This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json) Hash identifier: h73gpKfpRNcqMbVm8er6PV1zTa/fgHwLYnZ0GIb8Gxs= Subject key identifier: D1:12:A6:A1:6B:FA:0A:7E:E0:E3:98:55:51:4F:D8:2D:9B:E6:CB:74 Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Certificate serial: 019AF087EC91A931B1E542AD7F0B70D7BCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft Manifest number: 1094 Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: yQth/sDSjVrisjVIpSUFwW+ZfsTvC91S/kQBWFOpFWY=) 2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ec:91:a9:31:b1:e5:42:ad:7f:0b:70:d7:bc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=d112a6a16bfa0a7ee0e39855514fd82d9be6cb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:de:71:9d:a0:7c:45:ac:4c:13:15:6f:3b: 17:5c:21:62:a0:39:96:d3:d1:5e:8a:c4:8a:e6:3b: ef:36:74:b7:74:cc:2f:f3:95:71:01:49:02:4f:11: df:37:b4:c2:3e:ef:2b:5e:18:d4:0b:d3:31:68:78: c8:09:2d:56:92:e7:5c:8f:93:a6:ed:54:5e:46:8a: fc:ba:d9:cc:9a:eb:0e:17:d4:6e:30:06:cd:3c:79: 09:1b:19:ed:43:b4:dc:ec:f9:e0:ab:f6:77:1a:71: b3:bf:a3:db:98:58:46:23:37:88:13:28:1f:77:eb: 38:99:e9:1c:6e:40:ea:72:be:bb:b0:6b:f7:37:19: df:16:e6:66:40:b0:c6:84:77:2f:f5:ac:39:8a:dc: 7a:24:e9:01:e5:57:71:9e:43:cf:46:0d:ae:96:55: 9d:8b:92:8d:fc:0d:50:00:90:54:6e:0b:b1:31:01: d4:e8:c8:ba:c3:21:dd:fd:be:ca:28:ad:8f:eb:fe: af:55:5b:80:69:a6:5a:ca:00:d7:a7:4c:32:22:03: ef:08:5d:bc:d4:df:46:37:c5:9a:ad:7b:d4:d9:77: 5d:e2:d8:20:bc:f1:bf:2b:18:5a:dd:43:f1:3e:96: f1:07:ca:10:08:36:89:86:67:d5:e8:91:75:f0:d4: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:A6:A1:6B:FA:0A:7E:E0:E3:98:55:51:4F:D8:2D:9B:E6:CB:74 X509v3 Authority Key Identifier: keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:31:c1:6e:52:95:55:a5:b1:e3:8d:78:73:09:b4:dc:65: e8:27:fb:3c:a7:9c:03:cd:00:01:cf:dd:39:8d:45:cc:85:6f: 61:6c:a4:68:5d:b0:26:8e:91:cf:4f:85:a5:58:15:9a:03:38: 58:9b:9e:4f:60:7e:91:e8:37:ae:bf:e5:8a:20:e1:64:6f:80: ad:05:11:35:6f:ea:1d:d5:12:e4:21:23:b2:df:1c:8f:e3:9a: db:1e:e9:83:91:34:5c:41:dc:2a:07:df:e6:e8:de:07:df:aa: c4:ee:82:7d:38:d1:dc:5c:72:27:9a:b7:85:04:2c:e7:63:43: bf:cc:59:5d:a1:2d:8e:af:52:f8:e1:df:40:74:cc:af:35:4c: 06:17:2d:6c:71:7c:04:89:0d:eb:03:54:4a:ca:f6:89:4c:19: 27:74:1b:38:26:a5:3e:6e:51:34:cc:ba:ca:3c:c3:87:62:a5: d0:79:74:3c:b4:e0:2c:32:43:5b:d2:e4:8d:5f:5b:76:27:a9: 14:ca:ee:9e:65:d3:82:68:c7:a3:c8:ef:27:4a:89:6d:38:aa: ee:47:4c:a2:fb:87:3d:15:56:8c:2a:c2:ef:7f:95:c3:22:f9: bb:4d:e3:4f:92:18:5b:c7:85:c0:12:f6:92:d1:95:c5:ca:07: b5:ff:6c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+yRqTGx5UKtfwtw17zCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGExMGQ2NjVjMTBlMWNiNmVjNmMyMTUwZTNlNjAyNDA0 NWI5ZGEwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD EyhkMTEyYTZhMTZiZmEwYTdlZTBlMzk4NTU1MTRmZDgyZDliZTZjYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXecZ2gfEWsTBMVbzsXXCFioDmW 09FeisSK5jvvNnS3dMwv85VxAUkCTxHfN7TCPu8rXhjUC9MxaHjICS1Wkudcj5Om 7VReRor8utnMmusOF9RuMAbNPHkJGxntQ7Tc7Pngq/Z3GnGzv6PbmFhGIzeIEygf d+s4mekcbkDqcr67sGv3NxnfFuZmQLDGhHcv9aw5itx6JOkB5VdxnkPPRg2ullWd i5KN/A1QAJBUbguxMQHU6Mi6wyHd/b7KKK2P6/6vVVuAaaZaygDXp0wyIgPvCF28 1N9GN8WarXvU2Xdd4tggvPG/Kxha3UPxPpbxB8oQCDaJhmfV6JF18NQkNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNESpqFr+gp+4OOYVVFP2C2b5st0MB8GA1UdIwQY MBaAFEHaENZlwQ4ctuxsIVDj5gJARbnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQt YmIxZmM0NTQ3MDMzLzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQtYmIxZmM0NTQ3MDMz LzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid8xwW5S lVWlseONeHMJtNxl6Cf7PKecA80AAc/dOY1FzIVvYWykaF2wJo6Rz0+FpVgVmgM4 WJueT2B+keg3rr/liiDhZG+ArQURNW/qHdUS5CEjst8cj+Oa2x7pg5E0XEHcKgff 5ujeB9+qxO6CfTjR3FxyJ5q3hQQs52NDv8xZXaEtjq9S+OHfQHTMrzVMBhctbHF8 BIkN6wNUSsr2iUwZJ3QbOCalPm5RNMy6yjzDh2Kl0Hl0PLTgLDJDW9LkjV9bdiep FMrunmXTgmjHo8jvJ0qJbTiq7kdMovuHPRVWjCrC73+VwyL5u03jT5IYW8eFwBL2 ktGVxcoHtf9s3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:40 2025 by rpki-client