This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json) Hash identifier: VCaZKAABlyLx3bGcFo9qf8CgU1fTp/vbjYdLQGsOYBE= Subject key identifier: 07:EE:03:7C:31:BF:64:22:CD:A3:D1:83:25:9F:2F:7C:AF:CA:83:A3 Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Certificate serial: 019B2475CA36CDF7E95D83390E553E540076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft Manifest number: 03D7 Signing time: Tue 16 Dec 2025 00:00:57 +0000 Manifest this update: Tue 16 Dec 2025 00:00:57 +0000 Manifest next update: Wed 17 Dec 2025 00:00:57 +0000 Files and hashes: 1: 1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa (hash: RQASeiaMoVDZNGhkIy9OUB5XmVipcRP+d1vVqckV06Q=) 2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: +Cbh5whbrDlbF28fQEySQoC0ECy3cp6imxnSLCmCe4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:ca:36:cd:f7:e9:5d:83:39:0e:55:3e:54:00:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Validity Not Before: Dec 16 00:00:57 2025 GMT Not After : Dec 17 00:00:57 2025 GMT Subject: CN=07ee037c31bf6422cda3d183259f2f7cafca83a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:d4:10:6a:41:57:69:ee:5a:f1:d1:72:b5: 19:06:3d:6f:10:c0:b9:c6:01:60:fe:91:33:b8:a0: 84:ad:72:6a:21:b9:01:6d:00:3d:79:0b:ce:33:09: 6f:33:f9:55:30:25:66:e9:69:72:53:b4:93:93:cf: c4:a1:25:0e:ca:09:b8:7b:e6:2f:48:1d:b6:5b:ab: 8b:44:d9:84:91:6b:49:58:8f:78:ed:4c:2b:dc:02: 1d:1e:41:e5:b9:4b:be:5a:c3:1c:69:57:44:fb:8f: 43:65:3e:4e:c3:7d:7e:e0:5b:ec:e9:4d:4b:c4:50: f0:f9:02:4c:49:6f:f8:b6:77:4d:88:01:6d:eb:bd: 66:b3:19:43:29:ed:83:3d:41:e4:32:e0:35:c0:9a: 87:63:a0:ac:70:f3:e3:8b:9f:d5:c1:42:c1:12:b3: 19:f1:46:08:8c:8c:a3:e4:8f:a3:6e:fa:3c:6b:ba: fa:71:b5:40:9c:5f:d9:62:61:97:fa:a7:a1:0c:ac: 3d:14:52:98:4b:40:cd:62:61:1c:99:d0:5c:5d:a5: 22:44:e1:59:92:50:41:0f:81:4d:80:da:49:9b:d0: b9:5d:48:43:e3:0e:c8:e6:a0:1a:a2:20:79:35:40: 17:ed:b1:29:51:f1:54:34:24:4a:74:95:8f:b2:bd: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:03:7C:31:BF:64:22:CD:A3:D1:83:25:9F:2F:7C:AF:CA:83:A3 X509v3 Authority Key Identifier: keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:08:ba:37:6a:90:f7:f6:98:9f:f5:1e:e3:7b:2f:01:3a:2f: 6b:b8:bc:e8:0c:0f:ac:50:cb:47:5a:a0:4f:2b:de:a9:ef:68: 79:c4:59:27:4c:a3:3e:b2:1b:39:7e:8a:b6:e1:11:ec:01:24: 93:f2:f6:ab:84:7c:f8:25:20:8f:12:b9:b6:eb:8b:18:f4:91: 23:b7:03:51:49:ed:ba:72:1a:1a:32:08:96:58:2d:b9:25:28: 15:98:0a:bc:75:87:6c:45:af:de:23:88:ca:4d:e4:38:96:d6: f1:6b:e8:e8:9d:bf:6d:37:5b:15:5d:8a:c0:9c:3a:a2:05:f3: 1e:99:de:af:31:27:20:b6:a3:3a:04:e2:bc:72:14:53:b4:bf: a4:54:58:8e:21:3e:86:a3:3c:ae:2b:59:42:6c:71:b3:d0:c6: 3a:c9:1f:3f:5e:e3:12:2b:09:64:44:42:63:20:a3:59:86:d4: 18:51:bc:22:6a:ff:b8:f1:18:1c:00:ea:7c:68:59:53:25:d6: cc:b6:c3:95:62:e8:2f:3a:7b:7c:94:06:4a:d5:c6:a0:a9:3f: ea:24:9e:32:8f:c7:c4:f7:dd:24:3b:22:ee:4c:57:db:0e:0a: 3e:7c:f0:f9:4e:f2:bf:c4:5c:41:3c:16:48:b5:ad:b9:a4:1d: 09:d5:bc:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdco2zffpXYM5DlU+VAB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk NzMyMzcwHhcNMjUxMjE2MDAwMDU3WhcNMjUxMjE3MDAwMDU3WjAzMTEwLwYDVQQD EygwN2VlMDM3YzMxYmY2NDIyY2RhM2QxODMyNTlmMmY3Y2FmY2E4M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYvUEGpBV2nuWvHRcrUZBj1vEMC5 xgFg/pEzuKCErXJqIbkBbQA9eQvOMwlvM/lVMCVm6WlyU7STk8/EoSUOygm4e+Yv SB22W6uLRNmEkWtJWI947Uwr3AIdHkHluUu+WsMcaVdE+49DZT5Ow31+4Fvs6U1L xFDw+QJMSW/4tndNiAFt671msxlDKe2DPUHkMuA1wJqHY6CscPPji5/VwULBErMZ 8UYIjIyj5I+jbvo8a7r6cbVAnF/ZYmGX+qehDKw9FFKYS0DNYmEcmdBcXaUiROFZ klBBD4FNgNpJm9C5XUhD4w7I5qAaoiB5NUAX7bEpUfFUNCRKdJWPsr2/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfuA3wxv2QizaPRgyWfL3yvyoOjMB8GA1UdIwQY MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2 LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAi6N2qQ 9/aYn/Ue43svATova7i86AwPrFDLR1qgTyveqe9oecRZJ0yjPrIbOX6KtuER7AEk k/L2q4R8+CUgjxK5tuuLGPSRI7cDUUntunIaGjIIllgtuSUoFZgKvHWHbEWv3iOI yk3kOJbW8Wvo6J2/bTdbFV2KwJw6ogXzHpnerzEnILajOgTivHIUU7S/pFRYjiE+ hqM8ritZQmxxs9DGOskfP17jEisJZERCYyCjWYbUGFG8Imr/uPEYHADqfGhZUyXW zLbDlWLoLzp7fJQGStXGoKk/6iSeMo/HxPfdJDsi7kxX2w4KPnzw+U7yv8RcQTwW SLWtuaQdCdW80w== -----END CERTIFICATE-----Generated at Tue Dec 16 06:31:50 2025 by rpki-client