This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json) Hash identifier: /ywyYLw8Xs4D+I9U4+d7JQs61vySQlTdpyVtC+Hcdk4= Subject key identifier: 7F:04:65:C1:9E:DD:E4:C0:40:E3:A9:7A:36:61:C5:C0:B9:07:35:49 Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf Certificate serial: 019AF19A947AF846FFD786C325C903E8D0B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: TrU1+3Tk5DXPcYUVChOxP3ZEv1vf9xpxuS0ly5/ZurY=) 2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:7a:f8:46:ff:d7:86:c3:25:c9:03:e8:d0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=7f0465c19edde4c040e3a97a3661c5c0b9073549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:93:b2:73:da:71:16:51:fa:2a:4f:56:0e: 99:0a:f9:3a:60:16:a5:51:1b:cf:bd:94:2d:c9:a3: 91:96:e5:04:5b:bd:8f:f5:e5:c5:a8:7d:3b:d7:02: bb:ff:f2:f9:18:3e:73:c8:c4:92:2d:6d:c0:eb:1c: 8b:77:a1:b6:a2:30:98:5d:fd:b0:50:22:98:39:12: b7:b3:fb:b3:b9:f6:63:9e:f1:81:54:e4:15:89:a0: cf:68:04:ba:ec:0a:8b:c4:f0:8e:d5:c9:5d:f9:b0: 3d:18:04:83:0a:26:93:a0:65:69:98:29:bd:da:7f: a6:24:27:bb:db:f0:08:21:0e:90:d8:49:e2:35:c4: 91:75:71:23:3e:e2:3b:6a:ab:36:e9:cf:ac:9b:4d: cf:fa:eb:98:b7:3f:5c:1c:2d:b7:71:f3:c5:1b:1c: 96:b8:6c:72:c9:f5:df:8d:d8:3e:8e:15:eb:52:78: 69:0f:ca:a6:d0:fe:26:1c:d4:e9:2b:14:61:5a:a5: 68:c2:c8:05:42:65:0c:21:56:6e:b7:d7:a3:38:ce: 66:c5:92:40:fe:ff:eb:f8:76:d5:ae:2b:e7:e1:5c: c5:61:f1:8f:56:13:61:74:dd:6b:db:5e:77:47:b4: 04:31:d7:b2:ed:4d:33:36:0f:d4:63:21:cf:fb:f4: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:04:65:C1:9E:DD:E4:C0:40:E3:A9:7A:36:61:C5:C0:B9:07:35:49 X509v3 Authority Key Identifier: keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:56:3c:dc:c4:9d:a3:00:46:ab:25:d2:0b:1d:a4:ad:82: ee:5f:07:03:9d:55:76:a8:67:fa:a8:0c:f1:9f:c6:ce:4b:eb: 99:ea:0d:56:c7:2c:c6:39:82:4e:19:ac:97:a8:da:2d:82:21: ac:e9:ab:a3:88:27:c4:2c:73:42:6a:e8:59:e8:48:66:35:e3: 2e:d2:95:d5:b5:42:14:36:ae:60:14:a4:79:b2:b7:f9:fc:4a: 07:26:df:bb:9f:b2:d0:2c:7c:c7:2d:70:80:94:76:2a:ae:c7: a2:bc:a1:a8:77:da:9b:1b:a6:83:34:59:2b:de:cc:7a:18:c9: 57:17:54:1d:6f:c5:5c:8f:9d:42:53:63:0c:23:73:31:19:ed: 43:7f:ce:46:20:b6:fc:3a:62:fe:64:bd:50:47:8a:e2:c7:94: c6:06:32:36:a9:bf:33:14:65:b4:b5:8a:71:56:6c:31:7d:21: 41:e5:b6:8d:4e:ab:f5:cf:a7:a9:87:79:23:e9:6b:5b:c6:60: 0a:39:1f:54:ed:ce:3b:6d:66:e7:58:af:be:f1:cc:86:46:28: cc:e2:c4:64:d2:0e:4a:2d:7b:40:a0:9f:db:27:6a:8d:61:37: e8:81:28:c5:eb:0b:25:a5:85:d2:f3:ef:38:0c:8e:1c:82:89: b4:0e:66:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpR6+Eb/14bDJckD6NC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYTFmOTZmOTFjNGEwOWY5NzljNWIxODVjMjZjYjAwYWUw Zjg2YmYwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD Eyg3ZjA0NjVjMTllZGRlNGMwNDBlM2E5N2EzNjYxYzVjMGI5MDczNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SOTsnPacRZR+ipPVg6ZCvk6YBal URvPvZQtyaORluUEW72P9eXFqH071wK7//L5GD5zyMSSLW3A6xyLd6G2ojCYXf2w UCKYORK3s/uzufZjnvGBVOQViaDPaAS67AqLxPCO1cld+bA9GASDCiaToGVpmCm9 2n+mJCe72/AIIQ6Q2EniNcSRdXEjPuI7aqs26c+sm03P+uuYtz9cHC23cfPFGxyW uGxyyfXfjdg+jhXrUnhpD8qm0P4mHNTpKxRhWqVowsgFQmUMIVZut9ejOM5mxZJA /v/r+HbVrivn4VzFYfGPVhNhdN1r2153R7QEMdey7U0zNg/UYyHP+/TW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8EZcGe3eTAQOOpejZhxcC5BzVJMB8GA1UdIwQY MBaAFEKh+W+RxKCfl5xbGFwmywCuD4a/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUt MWUwZWQ5ZjM0NGZjLzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUtMWUwZWQ5ZjM0NGZj LzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2NWPNzE naMARqsl0gsdpK2C7l8HA51Vdqhn+qgM8Z/GzkvrmeoNVscsxjmCThmsl6jaLYIh rOmro4gnxCxzQmroWehIZjXjLtKV1bVCFDauYBSkebK3+fxKBybfu5+y0Cx8xy1w gJR2Kq7HoryhqHfamxumgzRZK97MehjJVxdUHW/FXI+dQlNjDCNzMRntQ3/ORiC2 /Dpi/mS9UEeK4seUxgYyNqm/MxRltLWKcVZsMX0hQeW2jU6r9c+nqYd5I+lrW8Zg CjkfVO3OO21m51ivvvHMhkYozOLEZNIOSi17QKCf2ydqjWE36IEoxesLJaWF0vPv OAyOHIKJtA5mDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:14 2025 by rpki-client