This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json) Hash identifier: m5bHll0gkYG7mU8ukycgP7UT1W3efCtwoS/u7lBnQFE= Subject key identifier: 6F:7E:07:CC:FD:5E:71:C5:4F:A5:84:AD:72:32:23:56:A9:6F:03:23 Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Certificate serial: 019AF2E43603341619D65454DC26782E180D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft Manifest number: 1228 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: 0YC7qm9CG4pOwh0oTWm4ITQDSnY.roa (hash: EWDr7Bs0H7fnIeWZl0W4PNh2O69SVcVeiWaRqk/8B3k=) 2: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=) 3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: muTqq6n5nr0WD+vWeuqKtCInnMEgz8/n5bWfy+ME9Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:36:03:34:16:19:d6:54:54:dc:26:78:2e:18:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=6f7e07ccfd5e71c54fa584ad72322356a96f0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:bd:48:ff:0f:a9:3d:cf:ce:7e:37:84:05: 75:27:25:20:e5:db:4d:91:ec:a7:2b:e1:ff:bd:e7: 6b:75:38:4e:31:ee:0b:4d:1a:25:71:1f:64:a6:88: 74:10:93:1a:17:26:b6:c8:8a:9c:9a:56:29:cf:44: 79:d0:e5:5f:3a:06:1c:49:65:35:ac:f1:42:1d:6c: ba:db:03:9d:c7:24:bb:80:fe:96:55:f1:cc:0a:92: 6f:64:16:cf:5b:63:32:33:88:f9:a7:ce:fb:b3:0c: 31:28:54:04:70:e0:fa:ed:9c:66:fd:87:af:57:d8: 85:26:0e:4f:69:ba:73:4f:04:49:23:44:b6:fd:96: 6f:22:ac:d2:06:9d:e8:fd:37:af:6c:2b:91:46:38: 7c:21:d9:c9:ad:4d:17:6a:e7:03:81:a4:9c:2e:46: c3:7b:69:ce:f0:f3:a1:eb:53:20:64:3c:6e:aa:88: 92:70:94:67:fb:1c:7f:a1:98:2c:9c:34:17:ba:f2: 8b:e9:9e:9e:fb:d5:a3:cf:b1:50:1b:ee:3b:30:4b: 12:22:94:57:6b:f6:53:80:37:8a:39:4f:7b:7d:2a: b2:3f:7b:f0:44:68:3b:15:df:84:b2:29:ec:41:fc: 05:83:fd:7a:ac:6f:cf:e9:7f:b3:79:f0:6e:f5:19: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7E:07:CC:FD:5E:71:C5:4F:A5:84:AD:72:32:23:56:A9:6F:03:23 X509v3 Authority Key Identifier: keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d1:8d:3a:f4:a3:92:ae:24:89:5f:c4:0c:af:56:84:3f:0c: ca:85:98:1b:fb:e0:ee:cc:73:b6:e6:ea:15:f0:90:a0:90:fd: 72:98:b0:b5:d4:f6:ca:19:0a:8d:d0:5c:1d:53:ea:3b:49:d3: 2c:16:d2:44:ae:94:e0:a5:ef:62:b7:10:d0:64:7e:4c:5c:54: 2b:89:1a:74:fd:39:b3:54:9c:93:6d:5d:6e:86:e3:f8:54:14: c6:25:99:99:56:05:d2:9b:c7:04:d5:17:05:74:4f:29:ae:bc: be:d3:5e:8a:5d:a1:6a:cf:d6:7c:43:04:6d:51:51:ec:7d:51: 1b:38:e2:06:36:b7:3d:a2:be:2d:07:c7:91:c6:3c:b4:c7:77: 27:f7:d3:32:a7:b9:35:9e:c4:ca:67:2d:00:fe:d3:d3:2a:4a: 7c:c3:44:b7:cc:55:28:6d:9d:e4:53:ec:b8:9e:92:0f:49:4e: 51:6a:d3:39:69:59:b6:80:7e:8c:53:cb:0b:5d:72:d6:d0:fa: e0:0f:19:d6:74:68:0c:0b:4a:97:df:af:22:2b:bf:ec:c5:d8: 68:8b:7d:0a:af:68:f2:2c:b8:a5:53:6c:30:4d:0d:4c:cd:4b: 2d:b7:5a:b9:c7:02:f3:8e:07:f6:c2:09:cf:9c:12:58:67:f5: 5a:e8:a0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DYDNBYZ1lRU3CZ4LhgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1 YTYwODAwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD Eyg2ZjdlMDdjY2ZkNWU3MWM1NGZhNTg0YWQ3MjMyMjM1NmE5NmYwMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZC9SP8PqT3Pzn43hAV1JyUg5dtN keynK+H/vedrdThOMe4LTRolcR9kpoh0EJMaFya2yIqcmlYpz0R50OVfOgYcSWU1 rPFCHWy62wOdxyS7gP6WVfHMCpJvZBbPW2MyM4j5p877swwxKFQEcOD67Zxm/Yev V9iFJg5PabpzTwRJI0S2/ZZvIqzSBp3o/TevbCuRRjh8IdnJrU0XaucDgaScLkbD e2nO8POh61MgZDxuqoiScJRn+xx/oZgsnDQXuvKL6Z6e+9Wjz7FQG+47MEsSIpRX a/ZTgDeKOU97fSqyP3vwRGg7Fd+EsinsQfwFg/16rG/P6X+zefBu9Rl9iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9+B8z9XnHFT6WErXIyI1apbwMjMB8GA1UdIwQY MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et MzU0Mzk5NzI0YjFlLzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtGNOvSj kq4kiV/EDK9WhD8MyoWYG/vg7sxztubqFfCQoJD9cpiwtdT2yhkKjdBcHVPqO0nT LBbSRK6U4KXvYrcQ0GR+TFxUK4kadP05s1Sck21dbobj+FQUxiWZmVYF0pvHBNUX BXRPKa68vtNeil2has/WfEMEbVFR7H1RGzjiBja3PaK+LQfHkcY8tMd3J/fTMqe5 NZ7EymctAP7T0ypKfMNEt8xVKG2d5FPsuJ6SD0lOUWrTOWlZtoB+jFPLC11y1tD6 4A8Z1nRoDAtKl9+vIiu/7MXYaIt9Cq9o8iy4pVNsME0NTM1LLbdauccC844H9sIJ z5wSWGf1Wuighw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:40 2025 by rpki-client