This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json) Hash identifier: 9ILS4mCHm9qhoUuKoZp5TU7JDF8OS+/1HajX0w6PHyE= Subject key identifier: 9B:A7:88:F3:7A:1D:EF:1E:25:3B:13:09:51:45:EA:AB:FB:3C:00:14 Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Certificate serial: 019AF0882C26698347B0C5D0D2816B5146EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=) 2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: z5+bxaOBhcrT6Bqo0n9Sm88izdLPbyzWw31gF45zg2U=) 3: UDUln-3qeCrp7STdtVtP-Xg_90E.roa (hash: vObdNNiNWw3evfnIcbLbfyalSMwTqD2xiNwmGGAngXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2c:26:69:83:47:b0:c5:d0:d2:81:6b:51:46:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=9ba788f37a1def1e253b13095145eaabfb3c0014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:e2:b0:1d:fd:5a:27:40:5b:38:a0:59:fa: 5e:cc:cd:c0:cb:8e:0c:08:97:2d:f2:22:f2:e9:a8: 5e:d4:30:63:76:5f:90:a0:c4:c1:39:98:fe:3b:70: 41:d0:53:4e:94:bb:44:df:69:d4:29:fb:ec:89:57: f3:a9:ca:e9:4a:75:4a:84:43:27:0d:7d:86:be:cb: e6:04:80:de:73:2c:05:3a:7a:68:80:14:67:3d:79: 25:26:ba:30:73:c6:61:60:4c:dc:2b:12:e3:c1:5a: eb:02:28:4b:f9:6e:83:49:05:d6:5d:1c:8f:3b:d6: 3e:13:7c:c5:1b:8a:30:21:fe:b4:8c:3a:16:e9:a8: 70:d1:38:60:92:b9:7e:f5:b9:6d:d9:81:25:ac:dd: 84:17:17:5c:bc:06:07:dd:7d:88:a7:89:4e:89:1f: dd:1c:66:f7:37:4b:0c:6f:ac:b3:e9:25:93:1e:a0: 4b:67:b5:9c:da:18:27:3c:b4:6e:fc:25:b8:96:cb: 8e:83:ad:4c:05:56:dd:df:53:d0:0a:d3:ae:88:50: 47:af:95:ef:d5:f9:09:79:21:50:55:d1:7f:6f:51: c0:80:bc:3d:be:29:9d:15:6b:ce:30:e7:fe:a5:e9: 6e:45:51:d1:3f:85:b4:fb:79:72:06:03:2d:b8:ab: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A7:88:F3:7A:1D:EF:1E:25:3B:13:09:51:45:EA:AB:FB:3C:00:14 X509v3 Authority Key Identifier: keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a7:94:4e:41:f8:6f:36:37:76:4b:c5:4d:a7:87:97:f4:3d: 86:b7:64:31:2a:ac:b2:62:35:06:02:c7:9e:75:4b:95:87:4a: ea:6d:77:47:9d:f0:e1:d0:61:92:6d:6c:99:02:24:14:9e:3f: f2:7b:67:62:ad:05:14:1a:93:db:42:4e:b6:7f:66:a5:53:f2: 47:0b:68:12:4b:47:52:c7:57:d3:30:fd:39:6c:5d:6d:2b:c5: b5:57:94:86:d4:83:28:bc:40:7a:16:51:9d:83:8f:7b:7f:a7: 61:09:82:07:7c:15:70:44:f5:0e:da:77:ac:bd:ca:56:93:16: a6:03:b0:73:7a:b3:c1:d3:59:64:41:f5:d6:0a:a0:fe:e2:82: a4:c8:d9:28:9f:b0:35:68:44:0e:c3:47:1a:56:57:1f:40:2d: 2d:33:b5:3f:82:fa:a7:bf:b2:db:0b:a0:91:6d:f0:3c:80:50: 1e:c7:e0:f6:b9:96:a0:5c:06:3a:99:f5:11:59:79:9c:de:cf: bc:af:60:58:64:b6:de:b2:6e:07:d1:a6:e4:2d:41:f2:35:62: d6:c0:6d:c9:61:f5:e4:1c:f2:c3:2d:cf:7d:6e:63:be:ad:b6: 23:70:d5:3b:92:1b:c5:86:b5:5c:ed:82:67:cd:34:80:d8:9f: a5:63:00:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCwmaYNHsMXQ0oFrUUbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4 ZDI5MmMwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD Eyg5YmE3ODhmMzdhMWRlZjFlMjUzYjEzMDk1MTQ1ZWFhYmZiM2MwMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbzisB39WidAWzigWfpezM3Ay44M CJct8iLy6ahe1DBjdl+QoMTBOZj+O3BB0FNOlLtE32nUKfvsiVfzqcrpSnVKhEMn DX2GvsvmBIDecywFOnpogBRnPXklJrowc8ZhYEzcKxLjwVrrAihL+W6DSQXWXRyP O9Y+E3zFG4owIf60jDoW6ahw0Thgkrl+9blt2YElrN2EFxdcvAYH3X2Ip4lOiR/d HGb3N0sMb6yz6SWTHqBLZ7Wc2hgnPLRu/CW4lsuOg61MBVbd31PQCtOuiFBHr5Xv 1fkJeSFQVdF/b1HAgLw9vimdFWvOMOf+peluRVHRP4W0+3lyBgMtuKufgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuniPN6He8eJTsTCVFF6qv7PAAUMB8GA1UdIwQY MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6eUTkH4 bzY3dkvFTaeHl/Q9hrdkMSqssmI1BgLHnnVLlYdK6m13R53w4dBhkm1smQIkFJ4/ 8ntnYq0FFBqT20JOtn9mpVPyRwtoEktHUsdX0zD9OWxdbSvFtVeUhtSDKLxAehZR nYOPe3+nYQmCB3wVcET1Dtp3rL3KVpMWpgOwc3qzwdNZZEH11gqg/uKCpMjZKJ+w NWhEDsNHGlZXH0AtLTO1P4L6p7+y2wugkW3wPIBQHsfg9rmWoFwGOpn1EVl5nN7P vK9gWGS23rJuB9Gm5C1B8jVi1sBtyWH15Bzywy3PfW5jvq22I3DVO5IbxYa1XO2C Z800gNifpWMAtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:57 2025 by rpki-client