This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json) Hash identifier: 42eRrlRNRZ3rEjMRvXYwK1WEuaRA4Hd886WSjVz0l2I= Subject key identifier: 5B:5B:38:65:A0:C4:11:10:2F:8A:8C:BD:3C:17:82:CB:D7:B6:CB:57 Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7 Certificate serial: 019AFB42FBD09C36A19A5551917CFE8E7182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft Manifest number: 0531 Signing time: Mon 08 Dec 2025 00:01:02 +0000 Manifest this update: Mon 08 Dec 2025 00:01:02 +0000 Manifest next update: Tue 09 Dec 2025 00:01:02 +0000 Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=) 2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: nAFRuKKUinI8kNICVB6y3Tj3YnCHjYS/7cGPhlj+T9A=) 3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:fb:d0:9c:36:a1:9a:55:51:91:7c:fe:8e:71:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Validity Not Before: Dec 8 00:01:02 2025 GMT Not After : Dec 9 00:01:02 2025 GMT Subject: CN=5b5b3865a0c411102f8a8cbd3c1782cbd7b6cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:2f:71:39:3e:eb:3f:a3:3b:06:82:64:ac: 4e:de:ea:e2:91:17:a6:a2:46:2b:5b:60:14:45:3c: 9f:76:c9:79:6c:2b:25:32:03:16:cd:14:8a:cc:48: 74:db:43:11:67:90:c8:ce:29:ad:73:32:a2:66:5d: 5f:df:db:cb:a7:63:9e:ff:db:62:78:e7:40:2d:ed: 73:6f:fe:4e:09:6b:1e:21:5f:2b:d9:ac:53:ad:b7: ef:22:c0:fb:76:36:ad:ac:5c:1e:2c:63:33:87:09: 61:30:e0:03:3c:9b:a1:3c:3a:5d:84:77:15:bf:b2: 5b:a0:9d:05:ed:93:f8:0e:04:f4:11:0d:af:2d:07: 74:8f:14:91:96:c6:49:1f:d0:00:17:cd:51:0a:c9: 2a:c7:d4:df:07:df:56:86:55:d2:62:c2:89:42:9e: 78:32:7f:df:dd:a3:cb:c2:ee:8f:07:d7:4f:ca:16: b7:e4:0f:e1:7d:33:80:bc:bb:c2:dd:6d:88:d2:24: bb:9e:30:c5:37:90:e2:db:cf:dc:63:81:e1:78:13: b6:90:2b:b0:31:5a:fd:95:27:cc:d5:41:73:1e:a7: 65:65:c1:93:80:78:bb:17:90:11:7b:e2:67:69:ce: 0c:45:84:41:6f:22:38:af:93:a6:cb:7a:fc:81:91: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5B:38:65:A0:C4:11:10:2F:8A:8C:BD:3C:17:82:CB:D7:B6:CB:57 X509v3 Authority Key Identifier: keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dc:a5:88:89:da:f5:25:4e:cd:cb:4f:ba:a2:1a:be:f7:34: cd:8d:32:c5:c9:da:09:e0:5e:55:3d:dd:49:35:b7:82:e3:b9: ea:19:f9:b9:d8:b3:ce:1f:ae:36:c9:83:9b:b6:3e:50:d0:2a: de:a3:a6:8e:06:72:ee:e7:86:1f:47:6f:f0:ed:81:6f:04:ec: 39:a0:da:dd:03:9b:19:0b:d1:ae:68:03:cc:65:55:90:ca:c0: c7:76:8e:fa:41:01:fc:77:2a:14:e7:c7:3a:e2:3d:d7:04:d3: 89:a6:83:cf:66:6d:36:71:13:24:5e:0f:b8:09:65:c7:75:46: 91:cf:c3:9a:5e:0e:d4:83:41:27:70:b6:aa:24:90:40:c4:d9: 3b:f5:b8:d8:d4:2f:5c:44:b7:33:69:38:f3:40:64:cc:fc:d9: 6c:76:66:c6:ac:5f:96:6a:4b:54:8e:b8:db:5a:3f:26:a0:5c: 13:02:a9:62:94:6c:1c:5b:3e:33:77:f7:c0:d3:d7:6e:15:79: db:58:b0:24:49:45:d9:de:16:76:05:18:99:b5:71:e0:af:be: 06:16:09:5a:8d:5a:e1:86:9d:97:a5:8f:bf:8a:b7:30:14:7f: a3:66:9b:51:81:1c:38:28:9b:0a:c8:e7:bf:a0:8a:a1:3e:33: 28:94:8c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QvvQnDahmlVRkXz+jnGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm NjM1YjcwHhcNMjUxMjA4MDAwMTAyWhcNMjUxMjA5MDAwMTAyWjAzMTEwLwYDVQQD Eyg1YjViMzg2NWEwYzQxMTEwMmY4YThjYmQzYzE3ODJjYmQ3YjZjYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8vcTk+6z+jOwaCZKxO3urikRem okYrW2AURTyfdsl5bCslMgMWzRSKzEh020MRZ5DIzimtczKiZl1f39vLp2Oe/9ti eOdALe1zb/5OCWseIV8r2axTrbfvIsD7djatrFweLGMzhwlhMOADPJuhPDpdhHcV v7JboJ0F7ZP4DgT0EQ2vLQd0jxSRlsZJH9AAF81RCskqx9TfB99WhlXSYsKJQp54 Mn/f3aPLwu6PB9dPyha35A/hfTOAvLvC3W2I0iS7njDFN5Di28/cY4HheBO2kCuw MVr9lSfM1UFzHqdlZcGTgHi7F5ARe+Jnac4MRYRBbyI4r5Omy3r8gZH/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtbOGWgxBEQL4qMvTwXgsvXtstXMB8GA1UdIwQY MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNyliIna 9SVOzctPuqIavvc0zY0yxcnaCeBeVT3dSTW3guO56hn5udizzh+uNsmDm7Y+UNAq 3qOmjgZy7ueGH0dv8O2BbwTsOaDa3QObGQvRrmgDzGVVkMrAx3aO+kEB/HcqFOfH OuI91wTTiaaDz2ZtNnETJF4PuAllx3VGkc/Dml4O1INBJ3C2qiSQQMTZO/W42NQv XES3M2k480BkzPzZbHZmxqxflmpLVI6421o/JqBcEwKpYpRsHFs+M3f3wNPXbhV5 21iwJElF2d4WdgUYmbVx4K++BhYJWo1a4Yadl6WPv4q3MBR/o2abUYEcOCibCsjn v6CKoT4zKJSMNA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:25 2025 by rpki-client