This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json) Hash identifier: qeHQXMacWIHETsx/hjVb81eJ139z0wQojyt7FB/EmqM= Subject key identifier: DB:5E:29:4E:5A:0D:2A:05:42:BB:FD:F7:AF:7D:E5:51:BE:49:28:44 Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Certificate serial: 019B3F114C96C0BFC6ABBD101BB9F5788448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft Manifest number: 094E Signing time: Sun 21 Dec 2025 04:00:56 +0000 Manifest this update: Sun 21 Dec 2025 04:00:56 +0000 Manifest next update: Mon 22 Dec 2025 04:00:56 +0000 Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: fahrYSSAPG+xT/GTtupUPo3h6Y2H1OMof//XTurPe+4=) 2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4c:96:c0:bf:c6:ab:bd:10:1b:b9:f5:78:84:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Validity Not Before: Dec 21 04:00:56 2025 GMT Not After : Dec 22 04:00:56 2025 GMT Subject: CN=db5e294e5a0d2a0542bbfdf7af7de551be492844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:3e:36:2f:08:04:7c:da:d9:f9:b9:f9:a5: c5:6a:14:6e:21:c7:a8:b2:19:37:42:f9:97:82:c8: 13:14:b1:d1:06:6d:a9:7a:e5:35:41:f9:7d:7c:c2: 6f:3c:9e:4c:ef:df:d0:ac:61:dd:ca:55:01:3a:09: ef:52:5f:5a:6e:17:22:12:90:45:38:c2:49:44:5d: a0:54:0b:c4:7f:e3:cd:27:f1:88:bd:df:f8:c0:f4: 37:e6:bb:91:2c:f2:cd:b1:ba:e6:19:28:50:10:7a: a8:47:05:0c:e4:c0:8f:ca:4e:88:92:10:1e:4e:36: 2a:e8:62:fb:6c:74:61:be:52:12:a3:3a:ca:2c:db: d1:86:12:5e:47:75:77:1e:95:56:5a:e4:a9:16:03: 64:c9:8d:f6:3f:05:46:9c:49:18:1d:65:19:c5:13: c8:17:62:1a:5d:1b:64:f5:07:87:ba:ca:8e:44:2e: a7:4e:8d:6f:4e:21:ae:f8:a5:c7:f0:86:3c:22:0e: af:bd:2d:f2:5d:d8:6a:11:64:42:13:9e:40:e0:7e: a6:a8:73:8e:c5:01:5e:1c:bf:13:c9:44:17:2b:11: 68:d9:44:3a:1d:51:42:b7:88:08:2e:ba:b8:bb:9b: cd:10:b8:fc:81:56:1c:da:1a:fb:b4:f8:52:32:3c: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5E:29:4E:5A:0D:2A:05:42:BB:FD:F7:AF:7D:E5:51:BE:49:28:44 X509v3 Authority Key Identifier: keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:61:d9:0b:b4:b4:9f:c5:ee:d7:24:2f:f3:28:3d:93:2b:49: 0c:64:b6:59:84:21:d4:45:6e:e1:4c:c2:ed:d8:e2:51:b4:5e: 2a:26:a7:29:5b:c0:b5:7f:c0:5a:d2:f3:c2:33:fb:9b:57:94: 1a:55:ce:b4:e2:74:85:67:4f:2c:a0:6d:5c:0e:95:c1:7d:3f: e9:4a:3b:5e:ec:5c:56:e4:91:00:45:f9:7c:c0:c3:c3:6c:31: 7a:da:80:61:62:34:cc:6a:c8:a4:5a:6b:ef:cd:41:da:f1:b6: fd:27:66:65:c7:66:65:5c:ec:c0:cd:93:4f:3c:7f:da:f5:4b: 98:b6:29:f3:c1:30:11:eb:2c:7e:cf:95:4c:0e:3b:3f:9e:a6: 3b:61:11:a8:77:4d:39:b4:ad:5e:1a:8d:ee:4b:e7:ae:f7:30: 5b:3a:d8:f0:81:9d:bf:0a:93:a5:f6:22:1b:51:b8:d6:67:43: ed:41:f3:89:9b:80:20:4a:49:c1:35:a6:a3:d3:e5:d3:3a:44: 4d:13:7b:22:62:32:85:47:b4:25:9e:e9:82:f9:6e:3f:ee:f8: c1:e6:f3:fd:26:56:3a:ad:b2:62:76:e4:0f:97:74:22:0c:87: 2e:2a:ff:8d:d9:5a:10:2e:01:74:dc:68:7d:8e:c4:52:34:a4: a9:03:cb:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUyWwL/Gq70QG7n1eIRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3 ODNhODYwHhcNMjUxMjIxMDQwMDU2WhcNMjUxMjIyMDQwMDU2WjAzMTEwLwYDVQQD EyhkYjVlMjk0ZTVhMGQyYTA1NDJiYmZkZjdhZjdkZTU1MWJlNDkyODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw88+Ni8IBHza2fm5+aXFahRuIceo shk3QvmXgsgTFLHRBm2peuU1Qfl9fMJvPJ5M79/QrGHdylUBOgnvUl9abhciEpBF OMJJRF2gVAvEf+PNJ/GIvd/4wPQ35ruRLPLNsbrmGShQEHqoRwUM5MCPyk6IkhAe TjYq6GL7bHRhvlISozrKLNvRhhJeR3V3HpVWWuSpFgNkyY32PwVGnEkYHWUZxRPI F2IaXRtk9QeHusqORC6nTo1vTiGu+KXH8IY8Ig6vvS3yXdhqEWRCE55A4H6mqHOO xQFeHL8TyUQXKxFo2UQ6HVFCt4gILrq4u5vNELj8gVYc2hr7tPhSMjxvawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNteKU5aDSoFQrv996995VG+SShEMB8GA1UdIwQY MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4 LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmHZC7S0 n8Xu1yQv8yg9kytJDGS2WYQh1EVu4UzC7djiUbReKianKVvAtX/AWtLzwjP7m1eU GlXOtOJ0hWdPLKBtXA6VwX0/6Uo7XuxcVuSRAEX5fMDDw2wxetqAYWI0zGrIpFpr 781B2vG2/SdmZcdmZVzswM2TTzx/2vVLmLYp88EwEessfs+VTA47P56mO2ERqHdN ObStXhqN7kvnrvcwWzrY8IGdvwqTpfYiG1G41mdD7UHziZuAIEpJwTWmo9Pl0zpE TRN7ImIyhUe0JZ7pgvluP+74webz/SZWOq2yYnbkD5d0IgyHLir/jdlaEC4BdNxo fY7EUjSkqQPLQA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:06:41 2025 by rpki-client