This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json) Hash identifier: QIj7TvQ2uZgQ5Z4y84Qe9elDzmv4flHDSeEZxjxACBA= Subject key identifier: 77:31:6F:19:C7:54:69:A2:D6:92:E9:3E:F5:AE:69:C5:00:E5:16:8C Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce Certificate serial: 019AF653683D54CDC3A923F167E4A7863C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft Manifest number: 0677 Signing time: Sun 07 Dec 2025 01:00:52 +0000 Manifest this update: Sun 07 Dec 2025 01:00:52 +0000 Manifest next update: Mon 08 Dec 2025 01:00:52 +0000 Files and hashes: 1: 4PjPPpWKgAtzAAOasr7gIk0JbPI.roa (hash: yiKX1aQ5yWrVl7HwLmjfK1M9G+FpWFiXbyU5qVlLbDY=) 2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: 9tztdhc7SbPKkZlPPKYme6bXfmuFASydttWry0AumF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:68:3d:54:cd:c3:a9:23:f1:67:e4:a7:86:3c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce Validity Not Before: Dec 7 01:00:52 2025 GMT Not After : Dec 8 01:00:52 2025 GMT Subject: CN=77316f19c75469a2d692e93ef5ae69c500e5168c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:66:5b:dd:4d:dd:0c:c8:e6:c5:1d:96:4f: 79:07:38:5b:69:54:9e:ec:0d:ed:8c:44:f9:19:ca: 5f:a0:28:a9:6a:bc:6a:78:43:b0:44:a0:d7:8c:e2: 78:c1:19:99:fc:6b:8b:4e:26:e1:3a:56:5e:dc:62: f9:39:4b:0f:d0:83:e5:84:68:35:5a:30:48:53:dc: 9f:ef:57:b1:e3:0e:81:80:84:2d:ef:7a:a7:53:d8: 32:3b:85:5b:53:0c:64:78:96:64:1e:75:81:65:85: e0:4c:ac:8d:c5:17:85:d1:5c:66:93:68:94:dd:bd: 1f:f3:2f:53:b5:9b:3c:43:32:33:68:d2:ef:83:38: c1:fd:a8:95:39:0f:a1:2d:24:cb:44:90:1d:09:02: 93:08:ab:3e:4f:43:1f:01:af:e2:1d:f8:9a:26:9e: 51:0c:fb:ed:6c:ea:c9:78:be:9e:b1:c2:08:72:bd: c4:bc:09:65:28:5a:ba:27:38:fd:b4:33:da:dc:dc: 58:39:2e:93:2e:99:f7:d3:c3:ed:d6:45:46:63:48: 50:84:48:cc:20:6c:55:92:d2:a6:82:56:9f:0d:53: 0e:20:a9:09:4f:a5:13:c7:30:ff:10:16:b8:55:1d: 5a:89:62:9f:e2:3f:c9:1f:02:cc:89:e6:af:9a:f6: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:31:6F:19:C7:54:69:A2:D6:92:E9:3E:F5:AE:69:C5:00:E5:16:8C X509v3 Authority Key Identifier: keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:57:16:59:82:3e:5a:27:15:6c:3e:03:cd:9a:e8:fd:63:c0: 09:79:88:11:ca:7b:c1:07:96:0f:30:af:20:e2:f1:78:a4:a3: 08:ab:7c:85:59:e5:5f:2b:6b:f8:37:c6:0c:17:5b:42:50:87: 6d:d5:e2:08:49:e6:0f:ca:23:02:8f:fb:2c:c3:d1:6c:26:50: 5a:e1:04:75:45:ec:4a:7f:ac:d7:5c:4c:88:32:00:d4:08:90: 29:0c:03:20:e9:31:01:a0:58:8e:cc:8e:7d:76:90:1a:cd:2d: cb:65:94:b5:d3:54:71:52:09:23:2a:e9:69:09:61:91:0a:42: 24:15:98:d0:a2:70:76:50:a4:23:3a:14:79:97:e2:8f:f7:13: 27:41:8c:d5:48:1a:77:c9:55:ad:30:57:23:1e:6a:82:40:33: f1:b9:7a:a9:47:d7:be:b2:83:dd:5b:07:9d:bd:fc:3f:65:22: 23:50:bb:52:4b:91:c7:86:c1:e5:02:82:2d:df:da:6e:02:d1: 5a:84:ac:0c:f3:12:70:bc:39:b3:0e:8f:8a:91:7a:3d:1c:e2: 6b:4e:65:44:e8:4b:60:16:f2:7e:58:d5:10:a3:1b:f9:72:36: 47:91:42:26:37:5b:e7:8c:e9:4c:f7:19:29:87:6e:f4:e7:31: 1d:80:18:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2g9VM3DqSPxZ+SnhjwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2YwOGJiYWZmYTQxNjE4NDMyMDNhOGE3NTdhYjZlOTU0 NmIwY2UwHhcNMjUxMjA3MDEwMDUyWhcNMjUxMjA4MDEwMDUyWjAzMTEwLwYDVQQD Eyg3NzMxNmYxOWM3NTQ2OWEyZDY5MmU5M2VmNWFlNjljNTAwZTUxNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjxmW91N3QzI5sUdlk95BzhbaVSe 7A3tjET5GcpfoCiparxqeEOwRKDXjOJ4wRmZ/GuLTibhOlZe3GL5OUsP0IPlhGg1 WjBIU9yf71ex4w6BgIQt73qnU9gyO4VbUwxkeJZkHnWBZYXgTKyNxReF0Vxmk2iU 3b0f8y9TtZs8QzIzaNLvgzjB/aiVOQ+hLSTLRJAdCQKTCKs+T0MfAa/iHfiaJp5R DPvtbOrJeL6escIIcr3EvAllKFq6Jzj9tDPa3NxYOS6TLpn308Pt1kVGY0hQhEjM IGxVktKmglafDVMOIKkJT6UTxzD/EBa4VR1aiWKf4j/JHwLMieavmvZUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcxbxnHVGmi1pLpPvWuacUA5RaMMB8GA1UdIwQY MBaAFEA/CLuv+kFhhDIDqKdXq26VRrDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMDY4MzItZGJkZi00Zjg3LTk5Yjgt MzhkOGE3OGE0ODYyLzEvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9kMDY4MzItZGJkZi00Zjg3LTk5YjgtMzhkOGE3OGE0ODYy LzEvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVcWWYI+ WicVbD4DzZro/WPACXmIEcp7wQeWDzCvIOLxeKSjCKt8hVnlXytr+DfGDBdbQlCH bdXiCEnmD8ojAo/7LMPRbCZQWuEEdUXsSn+s11xMiDIA1AiQKQwDIOkxAaBYjsyO fXaQGs0ty2WUtdNUcVIJIyrpaQlhkQpCJBWY0KJwdlCkIzoUeZfij/cTJ0GM1Uga d8lVrTBXIx5qgkAz8bl6qUfXvrKD3VsHnb38P2UiI1C7UkuRx4bB5QKCLd/abgLR WoSsDPMScLw5sw6PipF6PRzia05lROhLYBbyfljVEKMb+XI2R5FCJjdb54zpTPcZ KYdu9OcxHYAYsA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:31:53 2025 by rpki-client