This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json) Hash identifier: dBRuXq1GZVz534C3Lj9sIpydU6mxZbTwP9sk8hphv44= Subject key identifier: CD:B3:1D:23:6D:90:1C:7F:11:43:CE:64:DD:59:2F:EB:0C:70:61:11 Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Certificate serial: 019AF31BE92AE8FADEE7FFA0D9D25E8D8A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft Manifest number: 10E2 Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=) 2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: hocyDaTCBTHOiFhMdPeyIYybdJfgiWceHnjog+rr1r8=) 3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e9:2a:e8:fa:de:e7:ff:a0:d9:d2:5e:8d:8a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=cdb31d236d901c7f1143ce64dd592feb0c706111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:f5:1e:7b:4e:71:21:ba:09:9f:67:fb:a1: eb:45:a0:ce:88:57:d6:26:1a:47:87:0d:aa:50:27: cc:97:f2:3e:dc:78:22:5d:fe:34:a8:51:57:9d:3c: 83:ba:cb:3d:0d:1f:98:ca:41:49:db:85:70:07:37: bf:3d:7f:97:f3:c5:5e:60:91:0f:aa:bd:59:79:ac: 54:e6:96:72:44:dd:98:21:39:85:b3:c0:2f:0a:1d: 9b:80:eb:89:d4:0c:af:f0:02:bc:f0:e6:88:8d:4c: ea:fd:fb:9a:d8:ca:3c:0c:65:7b:78:b7:22:25:a7: b1:51:b9:5c:6f:6e:eb:76:16:d9:64:fb:cf:a2:cc: 58:e9:57:bb:f6:de:cf:0a:97:5f:07:59:cc:e9:a2: 7a:e4:ce:4b:7e:47:b8:9c:c4:1d:79:8d:f9:b8:6e: fb:e8:be:07:59:09:eb:06:74:c3:ea:07:20:6b:c9: e8:bd:00:10:97:de:93:d8:6a:57:11:86:d0:4a:67: af:90:2c:c0:01:1a:30:41:f7:0f:df:3d:d0:a6:9e: 03:0d:61:ec:a8:4d:15:4a:c9:83:47:3f:cc:fd:c1: 3e:e1:68:d5:a3:eb:ca:ee:f4:cc:0e:b3:dc:01:47: 97:03:08:ff:3e:31:84:7e:ee:8d:cf:e5:57:7c:25: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B3:1D:23:6D:90:1C:7F:11:43:CE:64:DD:59:2F:EB:0C:70:61:11 X509v3 Authority Key Identifier: keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:1b:ea:db:25:10:39:7c:86:59:07:53:1c:06:76:c9:22: fa:ef:8a:43:20:1e:95:71:b8:77:f4:7a:cf:88:10:2d:73:63: ce:71:3a:89:a7:83:12:6e:75:d8:1b:52:9d:97:99:4f:22:f0: f3:7e:89:66:92:9d:77:f7:f1:4e:91:e3:3f:24:e5:2a:c5:e0: ae:32:ba:15:18:14:85:62:bf:82:9a:8e:fe:55:f4:2b:6f:71: cd:06:21:30:0e:d4:47:36:85:e1:8b:7d:c8:91:83:a5:02:00: 37:79:fd:50:d5:e6:90:34:3e:13:e8:7c:cf:6d:14:27:8c:18: 20:17:fc:df:55:b2:6a:8f:f6:2f:79:93:5a:ee:2e:f4:47:05: 70:3e:db:0a:77:e5:d9:bf:d7:15:9d:da:f0:03:ad:d7:49:79: bc:75:60:44:74:a3:3e:23:51:e7:d8:51:79:dc:3f:8e:74:02: f3:12:8b:21:13:01:9d:05:9a:56:81:a3:ce:27:f6:a1:96:4a: 14:8c:b3:4d:4a:9c:c7:35:2a:1f:ae:7c:70:ed:6a:12:f7:2e: 22:48:05:32:7f:8e:1d:bb:e6:03:f7:b8:fe:53:d3:7a:bd:a8: 83:00:20:dd:6b:6f:07:17:66:dd:ae:c4:66:5f:0c:b1:75:43: 9a:63:de:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+kq6Pre5/+g2dJejYpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5 NDlmYTgwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD EyhjZGIzMWQyMzZkOTAxYzdmMTE0M2NlNjRkZDU5MmZlYjBjNzA2MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBL1HntOcSG6CZ9n+6HrRaDOiFfW JhpHhw2qUCfMl/I+3HgiXf40qFFXnTyDuss9DR+YykFJ24VwBze/PX+X88VeYJEP qr1ZeaxU5pZyRN2YITmFs8AvCh2bgOuJ1Ayv8AK88OaIjUzq/fua2Mo8DGV7eLci JaexUblcb27rdhbZZPvPosxY6Ve79t7PCpdfB1nM6aJ65M5Lfke4nMQdeY35uG77 6L4HWQnrBnTD6gcga8novQAQl96T2GpXEYbQSmevkCzAARowQfcP3z3Qpp4DDWHs qE0VSsmDRz/M/cE+4WjVo+vK7vTMDrPcAUeXAwj/PjGEfu6Nz+VXfCVvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2zHSNtkBx/EUPOZN1ZL+sMcGERMB8GA1UdIwQY MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIgb6tsl EDl8hlkHUxwGdski+u+KQyAelXG4d/R6z4gQLXNjznE6iaeDEm512BtSnZeZTyLw 836JZpKdd/fxTpHjPyTlKsXgrjK6FRgUhWK/gpqO/lX0K29xzQYhMA7URzaF4Yt9 yJGDpQIAN3n9UNXmkDQ+E+h8z20UJ4wYIBf831Wyao/2L3mTWu4u9EcFcD7bCnfl 2b/XFZ3a8AOt10l5vHVgRHSjPiNR59hRedw/jnQC8xKLIRMBnQWaVoGjzif2oZZK FIyzTUqcxzUqH658cO1qEvcuIkgFMn+OHbvmA/e4/lPTer2ogwAg3WtvBxdm3a7E Zl8MsXVDmmPeCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:03 2025 by rpki-client