This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json) Hash identifier: MxOxxngeaEJZqSK+k5dMTBb7GEV2FcTrtuv2ZaTvNJc= Subject key identifier: E1:AF:35:7B:2C:49:20:DE:E6:AA:39:9E:88:95:56:03:AB:D0:C3:BD Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Certificate serial: 019AF2ADDA1EA117D232811900A5E5227D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:10 +0000 Manifest this update: Sat 06 Dec 2025 08:01:10 +0000 Manifest next update: Sun 07 Dec 2025 08:01:10 +0000 Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=) 2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: ZWFwrjPVAEao+8lHVFWtJGOs0qVTqtEmJH4ZaOoDfsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:da:1e:a1:17:d2:32:81:19:00:a5:e5:22:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Validity Not Before: Dec 6 08:01:10 2025 GMT Not After : Dec 7 08:01:10 2025 GMT Subject: CN=e1af357b2c4920dee6aa399e88955603abd0c3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:08:ee:f0:0a:28:17:06:5a:bf:9a:ba:d1: 41:4e:52:46:05:46:f8:ba:bd:67:ee:7d:51:20:60: 10:18:33:e2:3d:bb:51:51:ab:a8:48:30:2b:4c:dc: 40:a9:37:dd:e3:99:51:a3:90:74:a7:05:32:aa:94: 65:55:4c:98:b5:b4:b6:3f:cd:7a:c8:13:94:3c:cb: 18:f8:0c:88:96:2a:a8:b2:84:dd:a1:af:0c:98:69: c3:89:64:45:a1:ff:c4:f7:11:7a:42:52:96:b6:ba: 86:b9:e9:23:3c:73:eb:37:8f:24:48:74:97:98:6a: 99:74:0f:28:d4:ae:67:df:8d:29:72:93:43:3d:42: 25:3e:42:f0:1a:aa:ab:27:ea:f7:3b:be:5c:1c:b0: c1:4d:a6:db:7f:33:09:32:bb:aa:28:8e:37:c1:03: ef:f4:85:2a:10:74:fa:b6:75:63:e3:16:11:4a:82: a0:8e:75:a5:33:f3:f1:83:99:fb:33:6c:71:7f:d9: 9e:fd:a5:9c:a3:a9:ce:22:1f:b9:58:c9:18:26:14: c4:63:0e:56:4e:a4:aa:0c:df:62:3d:8b:eb:05:06: a9:ff:df:80:67:ef:cb:f9:2f:e5:0b:e1:4f:cd:b8: bc:da:75:03:a3:aa:d2:70:06:7d:04:90:7f:92:21: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:35:7B:2C:49:20:DE:E6:AA:39:9E:88:95:56:03:AB:D0:C3:BD X509v3 Authority Key Identifier: keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8a:80:26:b3:91:f5:c5:7b:b2:be:c4:fb:b9:cb:63:04:e5: cb:ae:d8:00:dd:d0:18:aa:5f:ba:55:99:31:4e:ac:7e:7f:77: cc:f6:81:18:46:94:9c:58:65:fb:14:54:52:da:a0:c8:dc:10: dc:10:d8:0f:11:8c:14:aa:62:e6:7f:20:8d:f5:70:7f:6a:07: 92:6e:09:0d:ac:5a:9c:cf:a2:f7:36:59:20:a0:2d:d8:e5:a5: ee:f2:b7:66:b7:1b:18:02:28:c0:31:b0:dd:58:ac:cf:23:27: a3:20:19:74:2c:43:56:85:42:32:5f:29:e3:ef:a5:42:da:dc: ba:bd:02:4a:51:fe:20:4e:a3:11:bc:55:1e:ae:7a:15:f9:36: 3b:3d:c9:f3:cc:b2:f1:57:fc:73:26:49:1a:4d:0d:31:af:3c: b3:01:e5:bc:16:a3:e1:d5:43:fc:f6:fa:ad:67:8a:51:07:93: da:34:4a:a9:0b:00:da:c8:30:d6:95:75:00:95:b7:79:04:9f: 08:36:14:8d:4e:99:01:8c:9a:47:2e:56:7a:2c:7f:18:ed:0b: db:26:70:cb:9b:21:71:f8:f0:2f:e5:3a:fb:4d:c6:1b:05:6b: 68:45:53:3f:4c:6f:ac:7f:23:bf:4d:bf:93:e8:e7:c7:3e:e2: af:74:3b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdoeoRfSMoEZAKXlIn2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl OTE4ZTMwHhcNMjUxMjA2MDgwMTEwWhcNMjUxMjA3MDgwMTEwWjAzMTEwLwYDVQQD EyhlMWFmMzU3YjJjNDkyMGRlZTZhYTM5OWU4ODk1NTYwM2FiZDBjM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RII7vAKKBcGWr+autFBTlJGBUb4 ur1n7n1RIGAQGDPiPbtRUauoSDArTNxAqTfd45lRo5B0pwUyqpRlVUyYtbS2P816 yBOUPMsY+AyIliqosoTdoa8MmGnDiWRFof/E9xF6QlKWtrqGuekjPHPrN48kSHSX mGqZdA8o1K5n340pcpNDPUIlPkLwGqqrJ+r3O75cHLDBTabbfzMJMruqKI43wQPv 9IUqEHT6tnVj4xYRSoKgjnWlM/Pxg5n7M2xxf9me/aWco6nOIh+5WMkYJhTEYw5W TqSqDN9iPYvrBQap/9+AZ+/L+S/lC+FPzbi82nUDo6rScAZ9BJB/kiFKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGvNXssSSDe5qo5noiVVgOr0MO9MB8GA1UdIwQY MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt ZmM1OWRlZGIxZDJiLzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoqAJrOR 9cV7sr7E+7nLYwTly67YAN3QGKpfulWZMU6sfn93zPaBGEaUnFhl+xRUUtqgyNwQ 3BDYDxGMFKpi5n8gjfVwf2oHkm4JDaxanM+i9zZZIKAt2OWl7vK3ZrcbGAIowDGw 3ViszyMnoyAZdCxDVoVCMl8p4++lQtrcur0CSlH+IE6jEbxVHq56Ffk2Oz3J88yy 8Vf8cyZJGk0NMa88swHlvBaj4dVD/Pb6rWeKUQeT2jRKqQsA2sgw1pV1AJW3eQSf CDYUjU6ZAYyaRy5Weix/GO0L2yZwy5shcfjwL+U6+03GGwVraEVTP0xvrH8jv02/ k+jnxz7ir3Q7cA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:41 2025 by rpki-client