This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json) Hash identifier: kh4Np4emMtBAWHgJR2YYir7XekrgX1+nER48Mp0itqo= Subject key identifier: F0:6E:E4:4C:E1:C8:04:A1:18:D2:50:00:3E:50:4E:AE:E3:ED:C2:4A Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Certificate serial: 019B4DE0C861B376C2C1C4673AC952DBC69D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft Manifest number: 0B05 Signing time: Wed 24 Dec 2025 01:02:15 +0000 Manifest this update: Wed 24 Dec 2025 01:02:15 +0000 Manifest next update: Thu 25 Dec 2025 01:02:15 +0000 Files and hashes: 1: 1-Dwv_TCbVeakK-33ayGrBDh0q30.roa (hash: vrqoMLfQh6NOVRzCXTYlgGuOaUapn06Oyqq7ThnzM7E=) 2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: faVYAsG5oZT6uPMyqHUdogkcyG6qlIX0Dz32NSGb+lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:c8:61:b3:76:c2:c1:c4:67:3a:c9:52:db:c6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Validity Not Before: Dec 24 01:02:15 2025 GMT Not After : Dec 25 01:02:15 2025 GMT Subject: CN=f06ee44ce1c804a118d250003e504eaee3edc24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:3e:6f:30:e4:6a:3d:33:3f:50:0a:d2:a4: ac:a2:6e:eb:f7:d4:67:32:57:85:f0:e6:bd:a3:b6: f3:99:bd:e4:0c:c9:c0:5d:06:ac:bc:a0:97:f5:eb: a1:7d:97:b6:be:31:1a:3c:b7:c0:51:01:1b:45:8c: d9:03:68:f2:0c:24:c4:56:68:22:51:37:c6:87:41: a9:dd:27:c7:65:95:a9:0a:f6:c9:39:b2:6e:93:2a: ed:93:6b:e7:4f:3c:6d:cb:e5:1d:c6:09:5d:4c:b5: df:55:1c:44:17:39:fe:74:04:a5:9a:17:02:37:bb: d5:45:9d:c6:76:76:29:29:ce:56:65:f2:25:f7:95: b6:6b:39:e0:b5:d0:e2:90:7d:a9:50:b5:b2:a1:51: ca:95:65:93:6b:ee:f2:df:7a:e8:90:45:5c:8a:5a: 04:7d:b4:4d:d1:c4:e7:7d:0a:bf:e2:5a:9c:f1:c7: b1:92:ca:25:46:f5:d3:53:20:1e:d5:b4:82:55:a2: f4:a4:96:96:26:14:eb:0b:67:21:74:70:63:10:a7: ee:11:19:b5:d3:61:f1:b7:3c:ff:d8:f9:a4:35:49: 27:f7:07:38:57:e1:79:fc:20:ac:0d:52:4a:b4:4e: 37:fa:a3:8b:29:f3:c3:e2:29:14:f2:d9:ae:4a:d1: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:E4:4C:E1:C8:04:A1:18:D2:50:00:3E:50:4E:AE:E3:ED:C2:4A X509v3 Authority Key Identifier: keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b6:7d:93:0e:1b:4b:a9:0b:ce:9d:a1:5f:e5:d7:c8:ad:37: 12:20:c7:fc:e7:65:27:de:2e:ec:bb:93:cd:b9:bf:e8:95:44: f2:b4:fe:f7:21:cb:5e:8a:7b:4c:24:eb:5a:be:95:e8:f2:4d: bd:9e:3d:0a:b2:c9:fe:e0:56:cb:d1:b2:dc:b7:54:f1:2c:12: d7:87:2c:6c:fc:b4:d0:48:82:3a:6b:f1:92:76:68:d0:34:56: a1:92:73:7b:47:e2:27:b5:a6:b7:f8:90:b1:5f:4f:a4:92:0a: 62:bb:81:a2:2b:8d:cb:75:92:26:05:a2:5e:8a:87:09:e3:74: 73:83:09:b2:25:14:b1:3a:00:92:66:9b:db:9b:74:a5:9e:aa: 0f:30:a1:91:2f:f2:e3:42:66:de:78:59:97:0b:d7:39:ef:4b: 4a:79:5c:d2:54:39:f9:8b:48:d2:1d:2f:b1:15:33:9f:b1:fa: 74:d5:a7:7a:61:d8:c5:4b:b6:f0:9c:0d:71:90:19:c3:51:ba: 6d:5b:8d:7a:2c:d9:83:13:29:b7:3b:dc:4e:b9:56:5a:a6:d0: 10:95:a7:4d:3a:12:04:94:29:59:8b:a7:e5:e9:d8:ce:6f:7b: 17:93:4b:74:8d:b9:5e:a2:c5:31:c8:a5:f8:a4:50:da:df:34: 2b:1c:54:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Mhhs3bCwcRnOslS28adMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2 MDJmYjQwHhcNMjUxMjI0MDEwMjE1WhcNMjUxMjI1MDEwMjE1WjAzMTEwLwYDVQQD EyhmMDZlZTQ0Y2UxYzgwNGExMThkMjUwMDAzZTUwNGVhZWUzZWRjMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlU+bzDkaj0zP1AK0qSsom7r99Rn MleF8Oa9o7bzmb3kDMnAXQasvKCX9euhfZe2vjEaPLfAUQEbRYzZA2jyDCTEVmgi UTfGh0Gp3SfHZZWpCvbJObJukyrtk2vnTzxty+UdxgldTLXfVRxEFzn+dASlmhcC N7vVRZ3GdnYpKc5WZfIl95W2azngtdDikH2pULWyoVHKlWWTa+7y33rokEVciloE fbRN0cTnfQq/4lqc8cexksolRvXTUyAe1bSCVaL0pJaWJhTrC2chdHBjEKfuERm1 02Hxtzz/2PmkNUkn9wc4V+F5/CCsDVJKtE43+qOLKfPD4ikU8tmuStE1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBu5EzhyAShGNJQAD5QTq7j7cJKMB8GA1UdIwQY MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt NDc5NzRmNWM3MDRhLzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7Z9kw4b S6kLzp2hX+XXyK03EiDH/OdlJ94u7LuTzbm/6JVE8rT+9yHLXop7TCTrWr6V6PJN vZ49CrLJ/uBWy9Gy3LdU8SwS14csbPy00EiCOmvxknZo0DRWoZJze0fiJ7Wmt/iQ sV9PpJIKYruBoiuNy3WSJgWiXoqHCeN0c4MJsiUUsToAkmab25t0pZ6qDzChkS/y 40Jm3nhZlwvXOe9LSnlc0lQ5+YtI0h0vsRUzn7H6dNWnemHYxUu28JwNcZAZw1G6 bVuNeizZgxMptzvcTrlWWqbQEJWnTToSBJQpWYun5enYzm97F5NLdI25XqLFMcil +KRQ2t80KxxUlA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:50 2025 by rpki-client