This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json) Hash identifier: 97cp0T5yhao4Vmf2Y/CwQJ6fB8oi5GflhurskcWqs1w= Subject key identifier: 2B:4E:FB:1D:35:03:66:44:51:9F:DD:24:81:6F:6F:F5:CE:A0:0F:AC Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019AF389471575446DD97F2246FEC6D512FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft Manifest number: 0A43 Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 9O5CSrgbd77eUN5k9W6R/yDm35lhmkmgiA1UG5d3Kq8=) 2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:47:15:75:44:6d:d9:7f:22:46:fe:c6:d5:12:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=2b4efb1d35036644519fdd24816f6ff5cea00fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ab:f8:a3:13:bd:40:3d:bb:d1:0a:08:ef:82: bd:74:ba:e8:d4:17:21:41:0e:73:50:c5:13:16:65: cd:15:ab:29:6a:70:1b:f9:54:38:c0:d1:c4:81:b0: 9c:e0:d7:47:03:4f:37:f7:c2:87:8e:b0:26:da:4f: 32:42:62:a7:97:c2:11:30:b6:19:40:d3:6e:44:27: 0f:ef:1a:9a:f8:44:8b:57:56:7a:81:91:b0:d6:fe: 6e:f5:51:cb:c8:c0:8c:5d:22:6e:3f:e9:36:eb:5f: a0:f5:4f:ce:ed:ce:cd:b0:0a:69:8b:f6:e1:73:ad: 10:ce:64:60:ba:c4:2c:3e:a0:53:c9:47:b1:24:b1: f1:d2:ba:6d:34:5f:ca:1e:6f:1d:2f:c7:a1:45:a6: 46:fe:4d:2b:af:fb:d8:f2:6a:73:c1:02:c6:4b:bd: 0b:c3:24:3e:ad:67:1e:26:27:e3:bf:01:1b:77:db: 6a:ad:d1:82:59:b9:20:5e:07:47:3a:0a:77:a8:c2: ad:3f:00:21:53:fd:a0:31:05:81:e7:c3:95:48:56: f4:c3:3d:2f:e9:b6:e2:b3:f8:c4:55:68:45:ef:c0: 10:5e:8e:dd:b6:af:70:6a:c2:eb:b6:12:49:68:1b: 1e:63:78:dc:2c:cc:e8:3a:8e:1b:d6:40:08:dd:72: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4E:FB:1D:35:03:66:44:51:9F:DD:24:81:6F:6F:F5:CE:A0:0F:AC X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d5:89:05:d5:9c:ed:58:bd:b2:cf:87:16:11:b3:35:85:e2: b0:38:f1:81:eb:e9:89:2f:37:13:bd:d1:ed:51:40:1b:7a:8d: 44:55:08:f9:35:81:d4:5f:f2:8a:37:c0:e3:34:6c:2f:6c:4b: e5:01:2f:9a:d6:28:0c:f1:9d:41:0e:d5:a6:ad:d5:97:3b:ce: 88:3b:05:b8:f9:6a:83:48:56:ce:a5:21:2a:9e:16:f4:d4:fe: 52:c4:0e:3b:17:bb:23:fd:d8:8b:9b:98:f9:03:dd:86:b8:73: 0f:78:52:a1:a0:8f:23:ae:b7:72:9d:6f:d0:5f:f7:48:38:85: f2:e2:cf:ba:69:3b:96:00:3a:44:12:ee:b2:c5:75:7a:86:8a: 0d:60:df:23:d9:51:7d:aa:69:be:41:47:26:aa:cf:28:2d:eb: 31:f7:47:34:52:f3:c1:3f:3d:bb:49:a6:f5:62:b5:f5:2b:34: 87:b4:1e:6d:56:2f:94:79:ed:2d:7b:9a:da:1e:0b:77:1d:87: 0c:8a:02:ec:a8:f5:1b:03:cb:3c:a2:b1:73:db:9c:52:3e:bb: 5a:8f:37:ad:95:87:df:10:dd:1b:3f:cc:0e:27:52:49:21:9f: 4e:9d:bf:ca:58:99:32:84:f8:80:b5:12:ad:bc:67:b4:4c:7a: c2:4d:da:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUcVdURt2X8iRv7G1RL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EygyYjRlZmIxZDM1MDM2NjQ0NTE5ZmRkMjQ4MTZmNmZmNWNlYTAwZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKv4oxO9QD270QoI74K9dLro1Bch QQ5zUMUTFmXNFaspanAb+VQ4wNHEgbCc4NdHA08398KHjrAm2k8yQmKnl8IRMLYZ QNNuRCcP7xqa+ESLV1Z6gZGw1v5u9VHLyMCMXSJuP+k261+g9U/O7c7NsAppi/bh c60QzmRgusQsPqBTyUexJLHx0rptNF/KHm8dL8ehRaZG/k0rr/vY8mpzwQLGS70L wyQ+rWceJifjvwEbd9tqrdGCWbkgXgdHOgp3qMKtPwAhU/2gMQWB58OVSFb0wz0v 6bbis/jEVWhF78AQXo7dtq9wasLrthJJaBseY3jcLMzoOo4b1kAI3XLz1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtO+x01A2ZEUZ/dJIFvb/XOoA+sMB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtWJBdWc 7Vi9ss+HFhGzNYXisDjxgevpiS83E73R7VFAG3qNRFUI+TWB1F/yijfA4zRsL2xL 5QEvmtYoDPGdQQ7Vpq3VlzvOiDsFuPlqg0hWzqUhKp4W9NT+UsQOOxe7I/3Yi5uY +QPdhrhzD3hSoaCPI663cp1v0F/3SDiF8uLPumk7lgA6RBLussV1eoaKDWDfI9lR fappvkFHJqrPKC3rMfdHNFLzwT89u0mm9WK19Ss0h7QebVYvlHntLXua2h4Ldx2H DIoC7Kj1GwPLPKKxc9ucUj67Wo83rZWH3xDdGz/MDidSSSGfTp2/yliZMoT4gLUS rbxntEx6wk3aaA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:32 2025 by rpki-client