This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json) Hash identifier: HssjuvnaUj8qZtgXgvIeY1DM/hACnNJmkFinp7aYuVs= Subject key identifier: 5D:E1:8E:4A:EA:68:17:D1:BA:FC:20:C7:3A:85:EE:40:48:D4:7B:DD Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Certificate serial: 019B3E6CABB1C34F7880F62223F855677EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft Manifest number: 16DD Signing time: Sun 21 Dec 2025 01:01:07 +0000 Manifest this update: Sun 21 Dec 2025 01:01:07 +0000 Manifest next update: Mon 22 Dec 2025 01:01:07 +0000 Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: ZwLOIOEgFKysV5CdxI15dwa11Vs7Osh7HKVbpv2MkjI=) 2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:ab:b1:c3:4f:78:80:f6:22:23:f8:55:67:7e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d Validity Not Before: Dec 21 01:01:07 2025 GMT Not After : Dec 22 01:01:07 2025 GMT Subject: CN=5de18e4aea6817d1bafc20c73a85ee4048d47bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:41:65:27:1f:43:c5:5e:41:17:73:da:47: fd:27:65:b1:ab:0b:7a:df:8e:05:97:ab:b2:9b:c4: 08:f1:51:c8:a1:b2:f9:74:39:f9:da:4c:5c:42:4d: e1:9e:bd:cb:6b:f5:2d:52:81:06:19:f1:88:39:fa: 5b:3c:4e:cf:be:44:a5:4c:81:3e:7e:4f:37:63:b3: af:87:55:67:54:99:fc:94:84:0f:b9:7c:df:e2:13: e7:8c:56:4a:a1:c8:7a:8d:af:6b:41:e9:51:49:d6: 15:40:dd:37:8d:8e:a2:c0:8b:49:c9:da:3f:2d:f4: f9:e7:d9:7a:f6:42:de:22:6c:ea:9a:e2:b0:df:58: 7a:43:78:b8:ed:ec:c0:99:be:6a:e9:b8:ea:f1:79: 7e:5c:2b:91:bd:4d:89:1e:ba:5d:8c:03:53:5f:f2: 02:17:3c:5f:59:06:e0:2f:ff:ae:8e:25:87:3d:67: 32:9e:5a:34:5c:e5:fb:f1:90:bd:94:a3:2f:8f:17: 53:c3:8b:ef:10:04:c8:48:0f:5b:f2:78:b2:d5:61: d0:ca:92:90:50:4c:6e:75:25:bb:e0:7c:95:dd:b5: 42:28:55:0e:15:86:8c:b4:1b:5a:03:f9:94:39:6e: ec:d4:c0:c2:e9:70:6d:91:39:e1:5f:5a:4c:b8:01: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:8E:4A:EA:68:17:D1:BA:FC:20:C7:3A:85:EE:40:48:D4:7B:DD X509v3 Authority Key Identifier: keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:ca:28:92:e3:3c:b0:b5:d8:a4:f2:b9:32:0b:63:6c:40: 11:58:42:f6:ef:5e:72:bb:a6:9d:5e:43:c1:9b:ff:ac:3f:6d: df:1f:16:06:44:42:36:6c:97:6f:a6:19:94:e8:ef:2d:9b:a1: 8b:17:94:85:a0:05:26:16:89:14:18:2f:c0:e8:78:f5:d3:4b: d0:49:9b:d8:c2:c2:d6:ac:c4:20:42:a6:48:80:e6:70:10:5f: b7:d8:21:28:47:88:89:4d:d1:72:bf:da:69:e8:12:41:10:fa: 4a:92:b9:0a:38:da:67:03:18:3a:2a:ce:3e:a9:88:6d:b7:46: 23:89:d3:ef:ed:2b:d1:b4:1d:be:16:10:af:e2:5f:b9:25:14: 5e:d3:11:e5:69:9a:f5:35:60:e3:f2:4a:51:7b:6e:37:8a:b0: cf:99:3f:62:3e:62:8e:60:c0:1e:77:ba:a7:78:9b:b2:31:34: b3:08:30:49:7a:86:b0:2f:9b:f4:d3:6e:82:34:fe:fe:e2:94: ae:d2:d1:e8:5a:c2:99:f6:ad:df:7a:fe:8d:e2:36:c1:e3:89: ee:83:0f:92:5e:52:47:9d:bd:d5:ad:53:18:1e:20:49:7d:83: f8:8a:25:23:8f:00:45:62:a2:92:b5:68:9b:7c:02:f4:3b:bb: 05:e3:3e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKuxw094gPYiI/hVZ37eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm MmY3N2QwHhcNMjUxMjIxMDEwMTA3WhcNMjUxMjIyMDEwMTA3WjAzMTEwLwYDVQQD Eyg1ZGUxOGU0YWVhNjgxN2QxYmFmYzIwYzczYTg1ZWU0MDQ4ZDQ3YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkhBZScfQ8VeQRdz2kf9J2Wxqwt6 344Fl6uym8QI8VHIobL5dDn52kxcQk3hnr3La/UtUoEGGfGIOfpbPE7PvkSlTIE+ fk83Y7Ovh1VnVJn8lIQPuXzf4hPnjFZKoch6ja9rQelRSdYVQN03jY6iwItJydo/ LfT559l69kLeImzqmuKw31h6Q3i47ezAmb5q6bjq8Xl+XCuRvU2JHrpdjANTX/IC FzxfWQbgL/+ujiWHPWcynlo0XOX78ZC9lKMvjxdTw4vvEATISA9b8niy1WHQypKQ UExudSW74HyV3bVCKFUOFYaMtBtaA/mUOW7s1MDC6XBtkTnhX1pMuAHdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3hjkrqaBfRuvwgxzqF7kBI1HvdMB8GA1UdIwQY MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs3KKJLj PLC12KTyuTILY2xAEVhC9u9ecrumnV5DwZv/rD9t3x8WBkRCNmyXb6YZlOjvLZuh ixeUhaAFJhaJFBgvwOh49dNL0Emb2MLC1qzEIEKmSIDmcBBft9ghKEeIiU3Rcr/a aegSQRD6SpK5CjjaZwMYOirOPqmIbbdGI4nT7+0r0bQdvhYQr+JfuSUUXtMR5Wma 9TVg4/JKUXtuN4qwz5k/Yj5ijmDAHne6p3ibsjE0swgwSXqGsC+b9NNugjT+/uKU rtLR6FrCmfat33r+jeI2weOJ7oMPkl5SR5291a1TGB4gSX2D+IolI48ARWKikrVo m3wC9Du7BeM+QA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:49 2025 by rpki-client