This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json) Hash identifier: 6lR0EpDzvVqyWA1hi768f2mCdoJyxDpWMEQ99QKn5Xc= Subject key identifier: 1E:A2:CA:C1:97:29:5A:F4:F2:BB:5D:6F:34:69:E4:A4:59:35:8E:5F Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2 Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2 Certificate serial: 019AF23FF71A8CBB9A144F31F89254B00200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=) 2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=) 3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: gTIbCDL6hn7RCVPeaP2L55lJ28DgRzWeCyIfJNQE3uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f7:1a:8c:bb:9a:14:4f:31:f8:92:54:b0:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=1ea2cac197295af4f2bb5d6f3469e4a459358e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:27:eb:23:32:26:0a:f7:e1:65:13:69:43: 28:f2:cc:f5:1d:de:06:32:99:1d:83:9b:28:c3:1b: a9:ab:5a:ac:8c:69:92:b5:c0:82:41:6d:a6:b5:c7: b1:48:1d:9e:8d:e3:4a:07:e8:8d:91:c1:19:cc:92: b2:4c:b8:d7:1b:4c:86:6e:40:c1:6a:8b:e5:92:c7: 02:5d:1d:b3:9e:71:87:31:d6:88:d2:df:b6:b0:d9: ed:66:74:4d:42:1e:14:19:0e:67:34:47:bd:b3:6a: 60:85:8e:ad:18:80:c6:af:55:f3:30:25:2d:b1:43: fd:d3:68:58:cd:a5:83:1e:dc:66:8c:94:9c:24:92: 84:c2:60:15:11:61:73:75:6d:58:f9:b9:60:52:81: 95:3e:03:86:68:86:a5:b6:b9:ef:70:24:3b:26:36: 66:59:c6:40:93:ea:d2:20:27:6a:12:cf:4d:17:0e: d6:0a:e7:b1:e2:dd:94:0c:7c:e6:19:18:a1:c7:83: 43:70:d5:da:e6:77:36:35:75:6e:77:1c:c0:6b:38: df:93:9e:59:28:b1:4a:d7:a7:8c:90:51:aa:dc:cb: f0:33:63:42:61:dd:3f:ce:20:1f:a9:3d:00:17:18: ca:da:54:e1:6e:3d:63:a1:c7:2c:41:87:6a:e3:b0: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A2:CA:C1:97:29:5A:F4:F2:BB:5D:6F:34:69:E4:A4:59:35:8E:5F X509v3 Authority Key Identifier: keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f0:c7:c9:60:25:cb:5e:c2:0f:ae:67:59:6e:7e:da:69:57: 8e:98:b6:9d:d8:d0:91:c5:9a:a5:84:54:ec:30:6f:63:be:77: c5:e3:94:78:67:c0:60:a0:2f:40:ad:56:fe:99:4c:71:8d:83: 04:33:18:87:48:8e:7b:04:34:80:12:34:13:a4:b4:bd:a4:13: 9e:aa:38:db:4d:4d:c4:fe:42:81:4d:10:36:29:c7:96:3e:5e: 21:29:30:25:5d:23:2b:68:87:0f:9b:9c:8c:0e:62:d5:11:31: f4:a3:9c:68:72:23:c2:fd:69:10:8b:1e:ad:b2:c9:29:9e:9c: 7b:33:9b:ee:1e:6c:00:e7:b2:66:60:56:d2:db:d2:be:fb:0c: e7:aa:57:96:7f:70:3b:c7:ba:f3:c5:f2:d8:66:2a:5e:8f:bd: 5a:e2:73:af:33:27:cb:ab:82:df:c3:e0:71:5b:a8:5c:16:43: 9d:06:d4:a3:8a:c4:17:e8:13:26:c8:df:bc:f7:73:cb:8e:42: b2:df:b6:ca:0c:b8:1c:d6:12:8c:56:c8:17:2d:a4:09:b8:f9: 33:ce:55:36:a6:1b:8c:9b:16:17:22:9f:da:62:b6:b9:4c:44: d8:43:45:67:03:68:bf:10:84:ae:12:96:96:60:97:74:13:33: d6:ea:e0:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/cajLuaFE8x+JJUsAIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTQwODhjNzdiZDEyNjg3ZmQ0YmE5ZmUzMTU5ZWE4MDU4 ODhlZDIwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EygxZWEyY2FjMTk3Mjk1YWY0ZjJiYjVkNmYzNDY5ZTRhNDU5MzU4ZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPgn6yMyJgr34WUTaUMo8sz1Hd4G Mpkdg5sowxupq1qsjGmStcCCQW2mtcexSB2ejeNKB+iNkcEZzJKyTLjXG0yGbkDB aovlkscCXR2znnGHMdaI0t+2sNntZnRNQh4UGQ5nNEe9s2pghY6tGIDGr1XzMCUt sUP902hYzaWDHtxmjJScJJKEwmAVEWFzdW1Y+blgUoGVPgOGaIaltrnvcCQ7JjZm WcZAk+rSICdqEs9NFw7WCuex4t2UDHzmGRihx4NDcNXa5nc2NXVudxzAazjfk55Z KLFK16eMkFGq3MvwM2NCYd0/ziAfqT0AFxjK2lThbj1joccsQYdq47BE2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6iysGXKVr08rtdbzRp5KRZNY5fMB8GA1UdIwQY MBaAFEIUCIx3vRJof9S6n+MVnqgFiI7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAt N2UyMWRiNWEyZWY5LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAtN2UyMWRiNWEyZWY5 LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/DHyWAl y17CD65nWW5+2mlXjpi2ndjQkcWapYRU7DBvY753xeOUeGfAYKAvQK1W/plMcY2D BDMYh0iOewQ0gBI0E6S0vaQTnqo4201NxP5CgU0QNinHlj5eISkwJV0jK2iHD5uc jA5i1REx9KOcaHIjwv1pEIserbLJKZ6cezOb7h5sAOeyZmBW0tvSvvsM56pXln9w O8e688Xy2GYqXo+9WuJzrzMny6uC38PgcVuoXBZDnQbUo4rEF+gTJsjfvPdzy45C st+2ygy4HNYSjFbIFy2kCbj5M85VNqYbjJsWFyKf2mK2uUxE2ENFZwNovxCErhKW lmCXdBMz1urg9A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:43 2025 by rpki-client