This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json) Hash identifier: +8+QhTyoIE5MNiLLc+ejqbwNOUb0gEpNGmFRoWQvA9k= Subject key identifier: 68:F1:A7:C4:7B:6C:3B:28:1A:67:08:AE:24:98:0B:26:C5:04:9D:BA Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Certificate serial: 019B3344B0D65C10D1AE4DA6FD26B9A567EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft Manifest number: 1116 Signing time: Thu 18 Dec 2025 21:01:38 +0000 Manifest this update: Thu 18 Dec 2025 21:01:38 +0000 Manifest next update: Fri 19 Dec 2025 21:01:38 +0000 Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=) 2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: /ZifNp+sl2Uq/JqVh8JgFB5UR1KpQUBund8bdApB8Ng=) 3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b0:d6:5c:10:d1:ae:4d:a6:fd:26:b9:a5:67:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Validity Not Before: Dec 18 21:01:38 2025 GMT Not After : Dec 19 21:01:38 2025 GMT Subject: CN=68f1a7c47b6c3b281a6708ae24980b26c5049dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:b0:30:a4:e2:89:3c:c0:ff:fd:e7:53:5a: 88:22:87:82:45:25:36:92:ef:84:f7:d5:74:b9:a8: 30:7e:25:f5:39:c8:fd:3c:b5:6f:2f:3a:02:e1:44: 2a:8b:62:f9:65:f5:75:d1:ac:f7:e7:6f:4a:88:df: 0d:51:e1:92:e7:39:ce:fd:21:34:38:81:8e:0f:8d: 87:e7:04:50:f9:f6:01:b4:ba:27:1c:89:ad:8f:00: d3:36:eb:cb:10:34:1f:93:1d:0b:2b:93:ee:05:75: ae:76:96:6c:61:bb:55:47:a3:48:9b:b0:3c:f0:ce: d1:be:b9:bc:33:2c:64:3a:ca:ed:0c:92:db:2b:d6: 43:6e:c5:12:b4:76:45:b8:41:0e:50:ae:ed:31:40: 17:ae:80:8e:4e:66:c1:c1:fa:3b:65:61:71:00:34: 1b:af:e0:f0:09:34:68:57:1e:18:05:43:da:fc:b8: c1:36:b2:7b:42:3a:c8:46:ad:2a:10:98:ae:7a:3c: b6:b9:a1:85:f9:96:d1:58:3c:f2:33:e7:61:1f:cb: 66:bf:40:51:27:a1:e9:7a:31:51:06:3f:af:e2:d4: a4:79:d8:1e:59:54:96:83:e3:f5:57:09:f0:9b:24: 4e:a5:11:c0:fe:0f:b6:95:24:5a:ab:1f:e6:4f:e0: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:A7:C4:7B:6C:3B:28:1A:67:08:AE:24:98:0B:26:C5:04:9D:BA X509v3 Authority Key Identifier: keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a1:a5:a0:9a:8b:5e:2c:c8:fa:83:ad:bb:56:9e:29:94:5f: b1:cc:fd:fa:7d:99:13:57:d8:88:73:88:4e:e1:f8:e6:83:7f: 1e:c1:34:70:ef:17:20:55:fe:88:55:d1:58:08:35:15:e9:3f: 01:95:00:b5:82:b4:3a:3b:c7:f2:7a:c3:91:b6:fc:11:c4:15: ef:17:b9:50:bf:6d:06:d6:dd:3f:c5:00:8d:0a:92:f0:a6:99: 43:0a:a1:c2:0f:fa:27:f5:9e:52:a8:db:de:09:02:0f:9a:2b: 94:b1:4f:8c:1a:a5:ed:83:49:76:96:5e:06:62:74:e1:be:39: b3:4e:fd:11:61:ba:9f:67:5d:15:34:b1:89:ec:6e:32:98:46: 2f:b6:57:2f:a7:f3:20:4f:3f:2b:53:e3:2e:55:91:45:b3:29: 21:4f:09:66:a5:c2:75:6e:30:a4:4a:ee:50:4a:17:6b:e2:1b: 88:11:aa:37:71:bd:a2:b0:77:8a:1e:56:aa:e7:2b:6b:d6:a9: 1e:85:eb:03:cc:54:2b:28:51:1e:7a:f2:78:75:00:ee:19:23: 66:7a:3f:dd:df:cd:03:93:0a:65:a0:ee:44:e2:21:ad:be:54: a2:08:07:8d:bf:e9:43:e7:4e:49:4a:8f:07:30:98:b9:a7:3e: 86:fd:53:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLDWXBDRrk2m/Sa5pWfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWY0YjA2MGE4Yjc5YjI4OTNkMzMwOWFkNTBkMWNjY2Iy YjllMzEwHhcNMjUxMjE4MjEwMTM4WhcNMjUxMjE5MjEwMTM4WjAzMTEwLwYDVQQD Eyg2OGYxYTdjNDdiNmMzYjI4MWE2NzA4YWUyNDk4MGIyNmM1MDQ5ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVOwMKTiiTzA//3nU1qIIoeCRSU2 ku+E99V0uagwfiX1Ocj9PLVvLzoC4UQqi2L5ZfV10az3529KiN8NUeGS5znO/SE0 OIGOD42H5wRQ+fYBtLonHImtjwDTNuvLEDQfkx0LK5PuBXWudpZsYbtVR6NIm7A8 8M7Rvrm8MyxkOsrtDJLbK9ZDbsUStHZFuEEOUK7tMUAXroCOTmbBwfo7ZWFxADQb r+DwCTRoVx4YBUPa/LjBNrJ7QjrIRq0qEJiuejy2uaGF+ZbRWDzyM+dhH8tmv0BR J6HpejFRBj+v4tSkedgeWVSWg+P1VwnwmyROpRHA/g+2lSRaqx/mT+Dv8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjxp8R7bDsoGmcIriSYCybFBJ26MB8GA1UdIwQY MBaAFEHvSwYKi3myiT0zCa1Q0czLK54xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEt YmY4ZTVkODI2NWEyLzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEtYmY4ZTVkODI2NWEy LzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKGloJqL XizI+oOtu1aeKZRfscz9+n2ZE1fYiHOITuH45oN/HsE0cO8XIFX+iFXRWAg1Fek/ AZUAtYK0OjvH8nrDkbb8EcQV7xe5UL9tBtbdP8UAjQqS8KaZQwqhwg/6J/WeUqjb 3gkCD5orlLFPjBql7YNJdpZeBmJ04b45s079EWG6n2ddFTSxiexuMphGL7ZXL6fz IE8/K1PjLlWRRbMpIU8JZqXCdW4wpEruUEoXa+IbiBGqN3G9orB3ih5Wqucra9ap HoXrA8xUKyhRHnryeHUA7hkjZno/3d/NA5MKZaDuROIhrb5UoggHjb/pQ+dOSUqP BzCYuac+hv1TrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:08 2025 by rpki-client