This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json) Hash identifier: YMA8pWPy3sBLJKqDE56aFmK/MvqdlUiGhZLUC+9fzBc= Subject key identifier: 60:CA:3A:44:66:DB:D0:C8:33:09:84:2F:4F:91:CA:D2:C9:F2:7A:DA Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B25BF9FE4741967C86FEC8555580CAE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft Manifest number: 100F Signing time: Tue 16 Dec 2025 06:01:13 +0000 Manifest this update: Tue 16 Dec 2025 06:01:13 +0000 Manifest next update: Wed 17 Dec 2025 06:01:13 +0000 Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=) 2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=) 3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: iJQ83/nUHEeHYElt1cp2gAmm7UtJHuQHMLhXEqSwOzY=) 4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:9f:e4:74:19:67:c8:6f:ec:85:55:58:0c:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Dec 16 06:01:13 2025 GMT Not After : Dec 17 06:01:13 2025 GMT Subject: CN=60ca3a4466dbd0c83309842f4f91cad2c9f27ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:85:c8:cc:a1:3b:ba:8d:a6:c5:13:a5:af: 30:be:65:ef:21:3f:3f:18:87:f3:5c:55:bb:d8:65: 78:0e:89:28:21:2a:80:60:bd:95:63:d3:b3:42:30: d9:6e:fa:92:9b:29:61:d2:c7:84:46:d6:d1:d7:14: dc:ff:03:00:4f:90:c3:e7:13:cf:99:c4:2a:e3:1a: 2e:4c:5f:32:84:cf:41:81:71:8a:18:00:1b:f9:7f: 82:e6:6c:4c:8f:df:80:f2:00:4e:4a:bd:a2:06:88: 1a:f9:94:6e:6d:5a:02:a2:95:88:78:46:45:1d:4d: b8:33:8a:50:c8:b3:7b:9d:d7:79:33:00:37:33:0c: 0a:3e:d3:c8:98:26:30:d9:e8:fa:db:cb:1f:26:0b: 93:30:62:93:58:2a:bb:9b:a0:3c:c2:21:57:fb:e3: 67:5b:5a:fe:61:f6:c2:01:65:fe:90:70:ec:40:90: 65:f2:fd:33:19:f5:53:9b:4c:30:bd:3c:ef:93:c2: 10:4c:28:ca:3e:f2:f6:b6:2a:bc:f3:59:c5:e6:2a: da:14:84:ea:53:6f:df:3d:d9:1c:12:66:c2:4c:96: 73:4d:48:31:5a:5b:aa:91:39:37:af:23:7b:19:ea: 35:f4:00:7a:c4:3c:02:67:8b:18:84:df:c8:67:22: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:3A:44:66:DB:D0:C8:33:09:84:2F:4F:91:CA:D2:C9:F2:7A:DA X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:96:b3:e2:bd:c9:17:f6:00:e7:f8:4f:3b:90:22:5e:6a: ed:76:e0:0d:8d:2c:b9:0c:e0:e4:25:c5:87:85:dd:ab:d3:e7: 06:b1:9a:e8:00:2a:91:66:68:35:71:34:78:c3:e5:69:b5:22: 4a:8f:de:c3:3a:24:e7:5d:cf:dc:6b:c0:34:3c:bc:fc:fd:24: 80:b7:a0:ba:4d:61:94:03:ea:57:0e:45:4a:78:c8:fa:74:c3: a8:e6:98:63:9e:98:32:65:25:27:4b:cf:61:8c:c2:91:84:84: 25:86:84:8b:ce:95:49:08:7a:cd:0a:e9:c9:ba:e9:ab:5a:ad: fe:c4:57:68:b0:22:7c:c7:22:d7:74:02:ca:aa:c0:c8:52:23: 24:c3:3d:4c:01:71:e6:ea:8a:98:0a:04:35:e9:40:7f:aa:ed: 12:11:88:66:53:71:66:96:51:3d:b6:49:49:ea:75:32:e8:3d: 30:cd:8a:18:dd:7b:f4:07:2c:c8:7f:35:67:cc:76:18:2a:60: 0c:fe:49:57:32:87:4a:5e:fb:9d:59:30:25:b2:39:7c:8d:cc: 12:4d:82:15:1c:6c:ef:48:cf:ac:e9:e5:10:6b:84:ff:08:b7: 9f:ee:52:5d:d3:60:ea:6a:38:d9:0e:32:16:bf:b5:a6:2f:3d: 28:5c:d3:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv5/kdBlnyG/shVVYDK6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjUxMjE2MDYwMTEzWhcNMjUxMjE3MDYwMTEzWjAzMTEwLwYDVQQD Eyg2MGNhM2E0NDY2ZGJkMGM4MzMwOTg0MmY0ZjkxY2FkMmM5ZjI3YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJiFyMyhO7qNpsUTpa8wvmXvIT8/ GIfzXFW72GV4DokoISqAYL2VY9OzQjDZbvqSmylh0seERtbR1xTc/wMAT5DD5xPP mcQq4xouTF8yhM9BgXGKGAAb+X+C5mxMj9+A8gBOSr2iBoga+ZRubVoCopWIeEZF HU24M4pQyLN7ndd5MwA3MwwKPtPImCYw2ej628sfJguTMGKTWCq7m6A8wiFX++Nn W1r+YfbCAWX+kHDsQJBl8v0zGfVTm0wwvTzvk8IQTCjKPvL2tiq881nF5iraFITq U2/fPdkcEmbCTJZzTUgxWluqkTk3ryN7Geo19AB6xDwCZ4sYhN/IZyJaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDKOkRm29DIMwmEL0+RytLJ8nraMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMeWs+K9 yRf2AOf4TzuQIl5q7XbgDY0suQzg5CXFh4Xdq9PnBrGa6AAqkWZoNXE0eMPlabUi So/ewzok513P3GvANDy8/P0kgLeguk1hlAPqVw5FSnjI+nTDqOaYY56YMmUlJ0vP YYzCkYSEJYaEi86VSQh6zQrpybrpq1qt/sRXaLAifMci13QCyqrAyFIjJMM9TAFx 5uqKmAoENelAf6rtEhGIZlNxZpZRPbZJSep1Mug9MM2KGN179AcsyH81Z8x2GCpg DP5JVzKHSl77nVkwJbI5fI3MEk2CFRxs70jPrOnlEGuE/wi3n+5SXdNg6mo42Q4y Fr+1pi89KFzTtw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:44:25 2025 by rpki-client