This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json) Hash identifier: 9Au3HHmG+2ADlypnuk0Ygs12aung0SsANY8OXRgLv/s= Subject key identifier: C2:10:D9:76:F9:CF:E0:7D:96:07:E3:5F:D0:76:81:95:8F:71:8A:B1 Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc Certificate serial: 019AF31D9FEEEC7DE74FE360D786C5944C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft Manifest number: 0A2B Signing time: Sat 06 Dec 2025 10:03:16 +0000 Manifest this update: Sat 06 Dec 2025 10:03:16 +0000 Manifest next update: Sun 07 Dec 2025 10:03:16 +0000 Files and hashes: 1: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: nZw0RRdhDhIuvZRt5BFXwFa2KOtuA9Tb/MAlW+tJYAo=) 2: dwbiIWEratA3KWkL5imPi021V8I.roa (hash: uBYUZ2jEhyVMlLuwkanT9PAiy5t/N1UtpXaLMB0jCDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:9f:ee:ec:7d:e7:4f:e3:60:d7:86:c5:94:4c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc Validity Not Before: Dec 6 10:03:16 2025 GMT Not After : Dec 7 10:03:16 2025 GMT Subject: CN=c210d976f9cfe07d9607e35fd07681958f718ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:ff:88:66:df:4e:9d:e2:3e:73:fb:63:38: 30:27:3c:38:67:0a:1d:ae:1b:cc:b4:8b:87:88:14: ab:93:9e:ff:9a:d9:56:7b:2d:55:b6:70:15:03:69: 60:c9:28:a3:88:8a:01:7b:71:d5:f8:f5:d3:57:ae: c6:b1:01:ee:68:a1:9e:a0:2f:d8:51:dc:91:33:c2: d2:9b:fe:f1:b6:90:1e:ac:c2:ac:7f:df:09:93:27: 05:80:8c:4e:ec:8a:6b:38:49:6a:e2:9a:bb:c4:d4: 7c:d7:2d:aa:27:41:ef:09:3e:ca:d5:43:de:00:be: 6a:1c:2f:fc:c9:71:34:50:75:2f:22:0c:a8:0e:1b: e7:4d:6c:64:e2:aa:34:39:88:90:2b:30:63:36:7f: 3d:cf:1e:2e:94:66:ff:aa:9c:73:e7:1e:54:e0:80: 88:bc:6e:a1:34:5f:66:4e:76:61:13:3d:43:a0:d7: 9f:ed:83:e0:3c:41:47:69:8f:e1:c2:ad:dd:11:5d: a7:c6:18:e9:74:c3:32:c1:4f:7c:9f:db:02:fc:ce: 76:66:2f:bf:95:a1:aa:10:24:51:c3:0f:b9:94:81: 58:45:85:6c:18:7e:0b:25:52:86:ca:e7:73:54:bf: f7:2b:1e:28:e0:dc:23:b6:9a:e9:92:61:dc:1d:ef: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:D9:76:F9:CF:E0:7D:96:07:E3:5F:D0:76:81:95:8F:71:8A:B1 X509v3 Authority Key Identifier: keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0f:6d:14:60:17:f8:b1:bd:0e:ab:13:3e:7c:13:d6:a0:a9: ce:3e:f0:96:3b:ee:d1:71:10:e5:27:d6:7b:52:93:ea:05:ca: 74:1e:c6:ab:f6:2d:65:e6:f2:44:a5:25:43:a3:60:7b:d8:c0: d8:b1:e9:4c:e8:00:46:8c:5b:3c:5a:80:c1:e7:c5:5b:75:b3: 28:48:90:6d:da:1d:a9:25:03:d8:8b:a8:81:92:25:df:ee:dd: 26:fc:ad:ca:38:9d:58:21:51:35:42:14:44:c4:19:78:55:60: ed:ee:86:28:3c:20:ee:8f:0c:6e:e2:a1:28:d7:04:2b:9f:5a: cb:82:fb:af:80:29:f4:15:ca:24:2b:1c:d3:9e:de:20:dc:d7: 1c:c4:81:58:cf:05:a5:4d:40:2b:cc:c9:f0:13:76:3f:5d:5b: c5:6e:54:5d:99:2e:97:9d:37:a4:0d:5d:31:13:76:4a:9f:9f: a7:8a:40:6c:b0:2d:68:52:eb:0d:0d:3f:c4:30:17:fa:87:e2: 3a:58:65:d1:f8:01:65:88:78:5f:e5:dd:5a:1a:f5:90:29:13: 52:a0:6c:54:9e:09:5c:58:ff:d3:31:8b:f5:7c:87:54:b8:de: 38:07:f4:07:69:03:63:6c:b2:99:db:14:26:41:fd:86:4d:7a: d9:24:86:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHZ/u7H3nT+Ng14bFlEwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDY0NTFiOTIzYTA3ZTM2NWIyZjE5MGZhYTU1YTU3MmRk MGZhZmMwHhcNMjUxMjA2MTAwMzE2WhcNMjUxMjA3MTAwMzE2WjAzMTEwLwYDVQQD EyhjMjEwZDk3NmY5Y2ZlMDdkOTYwN2UzNWZkMDc2ODE5NThmNzE4YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF7/iGbfTp3iPnP7YzgwJzw4Zwod rhvMtIuHiBSrk57/mtlWey1VtnAVA2lgySijiIoBe3HV+PXTV67GsQHuaKGeoC/Y UdyRM8LSm/7xtpAerMKsf98JkycFgIxO7IprOElq4pq7xNR81y2qJ0HvCT7K1UPe AL5qHC/8yXE0UHUvIgyoDhvnTWxk4qo0OYiQKzBjNn89zx4ulGb/qpxz5x5U4ICI vG6hNF9mTnZhEz1DoNef7YPgPEFHaY/hwq3dEV2nxhjpdMMywU98n9sC/M52Zi+/ laGqECRRww+5lIFYRYVsGH4LJVKGyudzVL/3Kx4o4NwjtprpkmHcHe+NCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIQ2Xb5z+B9lgfjX9B2gZWPcYqxMB8GA1UdIwQY MBaAFEHWRRuSOgfjZbLxkPqlWlct0Pr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEt ZjU2Yzg0OTQzYTdkLzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEtZjU2Yzg0OTQzYTdk LzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQ9tFGAX +LG9DqsTPnwT1qCpzj7wljvu0XEQ5SfWe1KT6gXKdB7Gq/YtZebyRKUlQ6Nge9jA 2LHpTOgARoxbPFqAwefFW3WzKEiQbdodqSUD2IuogZIl3+7dJvytyjidWCFRNUIU RMQZeFVg7e6GKDwg7o8MbuKhKNcEK59ay4L7r4Ap9BXKJCsc057eINzXHMSBWM8F pU1AK8zJ8BN2P11bxW5UXZkul503pA1dMRN2Sp+fp4pAbLAtaFLrDQ0/xDAX+ofi Olhl0fgBZYh4X+XdWhr1kCkTUqBsVJ4JXFj/0zGL9XyHVLjeOAf0B2kDY2yymdsU JkH9hk162SSGpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:29 2025 by rpki-client