This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json) Hash identifier: aqZam2IYi5WA4xj00lQAuH33/WLZZCZ4w9jSqyg0cho= Subject key identifier: C2:F8:05:E6:E9:9A:EA:D6:5E:31:71:22:80:3F:08:46:A9:44:0C:99 Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Certificate serial: 019B341F742B57412E117697FE6295F9DB38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 01:00:34 +0000 Manifest this update: Fri 19 Dec 2025 01:00:34 +0000 Manifest next update: Sat 20 Dec 2025 01:00:34 +0000 Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=) 2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: Nzzn4W9poTiUrY4eQxdG/89rjMJwUANdLwSrOWi9950=) 3: UDUln-3qeCrp7STdtVtP-Xg_90E.roa (hash: vObdNNiNWw3evfnIcbLbfyalSMwTqD2xiNwmGGAngXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:74:2b:57:41:2e:11:76:97:fe:62:95:f9:db:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Validity Not Before: Dec 19 01:00:34 2025 GMT Not After : Dec 20 01:00:34 2025 GMT Subject: CN=c2f805e6e99aead65e317122803f0846a9440c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:9c:47:87:6e:61:c9:57:71:b0:64:14:a9: a8:7c:7f:e7:0b:72:08:fb:8c:b6:35:84:0f:1b:1d: f0:cd:64:aa:74:b9:ed:cd:b5:7a:e0:92:c5:53:20: fd:cb:02:4f:26:b7:51:f0:df:e1:17:7e:d4:c5:c1: e7:83:72:6e:6f:64:b8:6f:ef:d2:f8:d1:72:c3:64: 8b:a9:fb:34:c3:71:08:b5:3e:d1:5b:3d:88:f9:0b: 53:ab:c8:89:e7:24:56:9d:21:f3:da:52:f0:74:20: 84:2c:b5:7b:f7:cb:55:9a:57:a4:55:1d:87:54:ca: e3:79:27:0f:92:05:2b:c0:c6:10:e6:f2:e9:04:2e: 11:3e:2b:3f:09:1c:d6:0b:5b:bf:e7:ed:f2:c0:cc: 4e:60:66:c7:0c:67:6c:4e:59:5e:51:33:77:50:f8: 90:e9:87:0e:4c:ba:37:2a:98:62:43:61:d3:a8:7a: fc:c5:31:1f:90:8d:03:ac:c6:98:d0:14:84:31:be: dd:a8:86:03:64:aa:d0:6f:e3:ef:77:f9:74:2f:73: 58:ab:aa:30:72:18:02:86:f4:13:48:56:53:f4:74: 3d:e7:5b:9a:d9:a9:3b:a5:92:76:83:d3:e7:ca:8b: 98:49:9c:22:ed:ec:d3:cc:7c:1b:c4:9e:60:cb:0d: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:05:E6:E9:9A:EA:D6:5E:31:71:22:80:3F:08:46:A9:44:0C:99 X509v3 Authority Key Identifier: keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ff:15:40:46:5b:8c:41:2e:b6:b9:1d:e1:d0:a0:33:e1:b8: 43:f8:c1:57:88:93:a4:f2:dc:23:2f:7b:e0:9f:03:7b:2d:8f: 98:ce:3f:73:42:f8:5c:92:94:cf:09:59:29:81:53:04:07:9b: f3:7d:f4:ca:9a:35:76:31:eb:95:96:69:12:da:af:a5:9f:d0: 67:46:48:ff:36:84:7a:c5:8f:a3:cf:5b:59:64:0d:ac:2f:d6: f5:7c:c3:c8:5b:80:20:24:08:29:3c:4a:82:b4:b2:d5:0e:35: f9:d7:25:cb:e7:83:b5:39:5d:9f:ce:27:af:ec:43:60:1a:93: 5f:bb:57:64:ca:a2:33:a6:ce:78:6b:85:8a:61:ce:b6:fd:fa: 32:97:2d:d3:26:21:b3:24:6c:4f:ab:34:5d:e7:af:a8:34:b4: 62:2b:00:f5:2c:e5:5f:e4:89:ef:1e:14:6d:26:db:6e:6e:4c: 6d:e0:7e:9f:b8:0a:ca:65:d6:ca:7b:11:ab:00:5a:35:18:2d: 90:53:1d:bc:a5:38:6d:50:54:c9:01:cd:b5:28:31:1f:0a:9d: dd:09:7f:c6:a9:7f:a6:3b:d2:53:d5:1b:1d:05:eb:c4:bf:a3: 6e:0e:a0:3a:17:f6:80:19:c8:eb:7a:55:61:c3:eb:eb:4e:c5: 06:7c:c4:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H3QrV0EuEXaX/mKV+ds4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4 ZDI5MmMwHhcNMjUxMjE5MDEwMDM0WhcNMjUxMjIwMDEwMDM0WjAzMTEwLwYDVQQD EyhjMmY4MDVlNmU5OWFlYWQ2NWUzMTcxMjI4MDNmMDg0NmE5NDQwYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gucR4duYclXcbBkFKmofH/nC3II +4y2NYQPGx3wzWSqdLntzbV64JLFUyD9ywJPJrdR8N/hF37UxcHng3Jub2S4b+/S +NFyw2SLqfs0w3EItT7RWz2I+QtTq8iJ5yRWnSHz2lLwdCCELLV798tVmlekVR2H VMrjeScPkgUrwMYQ5vLpBC4RPis/CRzWC1u/5+3ywMxOYGbHDGdsTlleUTN3UPiQ 6YcOTLo3KphiQ2HTqHr8xTEfkI0DrMaY0BSEMb7dqIYDZKrQb+Pvd/l0L3NYq6ow chgChvQTSFZT9HQ951ua2ak7pZJ2g9PnyouYSZwi7ezTzHwbxJ5gyw2TnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML4BebpmurWXjFxIoA/CEapRAyZMB8GA1UdIwQY MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/8VQEZb jEEutrkd4dCgM+G4Q/jBV4iTpPLcIy974J8Dey2PmM4/c0L4XJKUzwlZKYFTBAeb 8330ypo1djHrlZZpEtqvpZ/QZ0ZI/zaEesWPo89bWWQNrC/W9XzDyFuAICQIKTxK grSy1Q41+dcly+eDtTldn84nr+xDYBqTX7tXZMqiM6bOeGuFimHOtv36Mpct0yYh syRsT6s0XeevqDS0YisA9SzlX+SJ7x4UbSbbbm5MbeB+n7gKymXWynsRqwBaNRgt kFMdvKU4bVBUyQHNtSgxHwqd3Ql/xql/pjvSU9UbHQXrxL+jbg6gOhf2gBnI63pV YcPr607FBnzExw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:29 2025 by rpki-client