This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: rUGQcZKUBVPM386iiRys2Eb+hdpMinrv7Br4YuK98gM= Subject key identifier: C6:39:C7:32:17:08:F4:6B:B1:03:EE:22:FB:A6:1C:52:78:C4:12:7E Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B0E92C878AC285423097D046A00EB254C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 13E3 Signing time: Thu 11 Dec 2025 18:00:59 +0000 Manifest this update: Thu 11 Dec 2025 18:00:59 +0000 Manifest next update: Fri 12 Dec 2025 18:00:59 +0000 Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=) 2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=) 3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: YyLbYOH6DB/0nnYefNhtmr5Rz4Hk5rKyWUllrS9TZnU=) 4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=) 5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=) 6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=) 7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:c8:78:ac:28:54:23:09:7d:04:6a:00:eb:25:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Dec 11 18:00:59 2025 GMT Not After : Dec 12 18:00:59 2025 GMT Subject: CN=c639c7321708f46bb103ee22fba61c5278c4127e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:60:dc:7b:66:e5:a8:9e:80:9c:d3:d0:29:78: 2a:20:8a:17:7b:85:48:dc:97:1d:16:73:4b:33:08: 50:db:f2:b2:49:48:b8:19:51:9f:51:5e:b7:67:63: bf:8c:30:a4:8a:3b:b3:46:54:b7:da:f1:61:47:7e: a4:15:ff:cd:40:21:f4:34:6d:86:25:b2:78:74:19: 4b:28:ec:3f:69:75:40:6c:bc:dc:c9:2a:17:26:2d: a1:a8:32:3d:34:16:24:6a:ad:18:0e:9a:ec:f9:3c: 63:ff:86:a5:11:7a:c5:3f:c7:e7:fb:e7:bb:bd:dc: c1:00:01:ed:ac:d0:c4:b3:e0:66:e8:67:9a:bc:3f: 1f:05:98:c2:66:0a:2d:9d:d9:94:54:1b:d0:4a:25: 21:29:58:a3:71:35:bc:54:40:57:26:2d:41:76:97: 63:3e:57:8a:9d:cf:72:25:85:f7:9e:87:1c:47:26: 91:98:23:10:e3:05:57:e5:a4:78:22:19:40:fb:8b: dd:c0:46:66:67:f4:80:d2:15:93:d3:bd:eb:fc:15: 56:98:96:93:90:68:21:d2:35:49:51:df:9e:e2:e9: 43:4b:c9:19:f9:57:37:88:54:a0:22:92:76:6e:5b: 12:03:b2:f2:87:46:ed:d8:fb:95:fd:fc:d6:1c:21: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:C7:32:17:08:F4:6B:B1:03:EE:22:FB:A6:1C:52:78:C4:12:7E X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b6:f7:f3:e4:e6:5f:d6:5a:61:f6:86:a7:40:36:53:78:30: 34:07:f2:97:f6:a5:23:9a:ea:5a:33:bb:c7:2c:b9:2c:97:8c: 64:41:71:38:27:ef:71:ac:94:1e:fa:24:b0:48:c8:df:ab:2d: 3f:23:01:24:b3:96:06:58:74:98:92:9f:ba:44:71:ff:29:44: fa:66:15:9c:cd:37:0f:87:25:05:5d:61:24:6f:ae:b5:8a:3f: aa:5b:c8:90:83:fb:90:41:f3:d3:ae:e4:8d:42:d1:25:05:c0: ff:09:81:89:6e:d3:4b:53:cc:9f:59:ad:75:5d:b0:39:03:10: 9e:36:14:e7:82:e1:db:2c:0c:c2:33:d5:fd:97:a9:db:be:e3: e9:8c:e2:bb:ce:85:96:57:98:9f:1b:c2:e9:98:2d:ac:ff:2d: cf:b2:45:92:3d:3d:d6:b2:e0:37:18:09:42:2c:db:36:46:98: a7:4d:4c:67:c7:b9:73:db:d2:24:ac:f1:a9:a8:58:66:2e:9f: 91:0e:8e:73:bb:36:11:e4:61:87:32:a2:18:e6:58:48:cd:c4: 04:92:76:99:ff:05:c4:65:7e:7f:99:41:d4:10:a4:79:fd:37: 1f:70:77:c2:71:fb:37:82:e1:77:2c:f8:cc:04:4b:13:20:bf: 1e:0d:9f:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOksh4rChUIwl9BGoA6yVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjUxMjExMTgwMDU5WhcNMjUxMjEyMTgwMDU5WjAzMTEwLwYDVQQD EyhjNjM5YzczMjE3MDhmNDZiYjEwM2VlMjJmYmE2MWM1Mjc4YzQxMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mDce2blqJ6AnNPQKXgqIIoXe4VI 3JcdFnNLMwhQ2/KySUi4GVGfUV63Z2O/jDCkijuzRlS32vFhR36kFf/NQCH0NG2G JbJ4dBlLKOw/aXVAbLzcySoXJi2hqDI9NBYkaq0YDprs+Txj/4alEXrFP8fn++e7 vdzBAAHtrNDEs+Bm6GeavD8fBZjCZgotndmUVBvQSiUhKVijcTW8VEBXJi1Bdpdj PleKnc9yJYX3noccRyaRmCMQ4wVX5aR4IhlA+4vdwEZmZ/SA0hWT073r/BVWmJaT kGgh0jVJUd+e4ulDS8kZ+Vc3iFSgIpJ2blsSA7Lyh0bt2PuV/fzWHCGyMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY5xzIXCPRrsQPuIvumHFJ4xBJ+MB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrb38+Tm X9ZaYfaGp0A2U3gwNAfyl/alI5rqWjO7xyy5LJeMZEFxOCfvcayUHvoksEjI36st PyMBJLOWBlh0mJKfukRx/ylE+mYVnM03D4clBV1hJG+utYo/qlvIkIP7kEHz067k jULRJQXA/wmBiW7TS1PMn1mtdV2wOQMQnjYU54Lh2ywMwjPV/Zep277j6Yziu86F lleYnxvC6ZgtrP8tz7JFkj091rLgNxgJQizbNkaYp01MZ8e5c9vSJKzxqahYZi6f kQ6Oc7s2EeRhhzKiGOZYSM3EBJJ2mf8FxGV+f5lB1BCkef03H3B3wnH7N4Lhdyz4 zARLEyC/Hg2fhg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:14 2025 by rpki-client