This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json) Hash identifier: zQHDP8tE/WI6FVjozOCd8kg1od8qwvaIdpjmaMyYLMc= Subject key identifier: 48:91:60:29:BF:47:E8:CF:DA:EE:98:3A:46:4E:85:E8:BF:CE:46:DA Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Certificate serial: 019AF1642C4D88E7B142A5A126675079A682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=) 2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: 6dtEDrClosPN7itIHyuHA+07dHldAPi+qSqURja1E4I=) 3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=) 4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=) 5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:4d:88:e7:b1:42:a5:a1:26:67:50:79:a6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=48916029bf47e8cfdaee983a464e85e8bfce46da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:27:e8:b5:27:28:08:c3:8f:97:c3:1b:53: 41:41:17:c7:79:ef:24:6b:6a:64:c7:b7:ce:bc:9c: 20:dd:27:9f:e5:2d:a2:5d:8c:fe:c8:3d:ea:2c:3e: ab:0e:93:c6:a3:1b:5f:b7:c1:a3:e0:33:38:e2:4a: 72:f8:c7:6f:3c:9b:ac:aa:8e:b0:ef:fc:10:7e:90: 22:73:d1:0f:ec:b1:d0:0f:a0:f7:76:30:60:cc:97: c1:b4:84:28:8b:c1:50:92:00:39:0b:8d:15:3c:6d: bf:b3:77:33:33:99:ee:fa:99:ae:16:58:8a:aa:79: ac:c4:8a:ed:6d:ab:22:55:2e:a6:73:38:47:d6:8b: 93:08:97:00:11:66:bf:08:7a:51:56:8b:d9:71:2a: 0f:1c:b9:76:42:fe:d4:34:54:e3:c1:dc:dd:56:c7: 0f:0d:cc:b3:7d:c5:5e:c1:cd:84:85:23:73:d4:d9: c0:92:09:99:a3:64:81:87:ae:99:41:20:0b:c1:c4: 1b:11:6c:41:3e:b9:c1:46:32:df:f3:3f:ef:72:60: 3a:2b:07:bb:d1:4e:ee:6a:dc:a7:82:bb:8f:ab:e4: 9a:c4:3f:96:28:f1:29:47:70:4d:b6:ea:86:24:a1: 87:fc:bb:f8:4e:47:24:ed:99:69:25:6f:d0:a5:0d: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:91:60:29:BF:47:E8:CF:DA:EE:98:3A:46:4E:85:E8:BF:CE:46:DA X509v3 Authority Key Identifier: keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:30:5d:dc:e5:2f:97:b8:4b:8c:43:26:4c:81:c5:e9:3c:b1: e1:e8:8c:da:33:1f:cc:df:2a:38:56:d8:90:c6:26:1a:34:7c: e7:e3:33:da:29:9f:28:05:41:28:93:aa:68:d4:7b:97:20:41: 98:13:e5:0e:05:4b:50:07:3c:60:36:41:63:43:20:e2:9f:40: 87:eb:06:26:3e:50:16:e0:9b:ff:82:43:56:7a:97:4c:13:26: 75:bd:a9:f9:31:a3:a0:f2:e7:8a:93:72:44:0a:12:15:57:13: 55:59:60:e1:41:b0:00:65:86:62:80:43:ba:f1:bb:0d:22:6c: 66:5e:0e:ce:0f:81:01:b6:a4:e3:97:3c:ec:cd:9d:62:33:1c: 31:49:ac:7a:8d:7f:5d:7d:da:a8:11:40:29:2d:e2:28:73:75: 86:d2:bd:77:6d:65:8c:91:8d:33:c5:b9:49:b4:3f:59:aa:a8: b2:de:25:3f:a5:94:8c:e0:0f:02:ad:32:16:1e:d1:d4:3c:2c: 97:47:a1:14:c4:0b:6d:60:c7:85:9d:9f:ec:5b:e1:a7:24:32: f4:7c:35:c0:76:0a:77:75:2f:68:0f:75:2e:c5:61:26:75:05: ca:e6:b3:0c:8c:22:cd:28:54:88:b6:b3:60:1f:e8:63:07:18: 40:df:d6:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCxNiOexQqWhJmdQeaaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm Mzg5ZjUwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg0ODkxNjAyOWJmNDdlOGNmZGFlZTk4M2E0NjRlODVlOGJmY2U0NmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonsn6LUnKAjDj5fDG1NBQRfHee8k a2pkx7fOvJwg3Sef5S2iXYz+yD3qLD6rDpPGoxtft8Gj4DM44kpy+MdvPJusqo6w 7/wQfpAic9EP7LHQD6D3djBgzJfBtIQoi8FQkgA5C40VPG2/s3czM5nu+pmuFliK qnmsxIrtbasiVS6mczhH1ouTCJcAEWa/CHpRVovZcSoPHLl2Qv7UNFTjwdzdVscP DcyzfcVewc2EhSNz1NnAkgmZo2SBh66ZQSALwcQbEWxBPrnBRjLf8z/vcmA6Kwe7 0U7uatyngruPq+SaxD+WKPEpR3BNtuqGJKGH/Lv4Tkck7ZlpJW/QpQ2M9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiRYCm/R+jP2u6YOkZOhei/zkbaMB8GA1UdIwQY MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt MmJlZmZmZDU3ZmI3LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3 LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzBd3OUv l7hLjEMmTIHF6Tyx4eiM2jMfzN8qOFbYkMYmGjR85+Mz2imfKAVBKJOqaNR7lyBB mBPlDgVLUAc8YDZBY0Mg4p9Ah+sGJj5QFuCb/4JDVnqXTBMmdb2p+TGjoPLnipNy RAoSFVcTVVlg4UGwAGWGYoBDuvG7DSJsZl4Ozg+BAbak45c87M2dYjMcMUmseo1/ XX3aqBFAKS3iKHN1htK9d21ljJGNM8W5SbQ/Waqost4lP6WUjOAPAq0yFh7R1Dws l0ehFMQLbWDHhZ2f7FvhpyQy9Hw1wHYKd3UvaA91LsVhJnUFyuazDIwizShUiLaz YB/oYwcYQN/W0w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:11 2025 by rpki-client