This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json) Hash identifier: nPa9L97rFyTa2rIRk+a1WpczVxaOAjSjCvvSyFEM4v4= Subject key identifier: 37:F7:BD:48:C9:D9:BC:A4:F3:42:D7:CA:47:D7:5A:77:C3:48:BB:D0 Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7 Certificate serial: 019B307A2A05E97155DED6F76EA317B4EF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 08:01:11 +0000 Manifest this update: Thu 18 Dec 2025 08:01:11 +0000 Manifest next update: Fri 19 Dec 2025 08:01:11 +0000 Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=) 2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: pCEvl+KqDaAf5xAG2qNCRtcZXLd80/6Uyy6tUu+KPJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:2a:05:e9:71:55:de:d6:f7:6e:a3:17:b4:ef:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7 Validity Not Before: Dec 18 08:01:11 2025 GMT Not After : Dec 19 08:01:11 2025 GMT Subject: CN=37f7bd48c9d9bca4f342d7ca47d75a77c348bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:bf:c9:0d:51:25:5c:ad:3a:62:0c:56:aa: f1:21:2d:07:18:f6:4c:8e:06:3f:9c:81:e5:b8:a7: b5:a8:39:c3:81:c5:ec:8c:e6:9c:84:eb:b5:93:5c: fb:86:d2:73:9c:44:6d:84:1c:70:8b:8b:c2:1d:a7: bf:07:3f:cd:e6:ec:40:2a:76:a0:f6:c1:85:0e:33: ce:9b:4f:27:0e:54:78:7f:5f:54:2c:3d:0f:cc:bc: 97:bc:db:38:d7:78:07:66:82:ac:47:4c:5b:47:b0: 94:0b:42:a6:d0:83:82:60:bd:5d:4e:af:a4:19:14: 24:9c:dc:c4:bd:a0:eb:9d:e8:fe:6b:7a:38:36:cd: e6:63:0b:25:d1:1d:fc:0a:bd:e1:d6:2e:62:06:88: 64:4c:a1:42:09:ee:12:77:31:71:70:c6:c0:32:be: cc:5a:b7:8a:9a:15:12:e5:93:13:cd:42:f6:f9:60: ca:b2:3d:71:8f:7e:ed:54:df:50:c7:60:f4:21:e1: fe:ff:83:83:54:46:05:5e:80:7d:e7:69:69:99:dd: 8d:3f:c8:9f:6a:db:20:d7:fc:13:57:0b:ee:2c:6e: 27:9d:77:72:ea:fe:f3:f6:f9:93:7b:ad:ac:2a:dc: 03:44:fb:d3:70:00:38:cd:bd:61:57:24:0d:a7:b8: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:BD:48:C9:D9:BC:A4:F3:42:D7:CA:47:D7:5A:77:C3:48:BB:D0 X509v3 Authority Key Identifier: keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a1:e6:cc:21:38:18:44:25:eb:65:85:6f:96:ff:4c:64:68: b2:d2:39:a2:0e:30:2d:01:45:0d:ba:64:b1:4d:6c:50:d2:4a: 80:58:a3:0a:52:80:f6:00:1d:fc:05:48:c2:b5:6c:f7:78:8c: fa:fa:7b:c6:e7:f9:56:5c:4c:e5:3c:81:91:41:a6:12:af:3b: fb:10:51:5b:13:79:bc:d0:3a:c4:a4:77:4e:56:aa:4b:64:cb: 7c:e0:95:e1:2a:bf:6d:11:5b:da:57:4e:2f:73:a4:6f:db:8e: 64:a3:64:b5:16:09:8d:b4:15:fb:6d:89:3d:e0:33:bf:34:cb: 31:b1:8c:99:a7:09:58:37:7b:d9:6d:76:a7:10:3b:0e:63:c3: be:80:87:eb:6a:cd:bb:d4:ce:33:23:2f:9f:6d:5a:22:1d:4d: 40:dc:5d:7f:23:10:8b:bf:36:06:0d:87:b5:3d:34:9c:1a:25: f5:98:c8:e4:d0:97:75:f1:a8:22:a9:a8:b6:ab:2e:12:eb:13: 64:f7:88:a1:ca:ce:57:c0:dc:47:89:20:26:68:be:f8:9f:60: ba:5c:6e:3c:0f:79:f3:4b:ba:ae:b7:29:f5:5a:79:c7:f8:62: 22:b5:a0:d9:d7:28:6f:73:6c:0f:b9:96:f6:f0:56:bb:31:f6: 24:da:34:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweioF6XFV3tb3bqMXtO9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2 OTA2ZDcwHhcNMjUxMjE4MDgwMTExWhcNMjUxMjE5MDgwMTExWjAzMTEwLwYDVQQD EygzN2Y3YmQ0OGM5ZDliY2E0ZjM0MmQ3Y2E0N2Q3NWE3N2MzNDhiYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRi/yQ1RJVytOmIMVqrxIS0HGPZM jgY/nIHluKe1qDnDgcXsjOachOu1k1z7htJznERthBxwi4vCHae/Bz/N5uxAKnag 9sGFDjPOm08nDlR4f19ULD0PzLyXvNs413gHZoKsR0xbR7CUC0Km0IOCYL1dTq+k GRQknNzEvaDrnej+a3o4Ns3mYwsl0R38Cr3h1i5iBohkTKFCCe4SdzFxcMbAMr7M WreKmhUS5ZMTzUL2+WDKsj1xj37tVN9Qx2D0IeH+/4ODVEYFXoB952lpmd2NP8if atsg1/wTVwvuLG4nnXdy6v7z9vmTe62sKtwDRPvTcAA4zb1hVyQNp7jnCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf3vUjJ2byk80LXykfXWnfDSLvQMB8GA1UdIwQY MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4 LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6HmzCE4 GEQl62WFb5b/TGRostI5og4wLQFFDbpksU1sUNJKgFijClKA9gAd/AVIwrVs93iM +vp7xuf5VlxM5TyBkUGmEq87+xBRWxN5vNA6xKR3TlaqS2TLfOCV4Sq/bRFb2ldO L3Okb9uOZKNktRYJjbQV+22JPeAzvzTLMbGMmacJWDd72W12pxA7DmPDvoCH62rN u9TOMyMvn21aIh1NQNxdfyMQi782Bg2HtT00nBol9ZjI5NCXdfGoIqmotqsuEusT ZPeIocrOV8DcR4kgJmi++J9gulxuPA9580u6rrcp9Vp5x/hiIrWg2dcob3NsD7mW 9vBWuzH2JNo0QA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:48 2025 by rpki-client