This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json) Hash identifier: BM+Msh2E0jhP94qiOZzWJnYM50pPZOh+LgOAks/46Uo= Subject key identifier: A2:67:2E:3B:B6:27:84:AC:7A:00:5F:35:37:2F:0F:9F:65:58:25:77 Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16 Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16 Certificate serial: 019AF50BD550F429E8436040A44A14E269CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft Manifest number: 15EB Signing time: Sat 06 Dec 2025 19:03:04 +0000 Manifest this update: Sat 06 Dec 2025 19:03:04 +0000 Manifest next update: Sun 07 Dec 2025 19:03:04 +0000 Files and hashes: 1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: NNZCRfDblxiOXAvndBUhB24jt3RA8Osi7DnJu4YbZ7w=) 2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d5:50:f4:29:e8:43:60:40:a4:4a:14:e2:69:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16 Validity Not Before: Dec 6 19:03:04 2025 GMT Not After : Dec 7 19:03:04 2025 GMT Subject: CN=a2672e3bb62784ac7a005f35372f0f9f65582577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:20:c2:8b:16:66:f4:d9:49:9c:d0:8e:49: 7c:00:04:5d:36:8f:2e:49:22:29:05:7a:c3:3e:54: 37:74:b8:7f:e3:80:a5:93:cd:d0:f5:01:59:8f:1e: b7:58:5e:23:56:3c:0e:0e:dc:e9:dc:25:bf:c2:27: 3e:9a:7e:6c:74:91:f3:a3:24:12:79:6d:c2:fa:70: e0:b3:e6:62:a0:17:43:a9:68:49:7b:62:57:17:3d: cf:b4:1a:f4:87:68:12:30:d9:02:d9:97:9e:d1:f7: 57:21:07:c9:43:70:61:5b:92:08:86:3a:74:3a:e1: 49:e0:93:c2:ce:0b:23:94:65:d0:14:94:1d:93:10: ed:53:56:53:fd:1d:ba:a0:b5:7b:95:a3:17:a2:e0: a8:7d:54:28:04:11:c4:d3:58:39:e6:3f:5c:2b:14: ab:56:48:1e:69:3a:7d:69:a3:30:42:13:ce:6a:c1: 3e:09:2c:7c:ea:4d:19:dc:09:21:08:9f:d4:af:c1: a9:6c:09:e6:eb:76:c3:2a:44:e0:cc:b8:a7:59:60: 39:35:f1:a3:0c:f3:51:34:45:18:b8:52:3e:3b:bd: 03:63:9b:30:d7:c1:2d:af:79:98:0d:a5:ea:4f:8c: 03:b2:2a:23:ec:74:b5:48:53:78:a4:f1:37:ff:1b: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:2E:3B:B6:27:84:AC:7A:00:5F:35:37:2F:0F:9F:65:58:25:77 X509v3 Authority Key Identifier: keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2e:e1:ed:82:fa:3d:6b:88:74:40:b5:5d:c9:b7:73:d6:b3: 9b:9d:12:39:12:54:b1:55:7f:06:b3:3b:38:09:d1:e4:6e:bd: 95:af:ea:20:ee:1a:39:36:22:f2:25:85:d4:f2:f9:46:0e:fe: 3b:c4:47:08:50:06:04:33:78:75:2c:79:fd:36:cc:74:5c:0b: 3b:d5:e0:cb:d1:81:8b:8f:35:14:33:69:4f:8f:41:3f:c9:ec: ca:d9:60:17:2e:24:2f:c1:f8:07:8f:5b:bf:d0:45:ec:5e:05: fe:c6:9d:56:fa:c5:a6:af:77:64:cb:7b:67:55:34:89:da:2f: de:4c:91:a7:7c:a0:c8:da:8e:de:32:f8:ba:00:54:d6:eb:0d: fd:10:be:a8:4b:c4:9b:8f:a1:90:4a:3e:bc:85:cb:20:d8:f6: b1:65:e6:b2:db:05:95:cb:02:ad:0c:a8:aa:07:5e:08:7f:63: 7a:c8:1b:25:60:91:92:d4:f4:83:a2:aa:03:20:c7:7f:a3:3d: aa:72:f0:bf:58:ff:50:a8:47:29:17:55:82:09:7c:ea:8c:e8: 3f:02:b6:f7:7e:05:2e:b3:2c:80:b6:2f:8e:0e:8a:10:30:99: 04:58:e1:a1:77:ef:3e:12:86:26:0b:95:01:89:8f:dc:ad:de: c9:25:89:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9VQ9CnoQ2BApEoU4mnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjczNjcwYWMxNjFmNGI1NjY3OWM0OWRhOGI0ODliNjBi ZjBiMTYwHhcNMjUxMjA2MTkwMzA0WhcNMjUxMjA3MTkwMzA0WjAzMTEwLwYDVQQD EyhhMjY3MmUzYmI2Mjc4NGFjN2EwMDVmMzUzNzJmMGY5ZjY1NTgyNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrwgwosWZvTZSZzQjkl8AARdNo8u SSIpBXrDPlQ3dLh/44Clk83Q9QFZjx63WF4jVjwODtzp3CW/wic+mn5sdJHzoyQS eW3C+nDgs+ZioBdDqWhJe2JXFz3PtBr0h2gSMNkC2Zee0fdXIQfJQ3BhW5IIhjp0 OuFJ4JPCzgsjlGXQFJQdkxDtU1ZT/R26oLV7laMXouCofVQoBBHE01g55j9cKxSr VkgeaTp9aaMwQhPOasE+CSx86k0Z3AkhCJ/Ur8GpbAnm63bDKkTgzLinWWA5NfGj DPNRNEUYuFI+O70DY5sw18Etr3mYDaXqT4wDsioj7HS1SFN4pPE3/xtyVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJnLju2J4SsegBfNTcvD59lWCV3MB8GA1UdIwQY MBaAFEH3NnCsFh9LVmecSdqLSJtgvwsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMzEwMzMtZTdhZS00YWIxLWFmNDkt Mjk2MTgzODdiYTI2LzEvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMzEwMzMtZTdhZS00YWIxLWFmNDktMjk2MTgzODdiYTI2 LzEvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy7h7YL6 PWuIdEC1Xcm3c9azm50SORJUsVV/BrM7OAnR5G69la/qIO4aOTYi8iWF1PL5Rg7+ O8RHCFAGBDN4dSx5/TbMdFwLO9Xgy9GBi481FDNpT49BP8nsytlgFy4kL8H4B49b v9BF7F4F/sadVvrFpq93ZMt7Z1U0idov3kyRp3ygyNqO3jL4ugBU1usN/RC+qEvE m4+hkEo+vIXLINj2sWXmstsFlcsCrQyoqgdeCH9jesgbJWCRktT0g6KqAyDHf6M9 qnLwv1j/UKhHKRdVggl86ozoPwK2934FLrMsgLYvjg6KEDCZBFjhoXfvPhKGJguV AYmP3K3eySWJCg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:15 2025 by rpki-client