This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json) Hash identifier: qftQWgpU/JbuZgvf3C/qj4PTq3O900Z89Hrbj3zsuyg= Subject key identifier: EC:68:AB:B5:94:C8:16:57:E8:86:4D:2E:A2:68:C8:9F:6E:11:98:56 Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Certificate serial: 019B405B63A9A5D13E0F831666D0C50A86B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft Manifest number: 095D Signing time: Sun 21 Dec 2025 10:01:29 +0000 Manifest this update: Sun 21 Dec 2025 10:01:29 +0000 Manifest next update: Mon 22 Dec 2025 10:01:29 +0000 Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: /ba11Zp/r8VWEuoEOo9G1zNq9kSKkM2xS8Vdu07Eydg=) 2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:63:a9:a5:d1:3e:0f:83:16:66:d0:c5:0a:86:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45 Validity Not Before: Dec 21 10:01:29 2025 GMT Not After : Dec 22 10:01:29 2025 GMT Subject: CN=ec68abb594c81657e8864d2ea268c89f6e119856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:0e:ce:c7:16:ef:d4:02:54:0c:ae:74:c9: bb:c8:1b:e4:b7:39:af:65:1b:82:93:60:2d:b4:71: 0a:6b:b2:38:08:7e:fc:e9:7b:a6:9d:18:ee:98:8f: f5:a1:1e:e0:09:02:82:3d:a1:50:f7:26:0d:54:d8: 88:6e:8a:98:c1:43:da:07:ab:b2:9a:32:21:22:4d: 0b:fc:e9:39:86:82:24:61:64:2c:06:e9:c3:ca:d3: 00:0a:49:64:57:41:0d:41:ef:f1:0f:e4:e1:70:ba: 2b:46:64:08:cd:96:f0:c3:1f:61:f0:4f:1a:d1:bf: 34:c5:3c:e3:a8:14:e1:8c:a6:00:9e:21:2d:ba:d2: f8:38:e5:82:b6:f0:e2:4f:64:f4:d2:6e:17:a3:52: 65:fd:e2:f1:94:4e:e6:61:e6:d9:d6:91:55:82:ab: 2a:e6:c0:bd:7a:75:b9:21:b6:81:74:5d:f3:bc:78: 75:0f:e1:d6:70:38:0e:0e:6c:c1:d6:bf:f2:51:7c: cb:1b:40:d8:44:cc:aa:cd:5f:0f:e2:bf:c2:15:ac: 55:57:f5:6e:7d:47:74:05:c0:35:ae:3c:39:9e:7d: 87:d2:05:f2:1d:35:c0:f2:d2:38:bb:77:40:06:14: db:8e:ef:21:aa:40:9f:a9:a0:54:b3:0d:17:43:ce: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:AB:B5:94:C8:16:57:E8:86:4D:2E:A2:68:C8:9F:6E:11:98:56 X509v3 Authority Key Identifier: keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:33:e7:73:de:7e:1d:39:93:7c:9b:76:0b:a3:45:bd:97:0a: 42:dc:0d:a4:06:d8:ad:1f:19:bd:ed:c1:dd:c7:2a:3b:58:70: fa:ad:93:f7:13:ce:28:b5:73:c4:54:a1:97:33:69:5e:a0:fb: 6b:cc:c2:c4:2e:75:d2:90:80:d6:78:54:7a:3b:44:26:46:22: b3:ad:93:f7:9a:17:da:ce:70:b7:4b:47:e8:d3:4e:dc:54:a8: 36:5f:6b:91:45:70:5a:22:31:ef:01:72:15:35:f8:9b:84:3a: a7:aa:28:79:09:7a:73:17:15:5a:26:3d:6f:f1:a8:1a:4b:85: e7:c1:02:4a:b2:04:64:44:17:67:c5:96:96:4f:a9:6b:ec:ad: 39:0a:fe:b7:ec:89:31:a0:80:bc:3f:e8:d5:1f:b6:e3:a7:78: 5a:ee:f8:68:cd:f4:2e:2e:94:01:6b:b6:47:72:21:80:8b:b4: 32:51:0e:b5:1e:36:87:ac:29:c2:30:4a:02:79:c3:5b:dc:89: b3:e4:cc:44:ec:a8:e4:0d:c1:cb:ef:87:a0:09:67:48:3e:85: 1c:38:35:de:bf:b7:78:7c:04:a0:b0:58:40:42:5a:a3:72:27: 66:e5:9b:c4:83:af:62:31:b3:e9:4b:2c:80:f7:a2:71:f4:37: bd:71:e3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2OppdE+D4MWZtDFCoa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw ZDlkNDUwHhcNMjUxMjIxMTAwMTI5WhcNMjUxMjIyMTAwMTI5WjAzMTEwLwYDVQQD EyhlYzY4YWJiNTk0YzgxNjU3ZTg4NjRkMmVhMjY4Yzg5ZjZlMTE5ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nkOzscW79QCVAyudMm7yBvktzmv ZRuCk2AttHEKa7I4CH786XumnRjumI/1oR7gCQKCPaFQ9yYNVNiIboqYwUPaB6uy mjIhIk0L/Ok5hoIkYWQsBunDytMACklkV0ENQe/xD+ThcLorRmQIzZbwwx9h8E8a 0b80xTzjqBThjKYAniEtutL4OOWCtvDiT2T00m4Xo1Jl/eLxlE7mYebZ1pFVgqsq 5sC9enW5IbaBdF3zvHh1D+HWcDgODmzB1r/yUXzLG0DYRMyqzV8P4r/CFaxVV/Vu fUd0BcA1rjw5nn2H0gXyHTXA8tI4u3dABhTbju8hqkCfqaBUsw0XQ86qzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxoq7WUyBZX6IZNLqJoyJ9uEZhWMB8GA1UdIwQY MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTPnc95+ HTmTfJt2C6NFvZcKQtwNpAbYrR8Zve3B3ccqO1hw+q2T9xPOKLVzxFShlzNpXqD7 a8zCxC510pCA1nhUejtEJkYis62T95oX2s5wt0tH6NNO3FSoNl9rkUVwWiIx7wFy FTX4m4Q6p6ooeQl6cxcVWiY9b/GoGkuF58ECSrIEZEQXZ8WWlk+pa+ytOQr+t+yJ MaCAvD/o1R+246d4Wu74aM30Li6UAWu2R3IhgIu0MlEOtR42h6wpwjBKAnnDW9yJ s+TMROyo5A3By++HoAlnSD6FHDg13r+3eHwEoLBYQEJao3InZuWbxIOvYjGz6Uss gPeicfQ3vXHjaA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:28 2025 by rpki-client