This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json) Hash identifier: 0H1g1uR60D81GQMs7WrCRTIK1UNZ70eXXI4aq/lq7tI= Subject key identifier: EC:D9:38:89:29:DA:2D:81:6E:CB:75:64:67:43:69:86:D2:09:99:94 Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e Certificate serial: 019AF12E95F5F6D8FD7963EAA62583CD232E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: XhynBe/6vNuFc0wJmEOeddxQgBLTdooFUkDY29g60O4=) 2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:95:f5:f6:d8:fd:79:63:ea:a6:25:83:cd:23:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=ecd9388929da2d816ecb756467436986d2099994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:14:64:21:0f:80:de:71:a9:82:4c:7a:e1: ab:10:f8:22:89:bc:36:ad:ee:97:d4:27:71:44:59: 77:ac:7f:3b:24:10:16:cd:5a:f8:df:86:39:d4:1d: cf:41:59:be:61:a3:11:ae:98:51:53:44:fc:ee:7b: cc:5d:41:b3:b2:de:7a:7f:09:e8:2e:84:79:15:94: 52:06:27:96:a2:6a:23:0e:97:84:d6:5e:40:99:2d: 37:58:fc:b9:9f:b5:33:2d:65:5a:28:1f:a5:8a:52: 32:aa:6c:76:c2:df:b8:32:bd:24:3c:37:a3:17:3e: 35:cf:8b:27:9d:8a:32:83:3d:99:81:11:e8:6e:52: 85:b5:c4:aa:51:04:c7:e6:6a:37:d9:30:83:ee:aa: be:ba:d7:6e:3d:57:1e:00:88:00:5b:75:4f:fb:7b: 78:d3:a8:9e:25:c0:af:ac:ff:1e:ca:c7:ff:37:a5: 86:68:33:f0:48:16:8b:8e:fd:cc:35:54:6f:28:36: 54:6b:43:48:e0:b2:b8:3e:fb:57:f7:ec:a6:bd:4f: c5:79:98:f6:35:ae:00:49:0f:5b:97:72:30:65:06: 5d:ed:39:0e:98:88:6f:1c:3c:9a:56:cb:fc:30:4b: e4:b0:17:ad:d6:b8:07:b8:22:4c:de:75:be:f9:00: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:38:89:29:DA:2D:81:6E:CB:75:64:67:43:69:86:D2:09:99:94 X509v3 Authority Key Identifier: keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:98:35:2a:24:e1:69:9b:ff:ab:55:59:77:bf:71:92:9b:3e: 23:1b:c2:c0:a6:45:9b:2b:f0:e4:b5:72:cd:88:4d:da:d7:c2: c1:a4:6a:90:8f:73:b8:c1:5b:fe:8c:71:97:6d:b6:9f:ab:82: cf:a3:c1:29:f6:07:a9:2b:c9:eb:7e:4b:ca:05:b9:25:84:98: 5b:38:29:41:84:f3:c9:67:bf:8f:40:6e:ea:ff:b6:24:ba:0d: 5d:ba:59:83:7d:96:14:d4:87:4b:87:87:da:43:e2:5f:11:8a: b3:39:69:bc:ed:5f:dc:4b:ab:6a:1a:75:dc:65:b5:eb:12:0d: 1a:5a:0e:4e:d9:0a:37:b4:e0:b0:d7:05:fd:8b:10:39:1b:2b: 6a:56:f7:8a:2c:1a:78:39:59:55:27:01:a5:33:1e:ad:97:92: d0:9e:c8:11:84:ce:ab:a9:f2:9e:ca:6e:d7:0e:67:1f:81:fe: 2f:64:06:ff:4f:f9:86:0c:e2:df:11:71:32:38:5c:59:07:4d: 1b:a6:2c:3c:9f:6a:ce:01:99:f5:99:f1:bc:9d:d4:7d:e8:db: c1:78:06:34:6c:ce:1c:8c:ed:e2:72:6d:71:ec:63:db:86:07: b8:75:bd:d8:7e:e2:29:aa:36:c3:70:c1:f2:00:8a:fa:0c:c0: ad:c4:59:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpX19tj9eWPqpiWDzSMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDBmOTE1Yzk1NGQ4M2I0YTFiZjE4NGNmYmMxMzhjNDdl ZGE1MWUwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD EyhlY2Q5Mzg4OTI5ZGEyZDgxNmVjYjc1NjQ2NzQzNjk4NmQyMDk5OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKgUZCEPgN5xqYJMeuGrEPgiibw2 re6X1CdxRFl3rH87JBAWzVr434Y51B3PQVm+YaMRrphRU0T87nvMXUGzst56fwno LoR5FZRSBieWomojDpeE1l5AmS03WPy5n7UzLWVaKB+lilIyqmx2wt+4Mr0kPDej Fz41z4snnYoygz2ZgRHoblKFtcSqUQTH5mo32TCD7qq+utduPVceAIgAW3VP+3t4 06ieJcCvrP8eysf/N6WGaDPwSBaLjv3MNVRvKDZUa0NI4LK4PvtX9+ymvU/FeZj2 Na4ASQ9bl3IwZQZd7TkOmIhvHDyaVsv8MEvksBet1rgHuCJM3nW++QC8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzZOIkp2i2Bbst1ZGdDaYbSCZmUMB8GA1UdIwQY MBaAFEHQ+RXJVNg7ShvxhM+8E4xH7aUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMt ZWU1MDBjM2ViODE5LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMtZWU1MDBjM2ViODE5 LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpg1KiTh aZv/q1VZd79xkps+IxvCwKZFmyvw5LVyzYhN2tfCwaRqkI9zuMFb/oxxl222n6uC z6PBKfYHqSvJ635LygW5JYSYWzgpQYTzyWe/j0Bu6v+2JLoNXbpZg32WFNSHS4eH 2kPiXxGKszlpvO1f3Eurahp13GW16xINGloOTtkKN7TgsNcF/YsQORsralb3iiwa eDlZVScBpTMerZeS0J7IEYTOq6nynspu1w5nH4H+L2QG/0/5hgzi3xFxMjhcWQdN G6YsPJ9qzgGZ9ZnxvJ3UfejbwXgGNGzOHIzt4nJtcexj24YHuHW92H7iKao2w3DB 8gCK+gzArcRZAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:53 2025 by rpki-client