This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json) Hash identifier: T00JlYZFJZN0i/x3c+FYJx2kV6W1LKUttcY+9fNJzoY= Subject key identifier: B9:FA:A5:23:3C:1B:B7:A4:1E:B5:33:CA:A5:14:6D:06:60:E2:7E:36 Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06 Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506 Certificate serial: 019AF2AD5B866A88D26B139ECFA915D191F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft Manifest number: 140E Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: Lnwg91ukvt/tsomujb59T0e/3WiLhJb1bkHE5uaCTf0=) 2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5b:86:6a:88:d2:6b:13:9e:cf:a9:15:d1:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506 Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=b9faa5233c1bb7a41eb533caa5146d0660e27e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:6d:e4:64:68:fc:1a:fc:63:36:09:1d:32: c8:99:a8:77:26:72:8c:9f:0a:fa:d9:55:be:a9:ef: b8:66:04:5c:11:9e:15:4c:a3:14:93:56:14:db:95: ee:f9:d6:bb:f4:14:9a:40:a9:42:bb:54:a9:69:b7: ac:a0:f8:0c:5c:ee:47:92:be:a8:64:da:8f:0a:e1: ef:95:a5:00:a9:f5:be:63:d2:d1:fa:1c:2c:18:f2: 20:c1:59:2e:ee:00:98:83:e7:95:03:42:dd:1e:77: 69:f4:96:1a:39:3a:50:84:01:17:1c:31:b3:a6:ac: 72:a0:b9:00:6c:bc:d4:f6:17:b1:d0:f0:0d:9d:37: b8:db:64:11:bd:3d:1e:b7:65:7b:49:38:c6:b0:63: 96:8a:bd:49:42:b3:cd:8e:bb:0c:22:8f:c1:1e:f3: bd:39:79:cd:e4:54:83:0b:84:48:3f:6e:e3:26:69: 29:07:d1:6a:66:77:93:7b:f5:7e:86:fc:40:2d:e7: 40:4d:05:09:4b:a1:b0:c5:8f:71:08:b3:4d:fb:63: b1:a5:29:31:c0:2e:fb:62:28:3e:6d:4a:40:e0:4a: a7:de:5b:5b:4c:27:19:61:4b:2f:09:82:57:52:20: b0:f3:bf:69:1a:cd:7a:ab:d0:5c:5e:f5:06:01:97: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FA:A5:23:3C:1B:B7:A4:1E:B5:33:CA:A5:14:6D:06:60:E2:7E:36 X509v3 Authority Key Identifier: keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:a0:55:84:e7:9b:73:31:3b:73:5d:01:25:47:bb:d3:0e: 01:32:2e:0c:76:57:b3:fd:1a:00:95:4f:94:b0:e5:01:39:fc: 2c:b2:73:b8:68:d9:6e:40:70:5f:12:fe:59:e8:9c:3b:ba:ab: 34:37:1d:d9:a5:68:ad:8d:12:f1:b1:89:b6:aa:a2:21:fc:68: 77:a4:b4:4b:a9:a9:18:0b:4a:06:13:21:09:40:0e:cf:86:bf: 27:14:06:bc:99:77:7d:53:eb:5e:e5:7e:e6:56:0d:f3:c0:c6: d6:63:f7:3e:ba:a1:d0:1a:1d:4a:32:c7:5a:4e:cb:d2:d7:d2: dd:bb:94:b1:f6:34:ad:c6:ae:a6:81:7a:ba:1b:1f:49:07:9b: 5f:79:87:31:16:a2:55:95:db:d3:fe:68:04:57:6a:10:42:a6: f9:95:5e:1c:19:09:df:83:a7:83:e3:86:58:52:bc:a9:bd:23: e5:2b:c0:6d:9d:f5:0d:90:c3:a7:25:c6:fa:a4:56:78:ce:fc: 7b:85:74:27:6c:12:cf:98:99:b9:3c:0c:6f:54:82:c6:ad:96: 17:05:6e:d3:cc:1e:79:39:74:94:39:d1:eb:d7:52:40:b1:2e: f5:c7:4e:c1:25:84:ff:9a:bc:27:e0:ec:a3:9f:a4:14:a3:fa: a2:5e:b9:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVuGaojSaxOez6kV0ZH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDMyOTIwNjhlYTNmYjg1YmM1ODk1Mzc5ZTIwZWRiZDBi YzY1MDYwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EyhiOWZhYTUyMzNjMWJiN2E0MWViNTMzY2FhNTE0NmQwNjYwZTI3ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArllt5GRo/Br8YzYJHTLImah3JnKM nwr62VW+qe+4ZgRcEZ4VTKMUk1YU25Xu+da79BSaQKlCu1SpabesoPgMXO5Hkr6o ZNqPCuHvlaUAqfW+Y9LR+hwsGPIgwVku7gCYg+eVA0LdHndp9JYaOTpQhAEXHDGz pqxyoLkAbLzU9hex0PANnTe422QRvT0et2V7STjGsGOWir1JQrPNjrsMIo/BHvO9 OXnN5FSDC4RIP27jJmkpB9FqZneTe/V+hvxALedATQUJS6GwxY9xCLNN+2OxpSkx wC77Yig+bUpA4Eqn3ltbTCcZYUsvCYJXUiCw879pGs16q9BcXvUGAZfaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn6pSM8G7ekHrUzyqUUbQZg4n42MB8GA1UdIwQY MBaAFEEDKSBo6j+4W8WJU3niDtvQvGUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQt NjA3MmJiOGIyYmMwLzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQtNjA3MmJiOGIyYmMw LzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYGgVYTn m3MxO3NdASVHu9MOATIuDHZXs/0aAJVPlLDlATn8LLJzuGjZbkBwXxL+WeicO7qr NDcd2aVorY0S8bGJtqqiIfxod6S0S6mpGAtKBhMhCUAOz4a/JxQGvJl3fVPrXuV+ 5lYN88DG1mP3Prqh0BodSjLHWk7L0tfS3buUsfY0rcaupoF6uhsfSQebX3mHMRai VZXb0/5oBFdqEEKm+ZVeHBkJ34Ong+OGWFK8qb0j5SvAbZ31DZDDpyXG+qRWeM78 e4V0J2wSz5iZuTwMb1SCxq2WFwVu08weeTl0lDnR69dSQLEu9cdOwSWE/5q8J+Ds o5+kFKP6ol65pg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:31 2025 by rpki-client