This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json) Hash identifier: /qta0RlYrwrZv5CSxzJgcH7bodDkYveMj1lpnNllirs= Subject key identifier: E6:DB:18:D9:12:97:85:66:C5:5F:05:2E:6B:51:80:C3:AC:55:12:21 Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Certificate serial: 019AF540F6A0047A58343B0EB4B54792B60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft Manifest number: 1469 Signing time: Sat 06 Dec 2025 20:01:06 +0000 Manifest this update: Sat 06 Dec 2025 20:01:06 +0000 Manifest next update: Sun 07 Dec 2025 20:01:06 +0000 Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=) 2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: +7Lf1WXxh9Kujyo0vh0renXNJiPICp1wglE4qP/IUKk=) 3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f6:a0:04:7a:58:34:3b:0e:b4:b5:47:92:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Validity Not Before: Dec 6 20:01:06 2025 GMT Not After : Dec 7 20:01:06 2025 GMT Subject: CN=e6db18d912978566c55f052e6b5180c3ac551221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:39:5c:11:22:96:10:78:f2:aa:9a:3b:2c:19: 83:c2:1c:34:fd:4b:7c:23:ef:a3:d7:fd:85:18:8a: 60:9a:d4:28:55:17:11:ad:5d:05:6f:c1:86:11:52: 7c:ab:a4:b7:fb:86:e2:86:00:89:d5:91:a4:02:fd: 07:eb:bc:39:c2:b5:e1:75:88:14:46:fa:36:ab:d3: 45:c7:e0:6c:2f:00:5f:10:ee:66:19:76:9d:51:10: 34:e2:0b:ec:39:df:23:34:fe:2e:2e:d4:1d:9a:18: 9c:b7:03:ab:96:25:de:d8:70:5a:a6:28:3d:bd:3c: ac:87:1a:44:04:9c:84:c9:c5:3e:73:1b:e3:e8:84: 18:9e:8a:f2:8b:81:93:33:9d:4a:f2:8b:0e:98:b6: d3:42:e5:0a:0c:8d:b6:f7:b2:f2:d5:42:0e:e4:7e: 8d:f7:cd:28:fd:11:6c:a9:53:6c:41:8e:4d:23:df: bc:9f:f5:08:ab:11:df:f6:ed:ae:20:b1:47:eb:9e: 86:5a:35:fd:42:31:29:6c:75:77:52:ef:60:e2:8b: 5f:db:53:58:f9:3e:55:19:bd:60:51:50:d2:06:4d: fb:48:cd:be:97:6c:9b:40:c9:2a:16:fc:08:18:c7: d1:1d:f7:bd:2a:cb:d7:f3:3a:c9:8e:c3:d0:2f:a6: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:18:D9:12:97:85:66:C5:5F:05:2E:6B:51:80:C3:AC:55:12:21 X509v3 Authority Key Identifier: keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:20:ed:93:7d:6e:44:90:8c:78:bc:ab:d0:bc:f1:37:8c:4b: 1d:1d:29:b6:ba:3c:e6:af:a5:f7:8b:6e:6e:71:4d:53:d4:f7: 07:45:56:74:0c:b0:df:d5:cd:5b:29:79:73:6d:ff:a8:43:8a: 15:a2:23:e3:37:2e:58:25:8e:6d:91:5c:9e:7c:fe:92:9e:34: 3c:54:88:39:5a:a4:52:ad:9f:93:5c:c6:8c:cb:8a:53:44:ec: fe:31:03:19:b3:85:aa:5b:98:ba:8b:31:03:7e:af:05:49:2a: 65:c5:cb:f9:95:e9:a8:64:c8:28:15:d6:e3:1c:4d:a9:8d:90: ef:dd:28:33:63:5c:9c:2d:f1:f2:b9:f5:59:8b:56:29:fa:e9: f7:b0:cc:7b:87:66:07:b9:50:01:d5:c1:e1:31:95:ac:bb:9e: ee:8d:40:ed:16:21:bc:64:a1:2d:fe:81:25:b9:3e:01:78:d6: 93:39:ab:2a:a7:b1:d9:66:2c:ab:52:c5:b3:88:bb:f6:95:dd: ff:b1:c8:e6:14:7b:08:de:11:c6:5a:d5:3f:8d:a3:28:51:ca: 4d:c9:fc:26:af:57:b7:a6:2a:69:f9:8c:13:91:ee:fd:0f:e8: 00:b3:da:33:7f:bf:5d:05:69:3b:c1:47:ed:81:cc:61:32:73: 19:ff:94:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPagBHpYNDsOtLVHkrYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi YjgwOTIwHhcNMjUxMjA2MjAwMTA2WhcNMjUxMjA3MjAwMTA2WjAzMTEwLwYDVQQD EyhlNmRiMThkOTEyOTc4NTY2YzU1ZjA1MmU2YjUxODBjM2FjNTUxMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TlcESKWEHjyqpo7LBmDwhw0/Ut8 I++j1/2FGIpgmtQoVRcRrV0Fb8GGEVJ8q6S3+4bihgCJ1ZGkAv0H67w5wrXhdYgU Rvo2q9NFx+BsLwBfEO5mGXadURA04gvsOd8jNP4uLtQdmhictwOrliXe2HBapig9 vTyshxpEBJyEycU+cxvj6IQYnoryi4GTM51K8osOmLbTQuUKDI2297Ly1UIO5H6N 980o/RFsqVNsQY5NI9+8n/UIqxHf9u2uILFH656GWjX9QjEpbHV3Uu9g4otf21NY +T5VGb1gUVDSBk37SM2+l2ybQMkqFvwIGMfRHfe9KsvX8zrJjsPQL6acPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObbGNkSl4VmxV8FLmtRgMOsVRIhMB8GA1UdIwQY MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyDtk31u RJCMeLyr0LzxN4xLHR0ptro85q+l94tubnFNU9T3B0VWdAyw39XNWyl5c23/qEOK FaIj4zcuWCWObZFcnnz+kp40PFSIOVqkUq2fk1zGjMuKU0Ts/jEDGbOFqluYuosx A36vBUkqZcXL+ZXpqGTIKBXW4xxNqY2Q790oM2NcnC3x8rn1WYtWKfrp97DMe4dm B7lQAdXB4TGVrLue7o1A7RYhvGShLf6BJbk+AXjWkzmrKqex2WYsq1LFs4i79pXd /7HI5hR7CN4RxlrVP42jKFHKTcn8Jq9Xt6YqafmME5Hu/Q/oALPaM3+/XQVpO8FH 7YHMYTJzGf+UeQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:22 2025 by rpki-client