This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json) Hash identifier: sfLLzXZkel8JPlKAZoIzanzAHoinVeMnNml6a4c8FfM= Subject key identifier: 1A:6C:AB:7D:65:7A:83:82:6C:EB:83:7C:C0:30:17:B1:71:2C:44:20 Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae Certificate serial: 019AF23F9B0C0B24404D84905DD8E60AA46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=) 2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: DB0/DUO+EytAhaoUJgTleLqaIxoTwa82ZGX4LpoIxxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9b:0c:0b:24:40:4d:84:90:5d:d8:e6:0a:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=1a6cab7d657a83826ceb837cc03017b1712c4420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:bf:05:1f:7f:d3:3c:3a:35:07:a6:81:a7: 66:ab:cf:e3:ac:22:19:c8:48:00:77:d3:45:98:e6: 5c:23:4c:16:39:58:9c:dc:b6:ef:6b:d9:77:99:ce: 31:aa:11:42:4d:93:38:c6:76:19:e9:a4:40:be:9e: b1:ae:6a:4d:85:63:3f:70:94:1d:b6:ad:ab:2e:5a: 2d:0b:31:6d:07:53:40:0a:3a:fd:e6:ba:b1:b1:09: 96:07:8e:f2:b8:8a:88:96:a4:bd:95:59:69:3c:31: d2:b8:f0:d2:25:32:09:a6:a3:ff:57:c3:d1:0f:e2: f2:1c:c5:9a:5b:33:dd:2e:06:cf:e5:96:f0:a1:fb: ed:c7:4f:79:10:09:e6:13:97:7d:8f:dc:f8:07:ea: 1c:f7:99:ed:ed:87:e0:e4:f3:44:49:d4:6b:1b:9d: 3d:99:25:cf:7a:2b:56:3d:c0:dc:ee:60:b6:b7:85: 34:78:ce:be:22:01:f4:2f:bd:03:ff:db:da:b3:46: 9f:16:6b:2a:5d:2c:74:18:c7:77:cc:c4:83:27:73: 63:fd:32:d5:32:e2:cb:9e:11:81:50:3b:3a:ed:4d: aa:50:82:d6:01:42:1e:d9:02:0e:62:35:c0:05:74: b1:3e:7f:27:20:c3:a4:f3:ec:89:0f:5f:bd:d7:d5: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6C:AB:7D:65:7A:83:82:6C:EB:83:7C:C0:30:17:B1:71:2C:44:20 X509v3 Authority Key Identifier: keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5d:2b:64:bb:65:29:42:86:3f:42:3b:a3:54:68:7e:a1:5b: e9:b6:fd:8b:d4:20:21:0d:38:4a:89:b9:93:6e:d0:10:03:51: de:1e:7e:46:81:3a:ed:0d:ee:dc:ec:b5:e1:4f:e3:c1:7a:8a: 6e:9c:bf:a8:7e:5c:3b:11:17:07:1a:d1:9f:93:e4:68:3a:9e: 34:51:5d:40:4b:a4:bd:04:c3:e8:bb:f8:8a:ef:63:06:b4:5d: 50:52:5c:ad:e4:6f:5c:57:9f:76:12:08:a1:96:b8:db:6c:ca: b3:30:e0:4e:b7:9b:4c:bc:f0:d5:ec:b6:20:08:22:75:d6:f9: 87:3e:9e:af:c6:62:81:5c:44:81:4f:5b:01:4c:87:fd:82:e6: c6:50:25:85:c0:4a:d1:05:b4:b6:d9:88:2f:b9:3c:c4:35:fb: bf:8f:65:48:55:e7:53:9f:5a:c6:6c:6b:86:8e:9f:b0:ef:a7: e0:43:00:5f:ff:0a:db:3a:bf:ce:f8:b2:d7:06:4c:1b:c9:e7: 43:9c:e8:9e:be:3a:37:80:48:2c:fd:fe:24:cf:c0:d0:bd:d6: cf:7d:4b:55:f3:17:d9:c4:21:ce:5c:e2:e8:ee:c5:86:0d:ca: ce:80:3b:d8:23:9c:65:8e:e1:28:11:8e:ed:68:2e:09:bf:c8: bd:87:e5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5sMCyRATYSQXdjmCqRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2VkZTkwNzQ5MmU1MGM5NTEyNjM5NTc4ODFiYzNjYzVj ZTMwYWUwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EygxYTZjYWI3ZDY1N2E4MzgyNmNlYjgzN2NjMDMwMTdiMTcxMmM0NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubG/BR9/0zw6NQemgadmq8/jrCIZ yEgAd9NFmOZcI0wWOVic3Lbva9l3mc4xqhFCTZM4xnYZ6aRAvp6xrmpNhWM/cJQd tq2rLlotCzFtB1NACjr95rqxsQmWB47yuIqIlqS9lVlpPDHSuPDSJTIJpqP/V8PR D+LyHMWaWzPdLgbP5Zbwofvtx095EAnmE5d9j9z4B+oc95nt7Yfg5PNESdRrG509 mSXPeitWPcDc7mC2t4U0eM6+IgH0L70D/9vas0afFmsqXSx0GMd3zMSDJ3Nj/TLV MuLLnhGBUDs67U2qUILWAUIe2QIOYjXABXSxPn8nIMOk8+yJD1+919UDvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpsq31leoOCbOuDfMAwF7FxLEQgMB8GA1UdIwQY MBaAFEHO3pB0kuUMlRJjlXiBvDzFzjCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgt NzBhZjVmNjU3M2I1LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgtNzBhZjVmNjU3M2I1 LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV0rZLtl KUKGP0I7o1RofqFb6bb9i9QgIQ04Som5k27QEANR3h5+RoE67Q3u3Oy14U/jwXqK bpy/qH5cOxEXBxrRn5PkaDqeNFFdQEukvQTD6Lv4iu9jBrRdUFJcreRvXFefdhII oZa422zKszDgTrebTLzw1ey2IAgiddb5hz6er8ZigVxEgU9bAUyH/YLmxlAlhcBK 0QW0ttmIL7k8xDX7v49lSFXnU59axmxrho6fsO+n4EMAX/8K2zq/zviy1wZMG8nn Q5zonr46N4BILP3+JM/A0L3Wz31LVfMX2cQhzlzi6O7Fhg3KzoA72COcZY7hKBGO 7WguCb/IvYfl6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:34 2025 by rpki-client