This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json) Hash identifier: X1ckE4Ae2n4aCOdKCT4KaS8sQ8imYN8CF2ws1lkj1bQ= Subject key identifier: 7D:35:90:AF:47:FB:6A:B2:56:AA:0A:B4:66:EB:05:5A:14:F4:FB:3C Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb Certificate serial: 019AF6F89F52E13C6970E34C517E5CCA7A0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 04:01:20 +0000 Manifest this update: Sun 07 Dec 2025 04:01:20 +0000 Manifest next update: Mon 08 Dec 2025 04:01:20 +0000 Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: a1oiDgSoLXrGRbaHMWSmZP9dtCabAXBh/kEDDUAE47o=) 2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:9f:52:e1:3c:69:70:e3:4c:51:7e:5c:ca:7a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb Validity Not Before: Dec 7 04:01:20 2025 GMT Not After : Dec 8 04:01:20 2025 GMT Subject: CN=7d3590af47fb6ab256aa0ab466eb055a14f4fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:88:ea:95:f1:af:f3:2e:f7:70:48:0f:d2: 2b:e6:ab:13:15:26:35:b2:15:aa:8b:51:fa:f2:03: d5:75:54:2b:51:a4:c7:5c:a0:a5:cf:04:4f:47:e7: 08:dc:f9:c4:ce:8b:65:6d:45:f9:e8:43:d2:65:cf: 2d:76:5d:be:80:61:dd:c2:da:09:77:76:be:e8:17: b9:6b:17:4f:71:69:b7:74:70:2e:9a:a2:75:d6:a7: 45:12:0d:7a:dd:47:43:04:40:47:ce:df:77:bf:8b: 75:78:0e:90:48:b8:aa:cd:05:3d:7c:50:6e:8b:13: 19:76:67:37:ac:13:35:66:60:94:6a:a0:6a:57:76: bf:72:86:77:84:96:9c:b7:45:09:96:0e:e3:ad:8b: 69:2a:51:c7:c9:3e:b3:ef:8e:a6:6d:3c:13:12:74: 7d:a8:64:a7:b2:59:5e:a2:cc:d2:cc:42:8b:60:e7: dd:41:6a:ec:13:6b:e9:b6:fe:f0:a6:f4:d6:d4:61: 89:52:85:0e:2f:81:5a:cf:e4:a3:23:f2:ab:40:a7: 1d:8a:57:3d:2f:c7:f2:d7:8a:79:0e:8b:c0:27:3f: 90:7b:06:a1:d0:a0:b4:60:47:dc:4d:a4:4e:f9:aa: e2:85:c7:d3:eb:72:dc:d1:f8:e8:6b:31:d7:82:c3: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:90:AF:47:FB:6A:B2:56:AA:0A:B4:66:EB:05:5A:14:F4:FB:3C X509v3 Authority Key Identifier: keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:02:5d:62:22:2a:9a:b7:9c:7e:40:8b:28:df:f7:6e:01:0c: 64:82:5f:d2:14:be:de:15:65:39:15:0b:89:96:96:57:36:2e: b6:32:1b:72:c7:70:37:3b:29:5e:47:e8:83:10:a7:bf:de:c0: e8:cb:a1:b2:bb:19:78:b6:98:05:a3:cc:ac:2c:f4:b6:fd:0b: 5a:86:cb:db:88:6b:8a:f3:45:de:9f:ae:0e:7f:ee:84:0f:36: b6:94:d4:fe:71:7f:61:20:63:5c:49:70:78:54:8e:92:e4:28: 0b:a1:44:83:6c:d9:4d:6e:e4:5c:5e:24:c5:e5:74:1a:73:64: 84:4a:d3:e7:ea:a1:7f:0f:a1:f1:40:f6:61:07:82:5a:81:19: c8:cf:92:27:c6:dd:db:07:e2:9d:7c:9e:9f:24:91:30:25:dd: 38:02:33:f1:31:af:e7:98:f1:ee:a1:f9:43:6d:ed:c1:11:ef: 90:43:28:22:69:32:b4:0e:91:18:84:e6:21:97:f9:23:6b:d2: bd:6b:43:04:6b:77:7b:25:e1:1f:7a:71:70:c9:60:e5:29:9a: 7c:93:77:ce:0c:18:7b:3a:ad:98:a8:e5:a3:9c:f7:29:90:6e: 57:81:a5:54:0c:dd:d8:bd:7e:e0:ce:82:cb:58:17:75:98:bf: a9:db:24:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+J9S4TxpcONMUX5cynoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNzRhNzg5NTg3NWNmMmM2Nzg1NDRmNmNlNmY0YjIzOWY0 OTI5ZmIwHhcNMjUxMjA3MDQwMTIwWhcNMjUxMjA4MDQwMTIwWjAzMTEwLwYDVQQD Eyg3ZDM1OTBhZjQ3ZmI2YWIyNTZhYTBhYjQ2NmViMDU1YTE0ZjRmYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OqI6pXxr/Mu93BID9Ir5qsTFSY1 shWqi1H68gPVdVQrUaTHXKClzwRPR+cI3PnEzotlbUX56EPSZc8tdl2+gGHdwtoJ d3a+6Be5axdPcWm3dHAumqJ11qdFEg163UdDBEBHzt93v4t1eA6QSLiqzQU9fFBu ixMZdmc3rBM1ZmCUaqBqV3a/coZ3hJact0UJlg7jrYtpKlHHyT6z746mbTwTEnR9 qGSnslleoszSzEKLYOfdQWrsE2vptv7wpvTW1GGJUoUOL4Faz+SjI/KrQKcdilc9 L8fy14p5DovAJz+Qewah0KC0YEfcTaRO+arihcfT63Lc0fjoazHXgsPunQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH01kK9H+2qyVqoKtGbrBVoU9Ps8MB8GA1UdIwQY MBaAFEB0p4lYdc8sZ4VE9s5vSyOfSSn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUt ZjUyZDYwNjRkZDhiLzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUtZjUyZDYwNjRkZDhi LzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwJdYiIq mrecfkCLKN/3bgEMZIJf0hS+3hVlORULiZaWVzYutjIbcsdwNzspXkfogxCnv97A 6MuhsrsZeLaYBaPMrCz0tv0LWobL24hrivNF3p+uDn/uhA82tpTU/nF/YSBjXElw eFSOkuQoC6FEg2zZTW7kXF4kxeV0GnNkhErT5+qhfw+h8UD2YQeCWoEZyM+SJ8bd 2wfinXyenySRMCXdOAIz8TGv55jx7qH5Q23twRHvkEMoImkytA6RGITmIZf5I2vS vWtDBGt3eyXhH3pxcMlg5SmafJN3zgwYezqtmKjlo5z3KZBuV4GlVAzd2L1+4M6C y1gXdZi/qdskgQ== -----END CERTIFICATE-----Generated at Sun Dec 7 09:45:11 2025 by rpki-client