This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json) Hash identifier: zQWpfSURFF/Y/E4bv1mNcqNunHXD+1JOmBbU01V9Ka8= Subject key identifier: 8E:CB:77:01:39:4B:0E:2F:48:AC:66:88:73:7F:12:02:83:E5:9E:0E Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4 Certificate serial: 019AF16438F9C6229C601954398A496D75E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft Manifest number: 094E Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: YWk8rTz4Ernou/OyRk3ENhK+lZgj13DXVNgbBOCRs4o=) 2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=) 3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:38:f9:c6:22:9c:60:19:54:39:8a:49:6d:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=8ecb7701394b0e2f48ac6688737f120283e59e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:53:56:3d:c9:42:82:31:21:80:6e:7c:ca: 43:39:9d:1b:f3:8a:4a:c6:70:fd:2c:54:b9:fd:c7: 15:1e:16:9e:56:36:e8:9e:46:d6:3c:46:4a:ee:c7: b1:4d:b2:64:93:0f:bc:41:d8:0b:93:28:d0:29:6d: 87:95:ff:30:d4:35:28:fb:a5:83:8f:c2:d1:91:d2: fd:95:e9:7f:29:e3:52:29:87:7d:12:99:be:90:3e: bc:c2:ab:01:3a:e7:8e:be:0e:12:de:98:0f:47:f8: 26:0e:71:69:9f:09:0f:8f:f5:63:31:e3:7c:f4:fa: f8:db:a8:90:2a:c0:7a:b4:0e:d3:38:88:93:d6:a7: a7:7f:94:ef:b0:8a:63:82:c0:26:8f:c7:39:fd:82: bf:30:f8:77:a5:31:d9:91:7c:a8:fd:2d:10:13:f9: 34:63:c8:08:19:6a:e9:98:35:55:23:a3:fc:62:15: 1a:a8:fb:a1:9c:16:29:5c:ef:62:6b:db:e2:72:7d: ac:57:1d:26:63:58:e2:07:23:c4:fe:f5:f3:96:70: 5d:2c:74:29:de:ad:d2:55:cf:72:72:9a:48:ef:6a: cc:5b:bb:ba:a2:60:29:75:d7:39:79:dd:38:3a:0b: d4:e3:42:0b:82:71:08:0f:12:0a:20:22:6a:bd:d9: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:77:01:39:4B:0E:2F:48:AC:66:88:73:7F:12:02:83:E5:9E:0E X509v3 Authority Key Identifier: keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:86:8c:eb:9b:1c:18:b7:12:bf:41:4f:e3:5e:be:77:c1:0d: 65:69:45:cb:24:7f:c6:2b:ac:44:80:8d:3f:03:da:ff:95:b5: 40:86:62:1e:b9:30:f2:29:f5:2d:dc:1d:d2:49:d6:dd:d4:2a: 17:92:74:f7:54:d3:c5:9a:11:c5:fe:31:4a:6e:7d:75:39:e5: 91:a8:9c:f1:19:4f:f2:d1:b7:a6:df:ac:af:67:4d:cc:f5:59: 62:cf:c4:e5:24:7a:ed:c6:4b:ef:07:7d:1a:1c:d4:13:cb:50: 02:04:ae:59:9b:7a:9c:0c:65:94:53:89:ae:19:4c:18:26:fc: 56:78:d8:f9:1d:c6:9f:77:70:e5:10:4a:16:68:b5:46:8a:40: d5:8d:c9:b3:1c:a4:88:33:4a:47:17:52:5b:1f:91:ee:69:60: e1:ed:be:a4:e1:c4:9d:da:f9:09:19:49:2f:3b:1c:03:47:0b: a5:27:8b:bf:6d:a8:8b:13:5d:90:ce:59:1c:fc:59:88:b8:ad: e6:9e:db:e8:e5:45:0d:65:c7:52:8e:9c:52:29:47:af:e9:fe: de:05:2b:3a:ed:41:d3:c8:62:eb:7d:21:f9:30:60:23:74:62: f6:d8:a0:c4:07:58:3f:6f:d0:66:4d:0d:c0:2d:0a:57:eb:c5: f3:3d:d1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDj5xiKcYBlUOYpJbXXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi ZmNkZTQwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg4ZWNiNzcwMTM5NGIwZTJmNDhhYzY2ODg3MzdmMTIwMjgzZTU5ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFlTVj3JQoIxIYBufMpDOZ0b84pK xnD9LFS5/ccVHhaeVjbonkbWPEZK7sexTbJkkw+8QdgLkyjQKW2Hlf8w1DUo+6WD j8LRkdL9lel/KeNSKYd9Epm+kD68wqsBOueOvg4S3pgPR/gmDnFpnwkPj/VjMeN8 9Pr426iQKsB6tA7TOIiT1qenf5TvsIpjgsAmj8c5/YK/MPh3pTHZkXyo/S0QE/k0 Y8gIGWrpmDVVI6P8YhUaqPuhnBYpXO9ia9vicn2sVx0mY1jiByPE/vXzlnBdLHQp 3q3SVc9ycppI72rMW7u6omApddc5ed04OgvU40ILgnEIDxIKICJqvdmzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7LdwE5Sw4vSKxmiHN/EgKD5Z4OMB8GA1UdIwQY MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYaM65sc GLcSv0FP416+d8ENZWlFyyR/xiusRICNPwPa/5W1QIZiHrkw8in1Ldwd0knW3dQq F5J091TTxZoRxf4xSm59dTnlkaic8RlP8tG3pt+sr2dNzPVZYs/E5SR67cZL7wd9 GhzUE8tQAgSuWZt6nAxllFOJrhlMGCb8VnjY+R3Gn3dw5RBKFmi1RopA1Y3Jsxyk iDNKRxdSWx+R7mlg4e2+pOHEndr5CRlJLzscA0cLpSeLv22oixNdkM5ZHPxZiLit 5p7b6OVFDWXHUo6cUilHr+n+3gUrOu1B08hi630h+TBgI3Ri9tigxAdYP2/QZk0N wC0KV+vF8z3RlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:31 2025 by rpki-client