This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json) Hash identifier: RVXS4Px3hiJpV/rh7woczg0gDbyhTmlPhqK77iGqlqI= Subject key identifier: 2F:42:A6:B4:9C:5E:C6:B4:79:4F:DA:CB:A2:B6:18:D0:A4:9C:7F:79 Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Certificate serial: 019AF1D1D1035B3D3D977CAADE1F358EFEB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft Manifest number: 0CBE Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: +UVzoaqyENTwD8HEaQ90t/qbpCaEW1MpllSAbK+u/mw=) 2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=) 3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=) 4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d1:03:5b:3d:3d:97:7c:aa:de:1f:35:8e:fe:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=2f42a6b49c5ec6b4794fdacba2b618d0a49c7f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:46:f6:ad:4a:ac:74:ce:91:b0:9a:6c:7d: 22:0a:79:3f:dd:41:55:1a:9d:30:28:54:29:2f:05: ee:51:c8:04:18:3c:2d:c6:3c:86:35:9b:67:d8:83: 76:17:23:1d:8d:51:44:8b:ff:c8:5d:dd:be:75:98: 8a:00:85:e5:74:b8:f7:de:ec:26:fe:ea:c1:3b:4e: b0:18:aa:d6:98:bf:70:5e:1b:7f:72:f8:d9:76:de: 5c:f4:89:b7:df:53:e4:b4:59:c2:37:26:6a:97:65: 67:32:a4:17:e2:31:8e:83:62:7f:ab:50:95:0f:0b: be:3c:54:c9:f2:7e:7c:8e:30:2a:4e:15:bf:5c:06: 04:29:a9:07:da:da:73:b0:da:b1:e1:71:6e:84:e0: 4c:54:8c:8b:e1:09:36:70:f8:06:80:75:12:b2:60: f4:b1:e4:62:b7:75:86:66:db:3b:54:d8:a1:4c:2f: 3a:ac:c8:1c:f5:4d:98:e0:7a:18:93:28:e2:95:ef: fe:f1:51:fc:e2:ca:65:a3:aa:f9:5b:09:a1:a3:80: 21:41:80:5f:b8:83:0f:54:58:07:ad:dc:fa:2d:4c: 42:73:3f:23:61:6b:9a:43:a7:12:69:1c:f6:cf:25: 95:04:a4:62:8f:1b:46:2e:4e:c2:90:c8:8e:d2:97: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:42:A6:B4:9C:5E:C6:B4:79:4F:DA:CB:A2:B6:18:D0:A4:9C:7F:79 X509v3 Authority Key Identifier: keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:97:99:9e:b7:8f:ca:d8:41:b7:91:5f:70:65:4f:91:52: 1b:61:ac:31:67:e7:a0:ba:9c:4c:24:c8:43:42:ae:22:e1:86: 0f:07:11:7f:63:7f:58:e1:73:b1:89:bd:e1:dc:78:b6:0d:b4: 77:08:a4:97:f6:55:d3:29:df:fb:c3:97:43:94:f9:60:13:f6: 63:24:6f:58:1e:ec:c9:33:91:c5:0b:d5:bb:b1:79:5c:72:db: 9f:d1:1c:37:f2:dc:9d:5c:34:ef:40:5f:f1:4f:b4:1f:f4:4f: 2b:9e:23:2b:a6:e5:08:55:68:18:b4:88:09:9d:fb:ef:aa:3b: 4d:7a:44:37:4f:5a:77:d8:ed:0a:31:15:9d:77:64:df:a7:9b: 9a:e6:9d:fb:bd:0d:24:45:54:2c:83:07:fd:9f:b3:32:9c:ea: 19:8d:f7:5a:88:10:cf:08:4a:35:ef:ab:40:ef:23:44:fa:bc: 31:58:f4:54:fb:c9:da:c0:b0:b6:a0:ed:0b:ed:94:8b:39:57: bf:3e:c5:e3:d9:46:fa:68:6b:e2:35:93:68:49:20:8b:fc:dc: 0b:99:50:bf:3b:e4:37:08:56:bd:bc:01:2a:36:d0:5c:74:07: 53:b9:91:02:bb:06:2d:14:e3:ea:13:73:12:cb:94:3c:9f:2e: af:b0:6d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dEDWz09l3yq3h81jv6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjUxMzQyZTA1ZDU4YjNiN2ZjOTNhMTVjYmExZWI3MWU1 NDIzODUwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EygyZjQyYTZiNDljNWVjNmI0Nzk0ZmRhY2JhMmI2MThkMGE0OWM3Zjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfhG9q1KrHTOkbCabH0iCnk/3UFV Gp0wKFQpLwXuUcgEGDwtxjyGNZtn2IN2FyMdjVFEi//IXd2+dZiKAIXldLj33uwm /urBO06wGKrWmL9wXht/cvjZdt5c9Im331PktFnCNyZql2VnMqQX4jGOg2J/q1CV Dwu+PFTJ8n58jjAqThW/XAYEKakH2tpzsNqx4XFuhOBMVIyL4Qk2cPgGgHUSsmD0 seRit3WGZts7VNihTC86rMgc9U2Y4HoYkyjile/+8VH84splo6r5Wwmho4AhQYBf uIMPVFgHrdz6LUxCcz8jYWuaQ6cSaRz2zyWVBKRijxtGLk7CkMiO0peGswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9CprScXsa0eU/ay6K2GNCknH95MB8GA1UdIwQY MBaAFEElE0LgXVizt/yToVy6HrceVCOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGIt YzM2NjhiNTAzYTFjLzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGItYzM2NjhiNTAzYTFj LzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPOXmZ63 j8rYQbeRX3BlT5FSG2GsMWfnoLqcTCTIQ0KuIuGGDwcRf2N/WOFzsYm94dx4tg20 dwikl/ZV0ynf+8OXQ5T5YBP2YyRvWB7syTORxQvVu7F5XHLbn9EcN/LcnVw070Bf 8U+0H/RPK54jK6blCFVoGLSICZ3776o7TXpEN09ad9jtCjEVnXdk36ebmuad+70N JEVULIMH/Z+zMpzqGY33WogQzwhKNe+rQO8jRPq8MVj0VPvJ2sCwtqDtC+2UizlX vz7F49lG+mhr4jWTaEkgi/zcC5lQvzvkNwhWvbwBKjbQXHQHU7mRArsGLRTj6hNz EsuUPJ8ur7Bt3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:09 2025 by rpki-client