This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: V9NrNkAWN3XfrD/eSwuc8evQGXHnYP5NmDQTYc/mjPQ= Subject key identifier: 73:94:A0:5B:B9:E0:81:9D:44:2F:E1:61:C7:2D:69:E0:4D:05:D1:42 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019AF3894F41DAF59BF43ABC3776331F3E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 13D5 Signing time: Sat 06 Dec 2025 12:00:53 +0000 Manifest this update: Sat 06 Dec 2025 12:00:53 +0000 Manifest next update: Sun 07 Dec 2025 12:00:53 +0000 Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=) 2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=) 3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: LtvcegWDID4Jd/hIxuSqtElOs9FJ6s3CuQGuTj3xGW8=) 4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=) 5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=) 6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=) 7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4f:41:da:f5:9b:f4:3a:bc:37:76:33:1f:3e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Dec 6 12:00:53 2025 GMT Not After : Dec 7 12:00:53 2025 GMT Subject: CN=7394a05bb9e0819d442fe161c72d69e04d05d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:d2:a6:48:5a:f1:6a:5b:ed:57:70:8d:76: 4c:ee:0e:9c:7f:4f:e5:3d:00:f1:bc:0e:ae:5d:07: 63:f1:db:7f:39:16:c2:16:e6:c5:f7:85:c7:71:f9: 9b:3e:71:0b:42:50:0f:b2:bf:95:c6:27:36:aa:7c: b0:bb:01:9f:53:ac:5a:97:ae:ac:34:07:fd:67:9d: 4d:02:5b:c4:45:9c:99:bc:8d:5b:b1:f0:6b:d6:50: a3:c0:5d:b3:a2:4f:61:d9:98:f0:ac:27:85:89:85: e5:ac:43:de:be:10:b2:bd:76:e4:e5:27:a7:85:1d: d9:bb:67:54:1a:07:9f:51:e8:17:6d:4c:10:f2:d2: d4:29:c7:b4:4c:9b:ba:a1:1a:21:fd:28:33:5e:e4: 75:7a:bc:59:19:7b:d8:37:c9:c6:86:08:88:0f:f9: f2:d7:e6:3a:16:c5:53:90:92:80:c7:01:87:c8:28: ae:17:0e:3b:b8:ca:89:b9:94:a7:5f:0e:7e:ee:34: 35:1f:4f:eb:85:78:88:0e:c3:d6:a7:7c:ab:11:08: 00:1f:dc:d2:96:e8:fb:d7:09:07:e2:83:80:fc:bb: b9:ed:2a:d8:ca:22:1d:25:68:b2:8f:68:36:7f:90: d6:e1:7b:d6:fe:3d:ee:b3:dc:13:c0:f1:33:9f:f1: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:94:A0:5B:B9:E0:81:9D:44:2F:E1:61:C7:2D:69:E0:4D:05:D1:42 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7f:4c:bd:60:2a:a1:f7:6a:f0:fd:9e:48:4f:8b:ff:1c:f1: 1b:5f:1d:b4:67:cb:69:86:c0:d0:12:ac:32:69:fc:9e:e8:b3: 27:b3:d2:a4:99:d5:4a:79:b5:a6:39:3f:64:8f:78:d9:70:d1: 7f:c7:7a:95:e4:d2:27:2f:96:a6:71:e0:b7:76:a3:5f:d0:1c: 40:85:f9:38:b9:93:76:76:0e:a6:69:60:5e:5d:e7:b5:1e:1a: 45:fe:89:38:95:7a:76:e7:ca:87:6b:0a:42:68:1e:35:23:3a: 3a:3d:fe:a3:1f:96:9b:a6:58:6e:f6:96:7c:18:a1:57:3b:98: 00:5a:10:99:ea:59:ed:b9:bd:4f:4b:f8:6d:9a:7f:5b:bf:20: 61:40:68:a6:02:c6:b3:c8:15:df:ef:e4:08:e0:57:63:d6:d6: cf:8b:a2:d5:b9:15:a1:6e:81:4b:d7:1c:c0:37:fd:41:13:95: c2:8e:f1:02:6c:6c:98:62:84:d3:3d:53:7a:14:7f:b5:e1:64: 6c:a1:01:20:c5:20:8f:1a:7c:4f:81:51:4e:c2:7e:af:03:14: 01:bf:84:62:a6:f1:9b:9f:1e:34:a4:d1:ae:c3:28:bc:ce:45: 8d:93:43:c2:60:92:2a:64:de:c1:63:19:6c:47:30:14:07:c1: 53:36:e0:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziU9B2vWb9Dq8N3YzHz5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjUxMjA2MTIwMDUzWhcNMjUxMjA3MTIwMDUzWjAzMTEwLwYDVQQD Eyg3Mzk0YTA1YmI5ZTA4MTlkNDQyZmUxNjFjNzJkNjllMDRkMDVkMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloTSpkha8Wpb7VdwjXZM7g6cf0/l PQDxvA6uXQdj8dt/ORbCFubF94XHcfmbPnELQlAPsr+Vxic2qnywuwGfU6xal66s NAf9Z51NAlvERZyZvI1bsfBr1lCjwF2zok9h2ZjwrCeFiYXlrEPevhCyvXbk5Sen hR3Zu2dUGgefUegXbUwQ8tLUKce0TJu6oRoh/SgzXuR1erxZGXvYN8nGhgiID/ny 1+Y6FsVTkJKAxwGHyCiuFw47uMqJuZSnXw5+7jQ1H0/rhXiIDsPWp3yrEQgAH9zS luj71wkH4oOA/Lu57SrYyiIdJWiyj2g2f5DW4XvW/j3us9wTwPEzn/FiSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOUoFu54IGdRC/hYcctaeBNBdFCMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn9MvWAq ofdq8P2eSE+L/xzxG18dtGfLaYbA0BKsMmn8nuizJ7PSpJnVSnm1pjk/ZI942XDR f8d6leTSJy+WpnHgt3ajX9AcQIX5OLmTdnYOpmlgXl3ntR4aRf6JOJV6dufKh2sK QmgeNSM6Oj3+ox+Wm6ZYbvaWfBihVzuYAFoQmepZ7bm9T0v4bZp/W78gYUBopgLG s8gV3+/kCOBXY9bWz4ui1bkVoW6BS9ccwDf9QROVwo7xAmxsmGKE0z1TehR/teFk bKEBIMUgjxp8T4FRTsJ+rwMUAb+EYqbxm58eNKTRrsMovM5FjZNDwmCSKmTewWMZ bEcwFAfBUzbgZw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:26 2025 by rpki-client