This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json) Hash identifier: nCGIB1aVgywjY8tfbI5WPukqq2OOl5aMkAjdSNHh+wQ= Subject key identifier: 4E:B5:A9:45:B4:A8:EA:70:A6:40:C3:17:26:77:0A:D9:12:66:37:75 Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2 Certificate serial: 019AF2AD6ABDB399F9D56BB3BD4600E3820A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=) 2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: 60ddF6rhHTftoB8ut/UA8TQ4VHV3z64sxtqJHqco4cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6a:bd:b3:99:f9:d5:6b:b3:bd:46:00:e3:82:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=4eb5a945b4a8ea70a640c31726770ad912663775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:7b:2e:51:49:30:b4:5a:3a:15:7d:d1:10: 16:d3:44:ab:be:b1:91:22:7a:96:b1:a7:a7:8b:e5: 4d:2d:28:b9:c7:16:15:7b:52:4c:77:f8:13:cf:02: c4:71:56:d8:c9:71:c8:a2:95:e5:84:6b:fe:4e:86: 30:63:9b:72:43:ab:a3:89:04:78:97:89:63:cd:56: 14:d7:2a:a6:4c:95:56:6d:fe:d9:ba:96:7f:fa:92: 71:b7:da:6d:f9:e7:be:ad:94:0e:5a:1e:81:84:a1: ba:d9:ba:9a:2c:13:a8:43:7f:c3:21:d9:63:f3:eb: 1f:1e:48:0f:ba:4c:f8:a2:48:6b:f6:92:a7:ef:2c: 55:ac:b0:0e:84:c1:8e:8e:f7:b4:e6:f0:bd:6d:0b: cb:d1:e0:e4:a7:57:05:2c:15:49:4a:e2:f2:6c:0b: ea:61:d1:fd:62:34:86:bf:ac:b6:bc:90:ce:b4:07: 89:9b:38:ea:22:53:29:7b:40:6e:b1:e8:eb:ce:20: b3:8f:a0:a3:fb:17:99:4f:66:12:dd:5f:c4:67:40: 35:f7:b5:d8:04:14:7f:25:7b:7a:b9:10:3d:68:7d: 22:5e:d0:cf:30:f1:f7:06:c4:fa:ab:5c:b0:14:ac: 5e:31:7d:fd:74:60:01:5a:43:cd:51:e4:dc:b0:cf: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:A9:45:B4:A8:EA:70:A6:40:C3:17:26:77:0A:D9:12:66:37:75 X509v3 Authority Key Identifier: keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7c:91:e1:ac:a2:9e:33:13:7a:cf:de:51:8d:a6:cf:e0:91: a3:34:49:11:ca:10:1d:1b:35:e0:02:f1:b9:d8:b2:f3:b3:b8: 95:40:8e:34:ce:d8:92:1a:9f:d4:b0:bf:d5:ad:e8:fa:32:a9: 46:0c:74:d9:6f:fd:c5:45:a7:b9:d5:66:11:d0:c9:1c:8d:bc: 74:1f:8c:71:bb:af:9d:54:15:87:9d:ae:dc:cc:ca:42:8a:a3: d8:c0:e1:f0:12:30:c0:df:4c:78:ac:92:65:cc:ba:ec:a9:d8: 82:2c:23:93:70:a3:19:93:57:31:42:bf:dd:67:1c:40:76:01: 12:b7:e9:f2:87:0b:db:34:e6:73:b7:d2:50:4d:5c:b7:ff:20: d3:52:8f:f9:51:17:b9:72:3b:35:82:96:aa:fc:de:fa:58:89: 4f:69:a9:c8:fb:8e:d9:4b:a4:76:07:cc:d2:0a:db:73:b2:f1: 2c:51:af:40:a3:50:99:9c:c1:a2:54:c7:99:2d:cf:35:b3:79: 7b:ff:b2:76:65:a9:60:23:37:47:06:85:91:18:e6:30:79:bf: cf:8e:85:02:9a:31:11:22:a8:b5:e6:2e:18:27:5f:0f:7b:43: 8d:2a:f0:0f:36:10:c5:8e:1a:e4:23:15:61:5a:e6:0d:7d:58: 13:b3:cb:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWq9s5n51WuzvUYA44IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj MzkzYjIwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg0ZWI1YTk0NWI0YThlYTcwYTY0MGMzMTcyNjc3MGFkOTEyNjYzNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqed7LlFJMLRaOhV90RAW00SrvrGR InqWsaeni+VNLSi5xxYVe1JMd/gTzwLEcVbYyXHIopXlhGv+ToYwY5tyQ6ujiQR4 l4ljzVYU1yqmTJVWbf7ZupZ/+pJxt9pt+ee+rZQOWh6BhKG62bqaLBOoQ3/DIdlj 8+sfHkgPukz4okhr9pKn7yxVrLAOhMGOjve05vC9bQvL0eDkp1cFLBVJSuLybAvq YdH9YjSGv6y2vJDOtAeJmzjqIlMpe0BusejrziCzj6Cj+xeZT2YS3V/EZ0A197XY BBR/JXt6uRA9aH0iXtDPMPH3BsT6q1ywFKxeMX39dGABWkPNUeTcsM8RqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE61qUW0qOpwpkDDFyZ3CtkSZjd1MB8GA1UdIwQY MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3yR4ayi njMTes/eUY2mz+CRozRJEcoQHRs14ALxudiy87O4lUCONM7Ykhqf1LC/1a3o+jKp Rgx02W/9xUWnudVmEdDJHI28dB+McbuvnVQVh52u3MzKQoqj2MDh8BIwwN9MeKyS Zcy67KnYgiwjk3CjGZNXMUK/3WccQHYBErfp8ocL2zTmc7fSUE1ct/8g01KP+VEX uXI7NYKWqvze+liJT2mpyPuO2UukdgfM0grbc7LxLFGvQKNQmZzBolTHmS3PNbN5 e/+ydmWpYCM3RwaFkRjmMHm/z46FApoxESKoteYuGCdfD3tDjSrwDzYQxY4a5CMV YVrmDX1YE7PL0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:04 2025 by rpki-client