This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json) Hash identifier: NqZNXtbHMKrvDXzP6wRiuWuI9sH/LSK6oOcitBA+giw= Subject key identifier: A0:CD:AF:B6:12:21:42:E6:DF:7E:AB:C4:F1:E3:95:5C:B1:43:48:80 Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f Certificate serial: 019B047D2900A404D1A790D61100CE5088C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft Manifest number: 0614 Signing time: Tue 09 Dec 2025 19:01:09 +0000 Manifest this update: Tue 09 Dec 2025 19:01:09 +0000 Manifest next update: Wed 10 Dec 2025 19:01:09 +0000 Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: h5HHBPyiNcPurOQW606jSUffDc/wtU87YT4vWUP0Qqg=) 2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=) 3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7d:29:00:a4:04:d1:a7:90:d6:11:00:ce:50:88:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f Validity Not Before: Dec 9 19:01:09 2025 GMT Not After : Dec 10 19:01:09 2025 GMT Subject: CN=a0cdafb6122142e6df7eabc4f1e3955cb1434880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:27:1b:31:3f:c3:40:58:8d:bc:e7:66:ff: df:68:41:38:c4:ff:8e:a5:e2:44:db:45:19:ca:ff: 4c:79:3d:8d:c2:44:40:b9:58:cd:c9:34:01:21:d3: 36:ff:0c:88:b6:e5:a4:9d:31:ab:a5:dd:70:42:eb: bb:59:8b:9b:f6:3d:b2:09:8e:e7:fd:95:85:12:41: 4e:a9:51:01:16:c1:0d:fa:bc:0e:d1:52:79:2b:2b: 50:b0:c8:88:a6:2e:0a:68:d2:13:0e:73:31:1d:cd: 2d:95:11:ac:54:01:7b:d0:5f:a8:f7:21:ff:cb:53: 73:ab:b1:72:e6:e2:7f:7e:ce:77:b0:fd:60:6d:32: 0d:fb:eb:b5:f8:ed:7c:a4:bb:96:3e:ce:2c:7b:58: 59:19:c2:9b:fc:91:c0:32:48:7f:d9:05:d0:86:55: b8:f5:5e:62:13:3b:11:94:5e:9a:aa:55:ad:0d:d7: a5:01:9b:68:ec:2c:f5:af:84:be:74:fe:4e:01:9b: 85:05:ba:4b:12:4d:a7:50:30:37:5e:bc:ca:8a:88: e9:ee:a2:ef:10:6c:fa:62:05:6f:ed:4c:b0:05:3f: c4:e8:fd:e0:26:07:7e:dd:3c:d2:9a:4f:38:42:b0: 68:cc:d9:c8:6e:ac:a8:fd:89:94:57:8d:bd:c6:eb: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CD:AF:B6:12:21:42:E6:DF:7E:AB:C4:F1:E3:95:5C:B1:43:48:80 X509v3 Authority Key Identifier: keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b4:17:7e:b6:7f:a4:f6:9b:88:8d:bd:87:41:09:c1:ae:24: 64:0e:04:fd:ab:ea:16:a0:68:38:2a:20:99:33:ba:c3:e9:7f: e6:a2:7a:aa:89:4f:8c:cf:88:46:3e:7e:46:9f:fb:f8:c0:6b: d1:43:fc:2f:cb:bc:fd:c1:23:6e:73:f2:76:38:be:6c:66:1d: f2:1d:38:b1:8d:4a:74:9a:be:d4:01:22:3e:5c:74:e6:fc:84: b2:6c:3e:62:cd:a1:8a:74:b2:19:83:3d:45:41:6a:3f:cc:b6: 54:c7:5c:e8:eb:a1:46:1a:11:77:10:7c:29:ae:cf:27:93:23: ba:6d:96:ee:c7:8b:67:a3:31:7c:ef:31:bd:e0:43:fc:d9:63: b9:c6:69:05:17:8e:69:b7:54:b7:21:08:90:86:4f:0e:ce:59: 30:42:76:e3:19:69:b1:dc:b4:8c:e7:c4:20:c7:8f:a6:ef:4c: 9b:7e:b2:81:4f:66:03:cd:99:8e:6a:95:ed:76:bc:b1:68:e2: 8b:61:42:2e:f5:ec:c0:48:1f:86:7a:7d:ce:f9:82:f2:9c:dd: 00:53:36:30:16:70:0f:1e:ee:a3:b8:58:96:a8:3b:00:93:bf: 07:f6:ac:3a:d1:66:9d:f4:8a:36:cc:6f:1f:ea:de:6b:76:0f: 05:d1:a3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfSkApATRp5DWEQDOUIjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj YzdiOWYwHhcNMjUxMjA5MTkwMTA5WhcNMjUxMjEwMTkwMTA5WjAzMTEwLwYDVQQD EyhhMGNkYWZiNjEyMjE0MmU2ZGY3ZWFiYzRmMWUzOTU1Y2IxNDM0ODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUnGzE/w0BYjbznZv/faEE4xP+O peJE20UZyv9MeT2NwkRAuVjNyTQBIdM2/wyItuWknTGrpd1wQuu7WYub9j2yCY7n /ZWFEkFOqVEBFsEN+rwO0VJ5KytQsMiIpi4KaNITDnMxHc0tlRGsVAF70F+o9yH/ y1Nzq7Fy5uJ/fs53sP1gbTIN++u1+O18pLuWPs4se1hZGcKb/JHAMkh/2QXQhlW4 9V5iEzsRlF6aqlWtDdelAZto7Cz1r4S+dP5OAZuFBbpLEk2nUDA3XrzKiojp7qLv EGz6YgVv7UywBT/E6P3gJgd+3TzSmk84QrBozNnIbqyo/YmUV429xut14QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDNr7YSIULm336rxPHjlVyxQ0iAMB8GA1UdIwQY MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7QXfrZ/ pPabiI29h0EJwa4kZA4E/avqFqBoOCogmTO6w+l/5qJ6qolPjM+IRj5+Rp/7+MBr 0UP8L8u8/cEjbnPydji+bGYd8h04sY1KdJq+1AEiPlx05vyEsmw+Ys2hinSyGYM9 RUFqP8y2VMdc6OuhRhoRdxB8Ka7PJ5Mjum2W7seLZ6MxfO8xveBD/NljucZpBReO abdUtyEIkIZPDs5ZMEJ24xlpsdy0jOfEIMePpu9Mm36ygU9mA82ZjmqV7Xa8sWji i2FCLvXswEgfhnp9zvmC8pzdAFM2MBZwDx7uo7hYlqg7AJO/B/asOtFmnfSKNsxv H+rea3YPBdGj7g== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:36 2025 by rpki-client