This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json) Hash identifier: dVW2jkmIotax5yQBoLUyIk0ijdMam3JirFcAiSipJw4= Subject key identifier: 8C:72:0C:A6:04:F9:1A:65:DC:63:E0:C5:A8:17:67:66:88:53:FF:AF Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Certificate serial: 019AF23F88F9AD2EA8232541321BC97EF0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft Manifest number: 13B1 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 3ibqPJZSBdSSs3RNxSZciDJsTrc67qZxP9m7w5llgCA=) 2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:88:f9:ad:2e:a8:23:25:41:32:1b:c9:7e:f0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=8c720ca604f91a65dc63e0c5a81767668853ffaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:01:dd:d2:17:64:fb:20:05:e5:c8:f7:be: 57:3f:cc:e9:3e:b5:4e:d7:66:cd:cc:e9:fc:4f:6d: cb:38:95:53:27:20:09:18:43:d3:af:6d:b4:2d:f0: 84:4c:ef:88:ce:ba:00:d4:d9:cb:f6:01:09:cd:9b: 1d:08:71:1d:72:64:27:ae:e1:66:f2:8c:f4:b4:14: 81:73:06:13:ef:31:e9:4c:e3:35:31:c1:22:a7:2e: a5:1d:29:1f:84:07:1e:1e:74:ea:14:80:97:4a:37: ad:1c:bd:1c:88:3d:dd:f7:9d:bf:ea:d4:72:e2:6a: 6a:45:13:96:98:75:08:cd:be:04:a1:35:fe:a4:08: 78:b2:60:62:54:21:e8:1a:f0:01:37:5f:d2:a6:4d: 7b:aa:ab:9f:47:33:83:02:42:9f:4b:5f:eb:93:1b: 4b:48:11:fc:1d:9b:0a:42:7e:f7:5d:67:38:a3:45: f3:e6:63:45:02:c5:37:e6:e8:17:2f:90:8c:99:1e: a6:25:87:d6:b4:f5:ee:d6:26:6e:a9:a9:70:1f:d5: 85:cb:c2:0a:5b:40:d9:e5:fe:68:74:eb:5d:12:3c: 83:04:dd:0a:ac:92:4d:8d:d5:f8:07:83:d3:f8:02: 3a:42:f2:f4:2b:63:7d:53:0a:91:f5:33:66:9c:f2: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:72:0C:A6:04:F9:1A:65:DC:63:E0:C5:A8:17:67:66:88:53:FF:AF X509v3 Authority Key Identifier: keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c9:4a:e8:4d:22:54:99:cb:f9:b8:d0:05:1b:b2:1b:8f:63: 03:9c:41:09:6d:00:50:72:26:80:eb:39:c3:0b:89:a4:89:d1: b3:e2:fa:0b:da:3e:2e:34:3f:f8:64:df:30:0b:1c:29:57:1e: 4d:ea:e3:eb:f9:6d:5d:61:3d:2d:a5:9b:b6:28:9e:aa:fb:cc: f4:9b:12:bb:5d:c7:ed:3d:31:80:0f:31:40:fa:32:2a:80:a1: 56:48:a9:94:b2:c2:2a:6a:51:6a:60:b7:60:cc:e7:c8:d4:d4: ce:36:88:a1:ff:44:2e:a3:c3:d4:4a:9c:f3:b9:c5:6d:ae:a5: 52:96:3d:23:51:7a:99:81:d9:ef:02:cb:67:7e:5f:e2:b0:97: 30:74:42:1a:df:b5:ce:52:6c:e1:dc:39:1b:3b:ce:2b:72:42: 70:20:c9:b0:9b:4a:3e:ce:83:32:21:f9:40:7e:6c:3e:59:16: 9e:7b:b0:3a:78:2b:ef:4f:bd:19:12:e4:04:4f:28:0f:0f:72: 21:c5:0d:92:7e:a8:eb:27:e1:46:b2:fb:b7:fb:88:02:c6:94: d6:21:ed:59:80:51:5c:5c:24:17:87:b7:39:70:bf:01:bb:04: a7:ee:09:61:c1:94:d3:75:07:91:7f:9e:2b:0e:05:f0:1a:10: bc:98:75:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4j5rS6oIyVBMhvJfvDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1 OGIzZTcwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg4YzcyMGNhNjA0ZjkxYTY1ZGM2M2UwYzVhODE3Njc2Njg4NTNmZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW0B3dIXZPsgBeXI975XP8zpPrVO 12bNzOn8T23LOJVTJyAJGEPTr220LfCETO+IzroA1NnL9gEJzZsdCHEdcmQnruFm 8oz0tBSBcwYT7zHpTOM1McEipy6lHSkfhAceHnTqFICXSjetHL0ciD3d952/6tRy 4mpqRROWmHUIzb4EoTX+pAh4smBiVCHoGvABN1/Spk17qqufRzODAkKfS1/rkxtL SBH8HZsKQn73XWc4o0Xz5mNFAsU35ugXL5CMmR6mJYfWtPXu1iZuqalwH9WFy8IK W0DZ5f5odOtdEjyDBN0KrJJNjdX4B4PT+AI6QvL0K2N9UwqR9TNmnPJueQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxyDKYE+Rpl3GPgxagXZ2aIU/+vMB8GA1UdIwQY MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMlK6E0i VJnL+bjQBRuyG49jA5xBCW0AUHImgOs5wwuJpInRs+L6C9o+LjQ/+GTfMAscKVce Terj6/ltXWE9LaWbtiieqvvM9JsSu13H7T0xgA8xQPoyKoChVkiplLLCKmpRamC3 YMznyNTUzjaIof9ELqPD1Eqc87nFba6lUpY9I1F6mYHZ7wLLZ35f4rCXMHRCGt+1 zlJs4dw5GzvOK3JCcCDJsJtKPs6DMiH5QH5sPlkWnnuwOngr70+9GRLkBE8oDw9y IcUNkn6o6yfhRrL7t/uIAsaU1iHtWYBRXFwkF4e3OXC/AbsEp+4JYcGU03UHkX+e Kw4F8BoQvJh1QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:01 2025 by rpki-client