This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json) Hash identifier: 2T2J8ZL0VwJnmQ5+u7ScB2+yf2m8KdEK3VrqB57K2BQ= Subject key identifier: 51:F3:3D:E7:AC:42:38:84:AB:40:4E:35:E0:62:E4:6E:79:6F:F6:38 Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82 Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582 Certificate serial: 019AF23F8A794CCBF260A24CAE777BB05701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft Manifest number: 140F Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: 6KpfPRVUGyFsCkAEFBqf-wSXAyw.roa (hash: kWhiEuOzAfB/QvRqngqpda0Xfcej2KhLVFQbnAjy7tQ=) 2: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: 8P6ciWk2xte/YUF59c02kn4mLVVpXFP4mVhuAnE5DZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8a:79:4c:cb:f2:60:a2:4c:ae:77:7b:b0:57:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=51f33de7ac423884ab404e35e062e46e796ff638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:82:6e:1b:51:a5:91:8d:06:fc:bb:ea:be: c6:aa:3f:77:e2:5f:f0:9d:4c:eb:22:27:61:0f:41: 76:27:b7:5a:e1:bc:59:d6:af:8f:1f:75:42:be:16: a0:1a:cf:ba:20:87:3d:a8:82:0a:57:db:3a:b1:e9: a5:fa:ce:d9:78:02:72:f5:2d:cc:3f:2b:8b:58:14: 14:f9:0e:e8:cd:35:f6:e9:98:59:a1:34:8f:e6:c4: 56:90:5c:f0:44:b6:40:6f:9f:10:48:62:4e:ca:5b: c7:0d:2a:ef:08:0a:79:1a:24:7e:45:c7:78:a7:6c: cd:7c:28:80:78:9a:dd:14:02:3b:3f:9a:0a:fc:5c: 44:16:7d:2a:fe:57:23:72:51:fe:40:04:84:99:64: b9:e3:c3:4b:ae:15:26:e4:2b:d3:89:26:43:fa:64: e3:03:a7:1b:78:02:1b:e3:cc:bc:2b:2d:dc:c7:21: a3:ec:6d:cc:87:16:7a:10:5d:48:1f:1b:ff:a8:5e: 4e:2b:3e:71:3a:b9:49:ed:90:2a:5b:59:16:d4:bf: 2f:6a:ae:78:2d:d5:67:ee:20:22:02:82:ec:e4:07: b9:66:72:e6:51:f0:36:a5:06:ac:28:4a:4d:8f:79: fb:a8:0a:c0:a0:a7:9e:f5:24:96:9b:82:c0:5c:a0: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:3D:E7:AC:42:38:84:AB:40:4E:35:E0:62:E4:6E:79:6F:F6:38 X509v3 Authority Key Identifier: keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5e:0a:c6:09:cf:7e:c1:a3:24:14:9f:20:a8:a2:64:f3:ab: 0b:fc:22:4e:68:43:28:00:1b:26:64:2d:88:b1:3a:19:a3:54: e1:1b:3c:49:bb:4e:72:93:92:e9:cc:4a:bc:24:49:7f:18:06: 6b:3b:2a:0f:43:5f:e4:77:64:1b:0e:64:9e:9c:17:26:54:fe: 43:b0:e4:f8:8d:80:90:de:9e:94:4f:b6:4d:9d:30:bc:47:8d: e8:05:84:aa:eb:90:e6:f3:f5:1d:14:f2:d4:cf:81:71:c4:80: c2:11:f2:46:5e:1d:2a:fd:22:f1:4b:92:7e:31:f0:ea:4b:f8: bc:a6:43:60:00:f4:f9:3e:bc:ca:24:d3:4d:97:ec:41:07:ec: c9:67:6b:69:44:77:82:c5:a3:75:39:78:68:2e:53:43:44:c9: ec:78:5c:8d:ab:7a:2e:74:ba:22:b4:14:de:d8:2c:11:41:9e: 5b:8a:fb:f5:f1:10:f5:d4:e0:b8:91:e7:45:57:bc:34:17:fb: 4c:4f:16:a4:97:3b:69:f7:a9:d6:52:6c:c2:c4:b2:81:6e:13: 7b:17:c5:52:e5:56:01:46:68:89:01:96:b8:fa:d7:7b:08:d8: 9f:c8:3f:6d:c4:5b:43:77:d6:3a:0b:84:93:3f:7c:77:56:af: 68:05:01:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4p5TMvyYKJMrnd7sFcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZmMwNzI5OTcxMWFkZmEyMjJlMjdiMTI4Yjc2ZDFkOTc0 NTA1ODIwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg1MWYzM2RlN2FjNDIzODg0YWI0MDRlMzVlMDYyZTQ2ZTc5NmZmNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDOCbhtRpZGNBvy76r7Gqj934l/w nUzrIidhD0F2J7da4bxZ1q+PH3VCvhagGs+6IIc9qIIKV9s6seml+s7ZeAJy9S3M PyuLWBQU+Q7ozTX26ZhZoTSP5sRWkFzwRLZAb58QSGJOylvHDSrvCAp5GiR+Rcd4 p2zNfCiAeJrdFAI7P5oK/FxEFn0q/lcjclH+QASEmWS548NLrhUm5CvTiSZD+mTj A6cbeAIb48y8Ky3cxyGj7G3MhxZ6EF1IHxv/qF5OKz5xOrlJ7ZAqW1kW1L8vaq54 LdVn7iAiAoLs5Ae5ZnLmUfA2pQasKEpNj3n7qArAoKee9SSWm4LAXKBW6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHzPeesQjiEq0BONeBi5G55b/Y4MB8GA1UdIwQY MBaAFED8BymXEa36Ii4nsSi3bR2XRQWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVB3SEtaY1JyZm9pTGlleEtMZHRIWmRGQllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZGM4N2EtZjMyOS00YzQ0LTgyMzUt NzdlM2JlYWI2MWViLzEvUVB3SEtaY1JyZm9pTGlleEtMZHRIWmRGQllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81ZGM4N2EtZjMyOS00YzQ0LTgyMzUtNzdlM2JlYWI2MWVi LzEvUVB3SEtaY1JyZm9pTGlleEtMZHRIWmRGQllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnF4KxgnP fsGjJBSfIKiiZPOrC/wiTmhDKAAbJmQtiLE6GaNU4Rs8SbtOcpOS6cxKvCRJfxgG azsqD0Nf5HdkGw5knpwXJlT+Q7Dk+I2AkN6elE+2TZ0wvEeN6AWEquuQ5vP1HRTy 1M+BccSAwhHyRl4dKv0i8UuSfjHw6kv4vKZDYAD0+T68yiTTTZfsQQfsyWdraUR3 gsWjdTl4aC5TQ0TJ7Hhcjat6LnS6IrQU3tgsEUGeW4r79fEQ9dTguJHnRVe8NBf7 TE8WpJc7afep1lJswsSygW4TexfFUuVWAUZoiQGWuPrXewjYn8g/bcRbQ3fWOguE kz98d1avaAUB8A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:28 2025 by rpki-client