This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json) Hash identifier: KDwL6Qj46P2Necq5ERhFnmL18cl3EKxe/uWTAUf+F6I= Subject key identifier: 8D:09:A6:05:FD:F3:4F:FA:C5:DA:35:2A:E8:BB:00:7C:4D:30:76:51 Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019AF31C555A7009AC0EF617A7897486A6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft Manifest number: 0651 Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: UR1QASCn2gOGJouZZwv61wwd+oQJgD6ljoyvqj8J/48=) 2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:55:5a:70:09:ac:0e:f6:17:a7:89:74:86:a6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=8d09a605fdf34ffac5da352ae8bb007c4d307651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:b6:41:d4:ee:d7:dd:67:3e:b1:20:3f:b3: fe:10:6c:37:64:71:86:64:e9:45:e7:af:47:2f:4e: 81:1e:2c:e5:86:03:7c:81:a6:82:f3:be:6b:a6:b6: 64:58:2e:83:4d:aa:8f:d2:c6:9c:20:e8:0a:54:51: 15:53:93:5a:3b:77:0f:9d:08:69:13:e1:9b:3f:12: ec:80:22:5f:7c:2f:61:4b:fd:4d:93:e9:33:40:fd: 89:66:aa:98:64:95:96:1f:05:76:75:e6:85:c1:f7: 10:4b:6b:36:78:1f:78:3c:d4:1f:96:5c:0c:83:c7: 17:2c:80:c6:22:e1:5b:f8:e3:61:7f:be:b3:37:57: fe:71:31:32:e6:77:a9:3a:25:f0:f6:0f:18:f6:37: 65:ad:6b:f4:c2:bd:59:f4:ac:4e:f6:96:0b:cb:ec: a7:38:45:e4:11:b2:76:0d:34:ed:86:27:8d:a8:56: 7b:bc:91:d1:a1:98:12:3d:0a:a2:6e:44:a4:f8:bc: ce:6a:f9:0a:34:6e:0a:fd:d3:a2:76:4e:0c:e2:56: e2:a7:99:a4:85:97:24:23:59:57:8f:c9:7d:f9:34: 20:dd:9d:4d:de:9d:e8:e0:8c:1e:5e:19:15:38:e8: f0:8d:2c:d8:6e:d7:37:d2:fb:9e:5d:e4:15:f3:b4: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:09:A6:05:FD:F3:4F:FA:C5:DA:35:2A:E8:BB:00:7C:4D:30:76:51 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:96:43:52:5f:1f:95:1f:84:b7:09:69:fa:e6:6c:b8:f3:49: 03:98:87:b1:f2:05:19:03:d9:11:c3:6b:23:12:7e:18:24:85: ee:42:49:08:fc:4c:bc:34:da:ed:6c:5c:95:8f:f0:4b:c4:43: 09:5f:75:6f:8f:09:72:79:27:ca:75:2b:73:7b:6a:a8:0c:53: e2:de:59:5c:79:ae:07:a6:5c:32:7f:9a:38:7e:0f:77:b5:db: ef:6e:4a:e6:b6:3a:84:5b:ee:53:27:36:d3:ec:5d:08:d9:64: c7:c5:2b:7e:22:7c:bb:78:4b:d8:93:29:9f:db:2c:53:62:6d: 0d:51:4e:fd:6f:1f:19:fb:1b:13:ac:39:40:88:15:d2:bb:8b: 79:7a:e2:27:01:ac:2d:23:64:0d:a3:7d:1e:ec:74:d0:c5:da: 8a:d2:81:04:75:00:c6:7a:84:20:2d:72:bd:77:78:6d:bf:46: d9:bd:19:5d:67:d2:3e:ad:3a:0b:49:80:76:cd:93:c5:99:20: 80:eb:03:53:9a:04:57:07:41:aa:9c:94:31:03:69:aa:1b:a7: 5d:3e:29:0c:84:31:90:f5:7e:bf:e8:26:45:be:72:90:96:d2: 65:30:89:8e:b0:bb:55:5a:93:41:dc:3d:d1:d2:03:c9:e2:a2: 86:a7:7f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFVacAmsDvYXp4l0hqa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD Eyg4ZDA5YTYwNWZkZjM0ZmZhYzVkYTM1MmFlOGJiMDA3YzRkMzA3NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MG2QdTu191nPrEgP7P+EGw3ZHGG ZOlF569HL06BHizlhgN8gaaC875rprZkWC6DTaqP0sacIOgKVFEVU5NaO3cPnQhp E+GbPxLsgCJffC9hS/1Nk+kzQP2JZqqYZJWWHwV2deaFwfcQS2s2eB94PNQfllwM g8cXLIDGIuFb+ONhf76zN1f+cTEy5nepOiXw9g8Y9jdlrWv0wr1Z9KxO9pYLy+yn OEXkEbJ2DTTthieNqFZ7vJHRoZgSPQqibkSk+LzOavkKNG4K/dOidk4M4lbip5mk hZckI1lXj8l9+TQg3Z1N3p3o4IweXhkVOOjwjSzYbtc30vueXeQV87SXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0JpgX980/6xdo1Kui7AHxNMHZRMB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZZDUl8f lR+Etwlp+uZsuPNJA5iHsfIFGQPZEcNrIxJ+GCSF7kJJCPxMvDTa7WxclY/wS8RD CV91b48JcnknynUrc3tqqAxT4t5ZXHmuB6ZcMn+aOH4Pd7Xb725K5rY6hFvuUyc2 0+xdCNlkx8UrfiJ8u3hL2JMpn9ssU2JtDVFO/W8fGfsbE6w5QIgV0ruLeXriJwGs LSNkDaN9Hux00MXaitKBBHUAxnqEIC1yvXd4bb9G2b0ZXWfSPq06C0mAds2TxZkg gOsDU5oEVwdBqpyUMQNpqhunXT4pDIQxkPV+v+gmRb5ykJbSZTCJjrC7VVqTQdw9 0dIDyeKihqd/Qg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:09 2025 by rpki-client