This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json) Hash identifier: VY4H+5kx6QDNZXLOXXT84Xk2Xi2yjz6B9nbFYJikdIM= Subject key identifier: 77:6C:64:B3:65:EC:93:01:C5:38:1B:44:06:D4:FA:AF:83:5E:AE:6A Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Certificate serial: 019AF23F8B4355A9F67D4542075097F8465C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=) 2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: iOiyL78+FmX5pB5yc+s2clFwBeSdIyFLSqvgWPK/0U0=) 3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8b:43:55:a9:f6:7d:45:42:07:50:97:f8:46:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=776c64b365ec9301c5381b4406d4faaf835eae6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:7b:19:f3:80:4c:e3:0b:68:71:1d:f7:2f: c5:ce:02:ca:60:3d:9d:58:d0:86:06:d8:dd:b8:ad: 8f:51:b8:c6:d6:71:1a:91:9f:cf:bc:21:06:ff:e4: f3:d4:84:cc:5a:5b:9b:b3:77:f5:b6:3f:01:72:af: 3e:96:dd:87:64:3e:89:e9:45:41:82:08:f1:c2:f0: 6c:2b:15:23:75:f9:d3:39:06:ab:39:2d:6d:f6:53: 3f:5e:38:45:c8:6d:67:78:4e:0a:65:b6:87:46:b4: 69:47:76:3b:61:db:8f:bc:42:30:9b:15:e6:7a:15: 84:5b:20:93:b0:88:51:1c:21:4e:2c:25:c0:8b:d6: 07:0e:db:b4:2e:cd:b4:11:5a:85:4d:98:0d:bc:5b: 2f:e1:9c:fd:f2:2b:c0:74:7b:c8:1a:92:99:05:cc: 3b:3b:2c:53:98:fd:df:fb:f3:5a:2d:73:a3:23:49: 8d:46:41:61:a3:04:18:0e:e0:7b:dd:8e:a5:fc:ae: c8:9e:83:18:b1:28:95:2e:cd:be:b2:40:77:c4:38: 75:3b:4d:1b:60:34:13:b1:55:cb:a5:41:b7:ed:d3: d3:db:94:e7:64:14:13:8a:74:3d:3b:c7:fb:80:7d: a0:37:69:06:30:06:a5:26:9f:bb:54:d4:be:98:e4: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6C:64:B3:65:EC:93:01:C5:38:1B:44:06:D4:FA:AF:83:5E:AE:6A X509v3 Authority Key Identifier: keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:51:6f:3c:19:c1:9e:5f:fe:55:b1:4a:8d:8e:ad:28:ae:a3: 09:32:f9:3b:75:1a:09:98:75:9a:79:7e:82:5d:36:1a:82:3d: 30:76:a6:2a:e8:32:47:64:db:02:7c:2b:a3:27:73:da:0e:24: 15:12:bc:65:1d:d2:19:46:7b:d6:d9:f1:85:de:8a:52:5a:cf: c1:a3:e6:55:35:33:75:6a:b7:30:0d:d0:8a:b8:c2:fa:22:b8: ee:6c:a5:2d:59:83:02:fd:b4:43:f7:aa:b9:de:5a:29:5c:61: 0b:78:c5:75:44:1f:f4:11:c1:4c:1d:da:8e:ae:76:02:35:1f: 19:21:31:98:7c:93:21:df:a5:75:bb:34:b4:4a:a0:61:b3:b4: 0a:9d:a4:72:c7:f0:a6:02:c1:84:27:3b:8a:1d:02:76:a7:3a: 90:a9:f9:f4:86:2a:8a:3d:79:68:6e:22:38:2c:b6:8b:ae:30: 90:42:0b:91:0f:1a:62:7e:6b:8e:2e:40:2a:b4:07:e0:7d:43: f7:32:ee:f9:c4:18:ce:77:65:2a:05:c5:ef:03:26:00:09:a9: 98:74:41:47:a1:f4:da:72:34:64:1d:22:2e:ad:52:1e:73:5c: d8:c4:38:4c:b8:cf:e6:33:de:b1:d0:c6:da:3e:f1:23:12:ff: 5b:10:30:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4tDVan2fUVCB1CX+EZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2M3MDgzNDYwZTFhNGM3MmM0YmM0Mjc2MzEzZDNhODU5 NDRhODcwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg3NzZjNjRiMzY1ZWM5MzAxYzUzODFiNDQwNmQ0ZmFhZjgzNWVhZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH57GfOATOMLaHEd9y/FzgLKYD2d WNCGBtjduK2PUbjG1nEakZ/PvCEG/+Tz1ITMWlubs3f1tj8Bcq8+lt2HZD6J6UVB ggjxwvBsKxUjdfnTOQarOS1t9lM/XjhFyG1neE4KZbaHRrRpR3Y7YduPvEIwmxXm ehWEWyCTsIhRHCFOLCXAi9YHDtu0Ls20EVqFTZgNvFsv4Zz98ivAdHvIGpKZBcw7 OyxTmP3f+/NaLXOjI0mNRkFhowQYDuB73Y6l/K7InoMYsSiVLs2+skB3xDh1O00b YDQTsVXLpUG37dPT25TnZBQTinQ9O8f7gH2gN2kGMAalJp+7VNS+mOQa0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdsZLNl7JMBxTgbRAbU+q+DXq5qMB8GA1UdIwQY MBaAFEB8cINGDhpMcsS8QnYxPTqFlEqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2Mjct OTg1ZWQxNWM5YWViLzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2MjctOTg1ZWQxNWM5YWVi LzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlFvPBnB nl/+VbFKjY6tKK6jCTL5O3UaCZh1mnl+gl02GoI9MHamKugyR2TbAnwroydz2g4k FRK8ZR3SGUZ71tnxhd6KUlrPwaPmVTUzdWq3MA3QirjC+iK47mylLVmDAv20Q/eq ud5aKVxhC3jFdUQf9BHBTB3ajq52AjUfGSExmHyTId+ldbs0tEqgYbO0Cp2kcsfw pgLBhCc7ih0Cdqc6kKn59IYqij15aG4iOCy2i64wkEILkQ8aYn5rji5AKrQH4H1D 9zLu+cQYzndlKgXF7wMmAAmpmHRBR6H02nI0ZB0iLq1SHnNc2MQ4TLjP5jPesdDG 2j7xIxL/WxAwtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:38 2025 by rpki-client