This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json) Hash identifier: a186jCHv4iVym2mOGVfXqc+Pql7f38kELp/Iw3XTE6U= Subject key identifier: 33:06:40:52:7C:33:D5:E5:33:50:86:F6:12:9E:02:5E:F7:98:C5:FC Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Certificate serial: 019B39EAF487F5E3FBC17FA93FD79815D5D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft Manifest number: 068C Signing time: Sat 20 Dec 2025 04:00:57 +0000 Manifest this update: Sat 20 Dec 2025 04:00:57 +0000 Manifest next update: Sun 21 Dec 2025 04:00:57 +0000 Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=) 2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: 1eHN/zWBzkHlhhstT6CAmLEcrEsWGDVfIYsVzWO9tjY=) 3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:f4:87:f5:e3:fb:c1:7f:a9:3f:d7:98:15:d5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1 Validity Not Before: Dec 20 04:00:57 2025 GMT Not After : Dec 21 04:00:57 2025 GMT Subject: CN=330640527c33d5e5335086f6129e025ef798c5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:64:b6:88:c4:40:56:82:76:3f:59:89:9e: a4:0f:fd:75:5f:e9:94:d2:b2:04:72:14:91:04:90: 7e:63:7a:77:b7:7e:bf:a6:98:ec:1a:ed:83:ce:d6: 99:3f:55:2b:44:91:e9:b1:46:19:ec:4f:04:42:d9: f7:dc:ff:30:5b:1b:1f:91:b2:18:11:82:df:9b:1f: 57:ae:35:de:dc:63:52:cf:e4:b9:62:7e:ac:c6:87: 0d:2a:cd:10:29:08:43:d5:60:df:cf:71:0e:f9:78: 2c:79:1a:4c:03:fa:9f:d9:fe:e0:56:7e:29:99:94: aa:aa:fb:60:ec:a8:75:6a:00:b0:d3:b6:73:81:a5: 3d:6b:97:fc:b2:b6:f8:fa:a2:00:24:bb:45:c5:24: 0a:ed:5a:22:ac:a5:ae:40:e5:53:66:60:19:82:9d: c8:2b:1f:e9:f0:95:26:08:e1:46:66:a4:35:af:ae: b0:d8:2a:65:9b:10:7a:c2:19:99:fb:3a:6b:f2:a1: 0d:63:62:1d:87:25:5d:64:4c:72:0d:05:af:41:26: fb:b4:6f:68:1e:54:f6:b3:85:c5:cb:ce:b7:82:f9: 42:cb:97:4e:65:9e:55:f3:b1:5e:48:9d:47:63:da: be:b7:16:d6:e2:79:a8:bf:56:07:0d:09:35:91:2d: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:40:52:7C:33:D5:E5:33:50:86:F6:12:9E:02:5E:F7:98:C5:FC X509v3 Authority Key Identifier: keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:27:c5:1a:53:08:28:2a:af:81:78:8f:d9:61:1e:48:06:00: 53:dd:4d:0f:8b:28:b6:20:c0:91:cc:fc:f5:b0:e3:aa:f2:1b: a6:e4:2b:22:cd:8f:7c:ad:a8:d0:19:28:9c:35:70:3a:e7:f5: 73:31:3d:73:5e:71:25:bf:2e:a4:50:d0:cd:39:46:ba:a7:d0: b2:15:f2:15:48:b6:e6:52:9f:c8:4c:35:40:63:77:60:60:2e: 18:91:b9:d4:48:88:49:02:a8:98:c5:ae:a7:34:fb:9c:2b:93: 05:32:fb:f4:40:5e:e8:1f:6f:36:88:f7:b4:ea:46:02:f2:48: f7:83:66:dc:cf:19:ef:31:a3:0c:5e:9f:e7:4a:0e:b2:67:89: ce:41:00:c0:50:e0:4c:da:3c:82:90:30:b7:6f:b2:8c:b9:c0: b1:eb:59:d1:9f:a4:41:4c:5e:39:77:28:5f:12:8c:bf:ab:8f: 99:5f:87:f2:7d:6b:2e:81:86:2d:2a:79:e1:9b:ba:7b:e6:a3: f0:d6:f5:8b:bd:6e:22:bb:e2:c5:bb:d7:88:44:2f:ac:da:6b: 58:35:cf:8f:d7:88:d2:bc:0f:6f:1f:19:1c:5a:e9:53:d5:4c: f8:f0:e1:d8:3f:87:91:2d:a0:41:04:52:9d:e2:91:10:e5:3d: e4:8c:d8:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56vSH9eP7wX+pP9eYFdXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx MTcxZjEwHhcNMjUxMjIwMDQwMDU3WhcNMjUxMjIxMDQwMDU3WjAzMTEwLwYDVQQD EygzMzA2NDA1MjdjMzNkNWU1MzM1MDg2ZjYxMjllMDI1ZWY3OThjNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8VktojEQFaCdj9ZiZ6kD/11X+mU 0rIEchSRBJB+Y3p3t36/ppjsGu2DztaZP1UrRJHpsUYZ7E8EQtn33P8wWxsfkbIY EYLfmx9XrjXe3GNSz+S5Yn6sxocNKs0QKQhD1WDfz3EO+XgseRpMA/qf2f7gVn4p mZSqqvtg7Kh1agCw07ZzgaU9a5f8srb4+qIAJLtFxSQK7VoirKWuQOVTZmAZgp3I Kx/p8JUmCOFGZqQ1r66w2CplmxB6whmZ+zpr8qENY2IdhyVdZExyDQWvQSb7tG9o HlT2s4XFy863gvlCy5dOZZ5V87FeSJ1HY9q+txbW4nmov1YHDQk1kS0VOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMGQFJ8M9XlM1CG9hKeAl73mMX8MB8GA1UdIwQY MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSfFGlMI KCqvgXiP2WEeSAYAU91ND4sotiDAkcz89bDjqvIbpuQrIs2PfK2o0BkonDVwOuf1 czE9c15xJb8upFDQzTlGuqfQshXyFUi25lKfyEw1QGN3YGAuGJG51EiISQKomMWu pzT7nCuTBTL79EBe6B9vNoj3tOpGAvJI94Nm3M8Z7zGjDF6f50oOsmeJzkEAwFDg TNo8gpAwt2+yjLnAsetZ0Z+kQUxeOXcoXxKMv6uPmV+H8n1rLoGGLSp54Zu6e+aj 8Nb1i71uIrvixbvXiEQvrNprWDXPj9eI0rwPbx8ZHFrpU9VM+PDh2D+HkS2gQQRS neKREOU95IzYLA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:43:22 2025 by rpki-client