This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json) Hash identifier: s/M0/kALMJQKgqPGvo/m2P040ZGqNbv3HurReAXbMCo= Subject key identifier: 2D:7F:0A:B8:EB:20:22:9F:46:FD:94:D6:7A:72:87:38:36:7C:0E:87 Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019B25BF0720C7BFF311953125215A1164C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 06:00:34 +0000 Manifest this update: Tue 16 Dec 2025 06:00:34 +0000 Manifest next update: Wed 17 Dec 2025 06:00:34 +0000 Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=) 2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: SSTm+2hfvsih6KTBJAYHAGKW//zJieiSeDJSMSpQfA0=) 3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:07:20:c7:bf:f3:11:95:31:25:21:5a:11:64:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Dec 16 06:00:34 2025 GMT Not After : Dec 17 06:00:34 2025 GMT Subject: CN=2d7f0ab8eb20229f46fd94d67a728738367c0e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:e8:4b:25:51:6b:6b:b3:65:78:54:18:74: 1b:e4:f5:7a:c5:a3:49:e5:b1:a5:a8:a6:05:65:17: 87:a7:7c:6b:4a:dd:c0:6c:43:0d:2c:9c:c5:0f:d3: fd:83:e2:c6:1d:31:60:06:83:f3:e3:91:d9:b0:a2: 7d:49:99:2a:05:2e:83:18:ef:b7:57:8d:74:49:a2: f7:d0:e9:ef:84:dd:78:e9:37:5a:79:74:9e:f0:7d: 0f:e3:1c:55:ab:85:d9:d7:ac:2f:4c:ec:24:a8:02: 82:44:7b:7d:ac:45:34:1a:65:21:1f:d2:a0:c9:a3: aa:5a:74:39:30:8c:7d:cf:28:4f:1b:52:92:71:9c: 54:29:7a:0c:90:8f:8c:e6:44:63:2d:63:b5:fc:eb: 6d:46:dd:d3:a6:26:b1:a6:2e:be:59:3f:8b:f9:d3: c0:56:4a:5a:51:b6:a5:66:85:5e:56:bc:29:7c:83: ce:30:6a:b1:bf:ce:d0:38:c4:e7:15:ff:39:db:e5: a1:3b:cf:84:36:c1:2b:e3:a7:25:66:07:45:73:02: 0a:09:49:50:77:c9:5f:05:bd:07:6e:a8:b8:50:cf: d8:79:6e:3a:f4:f2:e1:43:36:50:d1:31:33:25:57: 30:b3:12:4e:41:9c:4b:84:40:89:2b:be:38:9d:b2: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:0A:B8:EB:20:22:9F:46:FD:94:D6:7A:72:87:38:36:7C:0E:87 X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:43:55:20:ca:2a:a4:69:4f:65:68:e8:95:78:6a:dc:ee:25: 6b:e7:ea:c0:75:a8:7b:81:72:cd:e4:d9:74:56:90:c2:62:74: 87:f2:6a:76:38:0e:76:ef:67:e1:46:42:22:5d:12:b1:dd:f6: d0:57:49:89:79:7b:53:6a:c2:13:84:04:87:52:0d:bf:1f:df: c6:a8:0b:d6:75:a1:66:0f:a6:30:4e:97:6b:23:66:a0:ff:c3: a6:b0:cd:ee:46:8d:94:ab:4e:54:4c:85:5c:4c:4d:c3:c2:2f: 54:86:a4:86:e2:7d:51:f7:c7:53:ce:66:81:ea:15:b1:d8:8f: 58:f3:49:3f:2a:1b:b4:a3:1f:42:ce:4b:a3:04:b4:15:92:6e: aa:e6:b1:39:0b:b8:38:35:5c:88:88:a1:b9:11:cc:bf:6f:5f: 59:1e:25:29:a6:1d:6f:c9:9d:90:9c:82:a1:86:7e:aa:f4:54: 9c:37:2b:0c:08:14:a7:e8:d7:6b:cb:2e:59:87:6d:b9:f8:52: e9:9b:0d:2a:90:11:bf:97:04:d7:bb:4a:17:f2:31:b1:7d:fa: ba:e5:e6:1b:d6:cb:a5:65:cd:88:3b:47:06:c7:38:f4:28:46: a3:f7:80:73:b0:8b:c6:42:d9:a1:11:e7:fa:00:0e:38:7f:10: 91:37:fa:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslvwcgx7/zEZUxJSFaEWTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjUxMjE2MDYwMDM0WhcNMjUxMjE3MDYwMDM0WjAzMTEwLwYDVQQD EygyZDdmMGFiOGViMjAyMjlmNDZmZDk0ZDY3YTcyODczODM2N2MwZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6noSyVRa2uzZXhUGHQb5PV6xaNJ 5bGlqKYFZReHp3xrSt3AbEMNLJzFD9P9g+LGHTFgBoPz45HZsKJ9SZkqBS6DGO+3 V410SaL30OnvhN146TdaeXSe8H0P4xxVq4XZ16wvTOwkqAKCRHt9rEU0GmUhH9Kg yaOqWnQ5MIx9zyhPG1KScZxUKXoMkI+M5kRjLWO1/OttRt3Tpiaxpi6+WT+L+dPA VkpaUbalZoVeVrwpfIPOMGqxv87QOMTnFf852+WhO8+ENsEr46clZgdFcwIKCUlQ d8lfBb0Hbqi4UM/YeW469PLhQzZQ0TEzJVcwsxJOQZxLhECJK744nbJoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1/CrjrICKfRv2U1npyhzg2fA6HMB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0NVIMoq pGlPZWjolXhq3O4la+fqwHWoe4FyzeTZdFaQwmJ0h/JqdjgOdu9n4UZCIl0Ssd32 0FdJiXl7U2rCE4QEh1INvx/fxqgL1nWhZg+mME6XayNmoP/DprDN7kaNlKtOVEyF XExNw8IvVIakhuJ9UffHU85mgeoVsdiPWPNJPyobtKMfQs5LowS0FZJuquaxOQu4 ODVciIihuRHMv29fWR4lKaYdb8mdkJyCoYZ+qvRUnDcrDAgUp+jXa8suWYdtufhS 6ZsNKpARv5cE17tKF/IxsX36uuXmG9bLpWXNiDtHBsc49ChGo/eAc7CLxkLZoRHn +gAOOH8QkTf6Zg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:47:21 2025 by rpki-client