This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json) Hash identifier: +Owv/57a+4wDMmvdPrNATkH7hbbImGb1h3Q9EEcYCSc= Subject key identifier: 3C:FC:FB:91:6F:63:4B:3D:25:57:7A:73:02:93:22:6B:06:65:23:B3 Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Certificate serial: 019AF3897DC471580CCAC96482FBBA9066C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 12:01:05 +0000 Manifest this update: Sat 06 Dec 2025 12:01:05 +0000 Manifest next update: Sun 07 Dec 2025 12:01:05 +0000 Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=) 2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: QJzYInbsb07UBqnBBP55Ng9YPT1rphM9C2k2xQvE3zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7d:c4:71:58:0c:ca:c9:64:82:fb:ba:90:66:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Validity Not Before: Dec 6 12:01:05 2025 GMT Not After : Dec 7 12:01:05 2025 GMT Subject: CN=3cfcfb916f634b3d25577a730293226b066523b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:57:ad:fe:e9:93:d7:24:0f:3c:1e:f2:f9: 40:12:b0:7c:4d:13:3f:53:27:19:a3:9d:85:b4:00: 4b:22:61:09:14:15:c1:f7:db:6d:54:be:be:33:78: 32:8c:9e:93:37:3e:ce:f3:cb:f0:7f:34:34:3e:83: ec:da:47:96:72:23:4b:4d:86:4b:06:e8:6a:49:85: 88:ce:9f:aa:88:1e:0e:2f:74:d5:31:27:ab:e8:ed: 78:53:e7:5f:0d:f5:aa:cf:63:0b:23:09:00:87:b1: e3:23:ca:2f:4d:c5:8f:00:15:ec:ef:67:8d:15:0f: f5:18:1d:60:e3:d8:7a:20:ab:1a:ec:2c:f2:56:0f: 0e:6f:e9:8a:bd:85:f7:dd:6d:82:ad:19:5a:1b:80: ac:f4:6d:53:87:b9:e1:1e:8b:78:5d:23:ec:86:a9: 04:c3:dd:a6:e5:22:32:52:d2:50:f8:5e:1e:5a:a0: b5:b5:e6:a4:47:00:6c:f0:8d:69:ec:07:b4:c3:35: fd:79:d7:89:fe:a9:b5:52:e0:d5:0d:f4:c9:9e:36: 2a:52:90:27:90:ad:96:9f:03:d3:a7:fb:93:67:fb: 40:28:e6:c9:9f:53:de:63:b1:13:5e:aa:d6:29:2c: cd:7f:65:76:f3:ae:12:e8:ca:8f:a5:b0:61:c1:a6: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:FB:91:6F:63:4B:3D:25:57:7A:73:02:93:22:6B:06:65:23:B3 X509v3 Authority Key Identifier: keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:18:7b:5a:73:24:31:11:36:33:3f:31:25:0b:c9:10:12:b8: 65:60:aa:82:94:19:23:01:99:ec:f8:69:bd:aa:c9:99:ba:f9: 1f:76:cc:ae:29:9b:b7:e9:98:7d:e5:78:2f:6c:34:00:04:d1: 5b:0d:03:af:9c:59:8a:c7:e0:b5:1c:d5:13:55:89:ac:c1:a1: 7c:2f:b7:2a:6d:59:8b:b1:d0:a3:18:49:07:88:da:bf:28:6d: 60:02:33:8b:ab:b0:e4:34:3c:e1:9a:45:7b:3b:bc:53:55:f4: 51:ba:48:2d:ee:14:8d:17:5f:ce:2a:c2:28:da:7c:46:38:40: 95:a5:1d:ed:03:34:75:a2:6e:2e:06:b9:34:6b:d1:79:f5:f9: 8f:88:80:64:57:58:dc:79:67:30:9a:8c:a9:f4:57:cb:98:79: 6e:1d:26:e8:ec:f5:0c:38:45:ea:4d:08:c9:bc:73:02:be:6f: 3c:ad:6b:06:87:eb:4d:02:f7:d7:a9:43:63:1a:4d:27:80:20: 17:6a:da:a2:9b:b0:3b:9c:bf:ee:67:1f:32:5c:f3:4c:ca:95: 61:10:3e:bc:96:99:f6:c7:62:c4:1c:e2:a9:15:b7:62:2b:82: 0b:57:fd:87:15:d7:53:cb:73:c0:c9:bd:e3:fd:28:44:69:fc: d7:bd:7c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziX3EcVgMyslkgvu6kGbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw MGQ2ODQwHhcNMjUxMjA2MTIwMTA1WhcNMjUxMjA3MTIwMTA1WjAzMTEwLwYDVQQD EygzY2ZjZmI5MTZmNjM0YjNkMjU1NzdhNzMwMjkzMjI2YjA2NjUyM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcpXrf7pk9ckDzwe8vlAErB8TRM/ UycZo52FtABLImEJFBXB99ttVL6+M3gyjJ6TNz7O88vwfzQ0PoPs2keWciNLTYZL BuhqSYWIzp+qiB4OL3TVMSer6O14U+dfDfWqz2MLIwkAh7HjI8ovTcWPABXs72eN FQ/1GB1g49h6IKsa7CzyVg8Ob+mKvYX33W2CrRlaG4Cs9G1Th7nhHot4XSPshqkE w92m5SIyUtJQ+F4eWqC1teakRwBs8I1p7Ae0wzX9edeJ/qm1UuDVDfTJnjYqUpAn kK2WnwPTp/uTZ/tAKObJn1PeY7ETXqrWKSzNf2V2864S6MqPpbBhwabejwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz8+5FvY0s9JVd6cwKTImsGZSOzMB8GA1UdIwQY MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4 LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxh7WnMk MRE2Mz8xJQvJEBK4ZWCqgpQZIwGZ7PhpvarJmbr5H3bMrimbt+mYfeV4L2w0AATR Ww0Dr5xZisfgtRzVE1WJrMGhfC+3Km1Zi7HQoxhJB4javyhtYAIzi6uw5DQ84ZpF ezu8U1X0UbpILe4UjRdfzirCKNp8RjhAlaUd7QM0daJuLga5NGvRefX5j4iAZFdY 3HlnMJqMqfRXy5h5bh0m6Oz1DDhF6k0IybxzAr5vPK1rBofrTQL316lDYxpNJ4Ag F2raopuwO5y/7mcfMlzzTMqVYRA+vJaZ9sdixBziqRW3YiuCC1f9hxXXU8tzwMm9 4/0oRGn81718bA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:18 2025 by rpki-client