0dNeKlB8W7deOMB8GA1UdIwQY MBaAFEBaYbWMHVLeUi4EEAnL/NH35St8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTct ZmUwMTMzY2RhNTM1LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTctZmUwMTMzY2RhNTM1 LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOepB4Lo lToQnAWI3VUqJwyzhAwsbGw4wEiWlMewv/JIKVuw6Tkz33tcVA8E0kOSoIvu6+PJ Nc0WsApDqbcZeQH/VPjFQw+K0k2bjYi7qEMQRwhwodRC8goWKRo/gvQ6Y74Ed2hH l1GCia/z2eFxprJFTqMNNKzu6FQelUvDz9qDn1mM1e9KaKdzALp9C1iS6MM66bHh qB02N+F5P7KuTF5Z1cY/YmSOZ3uCmtL445YPB+KRB+t15SDC1dGopGOi38OFGI51 TCOLsb3aywHtBugNPmwLAAr8Iy8oySRZiDedZpQzJNkIf6vZUKlxS1YNxfxkQTwU Pz+aZjX4BSWUxg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:33 2025 by rpki-client