This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json) Hash identifier: cUVLveM8KnXOwayVK2nDTVcdnc236IPCuLOKTcOuhpg= Subject key identifier: 7F:C7:30:5C:6D:2F:C0:98:08:AD:21:32:66:C8:EF:B7:3A:E4:48:B2 Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Certificate serial: 019AF19AFD69EDB4FE0025891A6A9947320B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=) 2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: R9fkkVpibl+CixirM8/kxG2hIcoLBSxlnV/QB2/DkXk=) 3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fd:69:ed:b4:fe:00:25:89:1a:6a:99:47:32:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=7fc7305c6d2fc09808ad213266c8efb73ae448b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:15:23:ef:2f:1f:89:49:96:e6:e0:87:c0: cd:34:64:cf:ec:a4:23:58:65:2a:64:f1:a2:69:fb: 1e:77:47:6c:fd:fd:3e:cf:3f:be:45:47:86:48:4b: 3a:b1:53:9b:6e:7f:d9:9a:54:1c:f5:c8:ac:55:0e: 95:6b:ca:d8:ef:73:79:4e:7b:af:c5:5e:d5:2e:5c: e1:8a:5c:3a:46:38:00:df:14:79:04:be:e2:96:f9: a4:98:be:90:76:b3:23:fe:73:bb:cd:b8:1d:be:e1: 43:be:47:b0:3a:d3:41:53:ba:4b:43:4b:84:8c:4e: 7c:3e:d6:b3:be:cf:fc:a9:09:08:a6:49:e0:d6:22: 25:41:9c:27:47:8a:c8:e9:2d:6e:cd:b3:7e:24:45: 59:b2:83:04:c4:90:16:f4:10:5d:c9:0e:8c:bb:dd: 4c:2d:05:1b:8a:b7:13:ac:80:11:b3:72:53:ca:8c: ed:d8:e8:b7:a5:31:04:df:8e:be:39:26:0c:9c:ad: f6:0c:8e:f9:d2:e2:33:a2:85:9c:98:30:20:96:81: fe:ab:86:66:bd:ac:c7:c9:de:db:2a:4c:5e:5c:99: c1:a3:cf:af:fe:b2:b0:80:c1:6d:bd:d7:96:af:a1: fb:b5:ec:1d:12:2a:41:bb:a1:19:ae:06:f3:8b:6b: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:30:5C:6D:2F:C0:98:08:AD:21:32:66:C8:EF:B7:3A:E4:48:B2 X509v3 Authority Key Identifier: keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4a:0c:36:52:3e:93:63:1b:0f:3d:5b:a3:75:d6:69:9b:53: 86:18:bd:7b:f4:51:7c:0d:c3:ba:6b:4b:aa:65:82:e5:0a:01: 7a:c6:46:b6:60:59:32:f8:25:74:e2:0f:6f:28:89:23:04:7e: 92:66:22:9a:7b:c8:e6:2f:7f:e9:0d:43:3c:d6:ab:05:e5:53: cd:24:8a:9a:94:eb:da:58:9a:c0:e8:3c:cc:12:85:c7:96:da: 5d:73:03:cc:f7:b3:9b:9b:7a:2f:1f:92:25:8f:00:0f:74:53: 38:f3:53:8a:38:da:c9:ee:fd:b7:ac:4b:a5:fa:c4:ed:88:74: 89:2a:86:a3:3d:c4:d9:49:05:44:38:c2:9a:b1:57:11:64:23: 4f:62:df:ec:c5:90:a3:09:64:24:83:cd:86:d4:a1:28:db:1a: 66:ec:2e:26:04:44:c9:fd:83:63:10:6e:03:ca:49:70:01:0c: 6e:6f:e6:9e:9e:b2:89:24:26:fd:bf:34:bd:be:45:24:49:c9: e0:67:b5:62:3f:1a:c1:2f:4d:d7:0a:db:d6:2e:a4:f6:aa:f3: 6d:d1:ee:70:d5:d4:27:94:7f:aa:1f:71:cb:34:0c:94:b3:0b: cf:df:50:40:d2:a8:17:ce:93:2c:c1:f5:87:c9:67:88:8b:af: d1:c8:3c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv1p7bT+ACWJGmqZRzILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx YTI4YjkwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD Eyg3ZmM3MzA1YzZkMmZjMDk4MDhhZDIxMzI2NmM4ZWZiNzNhZTQ0OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pwVI+8vH4lJlubgh8DNNGTP7KQj WGUqZPGiafsed0ds/f0+zz++RUeGSEs6sVObbn/ZmlQc9cisVQ6Va8rY73N5Tnuv xV7VLlzhilw6RjgA3xR5BL7ilvmkmL6QdrMj/nO7zbgdvuFDvkewOtNBU7pLQ0uE jE58Ptazvs/8qQkIpkng1iIlQZwnR4rI6S1uzbN+JEVZsoMExJAW9BBdyQ6Mu91M LQUbircTrIARs3JTyozt2Oi3pTEE346+OSYMnK32DI750uIzooWcmDAgloH+q4Zm vazHyd7bKkxeXJnBo8+v/rKwgMFtvdeWr6H7tewdEipBu6EZrgbzi2tRsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/HMFxtL8CYCK0hMmbI77c65EiyMB8GA1UdIwQY MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5 LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkoMNlI+ k2MbDz1bo3XWaZtThhi9e/RRfA3DumtLqmWC5QoBesZGtmBZMvgldOIPbyiJIwR+ kmYimnvI5i9/6Q1DPNarBeVTzSSKmpTr2liawOg8zBKFx5baXXMDzPezm5t6Lx+S JY8AD3RTOPNTijjaye79t6xLpfrE7Yh0iSqGoz3E2UkFRDjCmrFXEWQjT2Lf7MWQ owlkJIPNhtShKNsaZuwuJgREyf2DYxBuA8pJcAEMbm/mnp6yiSQm/b80vb5FJEnJ 4Ge1Yj8awS9N1wrb1i6k9qrzbdHucNXUJ5R/qh9xyzQMlLMLz99QQNKoF86TLMH1 h8lniIuv0cg8rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:09 2025 by rpki-client