This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json) Hash identifier: j6q+UPEqGkmbQaPnW3T5uTmo02o4bdJgx7kveI4x1Lg= Subject key identifier: 76:79:30:C9:14:EB:ED:48:A0:0F:36:F7:7C:79:A7:D4:59:E3:8A:D4 Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Certificate serial: 019AF38A0CF82D6E31FDEE4FDA32A8BEA1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:42 +0000 Manifest this update: Sat 06 Dec 2025 12:01:42 +0000 Manifest next update: Sun 07 Dec 2025 12:01:42 +0000 Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: W4+++tRMqZNMg10v3Rl3d3vBpnPAdvTwpzwOBJHzdYA=) 2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=) 3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0c:f8:2d:6e:31:fd:ee:4f:da:32:a8:be:a1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Validity Not Before: Dec 6 12:01:42 2025 GMT Not After : Dec 7 12:01:42 2025 GMT Subject: CN=767930c914ebed48a00f36f77c79a7d459e38ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:0e:dc:00:af:6e:0c:c0:7f:55:22:8a:b1: 72:98:ba:44:fa:70:cd:f8:af:95:0c:0d:0c:28:ae: f6:41:94:59:0c:02:c6:39:d4:c5:a0:c4:d0:28:86: 87:3f:a9:36:43:91:79:c9:1f:c4:d8:5d:45:73:12: da:bd:f9:9f:df:0c:fe:27:af:3e:36:8b:f4:43:d8: 41:3c:6d:d8:37:59:76:c1:a6:3b:68:86:89:0e:23: af:42:1b:7a:e4:80:b7:03:c1:08:0b:8e:6e:8e:17: 91:c2:1b:96:3f:d9:75:14:5e:39:aa:a2:48:6b:33: 2c:fb:0f:b9:af:a2:f0:cb:f0:ef:01:70:b6:76:f2: 90:c7:a6:19:b1:67:56:a9:f5:17:fb:42:f7:67:9f: 08:19:e6:6a:38:ca:36:bf:c5:6f:33:b3:75:7a:07: 1e:d8:a1:b7:0a:7b:78:5f:37:f0:9f:32:87:95:83: d7:c3:46:dc:8d:d2:18:df:ea:ad:4d:b0:94:29:4a: 65:33:03:56:58:5f:83:d6:d3:99:de:8b:45:00:bc: b6:b0:29:e8:2d:c7:69:07:98:aa:7e:27:ee:b6:88: 6d:00:b2:96:da:05:95:3a:04:85:7b:9a:13:6a:9d: 3b:95:ab:ce:fe:b6:ca:5c:24:8a:b8:2d:88:d1:b4: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:79:30:C9:14:EB:ED:48:A0:0F:36:F7:7C:79:A7:D4:59:E3:8A:D4 X509v3 Authority Key Identifier: keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c1:59:bc:2d:3b:5c:06:94:70:e0:2f:67:f6:f9:d7:f0:16: 9f:bc:35:0f:99:7e:41:10:db:d1:dc:93:15:5a:35:66:95:dc: 63:55:70:6f:a6:8b:70:28:0c:19:17:d5:2d:9e:6f:a2:2f:cb: f9:17:c6:62:21:ef:7c:9a:75:45:af:fb:5e:cb:45:a1:37:26: 2b:4a:fa:96:fd:b5:89:45:6e:aa:89:d6:66:03:07:2c:95:b1: c2:ad:c0:a7:9f:40:cf:28:14:22:60:17:4d:be:97:99:d7:8b: d2:1e:ed:53:80:4c:3c:b5:46:49:3f:52:37:9b:63:41:9e:ad: 34:ea:66:45:83:64:60:a6:a0:b9:31:2d:a7:9e:17:72:51:15: 8f:ea:3c:c3:4a:83:86:da:d4:d8:bf:7b:bf:b1:5d:94:38:11: d8:5f:56:9b:5a:21:fd:ef:78:28:29:4d:6f:2c:b8:81:69:3f: 39:ce:1d:61:7d:e4:27:a7:b9:3b:82:56:54:38:ac:34:19:8b: 5a:d4:4b:6e:2d:b9:93:63:1f:0f:03:08:da:94:2d:e6:7b:3c: c3:39:50:fb:d2:55:08:3a:6f:45:5b:b5:0f:f3:2f:be:4e:2b: ca:7d:d9:c5:cf:3f:76:5d:b1:c1:8d:4f:1a:5a:40:11:9a:a5: 73:50:36:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigz4LW4x/e5P2jKovqH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3 OTBjZjcwHhcNMjUxMjA2MTIwMTQyWhcNMjUxMjA3MTIwMTQyWjAzMTEwLwYDVQQD Eyg3Njc5MzBjOTE0ZWJlZDQ4YTAwZjM2Zjc3Yzc5YTdkNDU5ZTM4YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WsO3ACvbgzAf1UiirFymLpE+nDN +K+VDA0MKK72QZRZDALGOdTFoMTQKIaHP6k2Q5F5yR/E2F1FcxLavfmf3wz+J68+ Nov0Q9hBPG3YN1l2waY7aIaJDiOvQht65IC3A8EIC45ujheRwhuWP9l1FF45qqJI azMs+w+5r6Lwy/DvAXC2dvKQx6YZsWdWqfUX+0L3Z58IGeZqOMo2v8VvM7N1egce 2KG3Cnt4XzfwnzKHlYPXw0bcjdIY3+qtTbCUKUplMwNWWF+D1tOZ3otFALy2sCno LcdpB5iqfifutohtALKW2gWVOgSFe5oTap07lavO/rbKXCSKuC2I0bQZ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ5MMkU6+1IoA8293x5p9RZ44rUMB8GA1UdIwQY MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0 LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsFZvC07 XAaUcOAvZ/b51/AWn7w1D5l+QRDb0dyTFVo1ZpXcY1Vwb6aLcCgMGRfVLZ5voi/L +RfGYiHvfJp1Ra/7XstFoTcmK0r6lv21iUVuqonWZgMHLJWxwq3Ap59AzygUImAX Tb6XmdeL0h7tU4BMPLVGST9SN5tjQZ6tNOpmRYNkYKaguTEtp54XclEVj+o8w0qD htrU2L97v7FdlDgR2F9Wm1oh/e94KClNbyy4gWk/Oc4dYX3kJ6e5O4JWVDisNBmL WtRLbi25k2MfDwMI2pQt5ns8wzlQ+9JVCDpvRVu1D/Mvvk4ryn3Zxc8/dl2xwY1P GlpAEZqlc1A2Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:05 2025 by rpki-client