This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json) Hash identifier: nLn1t/1Rmbe1N0mC9fU0PLmgBKbp0AGMZK0CHpE3ASU= Subject key identifier: 62:70:74:B2:F8:8D:CF:AA:22:EB:FD:9B:A5:15:16:0A:6E:24:85:1E Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Certificate serial: 019AF3C01438331B8478AD5C1E32C26205E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:00:42 +0000 Manifest this update: Sat 06 Dec 2025 13:00:42 +0000 Manifest next update: Sun 07 Dec 2025 13:00:42 +0000 Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=) 2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: IQq8WIZjsLk1HpuEng+sIgzaqrw7JaU7jLbCASDpdaY=) 3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=) 4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:14:38:33:1b:84:78:ad:5c:1e:32:c2:62:05:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Validity Not Before: Dec 6 13:00:42 2025 GMT Not After : Dec 7 13:00:42 2025 GMT Subject: CN=627074b2f88dcfaa22ebfd9ba515160a6e24851e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:79:3d:ab:bb:fd:2f:9b:9a:6b:55:dd:4f: f0:97:a5:65:b6:4f:c3:43:8d:1e:c2:0f:f9:30:3e: 0a:45:8e:ac:fa:49:f0:2c:70:80:46:e5:74:94:23: 38:1e:7c:67:5b:13:90:8f:67:bb:32:d7:8d:af:3f: e5:bb:8c:71:57:c0:35:4a:70:54:44:26:36:5a:5c: ae:f4:83:d4:1d:54:4d:cc:0b:c5:96:67:b5:45:64: f9:82:8d:71:dd:1b:ff:e0:07:b4:0a:71:9b:f5:0f: 2a:ce:7c:28:ae:b8:b5:92:2f:63:38:18:21:e4:bd: 2e:21:94:91:d1:dc:b1:aa:c5:c8:aa:ba:b6:26:b5: e5:e1:33:e6:48:dc:32:9a:13:bd:43:00:ff:5d:7d: 28:3d:da:4b:57:3f:40:62:6a:d8:64:05:0e:00:a1: 8f:91:b9:43:63:07:74:d4:45:9a:c2:05:cb:77:67: 93:a7:91:80:ce:d1:02:38:7e:a4:9a:57:b5:c1:e8: 9d:f7:4e:35:54:5a:c6:7c:6d:74:67:3e:fe:15:02: 3f:66:30:63:ee:83:60:94:c5:b2:a3:63:62:62:51: 51:0a:57:18:83:4c:54:00:e6:c8:12:9c:d1:7d:26: 4a:b4:07:3d:df:7c:26:b8:f5:76:60:8f:58:6d:18: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:74:B2:F8:8D:CF:AA:22:EB:FD:9B:A5:15:16:0A:6E:24:85:1E X509v3 Authority Key Identifier: keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:63:39:a2:27:d4:58:43:a0:15:e1:23:ea:57:7a:ac:12:08: 8c:af:91:1d:de:06:07:c7:79:f2:25:7a:f4:ae:d6:3c:0e:a1: 5b:82:a9:f4:f0:70:3e:34:92:8e:1b:d4:90:4f:11:03:d0:ea: 72:a4:90:8b:62:f5:31:66:f6:b2:3e:95:a8:27:42:f6:91:4b: 02:43:34:c6:d9:1c:a5:37:be:bc:f7:dd:76:93:1b:fc:74:9c: ea:50:3a:37:5a:75:39:5d:68:0b:c0:5c:2e:f8:36:e2:79:f6: 8a:b4:db:5e:3a:6b:6b:cb:95:f0:dd:70:9f:13:d5:c9:f2:48: b3:a5:87:ea:da:73:be:20:01:91:4c:c1:5a:60:fd:65:9d:80: 27:b0:79:03:66:a4:9a:16:88:51:56:1c:b1:4d:4d:d4:6c:41: 52:3a:39:90:1f:d7:59:d9:4e:57:65:15:8a:a6:c3:65:e0:f2: 55:67:33:ae:e7:1d:f9:06:be:95:ff:3b:3d:d7:e3:38:17:00: e5:e8:90:f6:92:5b:8b:c6:d6:0b:f3:b8:36:6a:39:f9:16:6b: 22:65:ab:51:98:58:6c:ee:e9:f6:3d:f5:f2:d8:c2:19:9c:b9: fd:c9:ec:b8:66:7a:60:e2:5d:05:e1:2b:c6:55:26:8e:49:f0: 50:da:92:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBQ4MxuEeK1cHjLCYgXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw YzRjNTIwHhcNMjUxMjA2MTMwMDQyWhcNMjUxMjA3MTMwMDQyWjAzMTEwLwYDVQQD Eyg2MjcwNzRiMmY4OGRjZmFhMjJlYmZkOWJhNTE1MTYwYTZlMjQ4NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJB5Pau7/S+bmmtV3U/wl6Vltk/D Q40ewg/5MD4KRY6s+knwLHCARuV0lCM4HnxnWxOQj2e7MteNrz/lu4xxV8A1SnBU RCY2Wlyu9IPUHVRNzAvFlme1RWT5go1x3Rv/4Ae0CnGb9Q8qznworri1ki9jOBgh 5L0uIZSR0dyxqsXIqrq2JrXl4TPmSNwymhO9QwD/XX0oPdpLVz9AYmrYZAUOAKGP kblDYwd01EWawgXLd2eTp5GAztECOH6kmle1weid9041VFrGfG10Zz7+FQI/ZjBj 7oNglMWyo2NiYlFRClcYg0xUAObIEpzRfSZKtAc933wmuPV2YI9YbRisfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJwdLL4jc+qIuv9m6UVFgpuJIUeMB8GA1UdIwQY MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt NDljOTVlZWFjODEyLzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGM5oifU WEOgFeEj6ld6rBIIjK+RHd4GB8d58iV69K7WPA6hW4Kp9PBwPjSSjhvUkE8RA9Dq cqSQi2L1MWb2sj6VqCdC9pFLAkM0xtkcpTe+vPfddpMb/HSc6lA6N1p1OV1oC8Bc Lvg24nn2irTbXjpra8uV8N1wnxPVyfJIs6WH6tpzviABkUzBWmD9ZZ2AJ7B5A2ak mhaIUVYcsU1N1GxBUjo5kB/XWdlOV2UViqbDZeDyVWczrucd+Qa+lf87PdfjOBcA 5eiQ9pJbi8bWC/O4Nmo5+RZrImWrUZhYbO7p9j318tjCGZy5/cnsuGZ6YOJdBeEr xlUmjknwUNqSRw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:38 2025 by rpki-client