This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json) Hash identifier: 2cWOmn38odVMVd9fWfD8YKnlRcXuX/aKxo6NSYr2k+E= Subject key identifier: 37:4F:3C:FC:15:B5:72:EE:EF:91:65:8C:50:1A:67:19:C3:4F:44:29 Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3 Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3 Certificate serial: 019AF19AF47BC4A3E1752C134D239480B281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft Manifest number: 076F Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=) 2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: SeCsgdhRJvs7QSCoEX46zMVzkFohfqwDi/cCdgtbo4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f4:7b:c4:a3:e1:75:2c:13:4d:23:94:80:b2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=374f3cfc15b572eeef91658c501a6719c34f4429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dc:3b:bc:58:be:aa:ca:1e:64:ca:3f:aa:26: 8e:05:a9:e7:c1:e3:64:ea:24:e6:4b:b9:83:d6:21: e4:5c:7c:83:d7:c7:7a:5b:1a:b8:4c:31:77:57:44: e2:50:a6:00:54:f9:29:e4:db:2d:42:d9:79:71:a2: 95:fd:e9:cf:6e:73:1e:a1:1c:07:14:bd:e5:fb:85: 73:35:92:2c:67:56:33:4b:fa:ac:15:d3:2c:1e:41: 99:60:fa:f5:22:f2:dd:1b:7a:8e:e2:e2:39:38:df: 82:3e:6f:01:77:da:27:1d:34:53:f2:1c:82:5a:a7: 0f:8b:4b:8b:ce:8f:ee:84:b0:a0:0d:e7:ca:d4:bc: f1:9e:22:62:15:79:04:4a:2e:11:32:00:40:54:36: 21:0c:c1:4f:76:0f:54:00:d7:28:63:8d:2a:d1:6f: 17:d8:f9:c3:8e:20:05:a6:d0:54:7f:7c:1a:1b:e1: fc:02:84:4b:bb:96:da:a6:fd:65:ae:a4:6b:2c:c9: 09:0c:d1:fe:0c:47:65:0b:0e:1b:47:b3:31:2b:7a: e6:ef:02:90:50:50:40:ce:67:8e:83:6a:84:76:66: 8d:ad:65:c5:eb:bf:e8:bd:12:2b:38:c3:28:26:8e: 76:ce:9c:e1:62:1b:a8:3f:c6:10:da:77:49:0c:75: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4F:3C:FC:15:B5:72:EE:EF:91:65:8C:50:1A:67:19:C3:4F:44:29 X509v3 Authority Key Identifier: keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:84:3c:ad:b5:bc:1f:99:c8:7c:9a:9f:f6:24:f4:a0:eb:fb: 4c:57:bb:3e:d5:cb:c4:3b:33:54:37:2e:3d:13:c1:48:ae:08: 41:3e:a0:f1:ab:0d:83:18:23:df:8e:6a:35:f6:c8:f8:36:c8: e3:65:aa:24:6f:22:e8:c3:65:1e:e9:e3:bd:fc:d4:3a:d4:cc: 8f:fe:57:90:e7:4b:7b:11:10:14:b6:b2:6f:6b:cf:00:de:55: 6f:00:82:b3:64:9d:a5:fd:0e:93:10:32:96:da:40:66:3a:bd: 2b:70:32:a6:08:b5:e1:c4:be:99:ed:ea:9c:01:bc:00:2b:21: d3:fa:ed:38:5c:f0:43:f8:9a:6e:e2:db:12:99:a2:c8:c8:d6: a8:d2:fa:7d:f8:63:ad:2d:d9:90:34:af:3a:b3:88:44:1b:77: ac:35:95:88:f2:64:b8:07:43:25:72:a3:03:5a:7f:60:ec:af: fb:9c:24:15:91:4c:98:9a:a1:0f:0a:21:8c:92:50:fe:d4:f6: ee:de:06:d1:a4:8a:b1:bc:78:96:bc:65:cf:6a:c0:fa:01:4b: 07:31:84:54:54:7a:b5:76:44:50:17:3d:ce:c0:f3:e2:8e:8a: cc:bd:dd:d6:0b:1c:46:50:b8:20:c0:7f:33:25:0b:38:72:29: f7:f6:ea:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvR7xKPhdSwTTSOUgLKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDkxNWNkZDMyMmJmZTM5NDcyNTM2OTU1NDY0YTVmZjY3 MTE3YzMwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygzNzRmM2NmYzE1YjU3MmVlZWY5MTY1OGM1MDFhNjcxOWMzNGY0NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nw7vFi+qsoeZMo/qiaOBannweNk 6iTmS7mD1iHkXHyD18d6Wxq4TDF3V0TiUKYAVPkp5NstQtl5caKV/enPbnMeoRwH FL3l+4VzNZIsZ1YzS/qsFdMsHkGZYPr1IvLdG3qO4uI5ON+CPm8Bd9onHTRT8hyC WqcPi0uLzo/uhLCgDefK1LzxniJiFXkESi4RMgBAVDYhDMFPdg9UANcoY40q0W8X 2PnDjiAFptBUf3waG+H8AoRLu5bapv1lrqRrLMkJDNH+DEdlCw4bR7MxK3rm7wKQ UFBAzmeOg2qEdmaNrWXF67/ovRIrOMMoJo52zpzhYhuoP8YQ2ndJDHU8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdPPPwVtXLu75FljFAaZxnDT0QpMB8GA1UdIwQY MBaAFEFJFc3TIr/jlHJTaVVGSl/2cRfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2It ZjFkNWNhOTZhN2Q2LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2ItZjFkNWNhOTZhN2Q2 LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYQ8rbW8 H5nIfJqf9iT0oOv7TFe7PtXLxDszVDcuPRPBSK4IQT6g8asNgxgj345qNfbI+DbI 42WqJG8i6MNlHunjvfzUOtTMj/5XkOdLexEQFLayb2vPAN5VbwCCs2Sdpf0OkxAy ltpAZjq9K3Aypgi14cS+me3qnAG8ACsh0/rtOFzwQ/iabuLbEpmiyMjWqNL6ffhj rS3ZkDSvOrOIRBt3rDWViPJkuAdDJXKjA1p/YOyv+5wkFZFMmJqhDwohjJJQ/tT2 7t4G0aSKsbx4lrxlz2rA+gFLBzGEVFR6tXZEUBc9zsDz4o6KzL3d1gscRlC4IMB/ MyULOHIp9/bqpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:02 2025 by rpki-client