This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json) Hash identifier: m53R4kIHXF5sLzlEgugOokbloHs3mpbVoi5or98UBhA= Subject key identifier: 63:9D:E6:45:D5:12:64:E6:2D:53:89:D3:29:30:9C:21:15:FB:FB:90 Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2 Certificate serial: 019AF12E1FB2B6E02E3D2A1BEE40C670818D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft Manifest number: 040F Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=) 2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=) 3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: NtrAZwUCfYmpX8oJ2FF6QP6KukUR6/14/voV+7I8Xhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1f:b2:b6:e0:2e:3d:2a:1b:ee:40:c6:70:81:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=639de645d51264e62d5389d329309c2115fbfb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:ad:b6:e7:76:7e:4d:5f:e0:3c:e9:c6:cc: 10:da:12:c3:5d:17:35:9a:20:dd:00:d2:a3:f9:a9: 2b:60:3e:64:4e:ab:ac:d9:9a:3d:64:05:3f:25:32: 52:63:19:3d:a5:80:ec:08:20:e9:20:7b:9b:28:61: 14:d4:a9:71:5f:73:ba:77:7b:d4:ee:94:bb:c7:a1: fc:a5:4c:3a:fe:03:99:ed:db:57:47:27:e0:57:43: a6:88:af:92:f3:b5:9b:67:cf:66:58:65:5c:ba:53: 65:aa:c0:9d:58:97:09:23:1e:dc:84:77:cc:03:58: 98:06:30:7d:ca:f1:43:1a:4d:de:4e:86:8f:d2:8f: c2:b4:e9:50:87:b2:7b:0f:df:e6:16:4b:15:10:4a: 2a:8d:35:9d:d3:0a:ac:10:76:53:22:f8:59:8d:b5: 20:e6:65:9d:b9:7c:f0:ac:82:a6:62:03:e4:68:ed: 2e:18:24:8d:d5:b3:d3:db:0e:48:d6:90:f3:d9:84: cc:57:17:a4:f5:72:aa:c3:b1:68:dd:47:c1:03:b9: e7:50:e7:75:da:7e:15:67:a5:0d:dd:72:d1:8d:5c: 73:ff:da:38:73:8f:83:60:b8:1e:43:21:59:f5:d2: 66:85:de:2c:7a:bb:a3:10:df:c5:36:c1:83:3d:f9: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9D:E6:45:D5:12:64:E6:2D:53:89:D3:29:30:9C:21:15:FB:FB:90 X509v3 Authority Key Identifier: keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:9d:d3:2a:f3:b2:af:48:ca:41:bc:2a:6c:5c:b4:fb:fe: eb:dd:ef:64:4b:dd:1b:a3:7f:1f:9f:6f:cd:1c:1a:15:49:39: ca:37:39:c1:0c:01:31:9f:52:75:88:d4:8e:7a:c2:a7:cd:ce: ce:35:69:7f:53:1a:5c:17:52:2f:ae:dc:ba:12:a0:1a:89:25: ae:96:33:83:da:23:fe:64:1a:7e:5b:40:2e:07:96:ba:fe:c3: 61:7d:f8:22:a9:39:a1:4c:39:05:3f:68:22:14:f2:7a:06:ed: 12:c6:1a:07:53:74:77:d9:31:f9:88:e2:54:b2:65:ef:64:81: 79:f2:a1:4a:14:f3:c4:b4:6e:07:e9:a7:9f:41:3a:a5:01:62: 20:7c:14:f3:73:26:30:8b:fe:21:27:b9:f8:44:d0:58:2d:82: d4:dc:0e:e8:df:5c:d8:4c:0f:87:41:72:52:5d:1a:15:bd:7d: 76:a4:77:32:5d:f5:30:14:a3:86:12:68:19:9c:b0:c7:2a:8c: 36:a8:b6:d1:fc:36:15:24:d7:3f:37:e8:1a:11:d0:a4:3b:41: 17:4a:ea:01:62:8b:3d:38:62:a1:9b:70:2d:ea:ef:ed:d2:c7: ae:58:c5:4e:42:40:ec:d7:18:c4:0c:36:21:3c:b2:2c:fa:b9: 37:36:f5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLh+ytuAuPSob7kDGcIGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw YzE1YjIwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg2MzlkZTY0NWQ1MTI2NGU2MmQ1Mzg5ZDMyOTMwOWMyMTE1ZmJmYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYOttud2fk1f4DzpxswQ2hLDXRc1 miDdANKj+akrYD5kTqus2Zo9ZAU/JTJSYxk9pYDsCCDpIHubKGEU1KlxX3O6d3vU 7pS7x6H8pUw6/gOZ7dtXRyfgV0OmiK+S87WbZ89mWGVculNlqsCdWJcJIx7chHfM A1iYBjB9yvFDGk3eToaP0o/CtOlQh7J7D9/mFksVEEoqjTWd0wqsEHZTIvhZjbUg 5mWduXzwrIKmYgPkaO0uGCSN1bPT2w5I1pDz2YTMVxek9XKqw7Fo3UfBA7nnUOd1 2n4VZ6UN3XLRjVxz/9o4c4+DYLgeQyFZ9dJmhd4serujEN/FNsGDPflw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOd5kXVEmTmLVOJ0ykwnCEV+/uQMB8GA1UdIwQY MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4 LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLOd0yrz sq9IykG8KmxctPv+693vZEvdG6N/H59vzRwaFUk5yjc5wQwBMZ9SdYjUjnrCp83O zjVpf1MaXBdSL67cuhKgGoklrpYzg9oj/mQafltALgeWuv7DYX34Iqk5oUw5BT9o IhTyegbtEsYaB1N0d9kx+YjiVLJl72SBefKhShTzxLRuB+mnn0E6pQFiIHwU83Mm MIv+ISe5+ETQWC2C1NwO6N9c2EwPh0FyUl0aFb19dqR3Ml31MBSjhhJoGZywxyqM Nqi20fw2FSTXPzfoGhHQpDtBF0rqAWKLPThioZtwLerv7dLHrljFTkJA7NcYxAw2 ITyyLPq5Nzb1Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:27 2025 by rpki-client