This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json) Hash identifier: 3vmHtx0GjcEJbWFonTpiTnyd5BqJsUA9LC30gx0GZ9s= Subject key identifier: 0D:47:35:08:91:52:B0:B9:F5:D4:1E:D7:76:8E:3D:B1:19:AD:DA:44 Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Certificate serial: 019AF12D6200D47323FC8B6E22CB9F5BE973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=) 2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 3VdogQ+64HZDAIK8gx2x28P8pheLYa3gDMPe2kl6rXg=) 3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:62:00:d4:73:23:fc:8b:6e:22:cb:9f:5b:e9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=0d4735089152b0b9f5d41ed7768e3db119adda44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:3d:b5:12:3d:5f:2e:e1:67:3d:17:95:ef: 34:60:b2:53:0d:95:11:f2:b3:b1:09:ce:53:f9:5f: f7:d7:54:c0:85:fd:b7:e3:46:ca:cc:1d:92:66:84: bd:b8:5b:15:d6:21:a8:03:d3:61:08:ff:d9:16:fd: 10:be:1a:20:7d:8c:43:b3:c8:59:dd:cc:85:59:0b: 73:bb:a6:1f:b6:63:4d:dd:4e:db:db:d6:fc:4b:e2: 30:b8:b6:8e:3f:e7:7c:4e:23:fc:5a:ab:67:fa:2e: 10:7f:7c:81:6e:99:19:00:b8:e7:80:04:60:92:38: 1e:7a:41:5c:0d:b0:12:39:37:9d:ce:b3:99:a9:d3: 14:fe:92:7f:3e:22:25:ce:75:4e:54:47:81:bc:4f: 71:eb:00:f6:28:7c:82:87:3f:fc:8b:5d:93:fc:2d: 8c:c7:07:c8:b2:bc:21:cd:47:f5:aa:ae:ba:1d:30: 4e:8e:71:a9:04:1f:ae:e4:24:85:4b:ac:52:b7:f5: 6e:10:f9:d0:00:2c:30:22:01:85:67:ec:b0:ef:3e: 73:72:07:2a:14:6f:c8:fa:e7:a7:07:1a:63:5e:da: ae:2d:c0:f9:cf:85:d4:1f:b6:c3:d8:4b:11:88:b9: a4:8f:68:79:8b:40:81:30:c2:ff:52:ff:76:94:7c: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:47:35:08:91:52:B0:B9:F5:D4:1E:D7:76:8E:3D:B1:19:AD:DA:44 X509v3 Authority Key Identifier: keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:83:86:e1:60:80:af:a0:48:3b:30:24:59:a3:60:fe:db:8f: 2b:b1:50:a9:a9:e2:3d:0f:ee:bc:0a:a8:c3:a9:08:46:22:0d: f7:54:f2:d0:ec:9d:20:dd:ff:9d:89:7b:09:21:b7:47:08:0d: 02:3a:79:1c:18:4d:9e:9a:3f:d7:56:5d:d3:5c:0c:95:42:9f: 6c:95:db:6c:11:85:f0:49:17:71:a6:69:63:ee:b4:ec:46:76: e7:5b:16:b6:0a:3e:6a:87:f1:54:d9:90:f6:a9:82:2d:40:1b: ab:4d:ed:ab:42:2b:97:a4:cb:e8:e7:c9:45:5b:7a:ae:ea:63: 89:38:81:a3:9c:11:7e:fe:2f:f3:b1:a3:5f:38:cf:02:51:7b: f1:e3:59:29:ae:07:5d:46:df:96:4a:7c:10:ca:0e:b9:4a:e8: 10:04:7b:e1:1e:3c:7c:51:79:f7:8a:a2:1c:58:33:75:68:d4: f6:3b:47:1e:e1:77:8a:1d:dd:7d:81:cf:41:02:ad:35:9c:b2: 19:60:7d:4d:09:4f:19:47:50:f3:12:7b:d8:c5:8c:8f:1f:e1: b0:cb:90:5e:f1:be:83:43:d9:be:e1:0a:fd:15:e9:3e:42:b9: bf:f8:11:72:1e:9b:28:c0:74:4f:28:32:73:8b:13:14:99:4e: 80:d0:ec:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWIA1HMj/ItuIsufW+lzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi MjhkNzUwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EygwZDQ3MzUwODkxNTJiMGI5ZjVkNDFlZDc3NjhlM2RiMTE5YWRkYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJo9tRI9Xy7hZz0Xle80YLJTDZUR 8rOxCc5T+V/311TAhf2340bKzB2SZoS9uFsV1iGoA9NhCP/ZFv0QvhogfYxDs8hZ 3cyFWQtzu6YftmNN3U7b29b8S+IwuLaOP+d8TiP8Wqtn+i4Qf3yBbpkZALjngARg kjgeekFcDbASOTedzrOZqdMU/pJ/PiIlznVOVEeBvE9x6wD2KHyChz/8i12T/C2M xwfIsrwhzUf1qq66HTBOjnGpBB+u5CSFS6xSt/VuEPnQACwwIgGFZ+yw7z5zcgcq FG/I+uenBxpjXtquLcD5z4XUH7bD2EsRiLmkj2h5i0CBMML/Uv92lHztBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1HNQiRUrC59dQe13aOPbEZrdpEMB8GA1UdIwQY MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3 LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYOG4WCA r6BIOzAkWaNg/tuPK7FQqaniPQ/uvAqow6kIRiIN91Ty0OydIN3/nYl7CSG3RwgN Ajp5HBhNnpo/11Zd01wMlUKfbJXbbBGF8EkXcaZpY+607EZ251sWtgo+aofxVNmQ 9qmCLUAbq03tq0Irl6TL6OfJRVt6rupjiTiBo5wRfv4v87GjXzjPAlF78eNZKa4H XUbflkp8EMoOuUroEAR74R48fFF594qiHFgzdWjU9jtHHuF3ih3dfYHPQQKtNZyy GWB9TQlPGUdQ8xJ72MWMjx/hsMuQXvG+g0PZvuEK/RXpPkK5v/gRch6bKMB0Tygy c4sTFJlOgNDsbA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:29 2025 by rpki-client