This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json) Hash identifier: U7GtwmllJetNdXdJeDVkqKeKS2B93WVMqCA8nqHd4SM= Subject key identifier: 60:4B:2A:6A:9F:75:08:6A:CA:DA:E6:D0:AE:7D:31:4B:81:2F:47:1F Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Certificate serial: 019B50E0BDF8F9109D6A6ECA70CE60559704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft Manifest number: 1799 Signing time: Wed 24 Dec 2025 15:01:04 +0000 Manifest this update: Wed 24 Dec 2025 15:01:04 +0000 Manifest next update: Thu 25 Dec 2025 15:01:04 +0000 Files and hashes: 1: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=) 2: JXRwLyORpbcFfOkjraKAN1359es.roa (hash: mZE8AHoKrvk4ZHGUVFzeByWnnas5X1rVeFc8IH1Z7sw=) 3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: DHv1ZQkBkIHzQhie4MCr7+EpwMRWWdBs3xpxPeV75U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:bd:f8:f9:10:9d:6a:6e:ca:70:ce:60:55:97:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Validity Not Before: Dec 24 15:01:04 2025 GMT Not After : Dec 25 15:01:04 2025 GMT Subject: CN=604b2a6a9f75086acadae6d0ae7d314b812f471f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:bc:2a:b9:fe:ce:69:d4:a4:81:96:26:71: f3:50:23:b7:f8:40:d9:5d:15:44:bf:07:09:eb:92: 3b:d9:cc:42:ac:75:cb:52:34:ac:6b:4e:29:ff:47: b3:97:9c:7e:fc:18:da:d5:68:c9:61:82:bc:e9:76: 5f:01:86:b7:42:f5:6d:b8:74:4c:79:43:ba:23:82: c8:24:5e:2f:f9:15:1a:16:d3:e3:f4:30:81:c6:82: 7e:7e:ae:97:ba:a4:3f:45:c3:11:af:1e:7f:e8:8f: 88:df:65:37:ab:26:68:48:c5:f7:18:87:62:7d:8e: 91:41:e6:87:2c:40:44:f8:5d:2e:9f:eb:6a:4c:96: ed:86:b1:b2:ee:4b:7d:c9:f1:12:bc:ef:33:3c:62: 78:33:e0:bd:e1:46:26:8c:7d:e3:52:d0:f1:61:6e: 7d:81:65:c6:be:ff:20:f1:b8:9b:d7:0f:03:c7:2a: dd:83:d8:5d:43:2b:52:03:16:d1:e9:d2:44:5e:84: 5b:3f:e2:bb:cb:e8:cd:ca:14:8c:25:8b:0e:e3:69: 30:58:33:b5:00:8d:f7:b6:2a:2a:e3:3d:a0:0e:54: e9:1b:a6:0a:c1:95:e9:bc:03:84:b1:28:35:ba:95: ac:bb:4c:64:42:3f:7b:b3:fa:da:9e:e3:f9:be:32: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:2A:6A:9F:75:08:6A:CA:DA:E6:D0:AE:7D:31:4B:81:2F:47:1F X509v3 Authority Key Identifier: keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:05:b6:91:41:04:96:59:88:3e:52:cc:fe:cf:dc:2a:30:43: a1:92:3f:77:20:8a:e9:76:63:12:18:b6:83:18:ee:bf:a2:ab: d7:5a:dc:68:66:1d:4b:de:4e:d8:34:26:74:29:8c:c4:10:79: 69:4c:51:00:de:b2:71:98:3e:32:c1:03:cd:48:18:08:f5:17: d8:7b:05:b8:fd:18:59:7d:87:88:d6:c6:c5:4f:2c:0b:62:bd: d0:74:d2:3b:ea:9f:e4:1f:27:60:77:17:df:d7:42:2f:0c:ec: 97:51:26:d0:7f:71:b5:04:d7:7e:e8:df:3e:de:b5:8f:c8:4e: 6d:ca:65:ca:07:c7:5c:81:60:8c:aa:f8:7a:6c:35:33:7d:08: 24:fa:04:70:9f:f8:39:8c:12:96:63:a4:5c:1a:6e:a5:3a:81: 81:53:df:c1:22:5f:21:5e:ac:1f:de:5c:25:f1:3e:24:85:02: ad:ed:82:8a:d4:51:ee:17:1f:20:a2:0e:c0:51:c3:98:3c:bf: 82:8a:f5:d2:6d:d5:77:59:2c:2b:0f:9e:98:63:cc:45:24:9b: 11:f0:63:6f:fb:26:5a:a0:9e:d5:7e:1e:52:36:b8:b3:a4:6f: 30:8c:16:18:0d:eb:a4:41:8a:43:9b:09:a0:e8:76:e3:87:03: 14:90:8a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4L34+RCdam7KcM5gVZcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz NzRlZDgwHhcNMjUxMjI0MTUwMTA0WhcNMjUxMjI1MTUwMTA0WjAzMTEwLwYDVQQD Eyg2MDRiMmE2YTlmNzUwODZhY2FkYWU2ZDBhZTdkMzE0YjgxMmY0NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GS8Krn+zmnUpIGWJnHzUCO3+EDZ XRVEvwcJ65I72cxCrHXLUjSsa04p/0ezl5x+/Bja1WjJYYK86XZfAYa3QvVtuHRM eUO6I4LIJF4v+RUaFtPj9DCBxoJ+fq6XuqQ/RcMRrx5/6I+I32U3qyZoSMX3GIdi fY6RQeaHLEBE+F0un+tqTJbthrGy7kt9yfESvO8zPGJ4M+C94UYmjH3jUtDxYW59 gWXGvv8g8bib1w8Dxyrdg9hdQytSAxbR6dJEXoRbP+K7y+jNyhSMJYsO42kwWDO1 AI33tioq4z2gDlTpG6YKwZXpvAOEsSg1upWsu0xkQj97s/ranuP5vjLujwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBLKmqfdQhqytrm0K59MUuBL0cfMB8GA1UdIwQY MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4 LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQW2kUEE llmIPlLM/s/cKjBDoZI/dyCK6XZjEhi2gxjuv6Kr11rcaGYdS95O2DQmdCmMxBB5 aUxRAN6ycZg+MsEDzUgYCPUX2HsFuP0YWX2HiNbGxU8sC2K90HTSO+qf5B8nYHcX 39dCLwzsl1Em0H9xtQTXfujfPt61j8hObcplygfHXIFgjKr4emw1M30IJPoEcJ/4 OYwSlmOkXBpupTqBgVPfwSJfIV6sH95cJfE+JIUCre2CitRR7hcfIKIOwFHDmDy/ gor10m3Vd1ksKw+emGPMRSSbEfBjb/smWqCe1X4eUja4s6RvMIwWGA3rpEGKQ5sJ oOh244cDFJCKCA== -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:37 2025 by rpki-client