This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json) Hash identifier: 64KvatmLSkgfStM8mf0IV7J+He62ApNwetuT9O80IKs= Subject key identifier: C9:31:A0:66:2A:DD:1E:DE:76:85:D9:8B:3A:8A:BC:42:EC:07:FA:E4 Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Certificate serial: 019AF61C2D8F4DF6DE9994474545B8BCA413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft Manifest number: 047C Signing time: Sun 07 Dec 2025 00:00:32 +0000 Manifest this update: Sun 07 Dec 2025 00:00:32 +0000 Manifest next update: Mon 08 Dec 2025 00:00:32 +0000 Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=) 2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: iusSlh1Q6lRCVpAX9osfxxifyOn9I2SXXC7taeujN1Q=) 3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:2d:8f:4d:f6:de:99:94:47:45:45:b8:bc:a4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Validity Not Before: Dec 7 00:00:32 2025 GMT Not After : Dec 8 00:00:32 2025 GMT Subject: CN=c931a0662add1ede7685d98b3a8abc42ec07fae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:e4:1d:5a:f0:e5:bb:67:25:27:bf:be:c8: 97:14:37:7b:c8:22:e2:8b:ee:b2:da:74:07:c4:89: f7:c4:c5:08:07:72:a4:86:1f:3b:92:d6:aa:fb:f1: 2e:11:a6:52:87:93:f1:76:06:96:e9:28:e2:26:29: e5:cb:7c:e4:4a:11:a7:32:b9:66:a8:f8:35:fd:e2: 58:25:49:14:01:ab:b4:dc:07:8b:18:07:67:4f:f7: 72:12:ae:cb:f1:38:f1:2c:c0:32:45:65:17:fd:70: d4:50:78:fa:d7:08:da:7d:39:1a:89:7e:2c:42:ce: db:da:c7:b3:d4:32:be:9a:98:b8:83:9a:6c:dd:11: 96:8f:b1:c3:3d:df:aa:a2:35:22:ea:5c:88:41:a1: 1c:d4:4c:57:d9:3d:32:01:61:e0:a5:4d:e2:74:65: 49:7a:f9:20:cb:f7:e9:5c:9e:f9:d4:16:f9:fb:86: bd:43:b3:5a:d9:38:9e:c7:14:e4:4c:14:66:e0:e5: 6f:d0:a9:87:fa:8d:c5:a5:24:2a:00:3f:97:c5:b6: 48:f4:92:d6:02:e5:e2:7d:cf:5b:e3:9b:6c:47:49: b4:d1:b9:7c:26:8a:a5:38:f0:83:9a:d9:3d:16:2c: 96:50:7c:ba:a5:8f:de:e8:29:81:e9:e4:da:6b:08: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:31:A0:66:2A:DD:1E:DE:76:85:D9:8B:3A:8A:BC:42:EC:07:FA:E4 X509v3 Authority Key Identifier: keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f8:55:78:cb:1e:f7:f0:c1:65:1b:48:a9:06:5e:8d:9a:bf: 55:5d:b2:5c:9d:4e:44:53:af:66:a8:f2:25:ae:50:cc:c0:e0: 97:23:95:41:68:ee:2e:74:55:5e:89:85:43:f9:81:44:3a:50: 40:20:1d:f0:ff:7f:34:ce:86:81:c0:70:85:1a:40:86:d1:58: 57:8c:cd:56:65:db:00:aa:85:b7:bb:b5:cf:28:93:c8:f8:ff: f5:d4:de:7f:88:21:03:8d:9a:a0:ee:65:02:8a:e1:77:30:9c: 59:c8:ad:d7:22:71:14:9f:2b:1d:8e:fc:d0:ec:55:87:d6:33: 21:10:a2:b8:25:5e:00:00:56:2a:79:d1:d3:8d:dd:e8:b7:9d: 41:2e:b3:a5:3f:d5:99:cb:71:f6:80:32:14:1d:f1:ee:69:82: 4f:32:8c:64:70:9a:3c:5f:0d:7b:a9:b8:98:24:7e:61:c7:90: 1e:f4:7e:57:de:ce:43:75:ea:2a:79:57:be:73:7a:7c:8f:6d: 39:e6:42:04:f8:d7:ab:07:48:18:96:c4:e6:7d:74:62:f2:48: 33:1a:9d:71:22:fa:91:90:24:a7:75:0f:bb:ec:6e:51:d7:70: 1c:87:7c:92:f1:2c:46:55:12:19:94:5a:a5:cc:7b:49:82:bf: a1:d7:e1:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HC2PTfbemZRHRUW4vKQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm YjVmNDIwHhcNMjUxMjA3MDAwMDMyWhcNMjUxMjA4MDAwMDMyWjAzMTEwLwYDVQQD EyhjOTMxYTA2NjJhZGQxZWRlNzY4NWQ5OGIzYThhYmM0MmVjMDdmYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2DkHVrw5btnJSe/vsiXFDd7yCLi i+6y2nQHxIn3xMUIB3Kkhh87ktaq+/EuEaZSh5PxdgaW6SjiJinly3zkShGnMrlm qPg1/eJYJUkUAau03AeLGAdnT/dyEq7L8TjxLMAyRWUX/XDUUHj61wjafTkaiX4s Qs7b2sez1DK+mpi4g5ps3RGWj7HDPd+qojUi6lyIQaEc1ExX2T0yAWHgpU3idGVJ evkgy/fpXJ751Bb5+4a9Q7Na2TiexxTkTBRm4OVv0KmH+o3FpSQqAD+XxbZI9JLW AuXifc9b45tsR0m00bl8JoqlOPCDmtk9FiyWUHy6pY/e6CmB6eTaawiQZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkxoGYq3R7edoXZizqKvELsB/rkMB8GA1UdIwQY MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/hVeMse 9/DBZRtIqQZejZq/VV2yXJ1ORFOvZqjyJa5QzMDglyOVQWjuLnRVXomFQ/mBRDpQ QCAd8P9/NM6GgcBwhRpAhtFYV4zNVmXbAKqFt7u1zyiTyPj/9dTef4ghA42aoO5l AorhdzCcWcit1yJxFJ8rHY780OxVh9YzIRCiuCVeAABWKnnR043d6LedQS6zpT/V mctx9oAyFB3x7mmCTzKMZHCaPF8Ne6m4mCR+YceQHvR+V97OQ3XqKnlXvnN6fI9t OeZCBPjXqwdIGJbE5n10YvJIMxqdcSL6kZAkp3UPu+xuUddwHId8kvEsRlUSGZRa pcx7SYK/odfh9A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:46 2025 by rpki-client