This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json) Hash identifier: HAPPEu22J+mmZqebXGNHltZRcfcUQKMxHzBlZMGA370= Subject key identifier: 95:A8:7B:94:74:3D:0F:90:39:C4:93:8D:2D:8A:D5:EE:40:49:DF:24 Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Certificate serial: 019AF27684EE522445ABB172433465229EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: 0IXOyIWqhk4rip7p70s+jYc8S6o7CHkYBvQhjIbO6D0=) 2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:84:ee:52:24:45:ab:b1:72:43:34:65:22:9e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=95a87b94743d0f9039c4938d2d8ad5ee4049df24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:a0:92:20:c3:7f:62:e6:da:85:1c:ba:22: 80:3b:0e:21:b9:c3:2f:e2:33:bb:38:7f:0c:ec:c9: 79:fa:e1:1e:47:f5:d0:9f:64:c3:d7:7c:53:62:0b: d6:2b:e6:10:4b:1f:63:e5:06:a2:0f:1d:1c:a0:46: 0a:59:44:e2:18:e8:d0:8d:60:52:a5:3b:43:cb:b2: 62:f3:9f:35:11:c8:26:37:16:db:c2:fa:d0:af:e0: d1:8f:82:ee:f9:42:22:30:d1:78:df:2f:a4:b0:5a: f5:90:1d:c5:5f:47:7c:7c:d2:c1:81:a8:05:02:8d: 43:0b:93:26:52:66:07:e4:55:03:c4:dd:7c:a5:24: ad:42:69:8e:2a:0e:29:35:93:6b:e0:6b:4e:dc:4f: 0c:d8:af:09:f1:43:bb:c0:62:29:6c:7f:78:9b:bb: 61:e0:58:d0:fb:3d:13:9a:d9:89:2f:57:0b:08:38: 07:cc:c0:29:b1:8a:e8:c8:8f:0d:3f:20:98:80:1e: a4:4a:cc:76:93:76:e6:ea:a2:3f:2a:9a:64:7b:4a: cd:96:0a:52:92:56:58:11:35:6f:72:a8:1d:f5:61: 0e:ac:ba:50:10:87:7a:6b:44:1e:00:0c:9c:d0:01: cb:f7:b2:b4:27:9e:d0:82:b7:d1:47:82:76:23:57: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:7B:94:74:3D:0F:90:39:C4:93:8D:2D:8A:D5:EE:40:49:DF:24 X509v3 Authority Key Identifier: keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:92:57:93:a3:a6:5b:bc:09:6a:03:61:32:3f:4d:e6:03:14: a3:94:48:bc:b7:03:ff:f9:7e:a1:e2:18:a6:36:a5:82:12:4a: 2b:75:d1:e8:62:e3:4a:f1:c0:1a:8b:10:4b:79:a4:0b:63:c9: 93:07:a6:fa:88:46:22:ac:fc:04:ae:5c:01:0f:e5:ef:05:2d: 14:24:05:c3:fa:a1:cc:2e:2c:cf:f5:a0:0d:95:a5:4b:39:4d: c2:36:ea:0f:5a:9d:0f:10:a5:e5:19:f9:4f:9b:5a:cb:b9:06: f1:b9:f0:de:88:c7:e3:34:88:1a:20:da:fd:92:f2:7a:78:65: 79:a4:37:b4:d2:ce:24:41:65:2b:e1:29:f7:fb:fe:f8:83:06: 30:f8:58:da:f1:e9:d9:07:ea:a9:6c:cb:f6:e2:72:06:39:8d: 43:5b:a4:30:89:f9:18:18:3e:8e:49:dd:61:26:d9:de:e6:39: f2:44:af:47:c7:a9:0e:7c:5c:d9:2a:08:a9:9e:b9:85:7c:7a: f3:68:eb:2d:66:11:b5:3f:aa:c7:19:4c:55:e1:2b:5a:b6:20: 43:a6:55:8d:0b:42:34:8a:97:bf:16:24:c6:38:ee:7a:22:1c: 97:b3:14:6a:df:15:48:47:7b:d4:d4:77:33:cf:4d:cf:e9:26: 86:ae:bb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoTuUiRFq7FyQzRlIp7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz MTJhYmYwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg5NWE4N2I5NDc0M2QwZjkwMzljNDkzOGQyZDhhZDVlZTQwNDlkZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO2gkiDDf2Lm2oUcuiKAOw4hucMv 4jO7OH8M7Ml5+uEeR/XQn2TD13xTYgvWK+YQSx9j5QaiDx0coEYKWUTiGOjQjWBS pTtDy7Ji8581EcgmNxbbwvrQr+DRj4Lu+UIiMNF43y+ksFr1kB3FX0d8fNLBgagF Ao1DC5MmUmYH5FUDxN18pSStQmmOKg4pNZNr4GtO3E8M2K8J8UO7wGIpbH94m7th 4FjQ+z0TmtmJL1cLCDgHzMApsYroyI8NPyCYgB6kSsx2k3bm6qI/Kppke0rNlgpS klZYETVvcqgd9WEOrLpQEId6a0QeAAyc0AHL97K0J57QgrfRR4J2I1cg3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWoe5R0PQ+QOcSTjS2K1e5ASd8kMB8GA1UdIwQY MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5 LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZJXk6Om W7wJagNhMj9N5gMUo5RIvLcD//l+oeIYpjalghJKK3XR6GLjSvHAGosQS3mkC2PJ kwem+ohGIqz8BK5cAQ/l7wUtFCQFw/qhzC4sz/WgDZWlSzlNwjbqD1qdDxCl5Rn5 T5tay7kG8bnw3ojH4zSIGiDa/ZLyenhleaQ3tNLOJEFlK+Ep9/v++IMGMPhY2vHp 2QfqqWzL9uJyBjmNQ1ukMIn5GBg+jkndYSbZ3uY58kSvR8epDnxc2SoIqZ65hXx6 82jrLWYRtT+qxxlMVeErWrYgQ6ZVjQtCNIqXvxYkxjjueiIcl7MUat8VSEd71NR3 M89Nz+kmhq67uA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:41 2025 by rpki-client