This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json) Hash identifier: m3Dk3nuqkEBU5hzjsJFWuAOw4IfEaISiufpwr9KxtFQ= Subject key identifier: F3:8F:FB:93:BB:85:F9:D1:25:C2:38:D2:78:C6:DA:AE:99:71:FB:58 Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Certificate serial: 019AF051C1C18FE7F517F736BBF4867D1AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft Manifest number: 03BC Signing time: Fri 05 Dec 2025 21:01:20 +0000 Manifest this update: Fri 05 Dec 2025 21:01:20 +0000 Manifest next update: Sat 06 Dec 2025 21:01:20 +0000 Files and hashes: 1: 1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa (hash: RQASeiaMoVDZNGhkIy9OUB5XmVipcRP+d1vVqckV06Q=) 2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: Gsz+tq2E8cYDGvrNkhVJm+nAIoKbD/X3KjLM5M0TPOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:c1:c1:8f:e7:f5:17:f7:36:bb:f4:86:7d:1a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Validity Not Before: Dec 5 21:01:20 2025 GMT Not After : Dec 6 21:01:20 2025 GMT Subject: CN=f38ffb93bb85f9d125c238d278c6daae9971fb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:db:ea:41:f4:b3:a1:4f:39:92:cc:26:da: bb:97:d5:1b:2a:36:72:31:83:b2:d7:97:28:5d:f6: 97:03:de:04:1e:83:ba:b5:97:78:5f:6a:f2:2a:44: 42:4f:a3:7c:24:8a:9e:60:dc:a4:2c:72:87:57:19: ea:7f:1b:ad:d7:a2:d0:60:8a:71:87:67:80:89:88: e9:84:a9:ad:a4:5f:82:f9:47:d7:67:24:a5:ef:a9: 50:64:d3:95:49:33:29:01:95:57:df:1e:f5:01:29: 5a:03:91:23:e5:85:31:b0:e0:e8:cb:9c:27:9f:3e: 66:95:51:19:e4:f7:99:01:7d:a0:21:ae:65:ea:19: 8b:95:cc:ff:73:79:4b:c6:fa:9b:f9:09:81:13:34: d1:65:c2:c9:87:8d:26:f2:6d:07:2d:7b:0f:8e:e5: 64:48:eb:fc:b8:c1:7c:15:46:75:d0:54:2f:b7:3b: 95:d7:d2:7c:19:20:2c:a9:e7:b0:cd:ce:1f:a6:06: a7:33:99:50:ff:22:df:fe:ab:f9:4a:fd:cf:a6:60: 6a:07:3a:44:bd:56:19:32:59:9d:6a:66:86:a0:19: 04:8c:b9:bc:c5:7b:18:2c:2f:89:cc:88:33:f4:f7: 96:bf:3a:be:e3:17:a0:1c:c8:82:50:3d:58:04:3a: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:FB:93:BB:85:F9:D1:25:C2:38:D2:78:C6:DA:AE:99:71:FB:58 X509v3 Authority Key Identifier: keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:db:3d:33:ce:0d:38:6f:2e:09:bf:7d:ea:c0:1f:fe:52:f5: 02:ee:cc:d1:54:9c:c9:cd:f4:e1:69:60:7a:14:08:c9:08:06: 73:71:18:4d:ed:36:6f:e4:06:47:f4:15:bc:c3:e3:28:56:5f: d1:96:46:08:97:2b:89:56:31:c1:5e:95:6d:44:87:e3:37:5a: 33:a6:01:97:c1:d3:92:b0:0d:fe:8f:4c:5a:9a:dc:31:4c:73: 8c:67:7f:e9:4f:1a:df:ee:54:b3:2d:72:c8:88:10:1e:fa:67: 00:8a:e6:90:a6:31:bd:b6:53:f5:71:b7:d8:26:01:99:f5:4c: 24:31:f7:67:e5:a9:ab:67:d8:ff:5e:75:e9:07:f4:24:22:b9: 41:60:28:2c:34:4d:5e:8e:44:9c:0b:2d:fe:86:85:5f:48:34: 7e:d7:f3:ef:ce:01:67:1b:c2:0d:06:a6:74:18:2e:b5:22:16: be:4a:2e:7b:41:37:0a:7b:ac:6d:13:f3:ea:fc:52:ff:7a:e0: f4:23:f4:03:7e:52:3e:49:5d:77:2b:76:9f:3d:3b:e0:b3:70: c7:88:ea:12:8d:eb:8d:29:32:74:49:bb:98:2c:08:21:c9:e9: d4:d7:4c:68:4a:fc:ee:e6:5a:ed:35:86:66:9f:42:2d:5c:4b: 3f:f7:5d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUcHBj+f1F/c2u/SGfRqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk NzMyMzcwHhcNMjUxMjA1MjEwMTIwWhcNMjUxMjA2MjEwMTIwWjAzMTEwLwYDVQQD EyhmMzhmZmI5M2JiODVmOWQxMjVjMjM4ZDI3OGM2ZGFhZTk5NzFmYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynfb6kH0s6FPOZLMJtq7l9UbKjZy MYOy15coXfaXA94EHoO6tZd4X2ryKkRCT6N8JIqeYNykLHKHVxnqfxut16LQYIpx h2eAiYjphKmtpF+C+UfXZySl76lQZNOVSTMpAZVX3x71ASlaA5Ej5YUxsODoy5wn nz5mlVEZ5PeZAX2gIa5l6hmLlcz/c3lLxvqb+QmBEzTRZcLJh40m8m0HLXsPjuVk SOv8uMF8FUZ10FQvtzuV19J8GSAsqeewzc4fpganM5lQ/yLf/qv5Sv3PpmBqBzpE vVYZMlmdamaGoBkEjLm8xXsYLC+JzIgz9PeWvzq+4xegHMiCUD1YBDqqqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOP+5O7hfnRJcI40njG2q6ZcftYMB8GA1UdIwQY MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2 LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADts9M84N OG8uCb996sAf/lL1Au7M0VScyc304WlgehQIyQgGc3EYTe02b+QGR/QVvMPjKFZf 0ZZGCJcriVYxwV6VbUSH4zdaM6YBl8HTkrAN/o9MWprcMUxzjGd/6U8a3+5Usy1y yIgQHvpnAIrmkKYxvbZT9XG32CYBmfVMJDH3Z+Wpq2fY/1516Qf0JCK5QWAoLDRN Xo5EnAst/oaFX0g0ftfz784BZxvCDQamdBgutSIWvkoue0E3CnusbRPz6vxS/3rg 9CP0A35SPklddyt2nz074LNwx4jqEo3rjSkydEm7mCwIIcnp1NdMaEr87uZa7TWG Zp9CLVxLP/ddLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client