This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json) Hash identifier: U//BffOLTXvgSkKVkztreE+tYsHjaj//H0KzOWdBd7g= Subject key identifier: 9E:A2:80:75:71:18:37:4A:0C:01:85:00:0D:19:D0:D1:72:2A:14:7F Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019AF389043BCDA978462E46D43095B5DCBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 12:00:34 +0000 Manifest this update: Sat 06 Dec 2025 12:00:34 +0000 Manifest next update: Sun 07 Dec 2025 12:00:34 +0000 Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=) 2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: rc9Np8OW36crpVQBOUnTAZWT2CbWdvvS/a5qbbj+e78=) 3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:04:3b:cd:a9:78:46:2e:46:d4:30:95:b5:dc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Dec 6 12:00:34 2025 GMT Not After : Dec 7 12:00:34 2025 GMT Subject: CN=9ea280757118374a0c0185000d19d0d1722a147f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:b5:8c:de:45:43:a4:d6:ce:b5:39:7f:bd: 51:37:a6:83:62:8b:83:58:6b:00:97:d9:37:00:5b: ba:ec:bd:61:07:a7:1b:01:6f:7c:12:09:60:de:bf: 52:4a:72:48:fe:23:af:28:30:8b:a6:6b:a8:73:fb: e9:38:5f:df:08:5a:67:16:f6:32:ac:86:d1:03:d2: 28:35:71:a3:de:0f:f7:0b:96:80:5e:66:07:a3:c7: 15:ce:0b:9b:97:38:66:07:ee:ee:2b:bf:35:09:ac: 3c:9a:e9:c2:61:a8:12:ab:18:e9:e2:fc:66:91:54: f0:93:45:d8:a5:e2:84:96:e3:40:3f:9f:7b:68:64: 35:30:d7:19:f2:67:4e:b9:56:17:3b:5d:22:a3:72: 91:44:ed:4b:99:81:89:86:0d:f7:41:9b:ce:e6:af: 4a:32:d5:79:33:0c:27:14:71:f1:01:fa:c3:f3:f5: f7:c6:15:3b:bd:c9:91:aa:84:13:e2:19:d4:e1:8e: fa:1b:ff:e6:93:82:5a:e4:4b:dc:db:b2:72:a0:60: 27:d8:ee:92:02:a2:d8:1b:3d:e3:fa:b3:b9:19:36: bd:ef:90:11:fb:e6:22:c8:c5:a8:da:c6:11:c2:fe: 29:8a:57:d8:22:d6:fc:c4:e9:35:07:cf:ee:ba:c7: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:80:75:71:18:37:4A:0C:01:85:00:0D:19:D0:D1:72:2A:14:7F X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:37:ae:6b:95:5c:f0:00:3e:4c:04:7c:77:d0:15:03:04:c1: 19:d5:fe:d1:37:96:04:e2:16:b9:73:53:e8:89:6b:09:d9:e0: 80:12:46:8c:2c:e0:4c:bc:23:aa:0e:0f:f7:a9:36:5e:fa:e1: a4:9b:87:d6:c6:02:22:90:29:54:30:2e:40:6e:97:8b:8a:f0: e0:cd:3d:56:bf:5a:05:69:30:bc:db:67:d8:1e:59:ed:42:0b: 0c:d3:36:bf:80:62:45:44:88:e1:6e:7c:e7:56:74:fa:01:91: e5:71:96:83:c9:81:e1:fb:a1:ec:07:89:75:1d:7e:2b:e8:81: f5:ec:5b:c1:4f:10:b9:e2:09:65:2b:6b:37:a8:4b:b3:6f:1c: e3:2c:0b:6a:b8:da:18:4c:64:21:df:2e:53:95:b8:80:95:7c: 94:8a:f1:79:df:c3:f8:87:14:8d:25:27:d3:11:a9:ad:06:5b: 8c:d9:26:86:90:c3:aa:76:b8:c3:b8:e4:ef:97:e6:1d:2a:fe: 90:22:de:07:16:30:92:b1:71:b4:7c:e6:d0:59:c2:d8:89:fa: 36:89:44:75:78:3c:59:9e:48:72:41:e9:5b:8f:6a:95:25:cd: 03:d3:2a:5d:6c:8a:65:48:31:70:9e:21:b9:86:67:d8:29:26: a7:b7:85:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQQ7zal4Ri5G1DCVtdy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjUxMjA2MTIwMDM0WhcNMjUxMjA3MTIwMDM0WjAzMTEwLwYDVQQD Eyg5ZWEyODA3NTcxMTgzNzRhMGMwMTg1MDAwZDE5ZDBkMTcyMmExNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxC1jN5FQ6TWzrU5f71RN6aDYouD WGsAl9k3AFu67L1hB6cbAW98Eglg3r9SSnJI/iOvKDCLpmuoc/vpOF/fCFpnFvYy rIbRA9IoNXGj3g/3C5aAXmYHo8cVzgublzhmB+7uK781Caw8munCYagSqxjp4vxm kVTwk0XYpeKEluNAP597aGQ1MNcZ8mdOuVYXO10io3KRRO1LmYGJhg33QZvO5q9K MtV5MwwnFHHxAfrD8/X3xhU7vcmRqoQT4hnU4Y76G//mk4Ja5Evc27JyoGAn2O6S AqLYGz3j+rO5GTa975AR++YiyMWo2sYRwv4pilfYItb8xOk1B8/uusfvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6igHVxGDdKDAGFAA0Z0NFyKhR/MB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADeua5Vc 8AA+TAR8d9AVAwTBGdX+0TeWBOIWuXNT6IlrCdnggBJGjCzgTLwjqg4P96k2Xvrh pJuH1sYCIpApVDAuQG6Xi4rw4M09Vr9aBWkwvNtn2B5Z7UILDNM2v4BiRUSI4W58 51Z0+gGR5XGWg8mB4fuh7AeJdR1+K+iB9exbwU8QueIJZStrN6hLs28c4ywLarja GExkId8uU5W4gJV8lIrxed/D+IcUjSUn0xGprQZbjNkmhpDDqna4w7jk75fmHSr+ kCLeBxYwkrFxtHzm0FnC2In6NolEdXg8WZ5IckHpW49qlSXNA9MqXWyKZUgxcJ4h uYZn2Ckmp7eFDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:01 2025 by rpki-client