This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json) Hash identifier: SypitXXKeRpNuDucs0d4T0uCeEv/Z0haQ2e/uKQwSYU= Subject key identifier: DC:05:87:9C:E4:02:C8:A8:19:DB:5B:8E:39:BB:9C:4D:B5:BE:E2:0C Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69 Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469 Certificate serial: 019AF38981C4B71FBACD9849213E814155EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft Manifest number: 1079 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=) 2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=) 3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: ywS1ezMN8tLpDRk/XI9Of9GqXOgLLCozMVUJzLPCZcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:81:c4:b7:1f:ba:cd:98:49:21:3e:81:41:55:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=dc05879ce402c8a819db5b8e39bb9c4db5bee20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:b5:74:1c:22:0c:47:f3:96:a2:6c:02:84: 14:12:b0:79:59:c3:be:f2:23:49:e4:79:70:b4:83: de:18:c9:4c:71:ec:46:6f:82:f4:a1:2f:ac:2e:f1: 63:dc:09:17:c5:fc:25:be:81:e4:c6:1b:26:44:cf: c4:9e:3a:10:40:5c:d1:53:09:94:bf:81:f0:92:3f: 0c:9d:96:7b:d9:00:57:61:96:5a:e2:42:f0:e4:7b: 83:aa:7f:9c:81:7d:8b:8e:04:9c:2c:95:a7:34:05: b9:53:80:64:24:0f:d6:6d:b8:65:ef:6a:24:9d:6f: cf:f2:3b:ea:1b:73:32:32:ae:94:4d:f5:fd:3a:1e: b8:d9:b0:62:83:e3:b2:09:df:c6:12:fa:97:48:e7: 0d:71:3f:44:74:cf:34:03:ab:44:b7:d3:1c:57:3b: 1b:64:e4:44:43:d2:a3:b1:50:93:58:e9:cc:38:e1: c8:ca:3d:4e:2d:97:a0:cb:fb:df:d1:88:ee:51:dd: 54:53:50:85:0f:c3:35:21:dd:e1:49:ae:43:89:ca: 7f:7f:cf:03:ec:81:d3:0f:54:a0:9a:20:5b:23:ae: 85:a8:f9:d0:65:a1:b0:59:ec:2c:fe:1e:b5:51:1e: 33:1a:8b:bb:dc:97:b1:00:e7:19:53:a1:75:e5:4d: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:87:9C:E4:02:C8:A8:19:DB:5B:8E:39:BB:9C:4D:B5:BE:E2:0C X509v3 Authority Key Identifier: keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:06:7f:0f:30:28:17:68:e0:a8:fa:40:f6:04:c5:0e:66:e1: 9b:a8:8c:87:dc:97:ed:71:e3:7a:97:72:1a:a5:93:e4:80:58: 62:a1:d6:22:5b:f9:a1:d7:92:7c:1c:e4:c1:f1:d9:bf:41:0a: d9:bb:7a:be:da:c6:7c:bf:dd:00:be:c6:f3:80:cd:b5:36:98: 23:88:a1:b3:ed:a4:ee:4a:36:d4:94:57:ad:cd:6c:b1:a9:7e: 98:bf:a6:9f:df:fc:0b:7b:19:97:04:66:25:be:db:17:ae:72: 6b:0e:2e:2b:a5:a9:5a:a2:c0:c7:05:9e:f5:42:c6:c6:00:fb: 27:90:62:a6:b3:15:ce:ac:dd:39:f8:00:5f:be:84:b8:a0:39: 79:13:e5:9f:3c:d1:66:aa:a2:3c:98:bc:7a:ad:2c:25:02:2b: a0:95:cf:8b:d5:b9:f1:70:3d:ba:a5:93:ed:26:63:aa:74:81: 49:13:0e:af:a4:2e:c6:c9:ad:8f:a7:23:e9:2f:23:c5:0e:f8: 42:f2:1d:78:91:18:c9:ee:8b:f1:bc:fa:72:89:1b:25:ff:e0: 0e:c4:74:4a:b1:dc:e4:3c:d5:8c:da:d9:30:27:07:d4:11:64: 0d:e5:c6:5c:22:06:f2:3e:c3:78:f4:a6:59:f5:a6:9d:be:99: 7d:bf:a4:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYHEtx+6zZhJIT6BQVXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi MDE0NjkwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EyhkYzA1ODc5Y2U0MDJjOGE4MTlkYjViOGUzOWJiOWM0ZGI1YmVlMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDK1dBwiDEfzlqJsAoQUErB5WcO+ 8iNJ5HlwtIPeGMlMcexGb4L0oS+sLvFj3AkXxfwlvoHkxhsmRM/EnjoQQFzRUwmU v4Hwkj8MnZZ72QBXYZZa4kLw5HuDqn+cgX2LjgScLJWnNAW5U4BkJA/Wbbhl72ok nW/P8jvqG3MyMq6UTfX9Oh642bBig+OyCd/GEvqXSOcNcT9EdM80A6tEt9McVzsb ZOREQ9KjsVCTWOnMOOHIyj1OLZegy/vf0YjuUd1UU1CFD8M1Id3hSa5Dicp/f88D 7IHTD1SgmiBbI66FqPnQZaGwWews/h61UR4zGou73JexAOcZU6F15U10LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwFh5zkAsioGdtbjjm7nE21vuIMMB8GA1UdIwQY MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt MGIwNDM3NWY5YjM2LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2 LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgZ/DzAo F2jgqPpA9gTFDmbhm6iMh9yX7XHjepdyGqWT5IBYYqHWIlv5odeSfBzkwfHZv0EK 2bt6vtrGfL/dAL7G84DNtTaYI4ihs+2k7ko21JRXrc1ssal+mL+mn9/8C3sZlwRm Jb7bF65yaw4uK6WpWqLAxwWe9ULGxgD7J5BiprMVzqzdOfgAX76EuKA5eRPlnzzR ZqqiPJi8eq0sJQIroJXPi9W58XA9uqWT7SZjqnSBSRMOr6Quxsmtj6cj6S8jxQ74 QvIdeJEYye6L8bz6cokbJf/gDsR0SrHc5DzVjNrZMCcH1BFkDeXGXCIG8j7DePSm WfWmnb6Zfb+kEA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:29 2025 by rpki-client