This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json) Hash identifier: o9Km0Xf2Wzk2w2Ml+muMgYVbHGwdsweJcmQTEdVp+LU= Subject key identifier: CB:37:CF:E1:87:B0:BA:62:D1:CB:F8:75:B3:4B:3F:BB:67:81:74:C0 Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Certificate serial: 019AF2ADB723A7556CE8A63821CE8AB326AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft Manifest number: 130C Signing time: Sat 06 Dec 2025 08:01:02 +0000 Manifest this update: Sat 06 Dec 2025 08:01:02 +0000 Manifest next update: Sun 07 Dec 2025 08:01:02 +0000 Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=) 2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: lWaDRJ8VCBa4mcvOc37H2MCljwl89Ai83VwxbVibZgI=) 3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b7:23:a7:55:6c:e8:a6:38:21:ce:8a:b3:26:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Validity Not Before: Dec 6 08:01:02 2025 GMT Not After : Dec 7 08:01:02 2025 GMT Subject: CN=cb37cfe187b0ba62d1cbf875b34b3fbb678174c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:cd:ed:0d:b4:ab:c2:c9:f6:fc:70:31:86: 43:ad:81:1e:ec:02:65:b7:17:30:5a:c9:41:be:c1: 4e:92:59:4f:92:8c:8e:f4:3a:0c:51:95:85:e7:43: 54:1d:23:cc:1f:bc:56:34:d4:34:5a:fb:05:af:0e: 3f:32:ce:c1:5a:5c:f7:94:11:aa:5c:b8:54:e3:ea: d1:00:35:bc:a8:1c:53:74:b7:12:9e:fc:9b:1c:1f: 88:b8:aa:71:19:2e:2c:53:95:d7:41:bf:e1:cc:a3: bd:a4:c8:46:31:7e:28:10:f5:81:db:52:f9:e6:d5: b7:1a:83:de:56:c8:3d:7f:b5:97:99:bc:61:e1:8b: 30:01:87:c3:4b:02:49:49:24:92:fb:f1:49:35:15: 3f:f1:95:ac:e0:cc:5a:fa:19:d3:0c:57:3a:b7:68: 2c:cc:a2:0b:05:a6:de:36:ad:4c:27:e7:5d:3e:c2: c2:da:18:e4:02:5a:85:b6:dc:50:c8:ef:1f:ab:93: b5:9c:d6:46:74:8d:6c:6a:f0:2b:33:c9:86:82:a4: e6:66:cc:88:64:79:2b:9d:fa:11:66:b2:b1:e5:b0: 90:8f:1c:ea:14:1f:d0:48:f3:da:fd:bb:f4:e5:19: a3:21:af:15:9f:21:f3:af:6c:36:e5:29:79:83:b8: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:CF:E1:87:B0:BA:62:D1:CB:F8:75:B3:4B:3F:BB:67:81:74:C0 X509v3 Authority Key Identifier: keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:71:60:70:d8:5e:db:78:1d:dc:af:fa:d8:9d:d4:1e:2d:b4: d6:a1:69:34:7b:cc:1c:26:75:9e:c5:34:b1:2c:63:db:0a:2d: 46:01:ab:75:aa:a0:fc:db:9c:f0:6b:86:8e:98:9c:35:e1:8b: 40:ba:e0:d7:20:31:b0:a6:50:27:18:5e:dc:15:22:3d:a5:a7: 28:08:84:cd:19:52:49:b2:b1:5c:de:d2:cb:45:4b:41:87:47: 8d:79:26:26:e0:f1:f8:17:14:18:27:4f:75:6f:24:3c:12:44: c9:bd:73:b3:87:a6:74:e5:7a:e7:15:76:c8:be:5e:4c:8b:2a: 85:bd:74:7a:e2:de:35:4d:9e:ad:33:b3:e9:15:25:42:a8:4a: ae:92:70:a2:fe:c6:7d:60:5f:76:0d:45:39:09:13:5b:92:21: 2c:46:6a:f5:d4:f9:fa:fc:83:5e:e1:1d:72:6e:d4:11:45:18: 72:b2:14:1e:b9:db:12:72:b2:c3:43:98:7f:cb:b7:bd:68:da: 2f:60:47:62:68:c2:0a:9c:4e:df:17:7e:5d:6b:d4:89:ad:04: 85:46:03:c9:5a:61:71:64:88:77:67:0a:69:a7:1a:ae:5f:b4: c8:ef:76:ef:c6:9b:77:41:e6:48:0a:6e:2d:86:2e:43:ac:32: 6f:dd:1b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbcjp1Vs6KY4Ic6KsyauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk YTQ3ZDcwHhcNMjUxMjA2MDgwMTAyWhcNMjUxMjA3MDgwMTAyWjAzMTEwLwYDVQQD EyhjYjM3Y2ZlMTg3YjBiYTYyZDFjYmY4NzViMzRiM2ZiYjY3ODE3NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnTN7Q20q8LJ9vxwMYZDrYEe7AJl txcwWslBvsFOkllPkoyO9DoMUZWF50NUHSPMH7xWNNQ0WvsFrw4/Ms7BWlz3lBGq XLhU4+rRADW8qBxTdLcSnvybHB+IuKpxGS4sU5XXQb/hzKO9pMhGMX4oEPWB21L5 5tW3GoPeVsg9f7WXmbxh4YswAYfDSwJJSSSS+/FJNRU/8ZWs4Mxa+hnTDFc6t2gs zKILBabeNq1MJ+ddPsLC2hjkAlqFttxQyO8fq5O1nNZGdI1savArM8mGgqTmZsyI ZHkrnfoRZrKx5bCQjxzqFB/QSPPa/bv05RmjIa8VnyHzr2w25Sl5g7jydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs3z+GHsLpi0cv4dbNLP7tngXTAMB8GA1UdIwQY MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHFgcNhe 23gd3K/62J3UHi201qFpNHvMHCZ1nsU0sSxj2wotRgGrdaqg/Nuc8GuGjpicNeGL QLrg1yAxsKZQJxhe3BUiPaWnKAiEzRlSSbKxXN7Sy0VLQYdHjXkmJuDx+BcUGCdP dW8kPBJEyb1zs4emdOV65xV2yL5eTIsqhb10euLeNU2erTOz6RUlQqhKrpJwov7G fWBfdg1FOQkTW5IhLEZq9dT5+vyDXuEdcm7UEUUYcrIUHrnbEnKyw0OYf8u3vWja L2BHYmjCCpxO3xd+XWvUia0EhUYDyVphcWSId2cKaacarl+0yO9278abd0HmSApu LYYuQ6wyb90b8A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:38 2025 by rpki-client