This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json) Hash identifier: jZhjZsIsmFHqaHCF3N8sOieJ1EfP+vHBXcnSXE+U+ns= Subject key identifier: E2:BC:2E:B5:21:81:A0:53:EB:68:18:D6:5E:32:9B:ED:2F:2D:7A:AC Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75 Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075 Certificate serial: 019B19167066825A80C396DD1C80F39A6B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft Manifest number: 16C3 Signing time: Sat 13 Dec 2025 19:00:59 +0000 Manifest this update: Sat 13 Dec 2025 19:00:59 +0000 Manifest next update: Sun 14 Dec 2025 19:00:59 +0000 Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=) 2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: XIjBJ07ZfPSVm6+ezV/17NV4v/25bqGvSfTUKemg1YY=) 3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:70:66:82:5a:80:c3:96:dd:1c:80:f3:9a:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42004477243ca20b95dc8efe07337639806f6075 Validity Not Before: Dec 13 19:00:59 2025 GMT Not After : Dec 14 19:00:59 2025 GMT Subject: CN=e2bc2eb52181a053eb6818d65e329bed2f2d7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:72:08:e8:3b:5e:c4:77:52:39:6e:c1:dd: 94:75:43:64:d8:b8:6a:f9:cf:22:d1:b3:50:47:3d: 80:2d:53:7d:64:09:55:24:35:cf:e0:82:5a:e8:03: 14:42:5a:ce:34:90:7b:88:be:cc:3d:58:8a:1b:06: 79:df:58:d1:77:f2:99:c0:96:b6:e4:c2:03:21:f1: 48:da:4f:cd:d1:be:a1:ee:88:55:8d:41:b3:ae:56: 8b:ba:f0:62:3d:4c:ec:c9:66:a9:4f:54:65:b1:86: 27:04:71:ca:5b:e4:53:64:a7:06:70:26:96:a8:d9: 79:e7:aa:45:13:7c:0b:01:a5:f6:e8:55:1c:ca:af: ec:f7:a4:8b:80:24:25:12:76:31:97:c2:d1:29:b4: 6e:d2:11:b7:1a:8c:3a:a4:20:ab:72:71:39:1d:e0: 00:0e:f9:e1:18:42:fa:12:16:cd:5f:f5:23:0b:f0: a7:a9:7d:25:1d:63:51:3a:7c:b6:52:a9:a4:88:00: 69:68:3f:d5:c5:6c:c7:9e:29:11:27:fd:1b:ae:3c: d7:ad:d6:99:6e:35:9a:10:65:01:86:4e:6d:83:99: b6:ed:31:de:96:8a:b6:b0:89:a8:05:7f:19:48:70: 9e:a6:9c:94:df:ab:5c:23:f6:15:07:43:96:f5:9c: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BC:2E:B5:21:81:A0:53:EB:68:18:D6:5E:32:9B:ED:2F:2D:7A:AC X509v3 Authority Key Identifier: keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ac:8e:32:cd:14:be:37:5b:7b:b5:17:88:b8:24:82:cf:ed: cc:ef:c3:bf:ae:22:68:75:42:74:d1:b1:53:50:ef:3d:85:14: e4:4f:a1:8f:eb:d3:6c:52:01:48:46:6d:56:b0:72:25:d2:5e: a3:ac:83:0f:79:43:60:86:50:22:d4:a1:81:bd:2f:33:0d:1c: 9e:1d:c3:0b:b3:66:33:f1:26:ee:d7:05:5d:89:ff:ca:b2:0c: 50:40:79:66:b7:34:ae:0e:91:0a:5d:a8:a3:3c:5b:35:96:5d: 1e:e8:4f:7a:c0:8a:8a:eb:fb:de:b7:75:1e:e3:80:9d:03:09: fa:43:8a:87:26:31:41:ee:28:95:db:fc:ce:d2:5b:4c:96:07: 16:39:6a:e6:f9:9d:cf:07:3c:fd:6b:ba:39:e9:2f:e7:32:e5: 2b:d1:d4:dc:16:a6:da:b3:25:51:e0:82:92:2e:66:27:9b:d6: 37:bc:53:96:79:f5:5c:3e:8e:b9:56:da:96:2d:82:7f:c4:dd: d5:5d:1a:1c:e2:4f:4c:68:42:b7:38:6d:69:a8:f5:68:05:50: 21:a6:7d:ce:3d:3e:68:98:b3:df:d0:3d:ef:ab:06:30:ae:ef: 2f:18:90:bf:1f:a1:f4:e9:e8:34:e7:ae:74:85:26:00:4a:2b: 7c:bc:fd:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFnBmglqAw5bdHIDzmmsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA0NDc3MjQzY2EyMGI5NWRjOGVmZTA3MzM3NjM5ODA2 ZjYwNzUwHhcNMjUxMjEzMTkwMDU5WhcNMjUxMjE0MTkwMDU5WjAzMTEwLwYDVQQD EyhlMmJjMmViNTIxODFhMDUzZWI2ODE4ZDY1ZTMyOWJlZDJmMmQ3YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG1yCOg7XsR3Ujluwd2UdUNk2Lhq +c8i0bNQRz2ALVN9ZAlVJDXP4IJa6AMUQlrONJB7iL7MPViKGwZ531jRd/KZwJa2 5MIDIfFI2k/N0b6h7ohVjUGzrlaLuvBiPUzsyWapT1RlsYYnBHHKW+RTZKcGcCaW qNl556pFE3wLAaX26FUcyq/s96SLgCQlEnYxl8LRKbRu0hG3Gow6pCCrcnE5HeAA DvnhGEL6EhbNX/UjC/CnqX0lHWNROny2UqmkiABpaD/VxWzHnikRJ/0brjzXrdaZ bjWaEGUBhk5tg5m27THeloq2sImoBX8ZSHCeppyU36tcI/YVB0OW9ZxgnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK8LrUhgaBT62gY1l4ym+0vLXqsMB8GA1UdIwQY MBaAFEIARHckPKILldyO/gczdjmAb2B1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEt Y2ZhN2EzMTBkNTQyLzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEtY2ZhN2EzMTBkNTQy LzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKyOMs0U vjdbe7UXiLgkgs/tzO/Dv64iaHVCdNGxU1DvPYUU5E+hj+vTbFIBSEZtVrByJdJe o6yDD3lDYIZQItShgb0vMw0cnh3DC7NmM/Em7tcFXYn/yrIMUEB5Zrc0rg6RCl2o ozxbNZZdHuhPesCKiuv73rd1HuOAnQMJ+kOKhyYxQe4oldv8ztJbTJYHFjlq5vmd zwc8/Wu6Oekv5zLlK9HU3Bam2rMlUeCCki5mJ5vWN7xTlnn1XD6OuVbali2Cf8Td 1V0aHOJPTGhCtzhtaaj1aAVQIaZ9zj0+aJiz39A976sGMK7vLxiQvx+h9OnoNOeu dIUmAEorfLz9nA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:16 2025 by rpki-client