This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json) Hash identifier: u56ryIGQrRLlT4o6cSYHtj2vaCXYmH3q3geFHWL1rMQ= Subject key identifier: 26:2E:98:D8:C5:5D:FF:47:DD:42:E5:40:9C:58:49:59:2A:CC:45:8B Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf Certificate serial: 019AF19A93D30A286A7D36F0D4FF024F88CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft Manifest number: 1676 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: FnfzSsISoq8oeSAgd9XUZnwgpNAvjAwXKmUPNfNb1IU=) 2: xqT_w2QIz7QngYO0UjYqCZFOQm8.roa (hash: voqA9hVWd7OTxS2rJiecPACQATaq8yqLIFOOJeCGw4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:93:d3:0a:28:6a:7d:36:f0:d4:ff:02:4f:88:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=262e98d8c55dff47dd42e5409c5849592acc458b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:68:85:4a:b2:8f:f8:cf:72:55:51:8a:68: 2d:06:bd:0c:07:59:b7:a5:9b:f7:d9:d3:49:23:41: 14:3d:c0:69:8c:e8:c6:39:76:ad:26:7d:57:25:95: 13:12:02:e9:cd:7c:b5:18:cf:85:21:11:2c:3d:a3: 25:48:f6:dc:71:15:4a:fa:f3:3b:63:4a:df:04:19: 68:cb:c1:1f:87:bd:5c:be:98:af:b5:5b:99:7c:ea: e3:2e:a6:86:f8:f1:36:d1:99:d3:15:b4:26:78:6c: 9c:16:cd:32:3c:4b:a5:0e:9f:f3:c7:48:46:50:9b: f5:f9:d4:2b:fc:45:a1:27:85:43:df:39:03:e4:e0: f0:37:2c:e9:30:f1:47:21:e4:da:c3:11:8d:c0:6b: d9:f8:8c:b1:06:9c:48:e2:18:34:d2:d9:6a:02:57: 64:b7:56:e8:ca:9f:7b:96:db:0b:64:f5:32:93:e4: 4d:af:16:77:e8:6c:8c:2c:b7:66:4b:a0:74:9c:ce: 7b:3a:fd:d3:6d:35:a7:df:31:4a:c1:ef:83:11:cf: 1b:47:eb:54:44:37:3d:0a:f3:14:91:a1:18:61:f2: 0e:66:31:13:41:cb:59:03:37:46:ab:df:7a:2d:9a: 75:e1:7f:2c:71:f2:fd:e4:27:f9:09:0a:4d:56:9b: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2E:98:D8:C5:5D:FF:47:DD:42:E5:40:9C:58:49:59:2A:CC:45:8B X509v3 Authority Key Identifier: keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ab:30:ec:0c:7b:81:b2:43:e4:04:62:1a:86:cd:b1:0e:aa: e6:58:f0:bb:d2:87:d6:2d:b7:15:44:97:52:29:65:66:b0:67: 52:6b:c9:e8:c0:55:93:63:54:51:72:4a:1c:b2:58:82:4b:b0: e6:35:18:21:3a:41:3a:ee:4f:58:a1:35:be:ad:aa:72:21:88: a1:55:23:42:ed:14:80:1e:f2:eb:aa:dd:2f:20:20:dc:d6:98: 17:31:a3:b9:5e:e4:0b:bf:d4:76:12:0d:6c:bd:ce:a4:e3:67: 46:07:f5:7f:6f:4d:9f:80:58:58:80:32:e1:42:01:bf:78:eb: cf:47:74:48:70:ac:e1:e6:38:b9:52:89:92:d8:18:4b:e5:04: 7d:c8:ed:fe:0d:f5:02:1c:51:3b:c1:cf:af:01:42:87:57:b6: 6b:ff:b3:eb:46:6f:62:10:14:01:ea:a6:d7:69:d9:69:84:ad: e5:0b:4c:4c:8d:28:25:29:d4:50:e5:17:56:b0:b3:6a:a0:58: 45:b9:cb:2e:e0:66:dd:22:15:85:6a:11:4e:cf:05:a8:c0:f2: 6e:6d:de:a1:c3:4f:cf:5a:ba:b2:ff:7d:cb:ee:c3:b8:24:75: 13:63:f1:02:90:e5:df:4d:d9:68:55:6c:3e:b1:8e:11:1e:8c: 58:74:67:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpPTCihqfTbw1P8CT4jPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNTBiY2EyOWMxODEzYWUzYjExZjM4MWYwNDQyYWEyYThh OTMxYmYwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EygyNjJlOThkOGM1NWRmZjQ3ZGQ0MmU1NDA5YzU4NDk1OTJhY2M0NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F9ohUqyj/jPclVRimgtBr0MB1m3 pZv32dNJI0EUPcBpjOjGOXatJn1XJZUTEgLpzXy1GM+FIREsPaMlSPbccRVK+vM7 Y0rfBBloy8Efh71cvpivtVuZfOrjLqaG+PE20ZnTFbQmeGycFs0yPEulDp/zx0hG UJv1+dQr/EWhJ4VD3zkD5ODwNyzpMPFHIeTawxGNwGvZ+IyxBpxI4hg00tlqAldk t1boyp97ltsLZPUyk+RNrxZ36GyMLLdmS6B0nM57Ov3TbTWn3zFKwe+DEc8bR+tU RDc9CvMUkaEYYfIOZjETQctZAzdGq996LZp14X8scfL95Cf5CQpNVpvs7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYumNjFXf9H3ULlQJxYSVkqzEWLMB8GA1UdIwQY MBaAFEBQvKKcGBOuOxHzgfBEKqKoqTG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQt N2ZlOWVkN2Q2NDdkLzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQtN2ZlOWVkN2Q2NDdk LzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqsw7Ax7 gbJD5ARiGobNsQ6q5ljwu9KH1i23FUSXUillZrBnUmvJ6MBVk2NUUXJKHLJYgkuw 5jUYITpBOu5PWKE1vq2qciGIoVUjQu0UgB7y66rdLyAg3NaYFzGjuV7kC7/UdhIN bL3OpONnRgf1f29Nn4BYWIAy4UIBv3jrz0d0SHCs4eY4uVKJktgYS+UEfcjt/g31 AhxRO8HPrwFCh1e2a/+z60ZvYhAUAeqm12nZaYSt5QtMTI0oJSnUUOUXVrCzaqBY RbnLLuBm3SIVhWoRTs8FqMDybm3eocNPz1q6sv99y+7DuCR1E2PxApDl303ZaFVs PrGOER6MWHRnxA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:13 2025 by rpki-client