This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json) Hash identifier: H1PobKrJvGe1klxJh8SfR95pMCX4xBSgXOff9C4hLZY= Subject key identifier: 14:40:B6:C5:E2:AC:DA:29:A5:FC:99:32:D2:2A:0D:FE:0A:2E:7A:BD Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc Certificate serial: 019AF1D1DDEB38268E02525BE0EF6A01B3AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft Manifest number: 033F Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: HZwnv8fUKyffEbMxYs4nnjd4l2HpvKUQ6rSc8rKBchg=) 2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dd:eb:38:26:8e:02:52:5b:e0:ef:6a:01:b3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=1440b6c5e2acda29a5fc9932d22a0dfe0a2e7abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:ba:d4:ab:b4:9c:b8:75:25:31:86:4c:be: 30:d4:1c:ac:73:ae:bb:90:91:e4:0b:de:b7:a2:6f: be:96:23:a2:3d:78:6f:29:d3:79:b8:8f:eb:6d:e8: 9b:b5:cc:8f:be:5f:71:17:2e:9b:55:43:ca:16:97: dc:9a:17:ba:ae:9b:23:4c:b6:a9:fb:9e:ae:a5:35: 75:8a:70:05:1c:38:3b:a3:8f:2f:ca:5a:75:5f:eb: f0:7e:4e:e9:be:61:25:b3:35:df:68:5a:2d:07:64: 39:97:88:bf:f5:12:69:fb:78:b5:99:55:27:3e:19: 75:6f:40:f8:2d:e9:6e:fa:0a:9e:70:35:2d:b7:10: 0b:42:d8:3d:83:70:d5:f2:2a:71:98:4e:23:dd:39: e9:75:db:f5:75:ce:68:7b:ee:8c:1f:6a:21:2a:d7: 1f:3b:96:f5:b4:01:f0:bc:ed:a5:ca:d4:db:01:37: c4:b9:6a:2b:d3:1b:eb:97:3a:40:a6:62:56:15:5e: 36:7a:8f:1b:7b:b2:ce:df:94:90:80:03:77:aa:c8: 04:8c:fc:52:79:dd:17:80:5f:cb:ad:29:14:b2:af: 40:44:18:a7:b1:30:6e:9a:2e:2d:70:cb:8a:23:c8: 6e:a2:a1:ae:3e:9b:e3:33:00:ff:32:da:ed:d9:34: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:40:B6:C5:E2:AC:DA:29:A5:FC:99:32:D2:2A:0D:FE:0A:2E:7A:BD X509v3 Authority Key Identifier: keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:68:ef:b2:7e:1f:89:9b:6e:f3:6c:6c:b3:50:ae:aa:35:8f: 01:06:59:5c:a1:24:e5:3a:20:07:82:fd:6b:d5:e6:d6:18:3c: 34:4a:74:75:a3:7a:fd:c3:12:c8:0d:7a:d8:30:71:0d:9b:e3: e8:48:52:94:95:b4:25:17:1d:46:72:2b:21:aa:53:14:47:07: e3:ac:11:2b:e6:9b:24:58:ac:a0:ac:e5:b6:ef:96:b3:13:ad: 07:04:53:ba:18:3c:37:c2:85:90:f9:60:43:04:49:4f:b6:40: b3:2f:8b:52:6a:01:17:0c:b9:d8:20:b3:f8:0a:4b:77:a1:13: c2:b2:53:08:41:ba:4e:52:32:c1:eb:eb:30:f5:b9:65:bb:2f: fd:ad:77:37:82:44:47:1e:80:20:fd:62:aa:4f:ce:0e:e6:a6: c3:02:95:2c:61:d7:45:a6:17:27:6c:02:f7:71:8f:36:b9:ce: c1:fa:7e:35:8e:bf:c5:7d:eb:14:29:5e:a5:da:31:4e:21:0a: ef:a2:e8:97:8a:29:40:3e:0d:74:a0:7c:9a:8b:2b:8d:7a:2f: b9:2c:d3:ad:43:2c:06:ea:ad:2b:48:25:21:53:89:68:a1:59: 3d:70:9d:09:18:f0:be:a1:71:eb:ce:85:f6:cc:95:41:7f:7f: 1f:37:f9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d3rOCaOAlJb4O9qAbOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTY4OTJkMDdhMDA5MDZiMWI3YWQ0YmY4NTBkOGJmODA4 ODZmYmMwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD EygxNDQwYjZjNWUyYWNkYTI5YTVmYzk5MzJkMjJhMGRmZTBhMmU3YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxW61Ku0nLh1JTGGTL4w1Bysc667 kJHkC963om++liOiPXhvKdN5uI/rbeibtcyPvl9xFy6bVUPKFpfcmhe6rpsjTLap +56upTV1inAFHDg7o48vylp1X+vwfk7pvmElszXfaFotB2Q5l4i/9RJp+3i1mVUn Phl1b0D4Lelu+gqecDUttxALQtg9g3DV8ipxmE4j3Tnpddv1dc5oe+6MH2ohKtcf O5b1tAHwvO2lytTbATfEuWor0xvrlzpApmJWFV42eo8be7LO35SQgAN3qsgEjPxS ed0XgF/LrSkUsq9ARBinsTBumi4tcMuKI8huoqGuPpvjMwD/Mtrt2TQP/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRAtsXirNoppfyZMtIqDf4KLnq9MB8GA1UdIwQY MBaAFEGWiS0HoAkGsbetS/hQ2L+AiG+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEt ZGVlMzMzM2MzNjdiLzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEtZGVlMzMzM2MzNjdi LzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmjvsn4f iZtu82xss1CuqjWPAQZZXKEk5TogB4L9a9Xm1hg8NEp0daN6/cMSyA162DBxDZvj 6EhSlJW0JRcdRnIrIapTFEcH46wRK+abJFisoKzltu+WsxOtBwRTuhg8N8KFkPlg QwRJT7ZAsy+LUmoBFwy52CCz+ApLd6ETwrJTCEG6TlIywevrMPW5Zbsv/a13N4JE Rx6AIP1iqk/ODuamwwKVLGHXRaYXJ2wC93GPNrnOwfp+NY6/xX3rFClepdoxTiEK 76Lol4opQD4NdKB8mosrjXovuSzTrUMsBuqtK0glIVOJaKFZPXCdCRjwvqFx686F 9syVQX9/Hzf5wg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:31 2025 by rpki-client