This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json) Hash identifier: rflgdS4pyaN5bH6IbiotaluNnsIwjQcEjXXap8nRV6o= Subject key identifier: 12:4E:2F:52:9D:92:22:F2:B6:31:56:D4:FD:CB:38:F8:2C:39:52:21 Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c Certificate serial: 019AF42E7F904944487F7BCA518D89E7AAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:01:19 +0000 Manifest this update: Sat 06 Dec 2025 15:01:19 +0000 Manifest next update: Sun 07 Dec 2025 15:01:19 +0000 Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: 4cTsD3j2Ub3qPYZt6/cW29jgBmLwzu4x1Q+P3fNovPs=) 2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7f:90:49:44:48:7f:7b:ca:51:8d:89:e7:aa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c Validity Not Before: Dec 6 15:01:19 2025 GMT Not After : Dec 7 15:01:19 2025 GMT Subject: CN=124e2f529d9222f2b63156d4fdcb38f82c395221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:bf:4f:ca:06:c8:69:eb:ec:e3:61:69:eb: d6:13:2b:65:71:e2:f2:a5:90:b8:0f:66:3c:5a:81: 5b:e8:b6:00:0e:ba:68:40:77:3a:6f:8b:b5:ea:71: 63:c5:c4:0c:6d:d0:87:bb:43:82:85:1d:02:ca:11: 51:bd:d0:67:d5:fc:6b:65:bd:ca:32:59:24:17:33: 86:8d:10:08:f2:ec:6d:3d:53:40:4f:1f:85:ce:5e: 87:b1:36:d4:c8:9b:03:58:d8:05:d7:b7:27:6a:55: 62:16:62:e5:84:f0:6c:e6:8a:b1:e8:12:54:ab:57: 99:8b:29:9c:10:b6:d3:8f:3f:07:60:f5:be:6b:9f: 14:20:51:22:2b:bf:b7:cc:e1:23:01:bb:06:f5:fe: ab:d3:ab:5c:a7:e5:6e:26:ae:c6:08:d5:d0:b8:f8: a0:81:6b:4a:d2:05:25:d0:08:c6:8a:59:22:f5:78: a2:6f:38:38:61:65:fc:77:30:35:e0:fb:28:1f:cc: f2:f5:43:8a:7c:87:e5:c4:5f:6e:50:75:0a:ad:35: 03:0e:79:46:08:09:23:dd:59:11:76:2c:bc:6f:22: 9a:04:e4:6b:75:81:fe:6c:6a:7b:6c:5d:b3:28:f0: 9e:a3:de:04:72:7e:d7:27:cf:6d:e2:4f:ec:2e:1d: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:2F:52:9D:92:22:F2:B6:31:56:D4:FD:CB:38:F8:2C:39:52:21 X509v3 Authority Key Identifier: keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f9:3f:88:0d:38:48:7b:65:ca:c8:0a:c2:79:3b:67:11:8c: 41:dc:a8:50:04:66:64:90:aa:bf:42:ef:20:59:43:89:e3:68: 8f:58:41:54:cd:35:9f:57:95:38:04:72:7b:00:24:bf:72:ca: bf:1f:d6:d0:26:0c:32:b4:40:ba:39:27:71:19:a2:30:c9:11: 2c:b6:75:6e:c8:7f:1f:9d:60:03:f4:81:c4:e8:ab:41:0d:75: 23:1f:5a:48:54:a3:03:ec:2c:4e:72:13:64:75:cc:06:f3:be: 28:ff:f6:df:03:98:52:b5:2a:33:35:a4:8a:05:f9:86:15:8c: e9:a8:fb:ad:47:ee:5b:b9:25:5c:cf:4d:f6:20:c6:7a:5d:99: 29:6f:e6:5c:48:92:71:90:7f:3b:ed:5e:40:af:85:dd:0f:a0: 9f:3d:18:fd:74:f8:73:73:b4:b2:13:eb:8d:ee:96:95:6c:3c: 64:e6:df:2a:a7:ea:d6:2f:6f:ce:67:b6:d7:bd:0b:92:6c:04: 96:64:2c:45:82:ae:c9:11:eb:04:b1:f3:cb:0e:c4:17:30:ea: 89:dc:00:07:3b:7e:6f:62:ba:9e:f4:2e:52:b9:dd:8d:e4:bf: 30:cd:04:47:e7:76:a0:a7:60:fb:9a:8b:dc:df:3a:23:84:2e: c0:5d:30:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ln+QSURIf3vKUY2J56qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0 OGRkNmMwHhcNMjUxMjA2MTUwMTE5WhcNMjUxMjA3MTUwMTE5WjAzMTEwLwYDVQQD EygxMjRlMmY1MjlkOTIyMmYyYjYzMTU2ZDRmZGNiMzhmODJjMzk1MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsom/T8oGyGnr7ONhaevWEytlceLy pZC4D2Y8WoFb6LYADrpoQHc6b4u16nFjxcQMbdCHu0OChR0CyhFRvdBn1fxrZb3K MlkkFzOGjRAI8uxtPVNATx+Fzl6HsTbUyJsDWNgF17cnalViFmLlhPBs5oqx6BJU q1eZiymcELbTjz8HYPW+a58UIFEiK7+3zOEjAbsG9f6r06tcp+VuJq7GCNXQuPig gWtK0gUl0AjGilki9Xiibzg4YWX8dzA14PsoH8zy9UOKfIflxF9uUHUKrTUDDnlG CAkj3VkRdiy8byKaBORrdYH+bGp7bF2zKPCeo94Ecn7XJ89t4k/sLh1Q5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJOL1KdkiLytjFW1P3LOPgsOVIhMB8GA1UdIwQY MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPk/iA04 SHtlysgKwnk7ZxGMQdyoUARmZJCqv0LvIFlDieNoj1hBVM01n1eVOARyewAkv3LK vx/W0CYMMrRAujkncRmiMMkRLLZ1bsh/H51gA/SBxOirQQ11Ix9aSFSjA+wsTnIT ZHXMBvO+KP/23wOYUrUqMzWkigX5hhWM6aj7rUfuW7klXM9N9iDGel2ZKW/mXEiS cZB/O+1eQK+F3Q+gnz0Y/XT4c3O0shPrje6WlWw8ZObfKqfq1i9vzme2170LkmwE lmQsRYKuyRHrBLHzyw7EFzDqidwABzt+b2K6nvQuUrndjeS/MM0ER+d2oKdg+5qL 3N86I4QuwF0wYw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:32 2025 by rpki-client