This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json) Hash identifier: 3OSCI9khKwbUf/Yu7SrLlP7YwZH8geeaQGyIZ93W7Co= Subject key identifier: 78:AA:9F:D7:73:7E:18:BB:92:C2:0D:EE:3F:E7:DC:7B:09:77:4E:DE Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15 Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15 Certificate serial: 019AF19AFE7E868667902533334F7ADED946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: Ia1A+xWIge7Psk8+7A4dYy12HSKWqlRonqGC4O1/e2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fe:7e:86:86:67:90:25:33:33:4f:7a:de:d9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=78aa9fd7737e18bb92c20dee3fe7dc7b09774ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:80:75:98:6a:92:1c:b5:5e:a6:a5:ff:d1: 05:ff:a7:89:d2:48:ff:b9:78:53:2a:ff:80:d9:c8: c3:7e:92:89:08:c2:95:98:44:6b:75:35:bf:3f:0f: 53:c5:bf:08:60:fe:f5:83:02:c5:7f:fa:ae:f8:fe: 85:80:bd:72:de:85:29:c2:2c:b6:4c:32:7c:1b:fb: f3:f8:dc:c7:5a:f4:03:9f:2b:a9:6d:76:28:04:2f: 59:34:c3:e5:d3:3c:79:3f:94:98:90:71:c9:7b:b5: b5:af:b4:e9:5e:75:64:3b:be:80:52:a8:68:a7:27: e9:9e:97:24:4a:8c:98:bd:83:d5:e7:6c:2c:54:ae: 98:95:87:2a:35:11:29:bc:a6:b5:37:d2:c8:b8:24: 71:c9:d4:4d:e6:e2:2f:16:8f:4e:58:00:46:00:6b: 5f:28:98:0b:85:c1:40:4e:aa:39:c3:50:cf:64:12: 44:e2:28:ca:30:9d:d1:0e:a6:26:6c:32:5f:96:91: 9a:ea:aa:b1:94:e5:6c:d0:ed:60:e0:bb:65:bc:55: 89:52:13:33:20:56:3e:d5:5a:83:3b:6c:12:58:43: a3:06:6d:fc:e4:47:88:46:9b:b9:a6:d1:0f:9e:15: a0:4b:6c:48:7f:c2:55:1e:2d:2c:bd:c9:5b:a9:49: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AA:9F:D7:73:7E:18:BB:92:C2:0D:EE:3F:E7:DC:7B:09:77:4E:DE X509v3 Authority Key Identifier: keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:80:04:a4:43:44:51:21:a4:7b:dc:dc:1d:0e:f0:30:f7:15: 53:12:ab:f0:f8:9a:69:ca:3b:e9:c6:c7:f9:45:d9:d1:45:86: a7:af:a9:d6:f6:69:df:f8:3a:41:dc:af:6a:36:81:5d:74:13: c3:a5:fd:69:1a:4d:ee:36:64:b5:cf:a6:27:72:a0:64:f9:3a: c0:bd:82:92:88:ea:1b:11:41:e8:7e:f2:da:d8:01:1a:75:68: 41:2e:3e:dd:3f:fb:62:88:1b:1f:85:80:0d:30:fd:c3:e5:70: b6:85:b7:4e:f9:cd:62:5e:b8:1d:ee:51:f0:67:49:52:58:36: 4d:99:7f:5e:2c:0d:9d:a7:e8:22:d5:74:50:1c:b3:fe:3e:db: a0:9d:07:8b:99:65:b2:ef:ba:f4:39:f5:c6:e0:f5:71:bf:10: 16:2e:a1:ef:7e:84:c4:84:5a:72:4c:fd:c8:ba:17:ff:d2:97: b0:c9:fb:3a:3d:5f:3a:88:3d:3a:8e:fb:df:f6:e4:87:1b:19: 1e:4f:73:e6:91:79:23:d7:4a:94:11:b2:22:a8:f0:ea:eb:53: 15:da:97:dd:f1:6b:46:00:ea:49:69:4c:d6:b6:45:8b:c0:bf: 42:84:c4:45:3a:5a:3f:69:d1:20:4c:b7:6d:7c:b2:4f:f4:29: e7:60:0b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv5+hoZnkCUzM0963tlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWZjNjkzOGUzZDVlMGI5Mjc0N2IzMmY2ZDcwZmRhZjBl NTBhMTUwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD Eyg3OGFhOWZkNzczN2UxOGJiOTJjMjBkZWUzZmU3ZGM3YjA5Nzc0ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3CAdZhqkhy1Xqal/9EF/6eJ0kj/ uXhTKv+A2cjDfpKJCMKVmERrdTW/Pw9Txb8IYP71gwLFf/qu+P6FgL1y3oUpwiy2 TDJ8G/vz+NzHWvQDnyupbXYoBC9ZNMPl0zx5P5SYkHHJe7W1r7TpXnVkO76AUqho pyfpnpckSoyYvYPV52wsVK6YlYcqNREpvKa1N9LIuCRxydRN5uIvFo9OWABGAGtf KJgLhcFATqo5w1DPZBJE4ijKMJ3RDqYmbDJflpGa6qqxlOVs0O1g4LtlvFWJUhMz IFY+1VqDO2wSWEOjBm385EeIRpu5ptEPnhWgS2xIf8JVHi0svclbqUnFjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiqn9dzfhi7ksIN7j/n3HsJd07eMB8GA1UdIwQY MBaAFEGfxpOOPV4LknR7MvbXD9rw5QoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2Qt OWJjZWIwMjlkNTI4LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2QtOWJjZWIwMjlkNTI4 LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4AEpENE USGke9zcHQ7wMPcVUxKr8Piaaco76cbH+UXZ0UWGp6+p1vZp3/g6QdyvajaBXXQT w6X9aRpN7jZktc+mJ3KgZPk6wL2CkojqGxFB6H7y2tgBGnVoQS4+3T/7YogbH4WA DTD9w+VwtoW3TvnNYl64He5R8GdJUlg2TZl/XiwNnafoItV0UByz/j7boJ0Hi5ll su+69Dn1xuD1cb8QFi6h736ExIRackz9yLoX/9KXsMn7Oj1fOog9Oo773/bkhxsZ Hk9z5pF5I9dKlBGyIqjw6utTFdqX3fFrRgDqSWlM1rZFi8C/QoTERTpaP2nRIEy3 bXyyT/Qp52ALIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:34 2025 by rpki-client