This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json) Hash identifier: N6sgtrWor1xGvwEbYE6ftNvUl7vwwu0dcNQic5z8O/0= Subject key identifier: B8:4F:7F:A2:C6:B9:88:41:D0:AC:87:61:33:E9:02:E8:F5:0A:0A:D4 Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Certificate serial: 019B0F37AFEFBDC35CDDCC9BE2ADE8B42580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft Manifest number: 0F01 Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=) 2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 17zxS/HaX/A9rsr8mqC8tgUYZecJFQpbDyIFYL9/a50=) 3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:af:ef:bd:c3:5c:dd:cc:9b:e2:ad:e8:b4:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=b84f7fa2c6b98841d0ac876133e902e8f50a0ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:78:30:2b:33:8b:10:df:7c:72:76:9f:ee: 64:a7:17:e1:49:3c:dc:1d:bd:e9:ba:a4:75:8b:f6: 4e:4f:a3:74:4e:29:2d:e0:ed:dc:b4:48:bf:3b:ba: 9f:7b:80:94:2b:fd:de:1c:b2:94:3f:32:9e:9d:fd: ca:c5:b1:60:ce:31:49:2a:b8:2f:5d:21:ac:5e:68: 4c:2e:51:c1:e0:c5:73:a8:f5:cf:02:23:d5:c2:ce: 82:2b:4a:3c:55:82:7e:65:dc:e4:50:0e:fd:4a:8d: d6:51:b4:f4:61:23:03:ae:d3:2a:ce:65:68:34:98: 92:f9:52:a4:7c:b4:87:f5:a4:ac:87:dc:28:63:4d: a2:73:af:a4:a1:e5:d1:61:e4:1a:08:c4:3e:18:0a: 04:84:34:b5:5e:d5:65:b7:73:ff:39:ab:d0:c8:c0: 00:04:07:65:56:7d:df:b0:03:0c:42:c4:aa:f8:8c: dd:a2:26:50:0f:35:a6:bf:15:ea:b3:a1:79:22:a7: e9:3f:b9:ce:de:d6:41:d7:1e:15:03:6f:1d:51:bf: 3f:e6:31:03:09:07:29:ae:0d:e0:89:46:ff:d9:73: 17:3b:6a:50:20:86:0d:f3:bd:d7:c9:d9:ac:5f:5b: 89:06:4e:2b:c8:fa:27:e8:5c:6c:5c:52:54:4d:ca: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4F:7F:A2:C6:B9:88:41:D0:AC:87:61:33:E9:02:E8:F5:0A:0A:D4 X509v3 Authority Key Identifier: keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:ec:2a:b4:cb:ca:ef:17:59:df:a5:9b:e4:67:c7:f0:ac: 93:2b:d1:05:1d:00:83:f5:e8:d1:90:45:5b:38:ba:54:c6:4f: b0:50:00:c6:ab:0c:da:4c:e5:9c:f8:f1:33:d4:50:45:7c:65: ee:76:8a:fe:b8:87:9b:97:af:a9:54:f5:0c:6b:02:44:20:c2: 60:70:ca:a6:e5:9b:f1:1b:b9:14:d7:9a:30:7c:d5:23:9f:4b: aa:ad:48:68:79:75:97:70:15:ba:e3:b1:c1:86:79:d9:96:87: db:b5:65:18:95:cb:9a:e7:ba:62:7c:97:56:78:cc:cd:b4:c9: 12:73:63:b9:06:05:53:c1:35:ac:18:9b:af:8e:16:02:3f:23: 5e:1a:8f:7f:a6:68:f7:d8:8f:ff:ba:cc:7f:f2:3b:04:b3:c2: d5:6e:52:a6:2e:10:77:0c:0e:b8:14:9b:8f:45:40:79:82:fe: 02:36:e5:03:21:f4:e0:cb:8e:fa:d9:5c:c2:9f:88:0f:d7:5c: 9f:03:05:f0:4c:8c:40:58:be:ff:79:b6:58:74:37:de:13:f2: 4a:5a:ac:ca:59:e1:8a:5b:65:30:0a:7e:8e:1a:f2:7d:0b:b3: 8a:52:af:4b:15:24:cf:9a:93:81:a3:bd:29:12:87:47:31:a2: e7:ac:ce:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6/vvcNc3cyb4q3otCWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2M3MDgzNDYwZTFhNGM3MmM0YmM0Mjc2MzEzZDNhODU5 NDRhODcwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD EyhiODRmN2ZhMmM2Yjk4ODQxZDBhYzg3NjEzM2U5MDJlOGY1MGEwYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtd4MCszixDffHJ2n+5kpxfhSTzc Hb3puqR1i/ZOT6N0Tikt4O3ctEi/O7qfe4CUK/3eHLKUPzKenf3KxbFgzjFJKrgv XSGsXmhMLlHB4MVzqPXPAiPVws6CK0o8VYJ+ZdzkUA79So3WUbT0YSMDrtMqzmVo NJiS+VKkfLSH9aSsh9woY02ic6+koeXRYeQaCMQ+GAoEhDS1XtVlt3P/OavQyMAA BAdlVn3fsAMMQsSq+IzdoiZQDzWmvxXqs6F5IqfpP7nO3tZB1x4VA28dUb8/5jED CQcprg3giUb/2XMXO2pQIIYN873XydmsX1uJBk4ryPon6FxsXFJUTcoyBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhPf6LGuYhB0KyHYTPpAuj1CgrUMB8GA1UdIwQY MBaAFEB8cINGDhpMcsS8QnYxPTqFlEqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2Mjct OTg1ZWQxNWM5YWViLzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2MjctOTg1ZWQxNWM5YWVi LzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqLsKrTL yu8XWd+lm+Rnx/CskyvRBR0Ag/Xo0ZBFWzi6VMZPsFAAxqsM2kzlnPjxM9RQRXxl 7naK/riHm5evqVT1DGsCRCDCYHDKpuWb8Ru5FNeaMHzVI59Lqq1IaHl1l3AVuuOx wYZ52ZaH27VlGJXLmue6YnyXVnjMzbTJEnNjuQYFU8E1rBibr44WAj8jXhqPf6Zo 99iP/7rMf/I7BLPC1W5Spi4QdwwOuBSbj0VAeYL+AjblAyH04MuO+tlcwp+ID9dc nwMF8EyMQFi+/3m2WHQ33hPySlqsylnhiltlMAp+jhryfQuzilKvSxUkz5qTgaO9 KRKHRzGi56zOdw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:33 2025 by rpki-client