This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json) Hash identifier: LP9EH83Mq89Y9rOEJOVLni8n65nQGuicsZsB8JtGl4g= Subject key identifier: F8:10:20:49:E9:1C:C1:60:7C:37:F4:EC:0C:4E:D6:85:45:DC:77:D8 Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a Certificate serial: 019AF23FFAF8438EA962664B03DC6AF9BB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft Manifest number: 1065 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=) 2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: K6ppicKPOmsJYtXtYXjY17NS07gUMC/pZ31STp7mtao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fa:f8:43:8e:a9:62:66:4b:03:dc:6a:f9:bb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=f8102049e91cc1607c37f4ec0c4ed68545dc77d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:fb:dc:f9:b0:b2:0a:a3:f4:ea:7c:de:58: 72:41:80:02:76:85:18:86:1c:1e:3a:85:bf:3a:dd: b2:1f:35:00:bb:2f:1a:0c:0b:f6:ea:31:cf:c1:ee: f9:4c:96:27:51:a0:77:15:3b:b5:47:5b:c0:c7:82: dd:47:e4:ea:8e:89:fc:19:b2:30:3d:75:41:a8:4a: cf:af:ca:88:ac:bf:3b:80:67:8b:83:c9:04:22:4a: 0d:b2:38:df:a3:65:9d:5a:b3:eb:03:2c:14:5c:48: 2e:a8:bd:55:73:da:f7:d2:3e:21:b1:41:e5:5b:1e: 72:3b:e1:eb:23:db:30:cc:44:80:10:11:2c:e5:db: d4:bd:92:96:b7:ee:d4:c1:48:54:7e:1b:69:da:a6: e9:de:18:56:e1:da:8d:5d:7d:8d:02:e0:39:91:59: ac:4c:e7:33:70:91:b7:3d:1c:1a:5c:64:bc:09:2d: 98:79:a3:dc:91:f4:d1:87:18:51:1a:c1:97:a5:24: 25:5c:ff:00:c6:7c:86:81:c7:88:3a:d2:b9:49:a8: 6e:9d:b5:51:8e:ca:01:87:79:72:2c:fb:53:91:57: 5f:a3:82:da:a1:5f:ca:9b:c7:ab:01:0a:15:7c:b4: cc:7e:a7:be:39:18:4c:56:d6:84:bb:ad:f4:17:6b: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:10:20:49:E9:1C:C1:60:7C:37:F4:EC:0C:4E:D6:85:45:DC:77:D8 X509v3 Authority Key Identifier: keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:73:1e:7b:be:c9:60:6e:4a:6f:72:6a:4c:9f:77:db:57:8f: f3:93:78:12:a0:c1:05:2f:9c:cd:4d:14:1b:09:e1:e5:69:19: 58:25:82:9f:33:9c:b8:f4:98:1d:b3:94:9c:00:1a:72:26:7c: 0f:fc:4e:bc:e8:6b:15:b4:09:22:25:24:b7:30:27:01:23:36: 9c:ca:d4:aa:7f:07:be:fd:b3:e3:5a:cd:17:ae:7c:86:62:45: 67:74:20:a1:f0:16:0d:43:55:ec:c4:b5:e8:63:5e:a5:d0:67: 49:03:3d:fb:db:4d:d3:15:60:22:08:77:1c:7c:80:5f:54:63: 4f:1f:3f:12:ec:fe:b7:0e:74:dc:b6:8d:64:7b:fd:37:38:4b: d5:dd:8b:f0:27:c7:51:db:d5:f9:ae:04:91:d0:2c:31:ee:ab: 2e:d6:9c:a5:ec:73:21:c1:75:b3:a2:eb:d2:af:bf:a3:dd:e4: 45:ab:94:57:ef:67:1f:af:de:e7:8b:5b:5a:97:35:fd:09:75: 0f:65:15:45:8a:87:80:e8:40:11:1e:35:b3:ce:23:a4:57:45: 6d:ff:b4:3f:5f:2b:78:7b:af:46:fb:4a:b4:c9:cb:38:d0:8e: b5:29:b4:78:d8:68:56:8f:21:6a:df:28:67:5f:e7:57:47:0b: bf:07:26:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/r4Q46pYmZLA9xq+btNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3 Y2ZiMGEwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EyhmODEwMjA0OWU5MWNjMTYwN2MzN2Y0ZWMwYzRlZDY4NTQ1ZGM3N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNf73Pmwsgqj9Op83lhyQYACdoUY hhweOoW/Ot2yHzUAuy8aDAv26jHPwe75TJYnUaB3FTu1R1vAx4LdR+Tqjon8GbIw PXVBqErPr8qIrL87gGeLg8kEIkoNsjjfo2WdWrPrAywUXEguqL1Vc9r30j4hsUHl Wx5yO+HrI9swzESAEBEs5dvUvZKWt+7UwUhUfhtp2qbp3hhW4dqNXX2NAuA5kVms TOczcJG3PRwaXGS8CS2YeaPckfTRhxhRGsGXpSQlXP8AxnyGgceIOtK5SahunbVR jsoBh3lyLPtTkVdfo4LaoV/Km8erAQoVfLTMfqe+ORhMVtaEu630F2uVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgQIEnpHMFgfDf07AxO1oVF3HfYMB8GA1UdIwQY MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3Mee77J YG5Kb3JqTJ9321eP85N4EqDBBS+czU0UGwnh5WkZWCWCnzOcuPSYHbOUnAAaciZ8 D/xOvOhrFbQJIiUktzAnASM2nMrUqn8Hvv2z41rNF658hmJFZ3QgofAWDUNV7MS1 6GNepdBnSQM9+9tN0xVgIgh3HHyAX1RjTx8/Euz+tw503LaNZHv9NzhL1d2L8CfH UdvV+a4EkdAsMe6rLtacpexzIcF1s6Lr0q+/o93kRauUV+9nH6/e54tbWpc1/Ql1 D2UVRYqHgOhAER41s84jpFdFbf+0P18reHuvRvtKtMnLONCOtSm0eNhoVo8hat8o Z1/nV0cLvwcmbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:00:45 2025 by rpki-client