This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json) Hash identifier: YGNwJmKxj0jImRxQ5YWd66dlR0NKTLQXlxCC6df4xOI= Subject key identifier: F5:F8:17:B5:7D:84:2C:DF:F8:43:48:7E:EF:3E:FA:EB:7D:B5:6C:E6 Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44 Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144 Certificate serial: 019AF31D02E5BAA044E41130A055E943AC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft Manifest number: 0FA7 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=) 2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: 68sXkmyZ3v8JwT7ylUc5nBLC7wzZ8QhuB3iOLg0eqsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:02:e5:ba:a0:44:e4:11:30:a0:55:e9:43:ac:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=f5f817b57d842cdff843487eef3efaeb7db56ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:56:ef:bf:94:d8:6d:77:df:52:41:7d:b8: e8:83:84:1f:b0:53:0e:56:0a:e4:a7:63:1c:8c:15: f4:37:fe:00:14:aa:3f:b6:c6:06:cb:10:e3:25:c1: 2c:8b:83:99:5d:79:5f:ca:4c:ca:e1:1e:db:b2:96: 57:7a:a5:a7:be:56:15:f6:e5:9b:cf:82:d0:7c:86: 51:ff:70:d8:9d:b5:d1:bf:1c:80:f2:1a:ab:f7:04: 3e:0e:da:4d:fd:7b:ee:73:bf:fa:47:73:cd:19:5d: fc:81:d2:27:7f:d7:da:3d:77:88:3b:a9:f5:5f:90: 62:45:f3:bd:47:77:ec:fc:e8:93:ef:cc:2b:42:1a: ae:87:78:8a:8a:48:2c:e9:33:da:37:20:de:0f:fe: 5e:20:97:0f:76:76:5d:e4:1a:79:49:bc:d8:ec:83: eb:56:c7:d0:47:a8:1c:ce:bd:bf:78:ce:cc:bd:5a: 28:13:90:59:52:c8:9b:30:85:c8:7d:32:e1:42:6d: 6f:eb:d6:32:4a:20:a2:a4:33:c2:98:31:70:6b:eb: cf:33:83:38:c3:37:a1:96:0b:9f:08:ef:85:fa:e9: dd:ec:ce:b9:fe:cb:84:da:d5:f3:88:f4:49:69:e0: 05:5c:29:d5:49:43:50:07:83:ab:ce:36:c7:9d:db: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F8:17:B5:7D:84:2C:DF:F8:43:48:7E:EF:3E:FA:EB:7D:B5:6C:E6 X509v3 Authority Key Identifier: keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e6:d5:a7:ef:e2:55:50:cd:47:9b:f3:01:9c:bc:6e:ef:3d: e6:f6:1d:f7:e7:8f:69:7d:1c:e9:b6:2a:07:70:05:b9:ed:54: 65:5e:30:e6:55:84:2c:c0:c4:cf:52:67:ee:f9:a1:05:8f:bc: 7a:f4:b6:f9:3b:df:b2:66:5a:0b:b6:cb:6e:23:42:03:ff:ca: 56:a8:27:ce:af:2d:26:3d:34:f2:97:3a:a7:6e:ea:20:9d:5c: 64:b7:1e:12:a4:08:fa:2f:14:c8:15:b4:27:33:6d:c5:c1:f6: eb:b7:81:c3:b1:1c:3a:b5:e6:dd:c6:76:65:7d:0c:b4:19:6c: bf:60:4b:23:ff:0b:f0:84:b0:9b:dd:cb:1b:6a:7f:68:56:14: 46:09:23:31:15:db:c3:55:86:05:47:d5:98:5f:5b:52:d9:de: 5a:f3:78:da:31:ec:78:f1:6a:b4:22:92:9f:88:d4:cf:63:eb: 43:d9:21:c1:43:db:20:4d:1f:21:b0:63:1f:cf:63:e0:8e:e0: ff:b3:10:c4:f5:a0:ab:51:4b:50:fd:f5:20:18:9f:ba:06:02: 71:bd:7e:da:2d:ec:1f:77:83:24:36:25:88:ef:69:25:b1:32: 2a:f6:40:aa:54:c0:ce:1b:88:d9:a5:eb:33:c8:c2:05:0d:87: 16:84:c6:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQLluqBE5BEwoFXpQ6ySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZmFjNmEzMmZlNGJhYTdkODliOTFlYzUxNjVhM2Q5NjY4 OGUxNDQwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD EyhmNWY4MTdiNTdkODQyY2RmZjg0MzQ4N2VlZjNlZmFlYjdkYjU2Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJtW77+U2G1331JBfbjog4QfsFMO Vgrkp2McjBX0N/4AFKo/tsYGyxDjJcEsi4OZXXlfykzK4R7bspZXeqWnvlYV9uWb z4LQfIZR/3DYnbXRvxyA8hqr9wQ+DtpN/Xvuc7/6R3PNGV38gdInf9faPXeIO6n1 X5BiRfO9R3fs/OiT78wrQhquh3iKikgs6TPaNyDeD/5eIJcPdnZd5Bp5SbzY7IPr VsfQR6gczr2/eM7MvVooE5BZUsibMIXIfTLhQm1v69YySiCipDPCmDFwa+vPM4M4 wzehlgufCO+F+und7M65/suE2tXziPRJaeAFXCnVSUNQB4OrzjbHndvhswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX4F7V9hCzf+ENIfu8++ut9tWzmMB8GA1UdIwQY MBaAFED6xqMv5Lqn2JuR7FFlo9lmiOFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEt YzlmZTBiYTI4NjQ3LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEtYzlmZTBiYTI4NjQ3 LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+bVp+/i VVDNR5vzAZy8bu895vYd9+ePaX0c6bYqB3AFue1UZV4w5lWELMDEz1Jn7vmhBY+8 evS2+TvfsmZaC7bLbiNCA//KVqgnzq8tJj008pc6p27qIJ1cZLceEqQI+i8UyBW0 JzNtxcH267eBw7EcOrXm3cZ2ZX0MtBlsv2BLI/8L8ISwm93LG2p/aFYURgkjMRXb w1WGBUfVmF9bUtneWvN42jHsePFqtCKSn4jUz2PrQ9khwUPbIE0fIbBjH89j4I7g /7MQxPWgq1FLUP31IBifugYCcb1+2i3sH3eDJDYliO9pJbEyKvZAqlTAzhuI2aXr M8jCBQ2HFoTGrg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:30 2025 by rpki-client