This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json) Hash identifier: iQnclAVdS0g1j0gMgvA22Q7SuRHmevvc7VrLmLvSUuw= Subject key identifier: EF:1D:21:7E:A0:BF:46:75:76:5A:CD:3F:79:29:B8:C6:2A:6C:FB:E1 Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4 Certificate serial: 019B21E313704B4E908B76B04FE88A01D546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft Manifest number: 046B Signing time: Mon 15 Dec 2025 12:01:28 +0000 Manifest this update: Mon 15 Dec 2025 12:01:28 +0000 Manifest next update: Tue 16 Dec 2025 12:01:28 +0000 Files and hashes: 1: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (hash: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=) 2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: YCLLGKp/dwPdCF8mQf1qfIZEmQf5+4eBVKChTmwD4yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:13:70:4b:4e:90:8b:76:b0:4f:e8:8a:01:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4 Validity Not Before: Dec 15 12:01:28 2025 GMT Not After : Dec 16 12:01:28 2025 GMT Subject: CN=ef1d217ea0bf4675765acd3f7929b8c62a6cfbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:5f:ac:75:73:66:18:f9:a6:de:4c:89:5f: 49:68:df:f7:59:28:3f:c2:28:7b:c0:d5:c4:b3:04: 10:a1:ac:44:d0:aa:db:a3:0b:19:da:47:0c:e4:ba: 7c:b7:2c:7f:b6:57:db:61:6f:02:31:fa:fb:f2:39: 76:4a:0a:21:ca:dd:4a:18:ab:b2:d0:94:ed:bd:c1: ee:0f:67:92:9b:4c:73:41:bd:0d:e1:d5:bc:17:2d: 4e:56:62:4a:76:75:a7:17:02:71:d5:25:3f:f2:a1: bc:21:99:4c:d8:61:4c:61:93:4a:01:16:6a:24:c3: 61:21:df:06:f1:d8:68:85:0b:2c:f7:5b:d4:ac:0e: b4:ee:44:d6:da:da:49:52:f0:34:78:00:44:55:cc: 24:99:41:d3:b4:cd:79:78:eb:f5:a9:bb:26:e2:5a: 40:7e:46:19:0e:a4:44:9c:81:cc:de:f9:29:ec:89: f9:da:c6:56:ad:76:40:05:05:d6:ba:8a:e4:73:70: 68:0e:0a:fe:9e:7b:84:df:84:d6:c7:6c:7e:5a:86: a8:7e:d1:6b:08:45:8b:89:e2:a6:f5:55:22:cb:50: 7d:24:49:f0:e4:65:13:ec:45:f3:93:9b:83:c3:58: 55:00:e7:30:f2:87:b6:58:00:b8:13:66:65:93:36: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:21:7E:A0:BF:46:75:76:5A:CD:3F:79:29:B8:C6:2A:6C:FB:E1 X509v3 Authority Key Identifier: keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:c8:30:e7:49:c8:f9:3a:b1:c3:3e:4b:14:36:36:ec:36: fc:45:9a:7d:7f:d1:a6:5c:5a:32:3b:6b:a2:d9:fd:71:ad:49: 0c:00:b8:3f:0b:c1:c7:7e:db:1e:fc:13:80:0a:58:e0:5c:c1: 8f:65:d3:3d:2e:0f:72:f8:53:df:4f:44:02:3f:98:10:a3:58: 4d:ec:e3:7c:c9:15:0e:dd:4f:98:ef:b9:7f:dc:2d:2b:52:cb: 6e:ba:d9:bd:65:62:aa:5f:c2:da:0d:1f:67:f6:7f:28:ce:36: a7:d6:40:39:b9:94:f6:c3:a3:99:06:72:bc:aa:2e:79:6f:d2: e2:83:72:fe:d1:92:06:84:0e:08:bf:08:18:30:32:c0:4f:71: 1e:31:7c:8e:75:cb:12:01:87:47:0b:29:8f:21:59:46:d5:81: 20:90:07:ac:03:c4:bf:d6:f7:ee:cf:81:24:fc:47:17:72:44: cb:b3:31:61:a3:00:cd:0c:16:63:5b:fc:9c:54:9c:42:77:5d: 4e:e1:d8:08:79:69:f2:64:30:4b:91:dd:71:9a:90:3a:f6:56: 30:de:6f:d0:45:6f:86:cd:b1:6e:0f:ce:ea:ae:21:d6:74:cb: 11:17:52:76:95:7d:90:62:2c:b5:3e:d6:82:21:23:f1:fd:ed: 63:40:af:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4xNwS06Qi3awT+iKAdVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1 ZmNkYTQwHhcNMjUxMjE1MTIwMTI4WhcNMjUxMjE2MTIwMTI4WjAzMTEwLwYDVQQD EyhlZjFkMjE3ZWEwYmY0Njc1NzY1YWNkM2Y3OTI5YjhjNjJhNmNmYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApylfrHVzZhj5pt5MiV9JaN/3WSg/ wih7wNXEswQQoaxE0KrbowsZ2kcM5Lp8tyx/tlfbYW8CMfr78jl2Sgohyt1KGKuy 0JTtvcHuD2eSm0xzQb0N4dW8Fy1OVmJKdnWnFwJx1SU/8qG8IZlM2GFMYZNKARZq JMNhId8G8dhohQss91vUrA607kTW2tpJUvA0eABEVcwkmUHTtM15eOv1qbsm4lpA fkYZDqREnIHM3vkp7In52sZWrXZABQXWuorkc3BoDgr+nnuE34TWx2x+WoaoftFr CEWLieKm9VUiy1B9JEnw5GUT7EXzk5uDw1hVAOcw8oe2WAC4E2ZlkzY3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8dIX6gv0Z1dlrNP3kpuMYqbPvhMB8GA1UdIwQY MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt YmM5ODg3YTdiNTUzLzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiTIMOdJ yPk6scM+SxQ2Nuw2/EWafX/RplxaMjtrotn9ca1JDAC4PwvBx37bHvwTgApY4FzB j2XTPS4PcvhT309EAj+YEKNYTezjfMkVDt1PmO+5f9wtK1LLbrrZvWViql/C2g0f Z/Z/KM42p9ZAObmU9sOjmQZyvKoueW/S4oNy/tGSBoQOCL8IGDAywE9xHjF8jnXL EgGHRwspjyFZRtWBIJAHrAPEv9b37s+BJPxHF3JEy7MxYaMAzQwWY1v8nFScQndd TuHYCHlp8mQwS5HdcZqQOvZWMN5v0EVvhs2xbg/O6q4h1nTLERdSdpV9kGIstT7W giEj8f3tY0CvyA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:03 2025 by rpki-client