This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json) Hash identifier: vcfQCv5MiGavDi9lkPHRniQ/NXHMGPL0sEwg5VIsRR4= Subject key identifier: 40:53:55:74:13:9D:0C:C0:C8:E8:7C:5C:22:DD:56:34:2F:75:85:1C Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16 Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16 Certificate serial: 019AF3F78C3EB49ECAB54EC48741EC746CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=) 2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: h2B3wHUJ6fMSER8nrXIeSo0xRRFJCNTbi/hfSli89s8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8c:3e:b4:9e:ca:b5:4e:c4:87:41:ec:74:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16 Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=40535574139d0cc0c8e87c5c22dd56342f75851c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:96:c2:88:9e:ce:55:d6:30:fa:70:44:6b: 7d:fb:bf:cc:6a:6a:58:15:db:b6:a5:ab:06:09:8a: 49:6c:09:bf:3d:e9:00:46:db:59:d7:0a:3f:3b:94: b7:a7:f6:3c:33:f6:d1:6d:03:19:38:a7:ab:90:f9: 0a:b0:85:e8:61:a3:e8:b2:2c:91:66:a2:6d:d9:b0: 6a:fb:1c:f7:8a:f8:7d:72:24:46:e6:0e:09:62:85: 42:83:28:43:3c:37:c9:00:c8:d9:45:6e:33:11:07: 81:66:3f:4b:78:5e:c8:e6:5c:d5:79:30:e0:2b:99: 5d:2e:db:7c:c2:d0:cc:06:d4:27:3c:a5:15:0f:99: df:8d:7f:a8:2f:1b:f9:df:88:38:c6:9c:68:5f:2e: e5:a2:c6:15:b6:5e:d7:91:83:93:2f:24:4f:a8:65: 5d:12:3e:a4:d5:4b:2b:98:6b:7e:77:b0:a0:19:98: 78:ff:71:d4:97:91:56:88:fa:41:8d:b2:a4:cb:60: 92:a0:09:22:ce:aa:b6:ae:58:fc:3f:1c:14:07:48: 94:e6:6e:27:09:24:6c:de:b3:0a:e3:3a:bf:e7:ec: 41:0a:52:1b:7d:44:e8:54:d5:51:3c:74:13:c1:fb: 03:9d:90:3d:45:27:9e:c4:20:c2:8f:52:4a:69:89: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:55:74:13:9D:0C:C0:C8:E8:7C:5C:22:DD:56:34:2F:75:85:1C X509v3 Authority Key Identifier: keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:c8:cd:f2:de:6b:c6:99:6c:31:0c:39:7f:bb:e8:c4:bc: 33:01:b0:15:f5:29:c0:fa:f7:55:08:3e:89:db:03:79:c0:a1: 8b:28:0b:cd:34:f1:a4:cf:e3:90:ec:d4:9f:67:2e:d8:d3:bb: c7:21:b3:1e:32:a3:d2:a3:b3:2b:9b:ca:f1:31:db:b9:b4:a3: b8:a0:19:c2:b3:eb:7d:43:61:b3:b2:8e:ae:86:b3:86:2e:02: 1f:9a:46:8c:16:3f:43:0e:26:4e:e6:c4:d5:56:73:03:33:dd: 28:1d:62:e4:23:23:17:a6:a6:c6:50:a8:bb:9a:8b:e1:4c:6e: 79:09:76:c3:c6:83:ec:5f:76:1e:f3:87:eb:6f:99:79:cc:37: 4e:15:11:84:ba:76:33:b5:3f:3c:ab:d4:ef:1c:1a:87:48:a8: 34:f5:0b:97:0a:34:ac:10:cf:a1:17:93:3f:5c:e3:41:8a:cb: 43:8d:2e:be:05:88:2f:2b:57:03:0b:29:d4:82:26:97:dd:a1: 57:ec:16:77:5c:2e:67:e4:ec:37:76:8e:c2:55:44:b2:2d:64: d9:93:44:e7:73:d1:32:0b:ee:78:b0:6b:fc:8e:08:6c:d3:51: cf:da:88:1c:2a:26:80:1d:dd:6c:e0:3d:e9:1f:28:61:ae:ba: 40:f1:1b:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94w+tJ7KtU7Eh0HsdGylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYzhkMDI0MTEwOGIwMWY1ZWI3MDhmZThiYmI4NDdkNTNh MzBmMTYwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD Eyg0MDUzNTU3NDEzOWQwY2MwYzhlODdjNWMyMmRkNTYzNDJmNzU4NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3laWwoiezlXWMPpwRGt9+7/MampY Fdu2pasGCYpJbAm/PekARttZ1wo/O5S3p/Y8M/bRbQMZOKerkPkKsIXoYaPosiyR ZqJt2bBq+xz3ivh9ciRG5g4JYoVCgyhDPDfJAMjZRW4zEQeBZj9LeF7I5lzVeTDg K5ldLtt8wtDMBtQnPKUVD5nfjX+oLxv534g4xpxoXy7losYVtl7XkYOTLyRPqGVd Ej6k1UsrmGt+d7CgGZh4/3HUl5FWiPpBjbKky2CSoAkizqq2rlj8PxwUB0iU5m4n CSRs3rMK4zq/5+xBClIbfUToVNVRPHQTwfsDnZA9RSeexCDCj1JKaYnKlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBTVXQTnQzAyOh8XCLdVjQvdYUcMB8GA1UdIwQY MBaAFEHI0CQRCLAfXrcI/ou7hH1Tow8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjct ZDU5NmVjMTRlZTJlLzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjctZDU5NmVjMTRlZTJl LzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ23IzfLe a8aZbDEMOX+76MS8MwGwFfUpwPr3VQg+idsDecChiygLzTTxpM/jkOzUn2cu2NO7 xyGzHjKj0qOzK5vK8THbubSjuKAZwrPrfUNhs7KOroazhi4CH5pGjBY/Qw4mTubE 1VZzAzPdKB1i5CMjF6amxlCou5qL4UxueQl2w8aD7F92HvOH62+Zecw3ThURhLp2 M7U/PKvU7xwah0ioNPULlwo0rBDPoReTP1zjQYrLQ40uvgWILytXAwsp1IIml92h V+wWd1wuZ+TsN3aOwlVEsi1k2ZNE53PRMgvueLBr/I4IbNNRz9qIHComgB3dbOA9 6R8oYa66QPEbGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:39 2025 by rpki-client