This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json) Hash identifier: apM7KgKQ7Bs+/HBT7R/TcBbRuBThAFySS7vwMtj+CGc= Subject key identifier: D0:06:81:DC:24:94:ED:B6:B9:1D:06:37:96:6A:EB:3B:60:DF:C7:51 Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Certificate serial: 019AF20914152E6A5108016700D5A37D72AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: J9prdFCDfGj8L3K9qhlh/nJW5HKB9IFWkj8IXQsnmhk=) 2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=) 3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:14:15:2e:6a:51:08:01:67:00:d5:a3:7d:72:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=d00681dc2494edb6b91d0637966aeb3b60dfc751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:83:9c:a1:d0:e7:58:1f:c6:c0:4a:80:f0: cd:b0:75:80:bf:6e:ab:d3:bf:32:72:e8:58:5a:25: 32:fc:01:6e:1a:ef:4c:4a:eb:e6:7c:a9:12:55:97: 75:ee:10:b9:19:7d:13:6f:6a:24:ac:3e:4c:c1:c1: 8c:96:2b:92:e9:1d:70:c4:93:90:c7:6f:31:c4:8a: 34:40:73:0f:84:72:01:a9:db:b8:06:52:21:93:60: 22:b4:35:73:65:a1:93:a0:c6:76:d8:1e:72:1d:8e: ef:05:98:40:58:09:4b:3c:1e:d5:94:b1:eb:00:6d: a8:01:4c:16:d0:6f:77:f0:a3:97:78:4f:6b:87:54: 2c:21:80:f4:d7:99:2c:cb:9c:0d:5f:cc:a7:b2:1f: 04:65:57:ff:f5:fa:61:f4:e0:f8:30:4f:96:19:0d: a9:24:0b:12:86:de:92:49:01:35:71:78:e9:19:97: 64:31:2d:21:51:41:c4:09:03:ce:06:9c:ac:0a:b3: 5b:ad:3f:76:63:55:3f:9d:df:f5:2a:1c:cd:ae:a0: f6:c1:89:da:5f:62:e4:24:d3:89:ff:42:0c:d4:7e: 30:e2:53:57:5e:18:5e:3f:a3:28:c9:ea:3a:53:61: 59:b9:fa:9d:4c:7e:39:5c:e4:f8:fe:45:da:48:4b: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:06:81:DC:24:94:ED:B6:B9:1D:06:37:96:6A:EB:3B:60:DF:C7:51 X509v3 Authority Key Identifier: keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:76:0f:f5:44:a8:60:c1:53:68:be:95:ec:2a:10:dc:c0: cf:e6:f7:e3:8b:7e:c7:ac:f2:d8:09:23:64:d8:e2:62:54:de: c0:69:47:39:ad:7b:1b:3e:15:16:b9:b3:36:68:97:b2:a6:a4: 8b:75:8d:62:77:01:93:5a:67:16:24:07:31:25:bf:49:75:eb: 4f:e6:c1:aa:65:c1:57:72:85:b6:1a:9f:ae:dd:fd:96:8d:bc: 86:13:14:74:78:a6:9c:02:9b:02:06:ae:bd:ca:40:63:2f:da: a5:4d:07:0f:7a:fd:da:df:11:16:23:59:9d:fe:c0:fd:67:c2: 2b:8f:6e:06:c9:bc:52:f5:4a:f7:17:6b:47:1b:c2:19:34:e8: 63:34:65:b0:09:ae:b7:05:7c:fa:ec:d7:8d:8a:9d:7f:b4:64: f0:af:55:4c:b2:05:df:7a:74:b2:28:76:f7:50:28:3e:f6:f0: c2:cd:8a:0a:67:26:38:23:bc:fd:43:be:42:be:26:4f:b0:d3: 0c:3f:e9:09:57:17:14:88:83:02:78:14:94:92:11:7d:f4:28: a6:43:75:2d:c1:f5:4d:fc:05:59:cd:ea:ba:66:0d:e9:c8:a8: 6d:3a:9d:a2:80:c1:24:ed:e7:aa:a4:1f:1b:8a:cb:68:ad:7f: b2:f3:bb:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRQVLmpRCAFnANWjfXKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYjRjNzlhMjJhM2ZlOTg3ZWYzMTkwOGNkNDRmZjgxZTli MWFjZjQwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EyhkMDA2ODFkYzI0OTRlZGI2YjkxZDA2Mzc5NjZhZWIzYjYwZGZjNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fKDnKHQ51gfxsBKgPDNsHWAv26r 078ycuhYWiUy/AFuGu9MSuvmfKkSVZd17hC5GX0Tb2okrD5MwcGMliuS6R1wxJOQ x28xxIo0QHMPhHIBqdu4BlIhk2AitDVzZaGToMZ22B5yHY7vBZhAWAlLPB7VlLHr AG2oAUwW0G938KOXeE9rh1QsIYD015ksy5wNX8ynsh8EZVf/9fph9OD4ME+WGQ2p JAsSht6SSQE1cXjpGZdkMS0hUUHECQPOBpysCrNbrT92Y1U/nd/1KhzNrqD2wYna X2LkJNOJ/0IM1H4w4lNXXhheP6Moyeo6U2FZufqdTH45XOT4/kXaSEt7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAGgdwklO22uR0GN5Zq6ztg38dRMB8GA1UdIwQY MBaAFEK0x5oio/6YfvMZCM1E/4Hpsaz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQt ZjI4ODEzN2NiNTAwLzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQtZjI4ODEzN2NiNTAw LzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs52D/VE qGDBU2i+lewqENzAz+b344t+x6zy2AkjZNjiYlTewGlHOa17Gz4VFrmzNmiXsqak i3WNYncBk1pnFiQHMSW/SXXrT+bBqmXBV3KFthqfrt39lo28hhMUdHimnAKbAgau vcpAYy/apU0HD3r92t8RFiNZnf7A/WfCK49uBsm8UvVK9xdrRxvCGTToYzRlsAmu twV8+uzXjYqdf7Rk8K9VTLIF33p0sih291AoPvbwws2KCmcmOCO8/UO+Qr4mT7DT DD/pCVcXFIiDAngUlJIRffQopkN1LcH1TfwFWc3qumYN6ciobTqdooDBJO3nqqQf G4rLaK1/svO71g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:26 2025 by rpki-client