This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json) Hash identifier: un4GVyJrHxBxsgVlQKHxqEpNe7S4GxBGd6l+a/tGwjw= Subject key identifier: C1:A9:75:6A:E5:E9:7B:11:D0:5A:92:F1:F2:1F:30:20:0E:35:F0:7F Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7 Certificate serial: 019AF2ADD8C271052E6ACD3A6612E4819780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:10 +0000 Manifest this update: Sat 06 Dec 2025 08:01:10 +0000 Manifest next update: Sun 07 Dec 2025 08:01:10 +0000 Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=) 2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: KCoAGjY+8Auop7v2Ay5FGAW7+GaR7c1i6RQcZ+9bFKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d8:c2:71:05:2e:6a:cd:3a:66:12:e4:81:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7 Validity Not Before: Dec 6 08:01:10 2025 GMT Not After : Dec 7 08:01:10 2025 GMT Subject: CN=c1a9756ae5e97b11d05a92f1f21f30200e35f07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:e3:99:30:1c:2a:4a:83:38:83:32:ae:d9: 5a:62:13:73:56:96:b5:e3:31:81:88:d1:e9:6c:f9: b5:6c:cb:c8:f4:ca:ea:18:c7:ab:db:4f:25:7d:86: 25:36:64:6f:17:d6:bc:1c:46:70:c0:0d:52:5c:23: 90:ee:17:26:47:3e:ba:b2:a5:3e:1e:14:4c:d4:b8: 48:79:a7:62:ff:c5:72:f1:1a:78:41:23:ad:a9:e4: 8e:46:52:4b:ca:1c:32:8d:59:49:da:09:b5:68:fa: 1b:4f:e7:97:1d:d4:32:11:07:0c:68:08:14:f1:8b: 86:43:ef:34:0b:be:0c:b4:46:8a:98:aa:9d:c1:bb: 0c:82:a4:94:ea:6a:6a:56:90:06:ab:55:46:66:e0: e4:06:ed:dd:80:f1:9b:51:af:9d:ed:7a:3f:fe:fa: 5d:2d:5f:41:80:32:06:eb:ac:98:0e:e2:e3:81:f8: fa:08:95:51:e9:76:50:a1:c1:fc:65:2a:d1:2a:71: 64:2f:bb:b4:9a:82:e9:9f:0f:fe:90:9c:5e:e9:ab: 69:fc:59:48:57:fc:d6:98:01:12:09:9c:16:24:8f: 56:bf:3e:47:a7:20:3c:1e:79:33:be:47:3a:95:16: d8:4d:26:41:14:54:4b:4d:6f:4e:c3:ff:6b:bd:4d: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A9:75:6A:E5:E9:7B:11:D0:5A:92:F1:F2:1F:30:20:0E:35:F0:7F X509v3 Authority Key Identifier: keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:47:d4:cc:1b:9c:15:89:3f:38:01:58:95:78:9b:a0:e7: b5:7b:85:a0:9f:47:bc:ea:5c:bc:f3:fe:f5:06:37:f6:55:89: 61:63:a7:ce:97:d4:e2:af:e1:57:bd:50:d4:a4:42:d7:03:b6: 6a:da:a6:e7:86:6f:64:dc:6a:5d:ec:73:77:ef:ac:af:33:3b: 32:49:6e:0c:7e:c2:68:cb:12:80:61:b2:8c:27:f5:93:15:2e: de:94:4e:47:ba:77:d8:81:bf:c6:00:27:e5:8d:f1:32:1c:73: 2a:8b:7e:c7:b4:e3:28:83:43:22:f8:5e:1c:ab:88:eb:74:af: 14:de:64:ef:80:76:5f:db:cd:cc:c5:7e:7b:3b:6f:43:85:7f: 9c:03:89:55:36:98:45:9a:68:f1:05:1f:39:95:f6:0e:c3:36: bc:03:50:9e:38:68:9b:b3:2c:4b:db:b4:5b:2c:0d:e2:70:d9: 06:d0:ff:ba:5e:44:ab:82:02:ad:de:25:a7:41:85:b1:6a:3e: fb:05:57:92:77:2a:a8:35:f3:09:77:7e:3f:4d:f9:ea:ae:5c: 38:ac:a2:ad:ed:76:cc:3f:a5:6a:3b:cd:08:6f:8b:7d:79:b8: b1:14:ac:d8:8b:ee:da:1b:b7:6a:3b:c7:93:62:36:28:93:4e: df:95:e6:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdjCcQUuas06ZhLkgZeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2 OTA2ZDcwHhcNMjUxMjA2MDgwMTEwWhcNMjUxMjA3MDgwMTEwWjAzMTEwLwYDVQQD EyhjMWE5NzU2YWU1ZTk3YjExZDA1YTkyZjFmMjFmMzAyMDBlMzVmMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyvjmTAcKkqDOIMyrtlaYhNzVpa1 4zGBiNHpbPm1bMvI9MrqGMer208lfYYlNmRvF9a8HEZwwA1SXCOQ7hcmRz66sqU+ HhRM1LhIeadi/8Vy8Rp4QSOtqeSORlJLyhwyjVlJ2gm1aPobT+eXHdQyEQcMaAgU 8YuGQ+80C74MtEaKmKqdwbsMgqSU6mpqVpAGq1VGZuDkBu3dgPGbUa+d7Xo//vpd LV9BgDIG66yYDuLjgfj6CJVR6XZQocH8ZSrRKnFkL7u0moLpnw/+kJxe6atp/FlI V/zWmAESCZwWJI9Wvz5HpyA8Hnkzvkc6lRbYTSZBFFRLTW9Ow/9rvU1T/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGpdWrl6XsR0FqS8fIfMCAONfB/MB8GA1UdIwQY MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4 LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5ZH1Mwb nBWJPzgBWJV4m6DntXuFoJ9HvOpcvPP+9QY39lWJYWOnzpfU4q/hV71Q1KRC1wO2 atqm54ZvZNxqXexzd++srzM7MkluDH7CaMsSgGGyjCf1kxUu3pROR7p32IG/xgAn 5Y3xMhxzKot+x7TjKINDIvheHKuI63SvFN5k74B2X9vNzMV+eztvQ4V/nAOJVTaY RZpo8QUfOZX2DsM2vANQnjhom7MsS9u0WywN4nDZBtD/ul5Eq4ICrd4lp0GFsWo+ +wVXkncqqDXzCXd+P0356q5cOKyire12zD+lajvNCG+LfXm4sRSs2Ivu2hu3ajvH k2I2KJNO35XmLw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:59 2025 by rpki-client