This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json) Hash identifier: hYgaOK0VfSG4c6PwgU7BNleqXDnmzR2wIkJU5vRVMIs= Subject key identifier: BE:19:D5:73:24:50:FF:66:C8:8D:24:13:A9:AA:9B:89:65:2C:E7:F2 Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Certificate serial: 019AF19ACDE719013D6BF6E8BF1677C03DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft Manifest number: 0A2C Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=) 2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: qecZ3+jHGhm7ngAU5YEdj0qIv8gfijG97cZpA1gmEss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cd:e7:19:01:3d:6b:f6:e8:bf:16:77:c0:3d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=be19d5732450ff66c88d2413a9aa9b89652ce7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:52:86:e9:ac:24:03:7a:4d:fc:c8:60:d5: d4:80:b0:00:eb:2b:55:ba:fa:70:96:a4:7b:c0:45: 2c:7c:39:e3:a2:ab:51:59:2a:37:4a:f1:cf:29:ae: c8:1e:93:f8:48:ce:78:ab:20:91:44:3a:ed:2f:33: 0d:2b:7d:fd:81:b4:5c:6e:27:52:d2:cc:b5:51:7a: 62:82:4e:dd:45:3c:ae:a9:b4:6f:37:e6:2a:bf:c0: 26:dd:a4:07:4a:4f:7f:3f:34:79:ce:ec:45:e0:ad: fc:14:ad:d7:fd:00:9c:9c:33:42:19:61:49:28:f3: ac:dc:2c:45:47:04:67:0a:0a:fe:76:ae:77:4d:85: 59:c1:3e:0f:cb:8d:a0:35:c1:37:54:9f:87:52:77: 23:84:07:ad:cf:ab:f6:92:c6:f0:88:c2:16:fd:c6: f2:ba:d9:bf:f6:e4:f4:b2:a7:6c:4b:08:00:d0:b2: c3:19:26:a2:6b:c8:05:90:46:ae:4c:a5:ec:4c:fe: ae:16:d9:e1:7c:87:5a:9d:7e:3a:ac:2e:74:ff:c2: ef:51:df:0f:e6:d5:e0:11:25:b3:b3:aa:72:75:55: dc:85:1b:f6:0d:8d:dc:69:73:77:dd:53:d9:2e:5b: f8:f2:82:52:2c:b6:aa:d0:4a:f5:ca:e1:72:78:cc: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:19:D5:73:24:50:FF:66:C8:8D:24:13:A9:AA:9B:89:65:2C:E7:F2 X509v3 Authority Key Identifier: keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:d0:f8:57:14:94:79:3c:86:c7:bb:3b:9e:17:2f:25:67: e8:b3:92:f2:2f:ce:bd:43:fc:80:5a:ec:fd:f1:10:ae:e9:06: 0e:4c:01:c5:8c:54:9e:63:c2:8a:f8:53:11:e6:dc:84:56:12: 1c:0c:73:0d:b1:be:ff:6a:4a:9c:02:a6:0e:c4:00:56:b0:64: 13:80:81:f9:76:c8:c1:89:f5:b6:c6:41:fe:6e:08:c4:32:68: 69:fe:1a:79:07:9d:f9:9e:d2:e0:80:46:ed:02:b9:20:bd:6b: e4:c7:f8:7a:42:f5:e2:52:2c:64:a1:ef:d3:97:d7:b0:7d:73: b4:e1:21:fc:45:75:c7:27:a5:87:6d:dd:e7:5b:99:7c:12:18: 78:c9:94:c9:90:3a:94:22:cf:a4:0f:bd:88:d9:71:86:34:05: 6f:26:c8:36:7b:fc:0d:2b:93:02:b1:8c:48:f1:d9:eb:d3:72: 56:ce:10:f2:b3:6c:af:9c:9d:06:aa:f0:59:9b:f7:50:fc:60: 88:15:42:28:bd:33:e8:2c:a6:43:dc:fe:c5:a9:29:11:94:d4: 48:df:28:9a:f4:70:b8:63:8d:d1:fb:f5:28:d4:30:7b:95:9e: af:7d:40:15:08:53:75:6a:db:dc:29:2b:5e:a3:cb:0c:2b:10: b1:a9:7e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms3nGQE9a/bovxZ3wD3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh ZmQ3MTIwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EyhiZTE5ZDU3MzI0NTBmZjY2Yzg4ZDI0MTNhOWFhOWI4OTY1MmNlN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArshShumsJAN6TfzIYNXUgLAA6ytV uvpwlqR7wEUsfDnjoqtRWSo3SvHPKa7IHpP4SM54qyCRRDrtLzMNK339gbRcbidS 0sy1UXpigk7dRTyuqbRvN+Yqv8Am3aQHSk9/PzR5zuxF4K38FK3X/QCcnDNCGWFJ KPOs3CxFRwRnCgr+dq53TYVZwT4Py42gNcE3VJ+HUncjhAetz6v2ksbwiMIW/cby utm/9uT0sqdsSwgA0LLDGSaia8gFkEauTKXsTP6uFtnhfIdanX46rC50/8LvUd8P 5tXgESWzs6pydVXchRv2DY3caXN33VPZLlv48oJSLLaq0Er1yuFyeMydOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4Z1XMkUP9myI0kE6mqm4llLOfyMB8GA1UdIwQY MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6LQ+FcU lHk8hse7O54XLyVn6LOS8i/OvUP8gFrs/fEQrukGDkwBxYxUnmPCivhTEebchFYS HAxzDbG+/2pKnAKmDsQAVrBkE4CB+XbIwYn1tsZB/m4IxDJoaf4aeQed+Z7S4IBG 7QK5IL1r5Mf4ekL14lIsZKHv05fXsH1ztOEh/EV1xyelh23d51uZfBIYeMmUyZA6 lCLPpA+9iNlxhjQFbybINnv8DSuTArGMSPHZ69NyVs4Q8rNsr5ydBqrwWZv3UPxg iBVCKL0z6CymQ9z+xakpEZTUSN8omvRwuGON0fv1KNQwe5Wer31AFQhTdWrb3Ckr XqPLDCsQsal+jg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:39 2025 by rpki-client