This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json) Hash identifier: /JwwgwfpLPUf7ccwzJBkw5P6mCjM2prQsvsEeZkK6f4= Subject key identifier: 4D:E4:44:F0:F5:72:DE:81:9A:1A:B8:19:2A:05:42:95:40:0B:E7:93 Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc Certificate serial: 019AF164928517C2BC8B2E2679575C347389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft Manifest number: 143C Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: YaiVh4wgBsHbwIiDHkg3oC213i0dullnNFNl3Ty0UEQ=) 2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:92:85:17:c2:bc:8b:2e:26:79:57:5c:34:73:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=4de444f0f572de819a1ab8192a054295400be793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:31:0b:e2:93:ba:3e:b9:35:d2:04:a7:b6: 38:a4:d2:59:33:52:46:69:b6:46:26:cf:4e:86:db: 7b:72:08:dd:bd:49:34:4f:d5:84:5f:57:e9:d6:15: 58:74:95:4a:cc:d9:a7:3a:08:a4:70:29:f0:29:9a: d8:56:dd:45:27:97:c4:04:53:fb:02:1f:31:10:d6: 53:fe:19:ce:a6:7f:bc:37:f9:5b:94:af:fd:70:64: cb:1c:58:eb:f6:0c:58:8b:b4:b0:1c:c2:53:cb:85: 8a:36:10:e2:60:93:72:73:26:6c:43:e0:be:47:16: be:10:cb:44:69:38:00:b4:6d:ca:45:92:49:84:1b: 70:b3:e0:21:1d:72:55:95:db:4b:be:e1:26:3c:c8: ba:d6:c4:06:0a:50:1f:86:31:b1:47:8c:05:a7:93: fb:45:a5:14:73:46:97:90:6e:5f:5f:e3:d3:65:a6: df:ce:08:00:89:e5:a2:e4:ff:f4:e0:fd:f8:9d:52: 8f:07:1f:2d:77:20:27:b3:34:4f:f3:b7:a8:2d:5d: 4d:85:a5:81:9d:d4:f0:cc:af:04:26:c0:dd:fc:a5: 2a:fc:7e:d7:e9:9c:d2:17:68:ff:e8:df:dd:07:c3: 94:ae:e7:34:d3:e2:68:7f:99:e8:00:77:37:00:91: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:44:F0:F5:72:DE:81:9A:1A:B8:19:2A:05:42:95:40:0B:E7:93 X509v3 Authority Key Identifier: keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:dc:05:87:86:86:91:57:a9:67:22:b7:67:65:05:cd:4d:68: 51:17:8f:d8:7f:63:1d:8b:1e:21:32:85:c3:7d:0f:7f:44:d7: 8c:4c:fa:f6:32:80:88:ce:9b:17:a5:c0:27:d6:91:f3:ac:86: 13:45:36:6c:7d:26:c4:ab:44:be:aa:56:be:ca:92:a6:8a:84: b9:9a:15:af:54:6e:7e:a2:0f:1a:34:83:d9:00:cf:e5:a8:ac: 69:da:b2:49:16:be:8e:00:1f:3b:e8:01:74:62:86:c6:f3:9b: 78:0d:bc:24:bd:da:a6:6b:66:15:5f:7c:33:0b:d7:e9:06:55: 05:b7:69:28:80:30:b6:a2:db:df:b3:21:3c:2d:c9:f7:63:a3: d7:9a:de:a9:4d:87:58:80:a4:8f:21:b5:a6:c2:cd:80:5d:f6: a2:f4:5b:44:95:fb:95:56:a6:19:af:a6:ab:7a:fb:66:07:b1: f1:e0:d6:da:9a:ba:51:ff:86:30:bd:40:2c:cb:31:10:53:7a: b3:8a:a9:d8:23:26:61:70:8e:d3:cb:a8:9d:f4:7f:6a:c9:98: d1:ab:34:32:b6:68:bd:74:5c:e6:5e:63:fe:a7:6c:ad:98:94: 25:cf:70:86:b1:30:ef:ce:8d:a0:52:f6:12:84:91:96:6e:93: f6:85:2c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJKFF8K8iy4meVdcNHOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2JjMWRjMmUxMWQ0OTFiOWI4NWUwOGQwMWMyMjJmOTc3 NmMzY2MwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD Eyg0ZGU0NDRmMGY1NzJkZTgxOWExYWI4MTkyYTA1NDI5NTQwMGJlNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4AxC+KTuj65NdIEp7Y4pNJZM1JG abZGJs9Ohtt7cgjdvUk0T9WEX1fp1hVYdJVKzNmnOgikcCnwKZrYVt1FJ5fEBFP7 Ah8xENZT/hnOpn+8N/lblK/9cGTLHFjr9gxYi7SwHMJTy4WKNhDiYJNycyZsQ+C+ Rxa+EMtEaTgAtG3KRZJJhBtws+AhHXJVldtLvuEmPMi61sQGClAfhjGxR4wFp5P7 RaUUc0aXkG5fX+PTZabfzggAieWi5P/04P34nVKPBx8tdyAnszRP87eoLV1NhaWB ndTwzK8EJsDd/KUq/H7X6ZzSF2j/6N/dB8OUruc00+Jof5noAHc3AJFP3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3kRPD1ct6Bmhq4GSoFQpVAC+eTMB8GA1UdIwQY MBaAFEB7wdwuEdSRubheCNAcIi+XdsPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2It N2FmMGExNWY0MGI1LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2ItN2FmMGExNWY0MGI1 LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtwFh4aG kVepZyK3Z2UFzU1oUReP2H9jHYseITKFw30Pf0TXjEz69jKAiM6bF6XAJ9aR86yG E0U2bH0mxKtEvqpWvsqSpoqEuZoVr1RufqIPGjSD2QDP5aisadqySRa+jgAfO+gB dGKGxvObeA28JL3apmtmFV98MwvX6QZVBbdpKIAwtqLb37MhPC3J92Oj15reqU2H WICkjyG1psLNgF32ovRbRJX7lVamGa+mq3r7Zgex8eDW2pq6Uf+GML1ALMsxEFN6 s4qp2CMmYXCO08uonfR/asmY0as0MrZovXRc5l5j/qdsrZiUJc9whrEw786NoFL2 EoSRlm6T9oUsPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:48 2025 by rpki-client