This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json) Hash identifier: ELVqIwvV64crH/FaRAKBnZ50qLnDW4C7Ujf3hNuXCgQ= Subject key identifier: E9:83:8C:7C:59:BF:F9:7E:4E:87:77:48:FA:FD:34:59:53:2F:3E:B7 Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Certificate serial: 019AF12D13F601C03D0F5A3FE4F5213044FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft Manifest number: 0278 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: 6j6iNQd35XFXDxEGTtBkgXHdSyyZ4UX2lU66kbjKfgg=) 2: oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa (hash: WK3mI+xQLWOaMQETqVHTLaWD294DJFp3ywMhpFK66mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:13:f6:01:c0:3d:0f:5a:3f:e4:f5:21:30:44:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=e9838c7c59bff97e4e877748fafd3459532f3eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:fc:f4:8e:59:69:65:40:49:43:2e:de:a3: a1:f7:cc:c4:c5:c8:17:97:e9:59:e1:a0:41:99:6f: 93:cc:47:a7:e6:a8:07:d8:81:d0:2a:35:42:06:bc: f7:cb:78:7d:75:4f:0a:12:67:24:4d:ce:50:77:c3: fe:4b:8b:e6:47:5f:32:ce:cb:5d:91:64:42:20:c3: 34:23:bc:7f:70:6f:80:e5:54:7c:ed:9a:4f:8a:be: 38:71:ee:28:fd:7d:9c:70:5b:59:e1:d6:e7:49:27: 16:69:18:05:8c:59:7d:c6:6a:9e:54:21:15:08:40: fb:98:52:d3:85:2b:ce:dc:e9:70:13:22:69:c2:ff: 3d:17:56:3e:91:06:d3:e9:fc:89:8d:93:6a:45:35: 7c:d2:78:f5:94:86:81:32:72:10:35:32:2a:db:f4: 82:ba:d0:7c:6d:0e:51:82:d2:cf:c8:cb:f3:f8:6f: cd:c1:51:c9:69:5a:c9:5e:e3:76:c6:f3:70:83:6d: 9e:39:2e:4b:67:ea:b3:94:d7:2d:5c:99:2d:e6:52: 5c:e0:1c:8f:24:ed:f2:f1:f6:15:66:83:ec:87:86: 52:06:fb:2a:17:1c:87:0a:a9:14:aa:e4:a4:d3:b7: 60:e1:bc:99:e8:b4:d9:ba:e5:68:6a:1b:92:b8:7f: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:83:8C:7C:59:BF:F9:7E:4E:87:77:48:FA:FD:34:59:53:2F:3E:B7 X509v3 Authority Key Identifier: keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:00:b4:6d:fa:61:28:2a:5f:77:ea:8a:e7:21:7c:78:7d:bc: d9:c3:8c:6f:d1:7f:96:c5:33:d3:9e:af:5b:42:16:8c:f5:ea: eb:f3:c3:0f:5a:c4:49:0c:aa:e4:ca:f1:72:f3:6c:97:dd:ab: 2d:6c:2c:dd:36:5a:40:e8:f0:a3:b7:b6:dc:bd:b7:fb:e7:43: 93:ed:8d:bc:85:1a:4c:11:11:1a:19:f8:56:f2:28:60:83:9a: 5f:75:d4:21:e6:78:bb:d2:70:0b:80:62:da:fb:6f:f6:69:62: de:9f:49:09:d1:48:ef:6e:aa:42:a9:da:a1:59:3d:0e:b5:1c: d1:41:f4:0d:da:77:d2:92:bd:d0:b9:74:e6:cb:55:1e:cf:38: 81:d8:7e:1f:cb:76:de:74:6b:26:cf:4d:ca:35:8e:4e:8a:c4: e2:de:4d:28:88:51:dc:de:4c:47:3c:84:55:43:cb:cd:bf:85: fc:78:10:f3:48:95:ad:29:ba:91:71:ee:93:95:27:a4:64:e2: c8:73:56:f8:b2:0b:6f:7d:ee:29:0b:41:52:2f:3b:cf:70:1a: 5d:f8:aa:1c:5d:e0:e7:dc:ad:ba:1a:b5:7b:c5:81:bc:32:20: 03:69:13:50:e7:dc:db:a7:72:b4:41:07:37:ed:7b:2e:15:82: 90:2e:f9:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRP2AcA9D1o/5PUhMET+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj N2RjZjQwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EyhlOTgzOGM3YzU5YmZmOTdlNGU4Nzc3NDhmYWZkMzQ1OTUzMmYzZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wz89I5ZaWVASUMu3qOh98zExcgX l+lZ4aBBmW+TzEen5qgH2IHQKjVCBrz3y3h9dU8KEmckTc5Qd8P+S4vmR18yzstd kWRCIMM0I7x/cG+A5VR87ZpPir44ce4o/X2ccFtZ4dbnSScWaRgFjFl9xmqeVCEV CED7mFLThSvO3OlwEyJpwv89F1Y+kQbT6fyJjZNqRTV80nj1lIaBMnIQNTIq2/SC utB8bQ5RgtLPyMvz+G/NwVHJaVrJXuN2xvNwg22eOS5LZ+qzlNctXJkt5lJc4ByP JO3y8fYVZoPsh4ZSBvsqFxyHCqkUquSk07dg4byZ6LTZuuVoahuSuH/b2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmDjHxZv/l+Tod3SPr9NFlTLz63MB8GA1UdIwQY MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0 LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAC0bfph KCpfd+qK5yF8eH282cOMb9F/lsUz056vW0IWjPXq6/PDD1rESQyq5MrxcvNsl92r LWws3TZaQOjwo7e23L23++dDk+2NvIUaTBERGhn4VvIoYIOaX3XUIeZ4u9JwC4Bi 2vtv9mli3p9JCdFI726qQqnaoVk9DrUc0UH0Ddp30pK90Ll05stVHs84gdh+H8t2 3nRrJs9NyjWOTorE4t5NKIhR3N5MRzyEVUPLzb+F/HgQ80iVrSm6kXHuk5UnpGTi yHNW+LILb33uKQtBUi87z3AaXfiqHF3g59ytuhq1e8WBvDIgA2kTUOfc26dytEEH N+17LhWCkC75Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:49 2025 by rpki-client