This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json) Hash identifier: WMVjM6Q5NdhtPfBtPPNGt4mM7Vj587/zrXs3C9tyK90= Subject key identifier: CF:C7:3E:A4:20:F2:F8:D4:B6:9E:5A:59:53:6F:1C:01:A1:13:BF:E7 Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984 Certificate serial: 019AF31C27A8F2BFC93C7DC730B17080A2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft Manifest number: 0923 Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=) 2: 8MF9LpY4IEy9l1FARzK6C5L2w1A.roa (hash: oxOX+x4ImJf3gE4hmPOAVT49apZypumYsZNKHvDAJTo=) 3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: F0Gutvv804Xp5IeJK1pr9Uv/NNsuOMNejoquLDvRjaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:27:a8:f2:bf:c9:3c:7d:c7:30:b1:70:80:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=cfc73ea420f2f8d4b69e5a59536f1c01a113bfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:b6:b0:17:70:34:94:6e:4c:c4:b5:8d:3d: 0a:32:b5:9b:4c:9a:ba:7a:07:45:74:97:fe:0c:0c: 5b:a8:ff:18:4f:90:42:84:1f:0d:af:20:42:cb:72: 75:57:15:37:82:41:53:08:cc:ae:36:62:32:8f:fe: b3:38:6a:2c:78:49:99:a8:db:a0:c5:01:d7:86:aa: d1:54:2f:f8:c3:64:a7:2e:a7:e6:67:5c:2a:48:98: 64:c3:11:67:50:3d:f9:2d:e6:3a:52:58:90:1e:87: 16:d2:be:fa:22:2a:ac:98:e5:73:cc:88:a9:23:c7: 51:5f:1f:d8:47:6a:6a:08:41:03:8f:8e:a7:18:53: e6:14:bd:8b:77:ea:41:e8:a8:79:da:cf:85:d0:c6: 76:a8:ac:91:92:c8:db:ed:88:00:a0:02:b5:ea:75: 1e:f6:c7:a0:b3:0a:17:ab:14:c4:2b:95:4a:29:a1: ea:7d:82:8e:9f:6f:55:9a:6f:eb:02:28:b2:61:91: 69:6f:da:58:03:1b:96:94:ed:99:81:cf:5c:20:02: e0:c2:5d:e7:da:3e:ef:65:f7:b1:ae:04:57:5f:06: 14:47:8f:a3:7a:b6:a0:c0:02:9c:2a:87:d4:79:af: ca:7a:a7:2e:8c:70:8f:3c:80:74:54:0c:f9:c0:13: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:3E:A4:20:F2:F8:D4:B6:9E:5A:59:53:6F:1C:01:A1:13:BF:E7 X509v3 Authority Key Identifier: keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7c:fa:88:a2:0e:1f:29:e4:c1:5a:99:f8:01:e9:27:82:ca: 7d:41:09:0d:d8:80:30:74:e5:d8:7f:33:f6:2a:de:3b:8d:a5: 41:43:b6:4e:16:aa:bc:76:14:3f:ba:71:b1:63:c6:f3:b0:66: 24:56:a1:52:c5:41:e8:04:21:2e:8e:5a:0c:76:27:5c:67:5d: 77:22:c6:c4:42:77:71:e7:c3:28:a6:0e:b6:27:36:79:b2:db: a3:93:58:43:6c:70:5a:a7:02:aa:9d:e0:0d:f3:8a:e8:be:f3: 20:50:83:68:90:a9:24:05:1c:8a:af:dc:35:b8:9f:23:e1:9b: e4:3e:11:d8:61:9c:47:ec:50:33:b3:b6:c9:fa:a9:11:a9:cd: b8:da:2e:bd:3b:85:af:21:93:f9:9b:64:e9:55:84:60:9e:0c: 27:5e:b7:46:64:c8:22:fc:1a:7f:7b:4c:55:dd:35:a3:31:7b: db:2b:ab:18:02:6e:82:19:5f:f6:62:25:c9:e6:d6:0c:47:7b: 46:21:cb:a4:20:28:c5:ab:29:5f:d1:9f:02:2a:2c:f4:af:0c: 6f:9f:b2:6e:ed:99:a6:d8:46:a5:00:6d:a6:a3:9e:9b:37:05: eb:78:8e:2d:b6:48:f9:69:33:a0:33:8f:2e:d2:13:5e:68:f4: bf:3a:85:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCeo8r/JPH3HMLFwgKLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYTU5YjA5NjBlYTY1ZDZiOTIzOTNlZTAzNDdhMWE4MzJm OWI5ODQwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EyhjZmM3M2VhNDIwZjJmOGQ0YjY5ZTVhNTk1MzZmMWMwMWExMTNiZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMC2sBdwNJRuTMS1jT0KMrWbTJq6 egdFdJf+DAxbqP8YT5BChB8NryBCy3J1VxU3gkFTCMyuNmIyj/6zOGoseEmZqNug xQHXhqrRVC/4w2SnLqfmZ1wqSJhkwxFnUD35LeY6UliQHocW0r76IiqsmOVzzIip I8dRXx/YR2pqCEEDj46nGFPmFL2Ld+pB6Kh52s+F0MZ2qKyRksjb7YgAoAK16nUe 9segswoXqxTEK5VKKaHqfYKOn29Vmm/rAiiyYZFpb9pYAxuWlO2Zgc9cIALgwl3n 2j7vZfexrgRXXwYUR4+jeragwAKcKofUea/KeqcujHCPPIB0VAz5wBM0FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/HPqQg8vjUtp5aWVNvHAGhE7/nMB8GA1UdIwQY MBaAFEGlmwlg6mXWuSOT7gNHoagy+bmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt YmZkZWMwYzExMmUzLzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz LzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHz6iKIO HynkwVqZ+AHpJ4LKfUEJDdiAMHTl2H8z9ireO42lQUO2ThaqvHYUP7pxsWPG87Bm JFahUsVB6AQhLo5aDHYnXGdddyLGxEJ3cefDKKYOtic2ebLbo5NYQ2xwWqcCqp3g DfOK6L7zIFCDaJCpJAUciq/cNbifI+Gb5D4R2GGcR+xQM7O2yfqpEanNuNouvTuF ryGT+Ztk6VWEYJ4MJ163RmTIIvwaf3tMVd01ozF72yurGAJughlf9mIlyebWDEd7 RiHLpCAoxaspX9GfAios9K8Mb5+ybu2ZpthGpQBtpqOemzcF63iOLbZI+WkzoDOP LtITXmj0vzqFvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:39 2025 by rpki-client