This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json) Hash identifier: WRpv1MFtqSshCrE2yQnOxw48Md4xglCVDIRYMYeMFac= Subject key identifier: A1:05:93:31:06:CF:CB:F1:6B:F8:3D:52:5A:50:FD:79:2C:2F:E6:E2 Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7 Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7 Certificate serial: 019AF2092AF92562CE256FBA7E919F43403E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft Manifest number: 0F64 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=) 2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: 5x8V4mSDJBzeu1vwLDTLw88MrBvdcUaMQm1UEwRzh7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2a:f9:25:62:ce:25:6f:ba:7e:91:9f:43:40:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=a105933106cfcbf16bf83d525a50fd792c2fe6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:93:78:c7:56:df:61:c2:d8:31:d7:4f:bd: 82:bc:97:54:2d:d9:84:d7:8a:66:ea:4a:58:87:4e: b7:36:cb:77:3d:f3:17:12:b0:ba:cf:91:7d:86:99: 75:92:a1:38:ae:f8:79:f5:96:b5:30:54:8a:fe:b0: 5d:da:37:e4:42:ac:5a:ad:04:ff:30:23:f0:bd:15: f1:5e:9e:36:2f:ca:3f:49:98:da:f4:08:f0:6a:6a: 2d:e8:8b:3d:ed:df:6d:e8:e9:84:00:c7:94:3d:17: 49:86:41:38:86:86:a6:8a:52:96:16:39:5a:eb:a7: 8e:9c:24:d1:9a:8b:f4:9a:29:fe:f7:65:d5:5e:f5: f5:d5:5f:09:cd:c1:aa:8e:fe:80:ed:6c:fd:95:f0: d6:40:37:82:53:b1:d3:a6:18:20:30:1b:c4:99:5c: c9:d2:78:6e:e3:46:29:f7:ae:17:77:40:5b:5e:70: 4e:78:e7:5b:b3:33:c9:e1:6c:b0:98:d3:02:c9:02: 45:27:78:71:5c:b9:99:e8:97:46:15:9c:74:b9:a0: 8d:97:ae:bb:d9:76:2c:2d:0e:ba:20:00:35:a4:05: 3e:13:7b:d8:e2:74:b4:8d:10:0f:bd:13:81:fb:d7: 2d:60:3f:ff:66:eb:8b:66:e6:5b:8a:c8:43:77:6a: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:93:31:06:CF:CB:F1:6B:F8:3D:52:5A:50:FD:79:2C:2F:E6:E2 X509v3 Authority Key Identifier: keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a0:c8:6e:d9:99:f2:ac:54:2a:3d:21:99:31:77:ad:78:1b: b9:12:35:c0:60:76:e2:3f:b2:40:79:6e:0c:82:6d:c3:46:f1: 5e:9d:50:e0:8f:78:6f:08:a7:b8:47:9a:46:0f:48:b3:33:76: 81:8e:77:7b:12:95:20:59:1f:14:4e:23:6d:3f:8a:7a:a0:0c: bf:af:57:95:16:09:b1:b3:6e:7e:41:87:fa:32:78:d6:a6:a2: c4:11:50:ee:9a:37:6a:55:2a:ae:f8:40:35:f8:fd:92:87:26: 8a:b9:56:cb:1e:0f:ff:be:5e:21:bb:c3:9c:d4:4c:1e:8b:8d: fc:0a:0d:b6:50:53:53:ae:9b:8f:f9:3e:7e:43:79:3c:76:10: a3:78:d8:ff:cb:d2:89:a4:7f:98:e0:93:a0:94:81:22:54:d1: f5:ea:55:eb:5f:8e:91:bb:eb:cd:17:6f:bf:e0:a9:d6:8c:2d: 15:f7:cf:d0:e0:f4:70:93:d0:c4:76:19:cb:92:a2:35:a9:a6: 6c:a2:ef:9c:8f:08:0b:80:99:4c:f5:de:37:7d:d2:e5:a7:c0: af:e8:20:15:39:29:ce:ad:03:f4:9a:05:05:17:58:55:ef:e4: f8:6b:76:55:ed:17:d1:2f:22:15:21:a1:bd:01:0c:fc:12:4c: 12:18:d8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSr5JWLOJW+6fpGfQ0A+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjYyNzMzYmM4NzNkMTNlMWY5ZjY2ZThkZmY3NWM4MjBk NWQyZjcwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhhMTA1OTMzMTA2Y2ZjYmYxNmJmODNkNTI1YTUwZmQ3OTJjMmZlNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCiTeMdW32HC2DHXT72CvJdULdmE 14pm6kpYh063Nst3PfMXErC6z5F9hpl1kqE4rvh59Za1MFSK/rBd2jfkQqxarQT/ MCPwvRXxXp42L8o/SZja9Ajwamot6Is97d9t6OmEAMeUPRdJhkE4hoamilKWFjla 66eOnCTRmov0min+92XVXvX11V8JzcGqjv6A7Wz9lfDWQDeCU7HTphggMBvEmVzJ 0nhu40Yp964Xd0BbXnBOeOdbszPJ4WywmNMCyQJFJ3hxXLmZ6JdGFZx0uaCNl667 2XYsLQ66IAA1pAU+E3vY4nS0jRAPvROB+9ctYD//ZuuLZuZbishDd2ptsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEFkzEGz8vxa/g9UlpQ/XksL+biMB8GA1UdIwQY MBaAFEBmJzO8hz0T4fn2bo3/dcgg1dL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYt OWNiNTFlNTFmZjc3LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYtOWNiNTFlNTFmZjc3 LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6DIbtmZ 8qxUKj0hmTF3rXgbuRI1wGB24j+yQHluDIJtw0bxXp1Q4I94bwinuEeaRg9IszN2 gY53exKVIFkfFE4jbT+KeqAMv69XlRYJsbNufkGH+jJ41qaixBFQ7po3alUqrvhA Nfj9kocmirlWyx4P/75eIbvDnNRMHouN/AoNtlBTU66bj/k+fkN5PHYQo3jY/8vS iaR/mOCToJSBIlTR9epV61+OkbvrzRdvv+Cp1owtFffP0OD0cJPQxHYZy5KiNamm bKLvnI8IC4CZTPXeN33S5afAr+ggFTkpzq0D9JoFBRdYVe/k+Gt2Ve0X0S8iFSGh vQEM/BJMEhjYRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:17 2025 by rpki-client