This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json) Hash identifier: zaBT5e3fCcXn8u7tw0Acyk6aenoEUNchLSc/U73e7hs= Subject key identifier: ED:3F:A4:4E:CB:B2:52:44:D5:55:76:71:73:B1:1C:05:8E:AE:47:AC Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B2B8AD1C909E5EEC31E3BB20BF838F98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft Manifest number: 1012 Signing time: Wed 17 Dec 2025 09:01:16 +0000 Manifest this update: Wed 17 Dec 2025 09:01:16 +0000 Manifest next update: Thu 18 Dec 2025 09:01:16 +0000 Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=) 2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=) 3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: Kd/GEKkekx0ueaSISS72PBfZhK3GALmsnlh+Z3aUkYc=) 4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d1:c9:09:e5:ee:c3:1e:3b:b2:0b:f8:38:f9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Dec 17 09:01:16 2025 GMT Not After : Dec 18 09:01:16 2025 GMT Subject: CN=ed3fa44ecbb25244d555767173b11c058eae47ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:1e:7f:d6:1e:98:ad:02:85:b7:7e:4c:ac: 27:63:01:7e:8f:c9:24:e0:8b:63:be:20:fe:ed:f3: 12:f4:f0:ac:d5:33:e0:72:3c:9a:45:99:7e:46:97: 3a:e6:7d:ec:e9:d5:15:a1:2e:b6:cf:fb:18:49:a7: e6:ac:e3:31:5d:de:6d:00:02:f1:9c:a2:66:82:93: dd:c0:14:cb:8c:a9:83:c2:ec:04:1f:7a:90:8a:af: d3:a5:94:47:bf:1b:35:7c:61:3a:62:af:6b:4d:90: 89:e0:e4:f0:71:89:43:41:ab:6a:8f:f3:35:85:7f: 6e:ef:ae:ec:fd:c3:28:13:3a:21:52:2e:63:67:b1: 78:a7:2c:a1:10:68:c5:c1:56:ba:45:6c:1d:37:2c: e3:4a:1e:57:56:cc:be:31:ef:7f:98:e4:d8:8c:1c: ab:58:dc:28:1d:3c:30:39:2b:e4:36:d5:74:31:b6: 53:88:1a:58:04:4b:ef:fa:0e:86:28:cc:2b:c8:1a: e3:36:42:a9:35:a2:8f:1c:f6:c9:05:4b:b1:da:2d: 7f:77:88:da:c7:47:57:d6:76:77:4b:66:46:0f:3d: db:5e:55:b1:8f:78:2a:a1:a2:e3:55:4e:37:f5:ce: bd:53:2e:2f:8e:7e:a4:81:08:c3:7b:8b:f1:92:bf: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3F:A4:4E:CB:B2:52:44:D5:55:76:71:73:B1:1C:05:8E:AE:47:AC X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:77:d2:bb:05:53:3e:b1:ff:31:69:cc:2a:6d:e3:ce:08:02: 87:f8:89:bd:9f:74:57:1b:08:fc:f3:8d:fd:96:c7:3a:3d:ea: b7:b9:d9:a6:91:1f:c7:eb:03:03:4a:55:cd:17:53:a5:ca:5d: 95:76:8c:ee:b7:d6:12:0c:c2:f9:cd:94:79:74:85:3d:99:c9: da:cb:84:4a:80:a3:fb:77:ba:63:9e:5f:45:c4:fe:30:ca:5e: dc:ca:0b:22:1d:17:cb:2a:54:ad:e7:ea:60:36:f1:50:ae:f9: 29:85:38:9b:9b:09:44:f5:3c:6c:da:84:93:dd:2c:1c:08:1e: c0:7d:f3:63:ba:90:be:ff:b1:43:a9:7d:d6:b5:6a:4c:c1:cf: 36:1c:6e:72:20:fe:57:c4:74:75:a5:af:c6:5a:b6:ae:d1:6a: 7a:8f:82:9f:44:a4:98:69:34:ba:39:3d:e2:ef:c1:e8:cc:11: fb:97:0a:60:df:ce:64:cc:d7:df:08:a8:9c:2b:d5:bd:46:79: c9:c8:1e:0d:ad:2e:1d:8d:68:7a:5e:c2:a5:73:0f:ba:23:14: fd:5c:69:38:0f:9b:ba:ac:37:4c:b9:5c:56:0b:eb:4a:7e:82: 28:dc:03:08:ff:34:46:d2:3f:82:47:23:88:8f:70:04:00:53: 4a:01:25:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritHJCeXuwx47sgv4OPmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjUxMjE3MDkwMTE2WhcNMjUxMjE4MDkwMTE2WjAzMTEwLwYDVQQD EyhlZDNmYTQ0ZWNiYjI1MjQ0ZDU1NTc2NzE3M2IxMWMwNThlYWU0N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Yef9YemK0Chbd+TKwnYwF+j8kk 4ItjviD+7fMS9PCs1TPgcjyaRZl+Rpc65n3s6dUVoS62z/sYSafmrOMxXd5tAALx nKJmgpPdwBTLjKmDwuwEH3qQiq/TpZRHvxs1fGE6Yq9rTZCJ4OTwcYlDQatqj/M1 hX9u767s/cMoEzohUi5jZ7F4pyyhEGjFwVa6RWwdNyzjSh5XVsy+Me9/mOTYjByr WNwoHTwwOSvkNtV0MbZTiBpYBEvv+g6GKMwryBrjNkKpNaKPHPbJBUux2i1/d4ja x0dX1nZ3S2ZGDz3bXlWxj3gqoaLjVU439c69Uy4vjn6kgQjDe4vxkr/exwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0/pE7LslJE1VV2cXOxHAWOrkesMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nfSuwVT PrH/MWnMKm3jzggCh/iJvZ90VxsI/PON/ZbHOj3qt7nZppEfx+sDA0pVzRdTpcpd lXaM7rfWEgzC+c2UeXSFPZnJ2suESoCj+3e6Y55fRcT+MMpe3MoLIh0XyypUrefq YDbxUK75KYU4m5sJRPU8bNqEk90sHAgewH3zY7qQvv+xQ6l91rVqTMHPNhxuciD+ V8R0daWvxlq2rtFqeo+Cn0SkmGk0ujk94u/B6MwR+5cKYN/OZMzX3wionCvVvUZ5 ycgeDa0uHY1oel7CpXMPuiMU/VxpOA+buqw3TLlcVgvrSn6CKNwDCP80RtI/gkcj iI9wBABTSgElpg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:02 2025 by rpki-client