This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json) Hash identifier: 9r6DSoLiDixIQOLVR/fh148NSQBAyVhMlr4AJLmRkbM= Subject key identifier: 81:D5:58:35:99:13:E4:44:45:37:81:69:91:27:F6:1A:70:EA:CB:2E Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f Certificate serial: 019AF23FCF12CD14DB933EF0D85280AF5B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft Manifest number: 172E Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: ZPMvx3ZKoM34qJD2DgvmlvJPgZMEZGJzz6MG7UFE8Tw=) 2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cf:12:cd:14:db:93:3e:f0:d8:52:80:af:5b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=81d558359913e444453781699127f61a70eacb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:0a:a1:f2:de:90:db:ef:2a:bb:b9:97:b2: 38:93:cf:a0:f3:5c:a8:51:ff:cf:18:59:fd:9b:71: 7f:c0:57:66:bd:9e:39:43:de:c6:ac:f0:6e:e7:c0: 92:8a:09:07:b8:9d:7f:b6:0c:2c:6f:26:5c:99:52: a0:fd:7f:e4:9a:5f:c7:87:4d:d5:83:91:d4:10:78: f7:3a:1c:e3:ba:67:ad:59:4d:fc:47:ed:3c:7f:e5: 82:15:85:68:83:70:2c:bc:a4:69:8a:08:a9:1b:fd: 45:35:50:6e:3a:a9:c5:1f:06:c0:03:b1:45:02:63: 1d:f8:d5:b4:1c:3e:07:c9:34:1b:db:f7:e7:d7:c9: 34:b0:0a:08:9c:fe:96:a6:1b:bd:7d:bf:77:17:bb: d0:a4:b6:6a:e1:44:a7:4c:8a:29:e6:fa:1d:70:e4: 5e:6a:ab:ff:50:63:81:87:36:02:47:86:f0:7b:d1: 3b:14:af:17:de:ff:3e:cc:c7:c8:4e:bf:2f:91:a9: aa:21:cc:fb:8b:1e:a2:4f:6a:c8:07:98:57:78:ef: fe:cb:ef:1f:0e:f6:8d:45:fd:68:59:5c:a3:70:3d: 44:a0:58:9d:cf:35:32:61:f4:55:83:cf:6a:c6:fb: b8:8d:77:59:e0:6f:b5:f4:c4:40:60:ca:a2:e1:3f: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:58:35:99:13:E4:44:45:37:81:69:91:27:F6:1A:70:EA:CB:2E X509v3 Authority Key Identifier: keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:70:55:18:78:ce:dd:d1:5c:be:11:8d:e1:53:ad:9f:7a:4d: 67:72:3f:78:20:d6:9a:44:1d:f1:7b:cf:7c:2b:f4:8e:d8:f7: 26:dd:cc:68:81:26:2f:c6:1f:aa:97:5f:38:b5:9b:69:35:e5: 54:33:45:7e:bf:2c:a5:9c:91:d3:3d:42:43:2c:a1:85:89:82: 2c:b6:9b:34:2b:2b:39:21:23:23:9f:a2:52:ec:3d:e1:73:84: 04:49:7b:a3:6d:c0:bd:8c:f0:74:32:6d:7c:46:59:75:4f:47: 13:dc:b8:ed:b8:5e:60:aa:c8:0c:24:5b:35:1a:e0:d1:22:89: 89:5d:78:c5:ce:1b:08:9c:fe:96:3d:e3:90:12:40:1c:61:56: ff:46:3e:a1:f8:18:77:9a:22:7f:9e:53:3c:9b:2a:2a:1b:f6: 1b:00:12:7a:69:19:f0:8d:54:86:82:b5:a9:46:fe:35:47:08: e8:c4:7a:74:36:5f:ab:f3:00:d4:4b:02:33:7e:f6:b8:36:99: c8:10:aa:54:db:8a:31:12:dd:d1:31:1e:08:dd:d6:b9:3d:c1: e9:de:04:0c:6e:42:5a:1c:6e:86:15:47:16:f1:73:5c:c3:a2: c7:ad:28:5e:79:f0:e2:59:f1:af:e2:5c:aa:ca:7d:2a:a4:38: 9d:eb:fc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP88SzRTbkz7w2FKAr1snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjFkYjdhMTViZDI0ZmJjYTE0NmNkMTJjYzcwZDQxMzlj ODViOWYwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD Eyg4MWQ1NTgzNTk5MTNlNDQ0NDUzNzgxNjk5MTI3ZjYxYTcwZWFjYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUKofLekNvvKru5l7I4k8+g81yo Uf/PGFn9m3F/wFdmvZ45Q97GrPBu58CSigkHuJ1/tgwsbyZcmVKg/X/kml/Hh03V g5HUEHj3OhzjumetWU38R+08f+WCFYVog3AsvKRpigipG/1FNVBuOqnFHwbAA7FF AmMd+NW0HD4HyTQb2/fn18k0sAoInP6Wphu9fb93F7vQpLZq4USnTIop5vodcORe aqv/UGOBhzYCR4bwe9E7FK8X3v8+zMfITr8vkamqIcz7ix6iT2rIB5hXeO/+y+8f DvaNRf1oWVyjcD1EoFidzzUyYfRVg89qxvu4jXdZ4G+19MRAYMqi4T9z6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHVWDWZE+RERTeBaZEn9hpw6ssuMB8GA1UdIwQY MBaAFEBh23oVvST7yhRs0SzHDUE5yFufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYt MTk5ZDE0YzA2YmNiLzEvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYtMTk5ZDE0YzA2YmNi LzEvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHBVGHjO 3dFcvhGN4VOtn3pNZ3I/eCDWmkQd8XvPfCv0jtj3Jt3MaIEmL8YfqpdfOLWbaTXl VDNFfr8spZyR0z1CQyyhhYmCLLabNCsrOSEjI5+iUuw94XOEBEl7o23AvYzwdDJt fEZZdU9HE9y47bheYKrIDCRbNRrg0SKJiV14xc4bCJz+lj3jkBJAHGFW/0Y+ofgY d5oif55TPJsqKhv2GwASemkZ8I1UhoK1qUb+NUcI6MR6dDZfq/MA1EsCM372uDaZ yBCqVNuKMRLd0TEeCN3WuT3B6d4EDG5CWhxuhhVHFvFzXMOix60oXnnw4lnxr+Jc qsp9KqQ4nev8/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:26 2025 by rpki-client