This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json) Hash identifier: J0/dSVmcAQu+OAj2RN0wjnVfWDlmg6NYBmYfBzEPEgw= Subject key identifier: EF:0E:A1:76:21:C8:59:5A:39:E3:4A:80:C3:E2:D0:30:88:21:6E:BF Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Certificate serial: 019AF54076531EA004EC37DD36509026CD5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 20:00:33 +0000 Manifest this update: Sat 06 Dec 2025 20:00:33 +0000 Manifest next update: Sun 07 Dec 2025 20:00:33 +0000 Files and hashes: 1: DrD2EGGK8WeukKhW_YJ8LCGTR78.roa (hash: b5xoiz2oFHur8HWu35m6ElddpxbfSrT/Y2/iqOY1S6Y=) 2: IcWYNvOBamTxu6amEYkiVctQe18.roa (hash: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=) 3: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: fQQ/OjUVZ4un3eI+kCX61WvtpFdanax9H0WZZ98t9IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:76:53:1e:a0:04:ec:37:dd:36:50:90:26:cd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Validity Not Before: Dec 6 20:00:33 2025 GMT Not After : Dec 7 20:00:33 2025 GMT Subject: CN=ef0ea17621c8595a39e34a80c3e2d03088216ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:2a:50:c5:b3:dc:49:8e:97:4d:94:8a:c5: f3:21:88:a6:02:56:cc:f3:a2:d7:68:af:7f:57:2b: 48:d6:cd:f7:90:46:e3:6f:cb:dd:5c:f2:80:5c:f7: fb:17:f9:ac:1a:c8:da:5a:d6:b4:e1:92:80:26:7b: e1:22:55:a4:7d:29:4c:e6:c4:54:5b:75:c3:a9:91: 48:8f:fe:ff:2e:ad:be:ae:a6:f6:19:f5:dd:37:6e: 2d:ae:49:9c:09:92:03:18:85:fe:f2:a3:f6:91:4f: 19:bf:3f:35:36:e7:5d:a4:05:69:4b:59:07:8a:63: b8:9b:61:63:7c:92:85:b6:08:94:35:03:44:26:17: 9d:dc:6d:cb:a2:29:51:ea:50:a1:f6:af:3e:73:8d: f4:dd:81:4a:24:fb:fe:33:90:f7:68:a7:5a:ba:e8: af:11:8f:e6:d4:c2:61:c4:8f:31:02:e8:3a:e5:ac: 6e:64:b7:e3:53:09:b8:2a:2b:af:1e:1a:18:5a:9c: 50:c7:52:07:35:e0:39:54:2c:0c:7a:26:60:2c:57: 42:3a:87:a2:ec:92:7d:09:e8:8e:0f:d5:62:1d:24: e6:0b:0b:9c:70:99:58:fa:dc:21:08:77:55:66:52: 79:b8:be:65:b3:da:2d:9c:c0:5c:27:fa:9a:d7:8a: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:A1:76:21:C8:59:5A:39:E3:4A:80:C3:E2:D0:30:88:21:6E:BF X509v3 Authority Key Identifier: keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d9:28:7c:2d:09:18:3e:e4:d0:1f:53:81:0d:84:53:81:f6: a2:8f:ad:6b:80:09:4a:5e:54:69:c9:12:b4:54:9d:f8:ac:84: 8e:47:d9:0b:d7:ab:09:35:70:af:ff:e5:ba:6f:20:44:d6:69: cd:40:81:ed:55:89:8b:a0:c6:94:d7:54:28:1e:8c:71:d0:9e: 82:53:b8:95:f7:e9:cb:33:15:ed:85:48:62:3a:a8:3e:ad:8c: d0:30:44:3d:99:2d:01:0d:5d:dc:64:15:2b:19:8c:c4:e4:63: 4b:b8:ba:68:53:ed:47:8f:7f:5f:90:eb:83:1a:26:c7:5a:ff: 94:ca:c1:a8:88:47:cd:bf:04:08:8d:bf:dd:95:c7:83:4a:2d: 1a:44:2a:be:82:04:52:19:0c:23:05:fb:36:1a:16:6e:80:f7: e3:59:2a:b5:35:4b:15:3a:ed:4c:8a:f3:64:95:32:24:39:a8: 2f:62:17:c9:8e:43:e0:86:17:8d:8b:95:b1:18:78:94:c9:79: 00:83:60:91:65:e3:62:26:73:18:c3:96:a6:af:e6:ed:e9:a5: 5d:1e:54:24:a7:9a:55:ed:45:94:66:69:bc:a0:0f:42:cf:3e: 80:de:ed:ed:e0:d9:a7:9a:69:45:ef:2e:6b:de:bf:b8:c5:b8: 58:56:1c:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHZTHqAE7DfdNlCQJs1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNzRhMWMwMzgzYWQ1ZWIwZjA1ODhlNGMzMzk0YmEzNDAx MGE2MjEwHhcNMjUxMjA2MjAwMDMzWhcNMjUxMjA3MjAwMDMzWjAzMTEwLwYDVQQD EyhlZjBlYTE3NjIxYzg1OTVhMzllMzRhODBjM2UyZDAzMDg4MjE2ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws0qUMWz3EmOl02UisXzIYimAlbM 86LXaK9/VytI1s33kEbjb8vdXPKAXPf7F/msGsjaWta04ZKAJnvhIlWkfSlM5sRU W3XDqZFIj/7/Lq2+rqb2GfXdN24trkmcCZIDGIX+8qP2kU8Zvz81NuddpAVpS1kH imO4m2FjfJKFtgiUNQNEJhed3G3LoilR6lCh9q8+c4303YFKJPv+M5D3aKdauuiv EY/m1MJhxI8xAug65axuZLfjUwm4KiuvHhoYWpxQx1IHNeA5VCwMeiZgLFdCOoei 7JJ9CeiOD9ViHSTmCwuccJlY+twhCHdVZlJ5uL5ls9otnMBcJ/qa14rpuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8OoXYhyFlaOeNKgMPi0DCIIW6/MB8GA1UdIwQY MBaAFEB0ocA4OtXrDwWI5MM5S6NAEKYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMt MjZjMzM2NTE1M2FmLzEvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMtMjZjMzM2NTE1M2Fm LzEvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdkofC0J GD7k0B9TgQ2EU4H2oo+ta4AJSl5UackStFSd+KyEjkfZC9erCTVwr//lum8gRNZp zUCB7VWJi6DGlNdUKB6McdCeglO4lffpyzMV7YVIYjqoPq2M0DBEPZktAQ1d3GQV KxmMxORjS7i6aFPtR49/X5Drgxomx1r/lMrBqIhHzb8ECI2/3ZXHg0otGkQqvoIE UhkMIwX7NhoWboD341kqtTVLFTrtTIrzZJUyJDmoL2IXyY5D4IYXjYuVsRh4lMl5 AINgkWXjYiZzGMOWpq/m7emlXR5UJKeaVe1FlGZpvKAPQs8+gN7t7eDZp5ppRe8u a96/uMW4WFYcGg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:05:25 2025 by rpki-client