This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json) Hash identifier: ZkKvZ52HldKmEacK06grYuI8iHPRubCA6DK4GZ9ddTw= Subject key identifier: 91:A5:B8:7A:3A:8E:19:91:14:F8:0A:72:9D:C7:53:E8:6C:E6:98:E1 Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Certificate serial: 019AF50AA6CED270BA64528DB081E7649955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 19:01:47 +0000 Manifest this update: Sat 06 Dec 2025 19:01:47 +0000 Manifest next update: Sun 07 Dec 2025 19:01:47 +0000 Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=) 2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=) 3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Z+BC7w0E0DSNf+VfGNp49eqfjdMpwthlKwrmIdlMT0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a6:ce:d2:70:ba:64:52:8d:b0:81:e7:64:99:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Validity Not Before: Dec 6 19:01:47 2025 GMT Not After : Dec 7 19:01:47 2025 GMT Subject: CN=91a5b87a3a8e199114f80a729dc753e86ce698e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:0e:b5:3c:d3:ae:bf:a5:27:5f:7d:23:fe: 87:9b:66:a8:de:a2:dd:92:ad:86:0b:09:5b:e8:8b: 88:02:d8:d3:59:34:2a:9f:ab:bb:41:10:a7:b7:e8: 81:de:8a:60:e9:97:13:35:cb:27:82:35:44:b4:cb: ab:7f:23:75:21:dd:c5:2d:92:62:ec:90:eb:e5:fd: 93:0d:81:ae:e6:37:03:8e:60:11:79:bf:a2:04:1a: 67:b2:ba:58:59:a4:c1:d5:a7:ba:8d:b6:2e:c6:1f: 13:b8:80:5a:cb:28:3e:17:84:aa:8b:a5:cb:59:a9: 0b:7f:d9:b6:29:f9:12:20:98:7f:9e:44:1a:a7:1b: dc:f1:b4:62:82:22:25:51:8d:1b:db:f7:47:ad:22: f1:c8:4b:f9:74:4c:c7:7a:29:9f:4f:a3:06:e7:c3: 74:fb:64:46:b3:1a:41:39:96:67:e5:bf:61:f1:3e: 62:aa:8d:93:aa:e9:e1:f0:69:ce:fa:96:b5:8c:9d: c5:1e:55:e0:1c:fa:34:02:67:14:4b:ad:73:25:b3: 32:32:4d:f3:ba:d6:1c:61:78:c3:38:e8:57:a0:3e: 65:3c:38:33:95:33:11:cd:7b:6f:ab:a1:36:a5:bc: d7:d7:a9:4a:9c:a5:f9:41:53:cc:95:de:3d:41:26: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A5:B8:7A:3A:8E:19:91:14:F8:0A:72:9D:C7:53:E8:6C:E6:98:E1 X509v3 Authority Key Identifier: keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ad:cc:87:f5:27:e8:0f:ee:68:00:02:5e:bd:e1:b3:71:78: 59:96:1a:0c:39:ec:ad:03:32:87:47:ea:d4:26:26:c0:8e:86: 93:cf:9a:47:40:3e:2a:0b:60:43:cd:da:75:e0:a6:0b:a7:49: 3a:a1:90:2e:63:63:8d:35:73:7f:8b:7c:3b:ab:a4:47:e5:bb: d2:e2:8a:cf:ab:62:57:f4:ba:bc:f4:87:66:f4:26:3b:7b:d2: 35:1d:2d:3d:b6:44:9f:18:31:6e:94:5b:86:a0:8c:09:aa:26: 70:e6:2e:da:1f:ed:c3:5f:39:ef:a1:97:da:39:15:ed:f1:2b: 57:cb:d8:08:99:8a:c8:b9:0d:af:ef:7e:1d:32:62:48:73:81: e7:74:f4:51:a8:67:12:47:f4:cc:4b:0b:0f:f6:b5:a9:b2:88: ce:0a:56:c9:7f:e4:c8:65:ee:ab:4e:a1:e9:a1:b6:d7:f6:e8: e2:ed:af:4b:14:a7:06:09:5d:e0:25:c6:6b:43:fc:f7:3e:20: c2:d2:be:73:a1:50:dc:91:50:2b:56:6d:7b:db:50:f6:b1:a9: 3a:66:9f:d1:dc:6e:46:45:ba:49:ee:f7:5c:ed:c2:27:6c:18: de:0b:7b:7a:3d:00:8d:82:c9:e8:13:7c:e0:fc:11:db:7c:a2: 7d:91:95:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqbO0nC6ZFKNsIHnZJlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi YTMyMTQwHhcNMjUxMjA2MTkwMTQ3WhcNMjUxMjA3MTkwMTQ3WjAzMTEwLwYDVQQD Eyg5MWE1Yjg3YTNhOGUxOTkxMTRmODBhNzI5ZGM3NTNlODZjZTY5OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpAOtTzTrr+lJ199I/6Hm2ao3qLd kq2GCwlb6IuIAtjTWTQqn6u7QRCnt+iB3opg6ZcTNcsngjVEtMurfyN1Id3FLZJi 7JDr5f2TDYGu5jcDjmAReb+iBBpnsrpYWaTB1ae6jbYuxh8TuIBayyg+F4Sqi6XL WakLf9m2KfkSIJh/nkQapxvc8bRigiIlUY0b2/dHrSLxyEv5dEzHeimfT6MG58N0 +2RGsxpBOZZn5b9h8T5iqo2Tqunh8GnO+pa1jJ3FHlXgHPo0AmcUS61zJbMyMk3z utYcYXjDOOhXoD5lPDgzlTMRzXtvq6E2pbzX16lKnKX5QVPMld49QSaYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGluHo6jhmRFPgKcp3HU+hs5pjhMB8GA1UdIwQY MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0q3Mh/Un 6A/uaAACXr3hs3F4WZYaDDnsrQMyh0fq1CYmwI6Gk8+aR0A+KgtgQ83adeCmC6dJ OqGQLmNjjTVzf4t8O6ukR+W70uKKz6tiV/S6vPSHZvQmO3vSNR0tPbZEnxgxbpRb hqCMCaomcOYu2h/tw18576GX2jkV7fErV8vYCJmKyLkNr+9+HTJiSHOB53T0Uahn Ekf0zEsLD/a1qbKIzgpWyX/kyGXuq06h6aG21/bo4u2vSxSnBgld4CXGa0P89z4g wtK+c6FQ3JFQK1Zte9tQ9rGpOmaf0dxuRkW6Se73XO3CJ2wY3gt7ej0AjYLJ6BN8 4PwR23yifZGVZg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:47 2025 by rpki-client