This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json) Hash identifier: 9/pLyzYPS61EivY5Te0CTXJBM0iFMdg0E1pHjUKJ86c= Subject key identifier: 00:A1:2A:69:95:6D:B5:5F:54:C9:08:BA:30:19:17:60:8A:C0:9D:8F Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1 Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1 Certificate serial: 019AF6F9CA7CDA259CA25DB0F7FB46CCA4CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 04:02:36 +0000 Manifest this update: Sun 07 Dec 2025 04:02:36 +0000 Manifest next update: Mon 08 Dec 2025 04:02:36 +0000 Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=) 2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=) 3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: R2j5zvBIRaVTdttLqGQQp3vRFgqNfviG9iPWxa2PLEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:ca:7c:da:25:9c:a2:5d:b0:f7:fb:46:cc:a4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1 Validity Not Before: Dec 7 04:02:36 2025 GMT Not After : Dec 8 04:02:36 2025 GMT Subject: CN=00a12a69956db55f54c908ba301917608ac09d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:19:b6:06:47:6c:0c:ff:6f:46:22:dd:c8: 3e:d8:1c:06:2d:2b:c4:1d:31:81:eb:a4:04:c0:f5: d5:0e:fe:4f:15:79:c4:b8:73:67:5f:f8:95:49:de: b0:2d:fe:ce:9b:1a:b7:71:de:eb:89:07:3a:00:8f: 2c:0a:ef:5b:11:cf:3e:08:41:2d:4c:df:43:42:7e: 2d:db:b2:6d:cf:89:68:cd:5e:6a:66:4f:66:f7:11: a0:3e:e9:26:5a:e6:23:c4:2f:bc:d3:68:a5:eb:5d: 28:b5:73:1e:3a:3e:b0:bb:a8:dc:6d:68:ba:fa:93: c8:19:29:0e:60:96:a8:03:15:51:12:ac:b0:7f:ae: b2:4b:2e:3e:ce:d0:68:2a:49:9a:ab:4f:21:4c:88: 93:30:28:da:43:d5:16:98:35:bf:bc:b8:c6:b7:55: 8f:41:95:38:19:ef:6d:5b:4b:b5:9d:67:6b:db:b9: c1:dc:b0:3f:a2:49:cf:19:e1:f1:59:07:ea:e4:7f: 70:bb:90:5d:e0:aa:39:35:9c:80:ee:6d:f8:5a:fb: a2:bc:a6:e5:42:4d:ee:67:dc:4a:95:a5:5d:c9:45: 75:92:7c:db:4f:f0:e8:ef:56:b4:ec:43:c8:d5:8f: 93:9a:cf:cb:2b:11:02:7b:f2:e3:ae:e9:28:1b:73: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A1:2A:69:95:6D:B5:5F:54:C9:08:BA:30:19:17:60:8A:C0:9D:8F X509v3 Authority Key Identifier: keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:7b:94:a6:b9:76:14:22:61:4c:c7:12:d5:2c:8f:a9:08: 80:54:dd:a1:8b:48:a5:0f:68:05:e9:dd:ff:c9:74:54:07:50: 5a:10:89:bb:5a:5e:8c:87:ae:ec:7e:40:c1:19:17:84:bb:5c: 84:12:28:9b:1a:2a:16:d4:c2:5d:b7:f2:fb:e9:2e:36:b7:f3: af:89:04:1a:f9:03:e0:6f:ad:97:c2:d2:89:a6:6d:4b:74:37: 54:a2:c2:ca:a9:16:04:93:1f:52:ee:a8:91:71:a0:18:9a:5a: d7:21:23:bb:03:c0:eb:4b:27:d5:80:a4:83:e7:3f:2a:18:c5: f1:1b:af:44:5f:db:eb:3f:2e:b6:ae:12:e3:c4:e5:e3:c1:24: f7:14:e8:b7:cd:76:6d:98:6b:85:c7:d3:62:71:82:85:fe:50: 7c:33:13:75:8a:81:25:21:9e:cd:9b:5b:a7:d4:df:b8:95:7b: b2:0f:bd:2e:e4:62:f4:82:ac:53:f1:68:7e:b2:ef:f6:18:db: de:2b:63:b6:e6:1c:a0:7b:e8:ad:e7:82:58:32:77:03:12:ae: af:0a:6b:31:67:fe:6d:f8:e8:97:4f:53:d6:1f:a2:c1:f1:d0: f2:36:c6:f9:1e:5a:1e:bd:02:2d:91:43:c2:99:b0:25:0d:f2: 8b:a7:10:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+cp82iWcol2w9/tGzKTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2 NWYwZDEwHhcNMjUxMjA3MDQwMjM2WhcNMjUxMjA4MDQwMjM2WjAzMTEwLwYDVQQD EygwMGExMmE2OTk1NmRiNTVmNTRjOTA4YmEzMDE5MTc2MDhhYzA5ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1sZtgZHbAz/b0Yi3cg+2BwGLSvE HTGB66QEwPXVDv5PFXnEuHNnX/iVSd6wLf7Omxq3cd7riQc6AI8sCu9bEc8+CEEt TN9DQn4t27Jtz4lozV5qZk9m9xGgPukmWuYjxC+802il610otXMeOj6wu6jcbWi6 +pPIGSkOYJaoAxVREqywf66ySy4+ztBoKkmaq08hTIiTMCjaQ9UWmDW/vLjGt1WP QZU4Ge9tW0u1nWdr27nB3LA/oknPGeHxWQfq5H9wu5Bd4Ko5NZyA7m34WvuivKbl Qk3uZ9xKlaVdyUV1knzbT/Do71a07EPI1Y+Tms/LKxECe/LjrukoG3N+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAChKmmVbbVfVMkIujAZF2CKwJ2PMB8GA1UdIwQY MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct ODkwNTIyYzYxMDViLzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVZ7lKa5 dhQiYUzHEtUsj6kIgFTdoYtIpQ9oBend/8l0VAdQWhCJu1pejIeu7H5AwRkXhLtc hBIomxoqFtTCXbfy++kuNrfzr4kEGvkD4G+tl8LSiaZtS3Q3VKLCyqkWBJMfUu6o kXGgGJpa1yEjuwPA60sn1YCkg+c/KhjF8RuvRF/b6z8utq4S48Tl48Ek9xTot812 bZhrhcfTYnGChf5QfDMTdYqBJSGezZtbp9TfuJV7sg+9LuRi9IKsU/FofrLv9hjb 3itjtuYcoHvoreeCWDJ3AxKurwprMWf+bfjol09T1h+iwfHQ8jbG+R5aHr0CLZFD wpmwJQ3yi6cQ4w== -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:52 2025 by rpki-client