This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json) Hash identifier: pGCZj9OXS/MwzGRz3x1jY0Qpe/UPF/H4QD4rtUCEju0= Subject key identifier: B9:E4:11:6D:C3:C7:CA:E2:A3:BF:1E:05:5F:8C:EB:D1:6E:BD:4A:5D Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8 Certificate serial: 019AF4655DA2804A90136D012E0E0DF3E17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft Manifest number: 0B5E Signing time: Sat 06 Dec 2025 16:01:15 +0000 Manifest this update: Sat 06 Dec 2025 16:01:15 +0000 Manifest next update: Sun 07 Dec 2025 16:01:15 +0000 Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=) 2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: gfNtuHZ6NJkxxgfS7F40r/L8rakzJawbombefQ6n+TA=) 3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5d:a2:80:4a:90:13:6d:01:2e:0e:0d:f3:e1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8 Validity Not Before: Dec 6 16:01:15 2025 GMT Not After : Dec 7 16:01:15 2025 GMT Subject: CN=b9e4116dc3c7cae2a3bf1e055f8cebd16ebd4a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:0e:23:9e:3a:e9:d7:12:de:3e:72:4c:8f: 21:92:4c:e5:42:f8:ae:15:18:3e:e3:38:a4:2e:45: 9a:56:58:fc:09:9e:22:f3:e7:ac:62:16:f9:6c:7d: d2:1c:cd:9a:ff:90:63:58:b1:46:18:92:74:75:46: 40:66:cd:c0:30:38:1a:2f:11:f4:5b:c4:78:cf:ef: 38:7a:96:a9:0c:90:30:46:5f:f8:7d:8d:df:6b:2d: 5c:8f:5e:c6:25:33:f4:2e:83:43:ad:77:d7:c3:dd: f7:2e:c6:c9:7e:4f:1a:e5:bc:74:75:5b:5d:c0:8e: 06:c1:57:d4:b3:8a:13:2f:35:c9:d1:42:4a:9d:2d: 81:b8:76:64:10:da:c5:80:70:84:d4:c9:7f:f7:26: 1d:8f:27:e5:6b:a3:72:97:9d:99:c1:4b:f2:87:41: 89:df:44:8c:72:46:b6:03:7d:b5:ff:c0:8b:aa:5c: f8:8c:0b:6a:e5:0d:5d:0c:75:ed:0b:4e:05:47:37: 94:9b:f4:9a:b1:9f:73:a1:6d:f9:02:1b:66:f1:b6: 44:fe:3a:45:e8:3c:c8:44:94:8a:52:ef:a7:40:47: ad:88:f0:b8:a3:dd:01:bd:ba:cc:66:fe:1b:98:32: a0:30:71:12:6b:f6:d6:45:a3:96:3e:e9:98:46:96: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:11:6D:C3:C7:CA:E2:A3:BF:1E:05:5F:8C:EB:D1:6E:BD:4A:5D X509v3 Authority Key Identifier: keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e4:6b:1c:d5:05:7c:7d:62:6a:cc:be:9d:71:e2:ee:aa:18: 81:11:5b:41:c6:5c:e6:be:20:b1:55:48:02:23:90:65:b0:15: d4:f9:c5:2b:27:95:9c:c7:0d:5e:5a:ed:80:ea:d9:bb:4d:de: 9d:27:d5:d5:19:4e:df:be:af:30:fd:29:b2:69:88:6d:f2:71: 72:fa:b0:00:74:e2:45:1a:ec:a2:17:3b:2c:78:d1:29:21:96: 61:9d:ef:d3:ad:da:b8:28:4c:bd:47:50:f5:a9:a5:da:68:85: e5:63:e9:a8:40:ba:9d:1d:9b:59:f7:73:ab:98:82:34:a0:d1: 82:d5:7f:94:9d:c5:2d:cf:e7:00:1e:6b:13:36:88:44:2f:a5: 0f:e5:fc:4a:0a:20:24:21:b6:0d:3f:34:1a:1c:b2:96:76:72: ed:93:af:50:e9:21:56:ec:2d:f9:68:5e:24:0f:4f:ea:24:75: 07:23:79:fd:ce:32:c4:80:cc:bf:a1:e2:c0:b1:54:8b:14:6a: 6b:82:1d:3a:56:82:f4:0b:20:07:94:58:77:f6:48:57:be:00: 23:39:fe:52:d0:11:95:8c:9f:1d:8e:0d:80:04:22:1e:a2:0e: 65:a5:2a:7d:49:37:f2:54:ef:11:12:57:dd:91:e3:36:64:1f: 31:e0:40:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZV2igEqQE20BLg4N8+F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk ODg0ZDgwHhcNMjUxMjA2MTYwMTE1WhcNMjUxMjA3MTYwMTE1WjAzMTEwLwYDVQQD EyhiOWU0MTE2ZGMzYzdjYWUyYTNiZjFlMDU1ZjhjZWJkMTZlYmQ0YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIsOI5466dcS3j5yTI8hkkzlQviu FRg+4zikLkWaVlj8CZ4i8+esYhb5bH3SHM2a/5BjWLFGGJJ0dUZAZs3AMDgaLxH0 W8R4z+84epapDJAwRl/4fY3fay1cj17GJTP0LoNDrXfXw933LsbJfk8a5bx0dVtd wI4GwVfUs4oTLzXJ0UJKnS2BuHZkENrFgHCE1Ml/9yYdjyfla6Nyl52ZwUvyh0GJ 30SMcka2A321/8CLqlz4jAtq5Q1dDHXtC04FRzeUm/SasZ9zoW35Ahtm8bZE/jpF 6DzIRJSKUu+nQEetiPC4o90BvbrMZv4bmDKgMHESa/bWRaOWPumYRpZV8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnkEW3Dx8rio78eBV+M69FuvUpdMB8GA1UdIwQY MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2 LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReRrHNUF fH1iasy+nXHi7qoYgRFbQcZc5r4gsVVIAiOQZbAV1PnFKyeVnMcNXlrtgOrZu03e nSfV1RlO376vMP0psmmIbfJxcvqwAHTiRRrsohc7LHjRKSGWYZ3v063auChMvUdQ 9aml2miF5WPpqEC6nR2bWfdzq5iCNKDRgtV/lJ3FLc/nAB5rEzaIRC+lD+X8Sgog JCG2DT80GhyylnZy7ZOvUOkhVuwt+WheJA9P6iR1ByN5/c4yxIDMv6HiwLFUixRq a4IdOlaC9AsgB5RYd/ZIV74AIzn+UtARlYyfHY4NgAQiHqIOZaUqfUk38lTvERJX 3ZHjNmQfMeBA2g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:47 2025 by rpki-client