This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json) Hash identifier: NbYN9R5VN0LqOCpYYFewhBrxvtW3Og8gE1scW/ypbck= Subject key identifier: F8:33:79:73:9C:89:F3:62:9C:EC:FF:38:FE:28:80:39:57:78:76:A8 Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569 Certificate serial: 019AF0BF237F178A2B42C03165242B36457B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft Manifest number: 16F4 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=) 2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: SwPdUQUtPNj09Gn2jlI2muFeFi7uW5oosZE5QgA1ljE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:23:7f:17:8a:2b:42:c0:31:65:24:2b:36:45:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=f83379739c89f3629cecff38fe288039577876a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:63:e1:01:b1:36:88:77:75:15:c1:0c:d2: 6e:76:0d:1d:69:18:b1:2d:a9:d6:cc:b1:85:2a:f8: aa:60:b8:cb:5d:a8:a4:2e:5f:e1:c2:bb:d8:1a:fd: 35:6b:9c:cc:61:ea:dc:89:6a:38:fa:b1:14:bf:b3: 65:76:92:a6:2d:15:66:d9:16:98:43:42:99:d6:5c: 5b:ba:fb:96:42:0a:e9:97:09:f0:99:56:96:44:32: a8:26:4f:48:6b:cc:a1:9a:bf:7b:47:35:16:cb:d7: 35:c8:36:ac:23:b8:1a:8b:66:95:f6:ae:3b:a5:c4: b9:8f:46:93:06:98:4a:5a:a3:54:c5:88:05:47:6f: 7c:d2:96:88:88:77:be:0b:6e:ea:c6:8a:88:fb:b7: c1:40:dd:a5:7c:29:19:21:39:0e:35:77:e3:63:42: fb:bb:1c:16:87:00:7d:ae:2c:d6:5e:0b:9c:01:fa: 02:a6:a5:fe:51:ba:fa:de:01:2b:19:5b:c7:f5:9d: 58:10:65:64:6e:90:6b:20:af:91:ac:f1:27:94:75: 61:5e:ed:f6:7e:9e:f6:66:8e:ed:9d:1e:34:9a:12: 70:a0:e1:95:1d:46:f0:bc:8c:40:32:54:ac:da:7b: c5:c4:e4:36:b2:6a:2c:af:e9:e4:a5:3c:16:72:d3: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:79:73:9C:89:F3:62:9C:EC:FF:38:FE:28:80:39:57:78:76:A8 X509v3 Authority Key Identifier: keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:61:34:e0:bf:9c:00:be:7b:ff:0a:a7:a4:c3:37:43:73: 97:32:43:6e:4f:68:06:2c:22:99:bc:3d:a0:56:37:df:03:62: 83:7c:b6:3e:7e:82:e0:f0:b4:33:7c:bd:9d:69:0d:8c:d1:5d: 3f:2e:f5:8c:20:07:32:be:bc:0b:34:91:6c:8f:9a:c0:85:5f: de:b7:d9:98:23:cb:25:6e:7f:d9:cc:43:72:e6:cf:60:10:fe: bd:f1:96:a0:65:0a:3e:78:29:a8:59:a8:5a:09:6a:9d:b8:04: 83:c0:5c:13:ef:c8:d1:60:53:1c:7e:75:b5:3a:60:7c:32:4b: f8:62:27:36:d6:56:e8:21:9e:7c:21:0f:80:8b:db:76:34:68: b7:12:74:ed:c7:34:d7:e7:1f:43:88:cb:b8:b7:3c:a9:22:28: a5:8b:cb:6c:fc:c0:4c:19:a8:94:15:e1:bf:57:4a:2e:5b:81: f2:1f:5b:16:4e:a0:95:be:a7:c5:53:a0:20:c0:84:16:b2:d6: ce:b1:1a:1f:30:0d:e5:76:1d:f6:78:c6:df:27:32:cb:dc:4b: 7e:11:02:49:2a:aa:04:00:78:60:6b:69:7e:64:52:e5:0d:8d: cd:6c:a6:aa:e2:e1:ec:ce:db:b7:f0:0d:cf:4a:69:fd:f1:48: 34:a1:65:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyN/F4orQsAxZSQrNkV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGUwOTQ5ZGY1OTMwZjZiNzllZmNiZDljYmExNzRjYTIx M2Y1NjkwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhmODMzNzk3MzljODlmMzYyOWNlY2ZmMzhmZTI4ODAzOTU3Nzg3NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJj4QGxNoh3dRXBDNJudg0daRix LanWzLGFKviqYLjLXaikLl/hwrvYGv01a5zMYerciWo4+rEUv7NldpKmLRVm2RaY Q0KZ1lxbuvuWQgrplwnwmVaWRDKoJk9Ia8yhmr97RzUWy9c1yDasI7gai2aV9q47 pcS5j0aTBphKWqNUxYgFR2980paIiHe+C27qxoqI+7fBQN2lfCkZITkONXfjY0L7 uxwWhwB9rizWXgucAfoCpqX+Ubr63gErGVvH9Z1YEGVkbpBrIK+RrPEnlHVhXu32 fp72Zo7tnR40mhJwoOGVHUbwvIxAMlSs2nvFxOQ2smosr+nkpTwWctOy2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgzeXOcifNinOz/OP4ogDlXeHaoMB8GA1UdIwQY MBaAFEMOCUnfWTD2t578vZy6F0yiE/VpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYt MDY4NjE2MGE3ZTY4LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYtMDY4NjE2MGE3ZTY4 LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQZhNOC/ nAC+e/8Kp6TDN0NzlzJDbk9oBiwimbw9oFY33wNig3y2Pn6C4PC0M3y9nWkNjNFd Py71jCAHMr68CzSRbI+awIVf3rfZmCPLJW5/2cxDcubPYBD+vfGWoGUKPngpqFmo WglqnbgEg8BcE+/I0WBTHH51tTpgfDJL+GInNtZW6CGefCEPgIvbdjRotxJ07cc0 1+cfQ4jLuLc8qSIopYvLbPzATBmolBXhv1dKLluB8h9bFk6glb6nxVOgIMCEFrLW zrEaHzAN5XYd9njG3ycyy9xLfhECSSqqBAB4YGtpfmRS5Q2NzWymquLh7M7bt/AN z0pp/fFINKFlPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:57 2025 by rpki-client