This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json) Hash identifier: TwjVpxmCubTATv/4+fy8y/iGZ61WJZFja/ixn2CsB7Q= Subject key identifier: 16:0E:FF:94:B6:7F:46:A8:2C:FA:70:C8:DF:2D:7B:D4:8E:27:FD:8F Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1 Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1 Certificate serial: 019AF2AD84C347A7571FC69CBB5801B0A085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft Manifest number: 0AEB Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=) 2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: XOx99NaZk2U2oPLyvEBpsThh5ORK9qmuUdU9esmxsBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:84:c3:47:a7:57:1f:c6:9c:bb:58:01:b0:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=160eff94b67f46a82cfa70c8df2d7bd48e27fd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:08:64:7f:a5:e0:06:66:00:9c:e9:93:4d: ad:4e:82:28:4c:57:3c:8e:52:96:a7:7c:15:a9:b8: 1d:5f:29:d0:4d:01:ed:1e:3c:66:49:54:34:aa:a0: 11:2b:b7:5f:32:52:96:b2:78:b0:5d:b4:86:da:70: 3e:37:0c:eb:5d:e3:7a:2c:8f:81:80:3f:9b:a4:83: 17:f6:73:d8:f9:a3:07:ee:0c:fc:da:d1:72:71:df: cc:a8:7d:ff:74:d1:09:87:02:6e:e9:4b:81:65:4b: 7b:88:19:ef:eb:29:2b:8d:c2:c6:42:09:93:96:d7: 4e:80:8e:cb:24:55:94:d5:16:f2:d6:28:f4:72:01: 24:c7:f0:31:1c:83:d3:a2:f8:d2:26:28:a9:ea:0f: a0:4f:cb:66:a3:fe:6d:8c:6f:f0:d4:5f:bb:66:26: d0:8a:d9:d1:2d:1c:87:dd:25:4a:bc:e2:55:fd:72: e1:96:1b:9f:7b:77:2b:1e:4f:de:94:33:9d:0d:9a: a7:99:9e:c0:a0:11:5f:4b:26:9f:5d:d7:4d:30:11: 94:3f:47:4e:4e:59:5f:67:97:1a:e6:b2:fc:69:f8: 22:ab:f1:e5:0e:ef:55:5f:65:c2:37:af:73:fb:ca: 6c:03:97:49:3d:a9:d8:b7:b3:eb:1d:d9:4b:c2:2c: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0E:FF:94:B6:7F:46:A8:2C:FA:70:C8:DF:2D:7B:D4:8E:27:FD:8F X509v3 Authority Key Identifier: keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:70:64:e2:7d:10:24:13:62:70:a0:2f:50:9a:3b:46:89:f8: 8a:b7:5d:ba:ac:41:e6:d3:cc:11:5d:69:a0:f1:f4:ab:5b:5f: 81:f8:66:3e:20:2a:1f:83:b0:0a:59:90:24:ee:0c:1c:65:33: 63:48:21:7d:98:75:da:30:c0:4b:2e:c6:56:63:6f:c0:16:be: 6c:d7:3b:a3:bc:13:f4:62:d3:5c:89:1f:08:5e:20:91:6f:08: 0e:14:c8:2f:06:8d:e4:88:90:b2:15:77:ee:70:8c:f2:3a:ed: 73:69:17:1b:c1:b3:c3:3d:f2:ae:03:89:d4:75:84:ad:83:7b: fa:19:d3:11:90:c7:6b:5d:f7:dc:cc:4e:cd:bb:57:3a:7d:a8: 32:5b:64:18:b4:1e:56:ab:43:6f:29:4a:b0:75:3b:0f:0b:3d: 84:3d:00:db:0a:bb:7a:49:24:bb:8d:ea:60:64:bf:be:e7:58: fb:e7:ed:21:9b:55:46:87:5b:cd:df:87:06:63:fc:13:aa:b9: a7:74:de:85:db:78:5a:00:bc:ea:5a:96:65:80:01:aa:b9:09: 26:e1:c4:a6:81:b9:0b:95:c1:d2:76:70:17:a7:30:fe:4e:8a: 22:09:49:ac:b9:26:e6:4b:03:85:3b:d0:df:ab:3f:74:be:34: 08:0d:2e:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYTDR6dXH8acu1gBsKCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4 YmQ4YzEwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EygxNjBlZmY5NGI2N2Y0NmE4MmNmYTcwYzhkZjJkN2JkNDhlMjdmZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bQIZH+l4AZmAJzpk02tToIoTFc8 jlKWp3wVqbgdXynQTQHtHjxmSVQ0qqARK7dfMlKWsniwXbSG2nA+NwzrXeN6LI+B gD+bpIMX9nPY+aMH7gz82tFycd/MqH3/dNEJhwJu6UuBZUt7iBnv6ykrjcLGQgmT ltdOgI7LJFWU1Rby1ij0cgEkx/AxHIPTovjSJiip6g+gT8tmo/5tjG/w1F+7ZibQ itnRLRyH3SVKvOJV/XLhlhufe3crHk/elDOdDZqnmZ7AoBFfSyafXddNMBGUP0dO TllfZ5ca5rL8afgiq/HlDu9VX2XCN69z+8psA5dJPanYt7PrHdlLwiw6+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYO/5S2f0aoLPpwyN8te9SOJ/2PMB8GA1UdIwQY MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2 LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXBk4n0Q JBNicKAvUJo7Ron4irdduqxB5tPMEV1poPH0q1tfgfhmPiAqH4OwClmQJO4MHGUz Y0ghfZh12jDASy7GVmNvwBa+bNc7o7wT9GLTXIkfCF4gkW8IDhTILwaN5IiQshV3 7nCM8jrtc2kXG8Gzwz3yrgOJ1HWErYN7+hnTEZDHa1333MxOzbtXOn2oMltkGLQe VqtDbylKsHU7Dws9hD0A2wq7ekkku43qYGS/vudY++ftIZtVRodbzd+HBmP8E6q5 p3Tehdt4WgC86lqWZYABqrkJJuHEpoG5C5XB0nZwF6cw/k6KIglJrLkm5ksDhTvQ 36s/dL40CA0umg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:43 2025 by rpki-client