This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json) Hash identifier: +5Rvst16ZIOqII2fEzKsMSF5wsrxLNOEE8sbCLn243Y= Subject key identifier: 29:F1:D4:B5:C9:81:24:EE:7F:A5:B2:5F:53:97:FE:52:AD:02:2D:23 Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Certificate serial: 019B6E0F8F4C6BFB5A0ED4A186DA17D21E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft Manifest number: 1635 Signing time: Tue 30 Dec 2025 07:01:12 +0000 Manifest this update: Tue 30 Dec 2025 07:01:12 +0000 Manifest next update: Wed 31 Dec 2025 07:01:12 +0000 Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: WUOYe6dQITwjdNxHJqtWrUX89JmH4T8gdVIckzDSg7s=) 2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=) 3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:8f:4c:6b:fb:5a:0e:d4:a1:86:da:17:d2:1e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd Validity Not Before: Dec 30 07:01:12 2025 GMT Not After : Dec 31 07:01:12 2025 GMT Subject: CN=29f1d4b5c98124ee7fa5b25f5397fe52ad022d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:57:4f:68:69:c7:1d:f3:d3:66:44:5a:d3: 79:f3:52:1c:14:62:ec:e6:87:50:e7:08:20:b4:65: f9:1e:8d:68:4a:ac:2f:5c:cc:ff:31:a6:e1:61:9a: 87:46:05:63:f0:9d:50:f1:b4:ca:73:f5:55:ae:cd: 8d:67:6f:4d:2f:8e:60:44:17:10:6b:d1:17:3b:2c: 54:cc:e7:33:22:93:e7:3c:23:23:04:9d:ce:a8:b8: 41:17:e0:df:db:dd:ff:ea:21:bd:0f:db:71:a0:8e: 76:84:18:40:be:dd:2a:e9:b0:c1:78:b1:79:a3:fc: aa:ba:92:ff:3a:39:a3:97:34:5d:d5:f3:6e:37:92: e5:4b:40:21:c7:88:0e:29:77:fe:ad:bf:16:d5:be: 5b:04:f6:bd:1e:69:16:81:94:86:ff:85:8e:50:a3: 13:ea:01:0a:c7:46:39:6c:39:a9:fa:27:20:3c:5a: 86:97:ae:69:85:b0:d3:a2:2d:f3:51:da:34:08:17: 83:07:93:df:f3:28:63:45:19:6d:15:d2:8e:c1:5b: 3e:c0:b0:09:bc:91:2d:35:b9:4c:0c:74:01:10:12: cc:27:db:dd:71:10:28:c2:a0:6b:d0:d9:81:01:54: 88:54:2c:5a:93:fa:43:9a:f3:fd:a2:73:fb:b3:2e: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F1:D4:B5:C9:81:24:EE:7F:A5:B2:5F:53:97:FE:52:AD:02:2D:23 X509v3 Authority Key Identifier: keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:e5:d2:67:f5:5f:38:6a:37:7a:3b:e8:c9:5b:67:f6:b9: 4b:d4:b7:9b:5e:d9:1e:7e:9a:eb:b2:35:82:87:88:33:76:cf: 1e:4f:a0:55:b1:66:ca:93:0f:a9:9c:c8:49:19:2f:13:ff:a0: 0f:a0:67:67:75:dd:35:dc:80:1a:31:41:97:b1:20:52:25:07: d7:4a:98:ee:a8:ec:e4:c3:01:09:cb:99:f2:a1:0a:d8:03:ea: b9:c0:95:98:15:c7:bf:3e:27:b5:76:a0:63:81:3d:0d:98:12: ad:1f:c2:16:a1:a0:c6:40:ba:9c:c2:75:03:2c:e0:80:b8:3d: 2a:e2:4b:51:54:d4:25:13:50:49:ea:b5:cf:e3:d0:fb:29:4e: df:72:2f:3b:1d:cf:51:b7:b7:a1:fc:9b:82:3b:ab:36:83:fa: d2:92:d6:16:16:1b:a2:5a:aa:72:29:0a:a9:30:aa:c5:b6:20: 96:7f:b6:1e:67:70:9f:8b:7c:95:a2:26:96:b4:ad:03:d6:3a: 81:91:68:62:83:92:32:a4:f4:71:96:b2:cc:5a:b6:a5:a7:08: ec:8c:0c:a0:d4:4c:54:b4:a6:e6:4e:71:53:88:eb:d6:c9:73: 69:d8:b6:98:aa:4d:7f:63:ef:26:e7:b3:2f:d2:01:b4:19:61: ef:dd:a5:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD49Ma/taDtShhtoX0h5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1 OTI2ZmQwHhcNMjUxMjMwMDcwMTEyWhcNMjUxMjMxMDcwMTEyWjAzMTEwLwYDVQQD EygyOWYxZDRiNWM5ODEyNGVlN2ZhNWIyNWY1Mzk3ZmU1MmFkMDIyZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eRXT2hpxx3z02ZEWtN581IcFGLs 5odQ5wggtGX5Ho1oSqwvXMz/MabhYZqHRgVj8J1Q8bTKc/VVrs2NZ29NL45gRBcQ a9EXOyxUzOczIpPnPCMjBJ3OqLhBF+Df293/6iG9D9txoI52hBhAvt0q6bDBeLF5 o/yqupL/OjmjlzRd1fNuN5LlS0Ahx4gOKXf+rb8W1b5bBPa9HmkWgZSG/4WOUKMT 6gEKx0Y5bDmp+icgPFqGl65phbDToi3zUdo0CBeDB5Pf8yhjRRltFdKOwVs+wLAJ vJEtNblMDHQBEBLMJ9vdcRAowqBr0NmBAVSIVCxak/pDmvP9onP7sy6HgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnx1LXJgSTuf6WyX1OX/lKtAi0jMB8GA1UdIwQY MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPLl0mf1 XzhqN3o76MlbZ/a5S9S3m17ZHn6a67I1goeIM3bPHk+gVbFmypMPqZzISRkvE/+g D6BnZ3XdNdyAGjFBl7EgUiUH10qY7qjs5MMBCcuZ8qEK2APqucCVmBXHvz4ntXag Y4E9DZgSrR/CFqGgxkC6nMJ1AyzggLg9KuJLUVTUJRNQSeq1z+PQ+ylO33IvOx3P Ube3ofybgjurNoP60pLWFhYbolqqcikKqTCqxbYgln+2Hmdwn4t8laImlrStA9Y6 gZFoYoOSMqT0cZayzFq2pacI7IwMoNRMVLSm5k5xU4jr1slzadi2mKpNf2PvJuez L9IBtBlh792low== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:48 2025 by rpki-client