This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json) Hash identifier: Rg0Wk0g4o14orpCuFVfhbW74YA78F31lfFyY7U8Dg9Q= Subject key identifier: A4:E2:EA:41:7D:0A:7D:19:AD:A7:F6:CB:50:8D:E0:CF:20:86:98:77 Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Certificate serial: 019AF31B43894104C83CBE91B3778EE3CF43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=) 2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: jDnXXTT6/nrOvSA7nMxb60E3bI2T36PVSpTDiLgpHjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:43:89:41:04:c8:3c:be:91:b3:77:8e:e3:cf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=a4e2ea417d0a7d19ada7f6cb508de0cf20869877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:a4:3a:39:d4:86:b1:1f:18:66:55:5b:fe: d8:7b:68:0e:2f:db:bc:1d:32:34:33:6f:a2:ae:ea: db:77:b0:56:ec:16:d0:b0:d9:f3:ff:09:4e:6c:db: 25:f9:c3:3d:f8:5f:54:37:36:b6:58:e4:8a:f3:a7: 7b:d7:da:0b:49:36:37:a1:bd:bd:d9:38:19:79:bc: de:c4:1a:c2:10:d0:56:c2:4d:6b:1d:c6:2a:a6:c3: ad:ea:e3:78:2e:e9:94:94:b7:d9:dd:bd:aa:b7:7b: 31:0f:c2:32:72:a8:2b:94:a2:4d:27:0d:46:fa:d4: 90:11:19:0d:bf:ed:6b:f4:d1:68:f0:6e:94:a9:26: 51:09:92:15:b5:68:ff:46:fd:d8:b0:6f:1d:93:26: 39:cf:72:c5:9b:7d:52:af:ce:ce:d5:0a:72:ee:e4: da:53:b6:02:78:43:9e:c2:be:21:d9:03:34:44:8a: 9b:a2:69:57:6a:e3:4b:f4:7f:74:b5:35:07:0c:4c: 1d:1a:ce:ec:1f:12:7d:79:d9:80:96:17:6b:45:97: 5c:f2:96:26:96:28:87:f1:e1:f7:71:0b:b5:ff:aa: 3d:f3:f5:2c:1f:8a:38:46:48:4c:b4:d4:b2:49:bf: f2:3e:17:b4:43:84:9a:2b:31:d2:ff:b0:7a:26:14: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:EA:41:7D:0A:7D:19:AD:A7:F6:CB:50:8D:E0:CF:20:86:98:77 X509v3 Authority Key Identifier: keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e9:75:90:4a:8e:f1:5e:a3:a7:91:c7:1d:7d:68:47:e9:cf: 54:91:1d:17:04:c2:19:e7:a9:81:10:21:b3:20:da:8e:ca:0f: 51:e1:59:04:09:90:e7:0a:8b:ca:a8:e9:27:61:20:05:56:99: 8d:df:12:ca:8c:79:59:64:cd:ec:ec:e0:ee:a2:eb:06:a8:e9: 61:4a:27:ac:4a:eb:8c:c5:e3:85:a2:e3:a0:d7:9e:48:6d:1a: f2:43:55:a4:ce:e5:36:09:c6:5e:e9:18:ea:7b:cd:ea:d5:ab: 76:e8:95:04:93:4f:d0:96:db:b5:05:f0:77:de:47:c7:e9:f0: f7:a1:66:75:fe:3b:54:10:e2:6d:fa:7a:cf:d4:50:57:66:cd: 73:5a:c8:c2:69:39:55:30:9d:52:5a:6e:ca:68:9f:ed:59:29: 13:8f:d0:9c:5c:2b:0a:98:0e:1d:50:7b:86:ec:b7:f0:37:00: d5:ea:1d:20:0c:fe:83:00:13:ad:77:51:44:42:12:f5:5a:8a: aa:38:6b:a5:3c:be:55:e3:d4:75:17:f4:db:28:d4:a4:30:e9: e1:8e:01:59:6f:31:8e:8c:f1:70:7f:0e:8f:00:69:2e:f7:69: 85:49:2f:95:e0:28:7d:ee:67:e8:1f:94:14:ee:f4:0c:45:20: 5e:4a:84:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0OJQQTIPL6Rs3eO489DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi YzY5NzgwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD EyhhNGUyZWE0MTdkMGE3ZDE5YWRhN2Y2Y2I1MDhkZTBjZjIwODY5ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uSkOjnUhrEfGGZVW/7Ye2gOL9u8 HTI0M2+irurbd7BW7BbQsNnz/wlObNsl+cM9+F9UNza2WOSK86d719oLSTY3ob29 2TgZebzexBrCENBWwk1rHcYqpsOt6uN4LumUlLfZ3b2qt3sxD8IycqgrlKJNJw1G +tSQERkNv+1r9NFo8G6UqSZRCZIVtWj/Rv3YsG8dkyY5z3LFm31Sr87O1Qpy7uTa U7YCeEOewr4h2QM0RIqbomlXauNL9H90tTUHDEwdGs7sHxJ9edmAlhdrRZdc8pYm liiH8eH3cQu1/6o98/UsH4o4RkhMtNSySb/yPhe0Q4SaKzHS/7B6JhT0tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTi6kF9Cn0Zraf2y1CN4M8ghph3MB8GA1UdIwQY MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1 LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaul1kEqO 8V6jp5HHHX1oR+nPVJEdFwTCGeepgRAhsyDajsoPUeFZBAmQ5wqLyqjpJ2EgBVaZ jd8Syox5WWTN7Ozg7qLrBqjpYUonrErrjMXjhaLjoNeeSG0a8kNVpM7lNgnGXukY 6nvN6tWrduiVBJNP0JbbtQXwd95Hx+nw96Fmdf47VBDibfp6z9RQV2bNc1rIwmk5 VTCdUlpuymif7VkpE4/QnFwrCpgOHVB7huy38DcA1eodIAz+gwATrXdRREIS9VqK qjhrpTy+VePUdRf02yjUpDDp4Y4BWW8xjozxcH8OjwBpLvdphUkvleAofe5n6B+U FO70DEUgXkqExw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:37 2025 by rpki-client