This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json) Hash identifier: wAuEtuWJM2X6ve3s5SuPMae6gaCEbX1o1ZXEzzWaCoQ= Subject key identifier: 43:DB:2E:74:25:EF:E0:FF:57:57:6D:24:F8:56:10:E6:4B:1E:6A:DA Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f Certificate serial: 019AF16411E6A0E328E50803AEE1CB9FCA2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft Manifest number: 141A Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: JNR1jTg5O+HO79TRUJedM5yHHbyd/k41ykgBa4yVFkw=) 2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:11:e6:a0:e3:28:e5:08:03:ae:e1:cb:9f:ca:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=43db2e7425efe0ff57576d24f85610e64b1e6ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d2:a2:d8:42:55:5f:da:cf:c4:79:6c:5f:61: 76:7c:73:44:ad:29:72:1a:4f:8f:b5:9b:eb:2f:af: a3:16:1d:f3:04:0a:55:2f:86:12:16:6b:a1:49:82: 4c:22:81:71:26:69:3f:3a:d4:2d:92:0f:0d:f3:75: 64:82:54:0d:f5:15:b9:21:30:3c:dd:3c:fb:96:9d: 1d:1e:61:f7:cc:77:37:f0:ef:7f:7a:15:ea:33:51: 8d:a1:16:e2:df:06:53:9e:5e:8d:f0:d8:3a:62:10: 27:5a:7f:8d:c6:85:2c:7e:f2:15:ce:59:7e:45:5c: d2:c5:26:08:46:84:ad:03:b5:ed:8d:18:21:6c:3a: b5:60:65:c7:21:4c:50:6c:4f:54:fa:93:18:5f:2f: 6e:95:b5:8f:2a:75:be:63:f4:4f:ff:69:0c:3e:7c: cc:bf:40:12:e2:12:c5:7f:04:2f:f8:a8:13:42:b7: 98:ec:93:80:15:5d:88:7a:ff:1e:dc:70:43:72:dc: 4b:db:82:99:b6:77:df:00:23:f1:0f:9d:b0:c0:69: 00:fb:b4:0d:61:d8:96:1a:12:ac:91:ef:ce:39:4f: 57:bd:33:76:32:7c:6b:e4:14:77:af:0d:3d:9e:41: 22:ec:49:42:7a:57:59:68:2e:26:01:96:ab:10:eb: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:2E:74:25:EF:E0:FF:57:57:6D:24:F8:56:10:E6:4B:1E:6A:DA X509v3 Authority Key Identifier: keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:35:08:a4:f9:13:53:18:93:f9:bf:a0:ff:ad:a9:3a:f8:66: b5:08:a3:c4:dc:44:95:d4:9a:02:25:6e:2c:75:0d:7e:95:44: ad:3a:55:67:84:1d:6b:17:53:93:89:6a:26:38:ec:16:98:83: 93:f1:be:35:32:a4:48:18:00:4d:11:7b:e1:09:2b:4b:7a:ab: 0c:37:02:58:9c:1b:c4:59:b6:23:8b:49:38:72:b4:d7:9e:8e: be:57:62:20:5a:f5:dd:5c:b5:80:c4:fe:84:c9:cc:79:17:f2: f9:f3:7c:35:7a:a9:9d:69:21:7e:db:2d:34:62:2b:79:43:e4: 3c:d5:3e:41:a4:d5:aa:20:cd:98:9e:31:6a:17:06:48:4e:42: 05:e7:0f:64:d9:04:de:9b:9c:96:4d:2d:71:74:6d:26:ce:6e: ab:fc:e9:47:40:db:58:cc:42:df:d0:36:d6:3d:10:0d:13:ba: dd:ee:ad:7e:0f:f5:28:c8:b3:14:02:ee:e8:fb:ef:2f:ce:dc: 37:92:45:e1:55:d2:48:20:af:3b:cc:57:c0:06:de:31:73:d5: ac:8c:99:20:ed:af:f7:4b:90:0c:20:b6:11:e4:5b:cf:ab:3d: e7:a7:18:19:dc:02:2f:29:1c:7d:6e:ff:66:7a:1c:01:02:e0: f5:ec:45:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBHmoOMo5QgDruHLn8ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz NjY2NmYwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD Eyg0M2RiMmU3NDI1ZWZlMGZmNTc1NzZkMjRmODU2MTBlNjRiMWU2YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tKi2EJVX9rPxHlsX2F2fHNErSly Gk+PtZvrL6+jFh3zBApVL4YSFmuhSYJMIoFxJmk/OtQtkg8N83VkglQN9RW5ITA8 3Tz7lp0dHmH3zHc38O9/ehXqM1GNoRbi3wZTnl6N8Ng6YhAnWn+NxoUsfvIVzll+ RVzSxSYIRoStA7XtjRghbDq1YGXHIUxQbE9U+pMYXy9ulbWPKnW+Y/RP/2kMPnzM v0AS4hLFfwQv+KgTQreY7JOAFV2Iev8e3HBDctxL24KZtnffACPxD52wwGkA+7QN YdiWGhKske/OOU9XvTN2Mnxr5BR3rw09nkEi7ElCeldZaC4mAZarEOsbWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPbLnQl7+D/V1dtJPhWEOZLHmraMB8GA1UdIwQY MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct Y2ZkZmNkNGVlMGYyLzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjUIpPkT UxiT+b+g/62pOvhmtQijxNxEldSaAiVuLHUNfpVErTpVZ4QdaxdTk4lqJjjsFpiD k/G+NTKkSBgATRF74QkrS3qrDDcCWJwbxFm2I4tJOHK0156OvldiIFr13Vy1gMT+ hMnMeRfy+fN8NXqpnWkhftstNGIreUPkPNU+QaTVqiDNmJ4xahcGSE5CBecPZNkE 3puclk0tcXRtJs5uq/zpR0DbWMxC39A21j0QDRO63e6tfg/1KMizFALu6PvvL87c N5JF4VXSSCCvO8xXwAbeMXPVrIyZIO2v90uQDCC2EeRbz6s956cYGdwCLykcfW7/ ZnocAQLg9exFNw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:50 2025 by rpki-client