This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json) Hash identifier: MtK8okoWSa0be4oLDokiFKkkFxV8mGly59xFJypcvhA= Subject key identifier: 3C:C8:2D:C9:22:D6:DB:DA:41:DA:5F:25:96:E7:58:67:D7:2B:C4:83 Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Certificate serial: 019AF2095B7606DBA251650F8D3E5F2D8D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft Manifest number: 0DF0 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: 2t1QB_vb8iTv17VErrCxw6C1o8k.roa (hash: ZBpS24h+n4sQjrXRkfrIpSKRIlzfeiKcuPsPEBKbOKY=) 2: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=) 3: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=) 4: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=) 5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: Jmbq875pUTHjn7xoNgHSTEIXaVQQ4d0+W7PiN3ZRKP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5b:76:06:db:a2:51:65:0f:8d:3e:5f:2d:8d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=3cc82dc922d6dbda41da5f2596e75867d72bc483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:0b:03:17:f9:42:61:d6:14:a8:31:95:91: 1a:73:79:cd:8d:21:ca:a6:23:aa:79:f9:a2:2d:c3: d0:8f:81:64:fb:88:a5:28:4f:50:94:8b:e4:bf:73: 10:4c:0b:f6:10:0d:bc:6d:e6:33:4d:c6:08:db:60: d1:c1:c2:b9:8d:aa:50:f8:3c:52:1f:f3:3f:4c:17: ab:6b:14:1b:0e:2e:ef:1a:b8:c2:85:b7:ef:b1:d2: 7d:bd:f4:9d:6a:97:81:e7:e9:7d:e7:82:85:8b:97: 81:c1:3d:7e:50:2f:80:0a:16:05:d8:45:81:c6:7c: b5:05:58:01:80:0c:fa:9a:fe:93:aa:9f:89:bc:29: b9:5b:51:99:b6:fb:55:ac:c2:0e:14:f3:a1:3e:31: 2d:2f:5e:7c:4c:e6:58:82:28:52:ad:f1:6e:e4:c1: 9c:66:8a:75:1f:7a:d8:08:f8:39:a2:15:1e:b3:7b: f3:7c:0e:62:7f:87:32:34:36:e1:fa:f8:33:d8:12: 08:83:1c:ee:4f:9a:ed:a0:99:c2:18:90:4d:25:51: 1c:43:83:c2:11:88:ac:90:0f:a7:c8:1b:f1:69:26: 72:9c:48:86:4e:4c:fc:04:cb:5f:b0:f7:a7:98:99: d2:09:72:a4:1a:e4:cc:5c:18:1c:78:8f:42:80:1b: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:2D:C9:22:D6:DB:DA:41:DA:5F:25:96:E7:58:67:D7:2B:C4:83 X509v3 Authority Key Identifier: keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:6e:5f:6a:42:29:5c:24:f9:1c:c4:d4:6d:1e:0d:05:79: a7:00:5e:92:2d:0a:6a:0e:73:fe:ce:11:ce:d0:be:ac:91:a3: 63:44:09:5c:aa:9f:60:bd:27:a7:4c:4f:ce:b2:29:0d:b7:ce: 67:23:6d:b7:a0:9b:a8:d5:0d:af:3c:b2:70:cd:e2:44:c8:59: fc:15:61:6b:f3:93:ee:44:0c:ea:11:50:5e:a1:5d:f0:36:4a: 36:a0:aa:24:52:5d:92:5e:62:ad:57:65:20:aa:da:6f:f2:ef: 7b:33:1b:a6:8c:c5:7f:c4:b6:bd:34:00:0f:63:c1:ad:53:05: 4c:4e:87:bf:23:8c:76:f7:09:58:c0:bb:be:4b:b0:ac:50:11: d5:1e:ae:a9:0e:e6:ec:df:48:0a:00:ae:59:8f:93:a5:61:35: 94:b3:99:0c:79:3d:7d:95:db:76:55:10:f3:7c:50:32:c8:00: f5:b7:36:60:f1:e8:60:b1:d8:6b:2e:58:18:7e:b9:bc:ee:3f: 6b:72:21:3f:54:57:7f:b0:0b:eb:3a:6b:c3:ac:8c:5d:05:86: d0:a2:f1:55:f7:60:a4:aa:60:37:04:a8:76:3d:84:51:08:0b: 3f:23:1a:bf:5e:d0:1b:bb:47:61:b4:cf:84:1b:19:cf:ea:a1: 80:74:f9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVt2BtuiUWUPjT5fLY02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1 YzZkZmUwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygzY2M4MmRjOTIyZDZkYmRhNDFkYTVmMjU5NmU3NTg2N2Q3MmJjNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcMLAxf5QmHWFKgxlZEac3nNjSHK piOqefmiLcPQj4Fk+4ilKE9QlIvkv3MQTAv2EA28beYzTcYI22DRwcK5japQ+DxS H/M/TBeraxQbDi7vGrjChbfvsdJ9vfSdapeB5+l954KFi5eBwT1+UC+AChYF2EWB xny1BVgBgAz6mv6Tqp+JvCm5W1GZtvtVrMIOFPOhPjEtL158TOZYgihSrfFu5MGc Zop1H3rYCPg5ohUes3vzfA5if4cyNDbh+vgz2BIIgxzuT5rtoJnCGJBNJVEcQ4PC EYiskA+nyBvxaSZynEiGTkz8BMtfsPenmJnSCXKkGuTMXBgceI9CgBt9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzILcki1tvaQdpfJZbnWGfXK8SDMB8GA1UdIwQY MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4 LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn9uX2pC KVwk+RzE1G0eDQV5pwBeki0Kag5z/s4RztC+rJGjY0QJXKqfYL0np0xPzrIpDbfO ZyNtt6CbqNUNrzyycM3iRMhZ/BVha/OT7kQM6hFQXqFd8DZKNqCqJFJdkl5irVdl IKrab/LvezMbpozFf8S2vTQAD2PBrVMFTE6HvyOMdvcJWMC7vkuwrFAR1R6uqQ7m 7N9ICgCuWY+TpWE1lLOZDHk9fZXbdlUQ83xQMsgA9bc2YPHoYLHYay5YGH65vO4/ a3IhP1RXf7AL6zprw6yMXQWG0KLxVfdgpKpgNwSodj2EUQgLPyMav17QG7tHYbTP hBsZz+qhgHT53Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:40 2025 by rpki-client