This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json) Hash identifier: B30gYpmYiKPE2pMgoeQapQ8mUEirpIT2+AvsyWM3vn4= Subject key identifier: 88:EF:FF:F7:CE:A6:A4:F5:D1:D5:E0:7A:08:95:64:1A:D8:4C:01:CA Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d Certificate serial: 019AF31C0FB819285C289DC3D5DA1F585482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: fWwh/qxWmIAgVtPveyuWEkiCTV8SjrVJO+X24pvVmv8=) 2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=) 3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0f:b8:19:28:5c:28:9d:c3:d5:da:1f:58:54:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405d645741215677b7748d1fdefd416207adb12d Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=88effff7cea6a4f5d1d5e07a0895641ad84c01ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:72:0c:81:5c:ef:20:da:91:b3:75:c7:9d: fe:e4:74:64:b3:56:14:2f:32:26:3a:95:70:07:4c: ec:40:cc:b6:59:c3:1a:60:06:74:4a:fd:6c:fd:22: f7:ae:5d:6d:ba:2d:26:99:d7:a9:cd:1a:74:f2:93: 55:7d:ec:27:95:ef:ae:46:4d:4e:6d:a9:c4:f8:6a: 3f:ed:bb:c5:5e:91:22:31:dc:15:74:1a:45:fb:c6: af:e4:c9:51:cc:bb:a6:b2:b4:49:d7:05:dc:87:25: 2e:64:f4:3f:18:a5:4d:c5:4a:4c:16:a5:e0:51:4c: eb:1a:bb:87:89:4f:f3:4f:6e:1e:60:2f:78:4b:a7: 27:2d:e6:ec:05:68:fd:a8:8b:15:3f:1e:08:11:2b: 47:cf:8d:a4:9e:99:6e:87:0c:4c:1f:0d:4f:5e:e8: c8:83:c7:ef:47:cc:d0:c2:23:f7:be:80:24:3a:4d: c9:3f:e5:a9:97:f1:f7:17:f1:9f:81:14:d5:93:38: 1e:16:5a:59:09:b0:77:0b:21:1d:47:f7:68:db:86: 63:c6:ca:7b:59:a3:d1:60:50:0b:63:58:5f:49:85: ce:eb:5e:d0:6f:0d:35:a1:1a:03:95:ef:3d:b5:18: f3:35:c4:fd:2b:38:99:2e:57:da:fc:fe:af:10:2d: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:FF:F7:CE:A6:A4:F5:D1:D5:E0:7A:08:95:64:1A:D8:4C:01:CA X509v3 Authority Key Identifier: keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c1:88:b0:b7:27:10:20:b9:e0:0b:cf:ea:30:83:51:cb:a9: 47:b7:e9:91:0e:29:04:0a:a5:d3:25:d4:a7:c3:83:79:0a:00: a5:cc:a6:da:f3:48:55:f7:b4:c8:f9:56:a0:73:14:bc:f0:e5: 0e:b7:28:9d:6d:7f:42:f9:7b:0b:7d:61:57:52:e9:b5:9b:3b: fd:2e:95:60:18:c1:6b:8c:aa:4f:a6:78:b0:10:95:40:3c:53: cd:a1:f3:89:77:93:e4:2b:b9:98:9a:f3:01:30:eb:55:61:74: bc:66:2b:fb:a5:dc:20:72:a3:36:ac:b1:35:5b:6f:8f:dd:d5: 89:81:0b:b4:33:52:31:51:4a:fd:82:1b:00:4d:06:ce:c3:4f: 11:04:43:d0:69:53:fc:78:08:06:c6:b9:83:e3:ab:0a:6a:fa: c1:a2:7b:56:f1:8c:5a:d0:df:3c:50:8d:ee:8c:f0:e7:a0:3f: ef:e7:88:d5:69:05:60:c8:3a:c1:a0:3c:23:10:a1:99:90:e2: 2d:3e:48:a7:9f:49:37:fd:59:c2:db:2d:9c:1f:d9:d0:06:83: d9:7c:81:57:5a:af:6a:79:44:fb:36:e1:19:46:0d:0d:9d:47: bf:54:07:02:54:99:b1:83:33:bf:ff:63:d8:69:6d:65:6f:c5: e4:84:9b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHA+4GShcKJ3D1dofWFSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh ZGIxMmQwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD Eyg4OGVmZmZmN2NlYTZhNGY1ZDFkNWUwN2EwODk1NjQxYWQ4NGMwMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGByDIFc7yDakbN1x53+5HRks1YU LzImOpVwB0zsQMy2WcMaYAZ0Sv1s/SL3rl1tui0mmdepzRp08pNVfewnle+uRk1O banE+Go/7bvFXpEiMdwVdBpF+8av5MlRzLumsrRJ1wXchyUuZPQ/GKVNxUpMFqXg UUzrGruHiU/zT24eYC94S6cnLebsBWj9qIsVPx4IEStHz42knpluhwxMHw1PXujI g8fvR8zQwiP3voAkOk3JP+Wpl/H3F/GfgRTVkzgeFlpZCbB3CyEdR/do24Zjxsp7 WaPRYFALY1hfSYXO617Qbw01oRoDle89tRjzNcT9KziZLlfa/P6vEC0BvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjv//fOpqT10dXgegiVZBrYTAHKMB8GA1UdIwQY MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt NDQwZGQwMTJiMTQxLzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8GIsLcn ECC54AvP6jCDUcupR7fpkQ4pBAql0yXUp8ODeQoApcym2vNIVfe0yPlWoHMUvPDl DrconW1/Qvl7C31hV1LptZs7/S6VYBjBa4yqT6Z4sBCVQDxTzaHziXeT5Cu5mJrz ATDrVWF0vGYr+6XcIHKjNqyxNVtvj93ViYELtDNSMVFK/YIbAE0GzsNPEQRD0GlT /HgIBsa5g+OrCmr6waJ7VvGMWtDfPFCN7ozw56A/7+eI1WkFYMg6waA8IxChmZDi LT5Ip59JN/1ZwtstnB/Z0AaD2XyBV1qvanlE+zbhGUYNDZ1Hv1QHAlSZsYMzv/9j 2GltZW/F5ISbnw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:45 2025 by rpki-client