This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: vXcvJ2MZ5aCyCHAe2GErNtkxc38lRYfG+j7DiFTtWks= Subject key identifier: B9:38:62:AA:A2:26:19:36:51:ED:03:30:90:F4:48:8E:FD:D1:F3:55 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019AF20938CF1C5F481A798979C2B958F797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 14C2 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 67pXXJ9TGz4KS4CPk3F2qwCJvPs.roa (hash: TL11KjGZ23sagC+4BrDFrq5tRJiiJf48Twqx/FNbs0g=) 2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 6B/hw3/eheVSmakZDbqyTzefyVNhaLk6v2tbDt8Y7PM=) 4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 7: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 8: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 9: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 10: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:cf:1c:5f:48:1a:79:89:79:c2:b9:58:f7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=b93862aaa226193651ed033090f4488efdd1f355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:5a:fe:b5:2b:bc:43:c1:0a:a8:69:99:a5: 74:b1:7b:9e:4f:f0:be:e7:1e:fd:47:88:7f:13:89: d1:98:82:12:72:0f:37:14:26:89:d6:ec:67:fa:03: c2:b9:64:d2:e4:c0:b1:5f:34:b2:bf:a7:8e:66:f4: 8f:56:36:26:10:d3:12:2f:d6:f6:82:12:99:84:12: 94:fc:40:8f:a4:22:e2:37:16:ed:ac:ed:7a:47:a9: ea:cb:60:dd:bb:2a:e1:15:cf:a4:70:28:72:05:7a: e7:81:ac:59:25:87:68:d3:64:05:c8:6a:9f:90:a4: 22:16:08:8e:fd:1a:58:ce:0e:e8:93:f0:10:58:31: 30:8c:3e:6e:8c:a8:e9:4f:ca:51:43:ac:cb:e9:14: 77:2d:a3:6d:ea:22:62:59:44:0e:bf:29:80:b8:b3: 30:02:1c:1c:57:58:21:bb:24:e2:b6:df:13:b9:12: 19:f8:8e:a9:08:b9:aa:e5:20:b9:09:52:1d:63:5f: 23:6f:6d:ed:ae:ac:3e:c7:76:fb:62:87:e4:8d:72: dc:40:cf:79:ee:45:de:9b:2d:b9:a0:b7:ad:32:7c: 6a:69:e2:58:ef:79:75:8f:8d:68:11:c6:66:9a:cb: d1:ac:52:74:b9:95:6c:23:83:bc:97:fa:5d:56:9c: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:38:62:AA:A2:26:19:36:51:ED:03:30:90:F4:48:8E:FD:D1:F3:55 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:1c:45:d5:86:a7:11:47:56:89:1a:a4:3a:20:a0:63:61:cd: 81:32:b2:b0:ff:f3:f6:23:53:76:5c:66:31:66:c6:de:d5:1a: cb:4a:6c:37:00:78:aa:66:32:5c:55:da:06:94:9e:4f:f3:dd: 03:8c:cf:39:4e:37:80:6e:85:13:8e:70:eb:c0:25:bd:2f:6a: 60:36:f1:84:9c:5f:f4:0e:da:d8:4f:7b:02:78:b1:68:d8:5e: d8:4f:c3:d7:2f:ce:70:1f:86:20:57:b0:35:24:89:df:11:6a: 32:72:26:c4:db:86:e7:26:e2:d1:dd:23:3c:d5:67:18:f6:03: aa:24:ef:9f:77:a6:7a:b1:1b:4f:44:e1:10:b1:3c:7d:d6:35: 83:6a:42:b9:80:d4:d8:a5:e7:7b:92:22:78:9b:e6:83:d6:ac: b5:35:b1:a2:93:df:7e:4a:be:8b:49:81:1f:fe:df:e4:d4:a8: 51:38:d0:e6:4d:6b:ff:d2:dc:82:76:fe:20:76:37:a5:33:43: 9d:87:73:23:3c:4a:9d:92:8a:b0:e5:18:d4:dd:50:29:90:d3: ea:da:fa:17:0f:10:72:e4:08:4a:28:0b:af:5a:9d:9f:46:02: 4b:e6:90:e5:14:ad:d3:60:b7:e1:74:68:97:6f:42:01:42:12: 6f:50:b8:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTjPHF9IGnmJecK5WPeXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhiOTM4NjJhYWEyMjYxOTM2NTFlZDAzMzA5MGY0NDg4ZWZkZDFmMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNa/rUrvEPBCqhpmaV0sXueT/C+ 5x79R4h/E4nRmIIScg83FCaJ1uxn+gPCuWTS5MCxXzSyv6eOZvSPVjYmENMSL9b2 ghKZhBKU/ECPpCLiNxbtrO16R6nqy2DduyrhFc+kcChyBXrngaxZJYdo02QFyGqf kKQiFgiO/RpYzg7ok/AQWDEwjD5ujKjpT8pRQ6zL6RR3LaNt6iJiWUQOvymAuLMw AhwcV1ghuyTitt8TuRIZ+I6pCLmq5SC5CVIdY18jb23trqw+x3b7YofkjXLcQM95 7kXemy25oLetMnxqaeJY73l1j41oEcZmmsvRrFJ0uZVsI4O8l/pdVpzPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk4YqqiJhk2Ue0DMJD0SI790fNVMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0RxF1Yan EUdWiRqkOiCgY2HNgTKysP/z9iNTdlxmMWbG3tUay0psNwB4qmYyXFXaBpSeT/Pd A4zPOU43gG6FE45w68AlvS9qYDbxhJxf9A7a2E97AnixaNhe2E/D1y/OcB+GIFew NSSJ3xFqMnImxNuG5ybi0d0jPNVnGPYDqiTvn3emerEbT0ThELE8fdY1g2pCuYDU 2KXne5IieJvmg9astTWxopPffkq+i0mBH/7f5NSoUTjQ5k1r/9Lcgnb+IHY3pTND nYdzIzxKnZKKsOUY1N1QKZDT6tr6Fw8QcuQISigLr1qdn0YCS+aQ5RSt02C34XRo l29CAUISb1C4Ag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:13 2025 by rpki-client