This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json) Hash identifier: 7+gElg/YFI1fH550YkQGRodD5esirF2Ev51kQgSltIk= Subject key identifier: F0:D8:44:BA:72:FC:F9:C2:32:E2:65:0E:2D:A7:6B:35:CC:64:91:21 Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Certificate serial: 019B52CEFB3DCCC5223D20FE2710E9C1D36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft Manifest number: 0A4A Signing time: Thu 25 Dec 2025 00:00:54 +0000 Manifest this update: Thu 25 Dec 2025 00:00:54 +0000 Manifest next update: Fri 26 Dec 2025 00:00:54 +0000 Files and hashes: 1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: 2O4xZsp8qWr3DV02w1Q7l9gWkGWo0Af9c/pEGZcBtb4=) 2: tDo_atpT6VLkLCUrGS5di7JdOpY.roa (hash: 34FZjfIchoZn3cBM50GZegDU3woCBReTpheCA5hB7FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:fb:3d:cc:c5:22:3d:20:fe:27:10:e9:c1:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Validity Not Before: Dec 25 00:00:54 2025 GMT Not After : Dec 26 00:00:54 2025 GMT Subject: CN=f0d844ba72fcf9c232e2650e2da76b35cc649121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:3c:54:97:73:01:54:e6:8e:4d:8e:bd:65: e6:5c:d8:4b:b5:48:57:c9:e3:a3:35:c0:2f:45:b2: b3:e7:53:af:24:f2:c3:ed:a9:bf:a7:3d:33:cd:b0: ce:f3:19:dc:ad:e5:0e:ff:8d:39:7b:3d:64:5f:47: c3:68:1c:96:a3:c6:7e:c2:c5:8a:d5:8e:da:84:35: 71:01:53:71:cf:71:94:ed:3c:e6:86:36:b2:e2:36: f8:e4:1e:ee:6c:f8:a0:1e:98:e9:6c:0e:51:ce:1c: f0:c4:27:05:48:0b:f6:6c:99:5e:bd:f9:b6:e6:81: d0:31:13:75:cd:6e:d2:99:9d:64:e6:12:a2:b2:51: 46:d8:8e:ac:40:c6:d7:5f:9d:c9:36:43:65:91:b9: 9a:d9:5b:08:38:80:3d:54:6f:44:5f:ea:31:c5:d2: 1d:cc:12:3d:e1:5c:df:0e:b8:29:47:78:9f:32:42: c0:55:75:df:97:28:33:40:2a:31:45:5f:fb:71:8c: 07:12:f1:68:33:93:01:f7:c9:bb:ea:51:02:24:75: ae:25:9d:c1:e7:4c:b0:33:01:4e:e9:ba:cb:a0:d5: 5e:4b:11:5e:6b:40:eb:d1:94:e5:be:05:fe:b9:1d: 93:80:9e:f5:a0:e4:5f:2d:a8:3f:1b:68:d9:b9:81: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:44:BA:72:FC:F9:C2:32:E2:65:0E:2D:A7:6B:35:CC:64:91:21 X509v3 Authority Key Identifier: keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3e:22:ef:03:82:15:3a:80:cf:02:3f:03:b5:9d:78:1b:26: df:d0:98:94:f4:21:a6:bf:c7:6b:29:ec:f2:bd:21:71:4e:fa: 5b:05:2a:94:90:73:3d:52:df:49:2a:7d:44:8f:4c:ce:1b:f8: f5:7b:85:23:af:8f:ab:c3:35:cb:b8:be:36:de:b0:69:b5:b7: 3e:23:a9:37:ad:18:51:43:ef:ce:9d:56:0d:6d:cf:d0:2e:b3: 8f:2c:6a:ec:25:41:58:7d:f1:7e:9a:83:3a:5e:d2:5d:37:91: ce:12:98:fe:0f:d4:57:97:b6:e9:59:8f:b3:26:43:b5:8c:e1: 2c:44:b1:10:e3:f7:25:55:9c:3e:07:75:79:91:77:ae:ca:9b: fd:84:0b:12:ac:21:60:cd:46:5c:0d:8f:4e:e8:f7:df:63:49: 76:79:92:09:f2:9d:c6:8d:99:88:66:53:dc:76:c4:4d:46:ae: b4:9e:15:2a:02:8e:f8:e8:f3:df:56:6d:de:3b:4e:da:5f:3d: d3:bf:53:0d:da:4d:42:9f:27:76:7f:b2:82:fc:6c:62:cd:60: fa:ac:b7:d4:b1:91:a2:2c:36:8d:5e:17:5f:79:65:e4:75:88: 28:bb:d3:a9:8f:f3:24:01:a8:4e:7a:7b:ee:68:c4:02:51:2d: 62:ff:6c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzvs9zMUiPSD+JxDpwdNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5 YjFmNDYwHhcNMjUxMjI1MDAwMDU0WhcNMjUxMjI2MDAwMDU0WjAzMTEwLwYDVQQD EyhmMGQ4NDRiYTcyZmNmOWMyMzJlMjY1MGUyZGE3NmIzNWNjNjQ5MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16U8VJdzAVTmjk2OvWXmXNhLtUhX yeOjNcAvRbKz51OvJPLD7am/pz0zzbDO8xncreUO/405ez1kX0fDaByWo8Z+wsWK 1Y7ahDVxAVNxz3GU7Tzmhjay4jb45B7ubPigHpjpbA5RzhzwxCcFSAv2bJlevfm2 5oHQMRN1zW7SmZ1k5hKislFG2I6sQMbXX53JNkNlkbma2VsIOIA9VG9EX+oxxdId zBI94VzfDrgpR3ifMkLAVXXflygzQCoxRV/7cYwHEvFoM5MB98m76lECJHWuJZ3B 50ywMwFO6brLoNVeSxFea0Dr0ZTlvgX+uR2TgJ71oORfLag/G2jZuYHYyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDYRLpy/PnCMuJlDi2nazXMZJEhMB8GA1UdIwQY MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5 LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj4i7wOC FTqAzwI/A7WdeBsm39CYlPQhpr/Hayns8r0hcU76WwUqlJBzPVLfSSp9RI9Mzhv4 9XuFI6+Pq8M1y7i+Nt6wabW3PiOpN60YUUPvzp1WDW3P0C6zjyxq7CVBWH3xfpqD Ol7SXTeRzhKY/g/UV5e26VmPsyZDtYzhLESxEOP3JVWcPgd1eZF3rsqb/YQLEqwh YM1GXA2PTuj332NJdnmSCfKdxo2ZiGZT3HbETUautJ4VKgKO+Ojz31Zt3jtO2l89 079TDdpNQp8ndn+ygvxsYs1g+qy31LGRoiw2jV4XX3ll5HWIKLvTqY/zJAGoTnp7 7mjEAlEtYv9s5g== -----END CERTIFICATE-----Generated at Thu Dec 25 06:56:07 2025 by rpki-client