This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json) Hash identifier: 5skyfzsym8cpxlSuf0bEMtJVPg0qcARIdykwfvhTA5w= Subject key identifier: 71:0C:D0:FA:64:20:DC:5D:38:CD:67:DE:8C:54:AD:D4:DB:A1:FC:54 Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Certificate serial: 019AF2400A80606138ACC627B5DDA4CB1F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=) 2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=) 3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: USc9CPNGnwuLyVTxZYAtifFJdzAlqONWnt2lBLjB8Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0a:80:60:61:38:ac:c6:27:b5:dd:a4:cb:1f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=710cd0fa6420dc5d38cd67de8c54add4dba1fc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:d9:6a:2f:a6:71:e0:e3:3c:01:a7:e5:7e: 85:14:ea:83:f5:00:b1:26:24:88:0d:77:e2:59:2d: e4:59:63:64:84:b7:2e:0e:77:16:2c:e5:05:6c:0d: ae:df:e4:c5:57:16:57:c5:92:0d:ee:f6:64:3c:e8: 9b:ef:54:e2:f0:68:c7:f2:59:2b:26:b0:62:4d:ab: e7:7c:a5:88:b0:ab:91:b0:eb:5e:85:b0:da:36:8b: 85:1e:ec:bd:b2:78:a6:c5:84:76:d0:ec:9f:24:84: db:3d:d0:24:b6:67:21:a9:bd:07:91:3d:e6:d7:00: 01:2c:8b:26:e4:8c:59:01:59:5c:3c:26:eb:f4:47: 1c:9e:73:c0:4c:db:55:de:35:23:7b:70:68:34:48: 47:29:b2:58:17:f7:62:d1:4e:e0:2a:ff:b1:75:36: f4:be:7e:02:75:29:8a:70:08:d1:73:33:e0:ea:e9: f8:e3:af:2a:c0:71:b2:06:92:07:ef:a7:6b:34:ac: bb:b7:7d:d3:0a:20:99:8a:ee:e7:1b:67:2c:78:58: e0:48:7e:11:23:9b:95:27:da:4d:8c:05:40:e9:50: c3:e4:72:23:53:73:d8:02:c7:6b:5e:89:6d:68:bb: eb:27:5e:0c:94:3c:c0:4d:c8:bf:e0:f3:6b:e4:9c: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:D0:FA:64:20:DC:5D:38:CD:67:DE:8C:54:AD:D4:DB:A1:FC:54 X509v3 Authority Key Identifier: keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:b8:66:c1:7b:19:b0:84:54:94:64:14:e8:f9:6d:94:e0:0a: bd:75:b9:7b:58:bf:a9:e9:8d:79:9b:72:ca:0e:e8:a1:de:09: 1f:2a:54:87:d8:a6:1b:7f:a8:87:ca:48:6b:b3:02:ee:30:a8: 15:96:25:1c:6c:73:f7:f0:6a:f7:3e:6d:78:67:2b:3d:d2:a8: 21:05:7a:e0:3f:2b:24:fa:43:6d:45:64:be:25:97:e9:37:55: 81:7b:d8:af:d4:da:54:9e:1a:a1:b3:a8:2d:19:56:0a:5b:8c: 4a:32:30:ad:8e:6b:fd:7b:73:8d:22:41:27:59:fa:8a:3a:29: b3:3f:61:a3:65:93:6a:e1:f6:b7:ff:96:af:ab:2e:79:e6:9b: 0a:1e:8f:e0:d3:43:1b:d6:bc:55:ff:76:64:7c:1e:b7:2f:71: 45:9c:32:92:30:b0:8e:96:75:28:bc:85:55:f9:c8:cb:48:24: cc:df:f3:ab:f7:99:8e:d6:28:37:2a:8a:ea:7f:c1:7a:e4:60: cb:ff:6c:52:b4:1e:91:91:62:c0:32:38:3b:6e:96:90:2c:38: dc:6a:72:fd:ae:c3:4d:43:c3:97:da:8d:6f:20:07:75:38:f9: a0:48:9e:61:aa:57:5a:9f:16:ac:98:13:69:4d:0e:d4:b8:81: db:e8:5c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAqAYGE4rMYntd2kyx9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4 ZTI3ZTkwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD Eyg3MTBjZDBmYTY0MjBkYzVkMzhjZDY3ZGU4YzU0YWRkNGRiYTFmYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprfZai+mceDjPAGn5X6FFOqD9QCx JiSIDXfiWS3kWWNkhLcuDncWLOUFbA2u3+TFVxZXxZIN7vZkPOib71Ti8GjH8lkr JrBiTavnfKWIsKuRsOtehbDaNouFHuy9snimxYR20OyfJITbPdAktmchqb0HkT3m 1wABLIsm5IxZAVlcPCbr9EccnnPATNtV3jUje3BoNEhHKbJYF/di0U7gKv+xdTb0 vn4CdSmKcAjRczPg6un4468qwHGyBpIH76drNKy7t33TCiCZiu7nG2cseFjgSH4R I5uVJ9pNjAVA6VDD5HIjU3PYAsdrXoltaLvrJ14MlDzATci/4PNr5JxyCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEM0PpkINxdOM1n3oxUrdTbofxUMB8GA1UdIwQY MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt ZjM4MTBiZDcwMzc2LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2 LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47hmwXsZ sIRUlGQU6PltlOAKvXW5e1i/qemNeZtyyg7ood4JHypUh9imG3+oh8pIa7MC7jCo FZYlHGxz9/Bq9z5teGcrPdKoIQV64D8rJPpDbUVkviWX6TdVgXvYr9TaVJ4aobOo LRlWCluMSjIwrY5r/XtzjSJBJ1n6ijopsz9ho2WTauH2t/+Wr6sueeabCh6P4NND G9a8Vf92ZHwety9xRZwykjCwjpZ1KLyFVfnIy0gkzN/zq/eZjtYoNyqK6n/BeuRg y/9sUrQekZFiwDI4O26WkCw43Gpy/a7DTUPDl9qNbyAHdTj5oEieYapXWp8WrJgT aU0O1LiB2+hcFg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:00 2025 by rpki-client