This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json) Hash identifier: t3NzzFkr9BIgTZT13X7iiXs76ncDxTUydidH0tQLeG4= Subject key identifier: 9C:4F:AF:D7:0D:0C:08:9A:49:E5:23:60:C8:B3:94:D5:A6:21:20:1A Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc Certificate serial: 019AF42E40FC6FBB216D6B338D08590C313A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft Manifest number: 1706 Signing time: Sat 06 Dec 2025 15:01:03 +0000 Manifest this update: Sat 06 Dec 2025 15:01:03 +0000 Manifest next update: Sun 07 Dec 2025 15:01:03 +0000 Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=) 2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 7ziNPoTnZgeSxvVMpyNBKiToH9NWImZB7TjMsTL2zro=) 3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:40:fc:6f:bb:21:6d:6b:33:8d:08:59:0c:31:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Validity Not Before: Dec 6 15:01:03 2025 GMT Not After : Dec 7 15:01:03 2025 GMT Subject: CN=9c4fafd70d0c089a49e52360c8b394d5a621201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:aa:a0:a7:7e:05:8b:34:cd:7d:10:c9:c2: 5e:46:b8:9d:9b:60:e1:ea:bf:65:ef:30:b0:db:12: cc:b7:b5:f1:0f:ee:90:98:4c:af:3b:86:44:8b:f2: 86:06:a7:ed:3f:b5:10:95:45:e6:3c:5f:9c:f8:90: 04:03:ac:65:6b:4e:01:96:20:de:96:36:47:a3:43: dd:42:06:f5:d0:ce:57:00:cc:4d:16:fb:a7:ba:d4: 16:be:98:5e:06:ff:63:4f:c4:5f:0f:74:8c:8a:7f: db:87:4a:1d:36:4c:e8:2a:d4:30:02:4c:05:88:e6: 99:a9:0f:b4:83:bc:71:a3:5c:78:7a:5a:36:40:d9: 4c:6b:6a:63:23:51:d0:0f:59:42:81:ae:77:a6:da: 54:7d:eb:8a:5a:45:88:51:a0:16:0b:ce:26:2f:5f: d5:df:7d:48:18:10:0f:51:56:8a:16:83:5e:9c:99: 1d:bf:f4:72:84:e0:d0:6d:84:bd:01:6c:be:a8:11: cf:b3:c3:ed:82:26:27:6f:8f:72:fb:02:00:79:cb: e9:53:aa:a4:7c:12:86:d2:26:7c:1f:c7:86:a9:e2: 34:06:65:54:c1:a5:f1:ea:93:5c:c3:11:07:4f:3e: da:2e:be:39:78:a7:c2:06:3a:aa:42:2d:05:cd:c6: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4F:AF:D7:0D:0C:08:9A:49:E5:23:60:C8:B3:94:D5:A6:21:20:1A X509v3 Authority Key Identifier: keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4f:c0:78:b0:07:24:cd:fd:b7:4d:63:7d:1f:c8:10:13:95: 30:7c:1e:57:3e:fe:67:ac:8a:7b:c2:20:9e:05:b4:fd:c3:fe: 2d:ab:f0:f2:e2:27:89:98:d9:90:74:c3:74:d3:59:e9:cd:2d: f3:88:ff:ee:ab:27:8e:a2:b7:b9:8f:cc:e6:bb:68:6f:e2:b1: 97:d0:3e:03:a5:68:a7:6f:26:72:04:16:87:bc:39:df:92:b8: 04:0e:47:10:7f:eb:90:f0:30:39:51:9b:4b:22:ce:2b:19:06: 18:c2:43:12:27:3c:0d:3d:0e:e1:f3:70:1b:c7:44:3a:40:64: 5e:22:93:c9:01:35:22:bf:86:6d:d4:f2:9d:e6:02:c7:49:f7: 5c:16:0f:7a:0f:f2:89:52:5b:3f:46:e0:eb:8b:58:1b:c2:3b: 26:2b:74:a0:c0:b7:6c:ed:b1:c1:03:88:92:ab:96:9c:01:ed: 01:54:2d:59:5a:b1:3c:de:ce:63:4d:e0:c3:5e:7f:38:72:e4: e7:02:8c:a3:11:ed:a3:24:ab:e5:74:3d:71:4a:e1:6d:64:df: 7f:7c:5b:88:a6:46:f0:07:a2:14:64:10:a9:b9:83:47:56:2a: 33:62:31:24:97:e9:65:85:58:67:33:a0:dd:93:02:72:1c:9e: 9b:3f:d5:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkD8b7shbWszjQhZDDE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl YjE5Y2MwHhcNMjUxMjA2MTUwMTAzWhcNMjUxMjA3MTUwMTAzWjAzMTEwLwYDVQQD Eyg5YzRmYWZkNzBkMGMwODlhNDllNTIzNjBjOGIzOTRkNWE2MjEyMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvimqoKd+BYs0zX0QycJeRridm2Dh 6r9l7zCw2xLMt7XxD+6QmEyvO4ZEi/KGBqftP7UQlUXmPF+c+JAEA6xla04BliDe ljZHo0PdQgb10M5XAMxNFvunutQWvpheBv9jT8RfD3SMin/bh0odNkzoKtQwAkwF iOaZqQ+0g7xxo1x4elo2QNlMa2pjI1HQD1lCga53ptpUfeuKWkWIUaAWC84mL1/V 331IGBAPUVaKFoNenJkdv/RyhODQbYS9AWy+qBHPs8PtgiYnb49y+wIAecvpU6qk fBKG0iZ8H8eGqeI0BmVUwaXx6pNcwxEHTz7aLr45eKfCBjqqQi0FzcY0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxPr9cNDAiaSeUjYMizlNWmISAaMB8GA1UdIwQY MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0/AeLAH JM39t01jfR/IEBOVMHweVz7+Z6yKe8IgngW0/cP+Lavw8uIniZjZkHTDdNNZ6c0t 84j/7qsnjqK3uY/M5rtob+Kxl9A+A6Vop28mcgQWh7w535K4BA5HEH/rkPAwOVGb SyLOKxkGGMJDEic8DT0O4fNwG8dEOkBkXiKTyQE1Ir+GbdTyneYCx0n3XBYPeg/y iVJbP0bg64tYG8I7Jit0oMC3bO2xwQOIkquWnAHtAVQtWVqxPN7OY03gw15/OHLk 5wKMoxHtoySr5XQ9cUrhbWTff3xbiKZG8AeiFGQQqbmDR1YqM2IxJJfpZYVYZzOg 3ZMCchyemz/V8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:01 2025 by rpki-client