This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json) Hash identifier: 5IwTLjczqWJ5eOkazLGyHouuUbU5a9QZu8iFxZmD4HI= Subject key identifier: A6:FB:59:B1:00:D6:98:51:8C:A4:1A:A4:7D:B7:B6:90:F8:4D:66:56 Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Certificate serial: 019AF276841A1FC1D7C3207B685D104077B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=) 2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=) 3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: dQ/beUzAd60JrKrmvJz8xjBA7RqYWS4b2/BP9khTHeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:84:1a:1f:c1:d7:c3:20:7b:68:5d:10:40:77:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=a6fb59b100d698518ca41aa47db7b690f84d6656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:7b:d3:3c:db:25:19:64:7c:bd:84:37:81: 7d:16:b1:ad:06:80:49:7e:15:5d:bb:64:35:7a:8e: 21:8f:6b:8d:ae:7d:ac:22:ed:85:89:7d:80:bd:22: 6b:8f:be:0a:a7:a2:60:fa:4f:0b:ec:a4:99:03:bb: 48:12:6a:f5:5e:e1:5b:e9:ce:f6:38:78:a9:8c:a5: 15:40:f9:5d:71:41:06:27:f1:82:40:cb:c2:4c:ce: d3:6d:eb:63:06:50:c9:1d:ae:e2:de:25:70:fe:36: 27:7e:1f:66:9b:b0:96:28:72:2a:10:d6:0a:e0:df: 95:1e:21:3c:94:56:ae:8b:91:1e:9f:a1:59:8b:6e: 38:b5:30:55:bb:bb:9d:2f:e4:3a:19:90:b5:b7:c6: da:1e:c8:81:ba:c0:d5:59:98:7f:91:f6:2b:a0:10: 9e:c4:d1:df:bb:b5:f1:0e:b5:63:78:6f:31:2d:b2: 26:55:5d:7b:b5:a2:fb:73:fc:3e:18:50:39:1e:aa: 40:31:f4:b9:48:0b:e1:dd:b8:4c:67:8e:2f:ae:83: 3c:38:18:0b:11:23:6a:6b:8a:59:fc:08:77:c0:3a: 28:a9:50:5b:ee:6e:f4:91:30:ad:3d:c5:52:d5:e2: 55:b4:a6:39:4b:ae:01:d2:c0:f2:bd:23:24:4d:25: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FB:59:B1:00:D6:98:51:8C:A4:1A:A4:7D:B7:B6:90:F8:4D:66:56 X509v3 Authority Key Identifier: keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f8:74:62:ff:5f:43:b3:ab:ed:cb:74:2f:92:bb:a4:21:01:f2: 68:30:b5:bd:6e:ef:1b:80:6e:21:c5:95:1e:2f:59:f6:13:48: bc:ac:d0:51:61:64:a8:c5:39:98:c4:b5:f7:f4:58:de:53:f1: 5e:30:0f:2a:84:ca:7e:f8:7b:d7:ee:b3:01:b4:36:ac:ae:0f: 52:52:52:c8:06:81:85:ed:75:e3:b4:14:a4:de:40:bb:bf:94: c9:8b:ff:36:d9:ba:a8:2a:98:06:4f:03:10:4a:b2:2e:9d:3a: 05:d3:eb:22:de:9b:f9:c0:83:45:ae:c7:fb:4b:e1:b7:12:07: 98:3c:05:f4:54:2b:3b:14:22:28:65:9c:ce:90:33:19:c8:59: 8e:9c:13:aa:07:c8:42:6b:53:8a:3b:f8:74:02:d2:30:39:5c: 05:d1:ba:a0:56:77:ad:c8:b9:78:4e:fc:2e:69:8c:dd:1e:f9: 49:fc:54:fb:95:19:27:e9:30:76:74:95:ca:42:7a:4c:0e:8e: f1:91:4a:e3:20:52:8a:9d:e4:5d:a2:11:91:99:cd:a6:58:20: 56:43:50:d2:67:f8:90:17:67:e8:74:dc:80:60:b8:13:84:8d: 1d:67:22:fc:e2:07:0b:6e:29:52:25:64:de:c8:19:64:bf:72: 95:36:db:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoQaH8HXwyB7aF0QQHe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz NzRlZDgwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhhNmZiNTliMTAwZDY5ODUxOGNhNDFhYTQ3ZGI3YjY5MGY4NGQ2NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRF70zzbJRlkfL2EN4F9FrGtBoBJ fhVdu2Q1eo4hj2uNrn2sIu2FiX2AvSJrj74Kp6Jg+k8L7KSZA7tIEmr1XuFb6c72 OHipjKUVQPldcUEGJ/GCQMvCTM7TbetjBlDJHa7i3iVw/jYnfh9mm7CWKHIqENYK 4N+VHiE8lFaui5Een6FZi244tTBVu7udL+Q6GZC1t8baHsiBusDVWZh/kfYroBCe xNHfu7XxDrVjeG8xLbImVV17taL7c/w+GFA5HqpAMfS5SAvh3bhMZ44vroM8OBgL ESNqa4pZ/Ah3wDooqVBb7m70kTCtPcVS1eJVtKY5S64B0sDyvSMkTSUOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb7WbEA1phRjKQapH23tpD4TWZWMB8GA1UdIwQY MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4 LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+HRi/19D s6vty3QvkrukIQHyaDC1vW7vG4BuIcWVHi9Z9hNIvKzQUWFkqMU5mMS19/RY3lPx XjAPKoTKfvh71+6zAbQ2rK4PUlJSyAaBhe1147QUpN5Au7+UyYv/Ntm6qCqYBk8D EEqyLp06BdPrIt6b+cCDRa7H+0vhtxIHmDwF9FQrOxQiKGWczpAzGchZjpwTqgfI QmtTijv4dALSMDlcBdG6oFZ3rci5eE78LmmM3R75SfxU+5UZJ+kwdnSVykJ6TA6O 8ZFK4yBSip3kXaIRkZnNplggVkNQ0mf4kBdn6HTcgGC4E4SNHWci/OIHC24pUiVk 3sgZZL9ylTbbQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:36 2025 by rpki-client