This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json) Hash identifier: 1hY4dhmlvEOFwVhMqbYriLVGVe0k+2ubM9d/SPAyo5A= Subject key identifier: 2C:8A:80:44:67:C8:AB:AF:57:F9:9D:88:18:7E:89:53:B8:5A:6E:D4 Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106 Certificate serial: 019AF3F7BC3F8E2B4BB476456E3CE6B4F0F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft Manifest number: 128B Signing time: Sat 06 Dec 2025 14:01:30 +0000 Manifest this update: Sat 06 Dec 2025 14:01:30 +0000 Manifest next update: Sun 07 Dec 2025 14:01:30 +0000 Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=) 2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=) 3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: lZi/EFLEo9w/Wl24rS8fMMKDj1VOXJ5Tfazf/WHbVE8=) 4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=) 5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:bc:3f:8e:2b:4b:b4:76:45:6e:3c:e6:b4:f0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106 Validity Not Before: Dec 6 14:01:30 2025 GMT Not After : Dec 7 14:01:30 2025 GMT Subject: CN=2c8a804467c8abaf57f99d88187e8953b85a6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:ab:90:64:c7:d4:df:e6:4c:1a:2d:06:4c: aa:45:d0:7e:90:b0:bc:53:6b:cc:5c:3a:35:16:86: 7c:31:83:b6:e5:23:d2:f8:df:aa:91:18:34:5d:4b: a6:e0:91:45:8b:e7:9d:12:95:ad:91:91:44:d9:ab: 50:ac:fb:b7:ad:e6:a3:7f:ac:58:b9:a9:e6:cf:17: 1e:7b:e7:ad:e7:da:97:42:ea:c1:0e:67:65:2e:da: 87:15:07:b6:b6:07:93:c5:57:ab:44:46:bb:d6:d4: 2a:c3:94:4b:4b:f6:d1:aa:d1:04:0e:2e:31:c6:41: fd:61:94:bc:17:21:66:ae:45:d9:43:42:3a:0f:71: 7d:61:fb:d1:7d:02:94:0d:cc:dc:8c:1d:9d:b4:e0: e1:61:e3:3e:68:fd:3c:41:83:8a:2b:f3:44:88:c3: fb:05:b0:e2:bf:90:c1:d7:e9:e3:5a:de:17:ba:8a: 6d:8e:da:70:24:af:93:ef:41:38:da:ed:42:82:aa: 99:b5:5b:d2:67:62:d7:6c:c2:93:70:29:88:a8:9c: e0:e6:2a:a9:4b:b5:21:02:57:d4:fd:0f:f8:2d:73: 6f:97:ee:04:77:b9:43:9a:a7:f3:eb:71:b0:c9:dc: 5f:bb:c4:6b:4a:5b:e2:f4:0d:5c:48:8c:20:e8:39: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:80:44:67:C8:AB:AF:57:F9:9D:88:18:7E:89:53:B8:5A:6E:D4 X509v3 Authority Key Identifier: keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:be:7a:d3:04:7f:3d:4c:71:db:2a:ed:f5:28:83:0b:43:e6: bb:ee:1d:47:d5:5d:2b:c0:6e:b3:31:46:31:05:23:fd:3a:23: f6:6b:7e:8d:5c:42:cb:57:49:e7:9a:a3:7c:d7:9c:fe:06:52: 62:9b:4f:26:f0:6e:92:59:42:9c:46:dc:c0:97:61:07:90:5c: bb:65:6d:aa:2a:3c:07:a3:0b:ca:7d:20:e5:ee:e8:3d:f2:58: fa:47:6f:e9:96:d8:d0:88:ce:ef:27:6e:d5:78:0f:c1:ab:28: 6f:52:bf:c4:57:8e:4e:87:91:4d:ed:72:b8:12:39:12:bd:9f: 3c:b6:42:ee:17:7c:f6:bb:ae:ad:be:d1:69:ff:c0:2e:6d:c3: 48:dc:01:e5:22:05:cd:36:18:13:5b:87:23:32:1d:7d:6a:84: 25:10:91:63:b1:45:9b:b2:ea:7b:d1:4f:8a:f9:88:b0:1c:1f: 14:b2:ff:70:c0:39:33:50:c0:e3:c8:6b:a5:6d:89:bc:af:10: a8:81:f0:09:d3:a6:05:fa:51:3d:d1:fc:f3:b1:44:05:5f:14: d8:b3:a6:1d:84:41:c1:02:86:a6:8f:42:37:d8:ed:52:d4:f8: 2a:1f:6f:e1:b8:30:04:19:4c:26:3a:c8:b1:57:ad:ae:4d:91: 24:6a:43:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97w/jitLtHZFbjzmtPD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3 YzMxMDYwHhcNMjUxMjA2MTQwMTMwWhcNMjUxMjA3MTQwMTMwWjAzMTEwLwYDVQQD EygyYzhhODA0NDY3YzhhYmFmNTdmOTlkODgxODdlODk1M2I4NWE2ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ2rkGTH1N/mTBotBkyqRdB+kLC8 U2vMXDo1FoZ8MYO25SPS+N+qkRg0XUum4JFFi+edEpWtkZFE2atQrPu3reajf6xY uanmzxcee+et59qXQurBDmdlLtqHFQe2tgeTxVerREa71tQqw5RLS/bRqtEEDi4x xkH9YZS8FyFmrkXZQ0I6D3F9YfvRfQKUDczcjB2dtODhYeM+aP08QYOKK/NEiMP7 BbDiv5DB1+njWt4XuoptjtpwJK+T70E42u1CgqqZtVvSZ2LXbMKTcCmIqJzg5iqp S7UhAlfU/Q/4LXNvl+4Ed7lDmqfz63Gwydxfu8RrSlvi9A1cSIwg6DnxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyKgERnyKuvV/mdiBh+iVO4Wm7UMB8GA1UdIwQY MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb560wR/ PUxx2yrt9SiDC0Pmu+4dR9VdK8BuszFGMQUj/Toj9mt+jVxCy1dJ55qjfNec/gZS YptPJvBukllCnEbcwJdhB5Bcu2Vtqio8B6MLyn0g5e7oPfJY+kdv6ZbY0IjO7ydu 1XgPwasob1K/xFeOToeRTe1yuBI5Er2fPLZC7hd89ruurb7Raf/ALm3DSNwB5SIF zTYYE1uHIzIdfWqEJRCRY7FFm7Lqe9FPivmIsBwfFLL/cMA5M1DA48hrpW2JvK8Q qIHwCdOmBfpRPdH887FEBV8U2LOmHYRBwQKGpo9CN9jtUtT4Kh9v4bgwBBlMJjrI sVetrk2RJGpDUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:26 2025 by rpki-client