This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json) Hash identifier: EMBBXzrRCXHMvlfrBY2o0buJVPXOtH5oIbX3jeeCX18= Subject key identifier: 99:50:81:08:01:E3:F7:D4:BD:B0:42:91:D8:6C:B3:C6:BC:C6:0B:1E Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019AF19AB6CF8700C36BBCF830B89C3D796F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft Manifest number: 0FF4 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=) 2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=) 3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: HNxlqIrBtw3RUrL1nvAgS+Sh9aDxksgWxIumj23EdT4=) 4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b6:cf:87:00:c3:6b:bc:f8:30:b8:9c:3d:79:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=9950810801e3f7d4bdb04291d86cb3c6bcc60b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:65:93:84:ed:d5:d6:df:4d:2f:d8:8a:7c: 30:b5:cc:c6:9e:23:9b:cc:c8:ec:76:c9:80:1a:9b: 4e:88:64:54:48:86:c9:9b:0c:1a:6c:21:d1:fc:82: 05:02:70:fb:30:23:c4:f8:1a:aa:ea:12:ac:f4:d9: 0e:75:82:97:47:0c:b8:39:d0:8e:5f:6e:3d:14:2f: 0b:f4:ba:e9:dc:cf:3e:9d:fa:c8:9c:4b:cd:77:14: da:2e:8e:42:b5:09:24:7c:da:98:6c:56:b6:02:45: 5d:c5:fb:14:70:97:1f:7b:08:8f:75:fe:5c:be:77: 3e:dd:8e:20:2c:6f:cb:b3:f5:c0:f2:7c:1c:c0:84: db:74:8f:05:f5:d2:6d:67:ad:14:bb:8c:16:ed:bf: 2b:f0:d2:a2:ee:b0:cb:7d:f3:44:9d:c5:6f:36:6b: 4f:eb:01:27:c5:08:cc:99:83:00:9e:58:b8:65:6f: 2d:f9:1e:24:68:b6:be:ba:58:33:53:d7:18:fb:f9: 1b:db:b7:f3:0c:13:38:58:fb:d6:e0:f5:c3:9f:b7: 35:58:c5:4b:ab:8a:96:3d:fa:a4:1f:bd:24:47:e9: 5d:d5:89:8c:34:3f:9e:71:8e:78:84:e2:af:0b:cb: ee:96:9c:10:c3:e6:bb:92:09:7a:96:12:d0:25:64: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:81:08:01:E3:F7:D4:BD:B0:42:91:D8:6C:B3:C6:BC:C6:0B:1E X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:59:74:c3:49:0c:6a:cd:37:e4:68:4a:7c:3a:fc:dd:ea:1e: e0:87:26:05:e5:ac:71:e7:8c:62:2c:8d:1b:91:2b:e9:99:5b: b4:e5:b0:b5:71:3e:72:24:4c:2c:0a:80:ad:52:8c:31:2f:e4: 38:aa:1f:c1:cc:51:2b:9d:3b:36:39:73:e2:55:7c:a8:62:c0: 64:db:ff:4d:3a:be:ec:73:f7:01:48:8b:8e:24:dc:db:38:6f: 6b:ce:fc:e8:a4:66:1c:fd:3b:28:5f:b7:7d:69:9a:58:ac:19: 06:f0:c8:54:23:d7:b8:bf:5f:ca:48:7f:5a:5b:24:2e:d5:e4: 3d:87:41:79:5c:40:19:3d:06:2b:c4:e6:77:78:39:7c:a7:79: 8a:9d:27:fd:27:cc:23:6f:b9:fd:e8:27:3f:a0:1e:ff:09:a5: b0:c0:2d:36:d7:2e:aa:e6:39:96:79:71:7e:06:f1:ec:5a:72: ef:ba:54:74:af:c7:b7:05:ea:55:32:2f:40:b7:a2:35:4f:91: a3:66:35:d7:8e:45:3b:34:4f:02:cf:39:28:7b:15:4d:4c:82: 5e:c9:bb:61:3f:f4:dc:c7:8c:fa:5a:d9:ff:d3:35:a9:a6:b7: e1:4c:6c:70:ce:c6:c3:60:df:56:f4:00:2c:d9:58:05:4c:d9: f0:20:25:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrbPhwDDa7z4MLicPXlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg5OTUwODEwODAxZTNmN2Q0YmRiMDQyOTFkODZjYjNjNmJjYzYwYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoZlk4Tt1dbfTS/YinwwtczGniOb zMjsdsmAGptOiGRUSIbJmwwabCHR/IIFAnD7MCPE+Bqq6hKs9NkOdYKXRwy4OdCO X249FC8L9Lrp3M8+nfrInEvNdxTaLo5CtQkkfNqYbFa2AkVdxfsUcJcfewiPdf5c vnc+3Y4gLG/Ls/XA8nwcwITbdI8F9dJtZ60Uu4wW7b8r8NKi7rDLffNEncVvNmtP 6wEnxQjMmYMAnli4ZW8t+R4kaLa+ulgzU9cY+/kb27fzDBM4WPvW4PXDn7c1WMVL q4qWPfqkH70kR+ld1YmMND+ecY54hOKvC8vulpwQw+a7kgl6lhLQJWTLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlQgQgB4/fUvbBCkdhss8a8xgseMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVl0w0kM as035GhKfDr83eoe4IcmBeWsceeMYiyNG5Er6ZlbtOWwtXE+ciRMLAqArVKMMS/k OKofwcxRK507Njlz4lV8qGLAZNv/TTq+7HP3AUiLjiTc2zhva8786KRmHP07KF+3 fWmaWKwZBvDIVCPXuL9fykh/WlskLtXkPYdBeVxAGT0GK8Tmd3g5fKd5ip0n/SfM I2+5/egnP6Ae/wmlsMAtNtcuquY5lnlxfgbx7Fpy77pUdK/HtwXqVTIvQLeiNU+R o2Y1145FOzRPAs85KHsVTUyCXsm7YT/03MeM+lrZ/9M1qaa34UxscM7Gw2DfVvQA LNlYBUzZ8CAlIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:29 2025 by rpki-client