This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: ybVM1xTFBqSF/1rgBIPVX1YkxIfLdwFPgo30z7t37YA= Subject key identifier: 53:02:8D:10:BF:C7:51:B8:85:A4:0C:E6:D3:68:1C:E7:71:E8:C8:C7 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B0E253B40394D8F49E83436AEF7AED41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 1466 Signing time: Thu 11 Dec 2025 16:01:19 +0000 Manifest this update: Thu 11 Dec 2025 16:01:19 +0000 Manifest next update: Fri 12 Dec 2025 16:01:19 +0000 Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=) 2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=) 3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=) 4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: CRYavnaB0KlDLxgnJDCSobv0rPsK77YG6fLikquLIDs=) 5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=) 6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=) 7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=) 8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=) 9: pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa (hash: DrEWgUVj7gCBwHBTYVQ96Bg2DTFMTX1DlgA0NmJXb+E=) 10: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:3b:40:39:4d:8f:49:e8:34:36:ae:f7:ae:d4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Dec 11 16:01:19 2025 GMT Not After : Dec 12 16:01:19 2025 GMT Subject: CN=53028d10bfc751b885a40ce6d3681ce771e8c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:04:b1:03:2b:54:2f:2f:37:86:65:17:d0: f3:88:4d:7b:3f:e9:36:5f:33:8f:9e:96:99:33:d1: b0:2c:c4:81:fc:56:31:ad:98:d5:df:eb:d9:c1:1c: 69:a4:47:1b:94:22:d9:6f:89:96:1c:85:69:2f:b3: e4:15:e5:18:9f:72:88:9e:1a:cf:b0:1f:de:db:2e: 9c:fd:d1:5f:16:47:b4:5b:d6:93:14:1f:47:3d:eb: 4e:aa:65:0c:2d:86:3f:dc:c5:64:16:c4:bf:3a:f1: fe:c5:8f:fd:8a:f9:36:7c:eb:10:3d:a7:bc:af:5e: 5e:2a:41:80:de:13:5c:36:92:df:da:98:e7:11:35: c7:66:a9:7f:a9:55:aa:1a:ea:40:67:dd:e7:b8:31: 4b:f5:4a:83:27:cc:e1:63:6f:77:99:eb:72:cc:60: 27:01:27:80:2d:c9:4c:ec:87:77:46:45:0c:6f:86: 30:40:78:c9:b8:bf:83:6b:e2:24:6c:6a:ab:d2:e8: 51:c0:91:45:60:a9:13:4a:f3:5c:8d:d4:c2:e8:11: 7f:48:ac:88:fa:04:0b:af:26:f2:dc:2e:24:d8:24: 03:71:03:e0:a1:f7:c6:e0:ac:07:5d:3c:40:c8:48: 5a:14:5c:fb:46:b9:8f:e6:1c:b8:fc:5d:73:80:46: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:02:8D:10:BF:C7:51:B8:85:A4:0C:E6:D3:68:1C:E7:71:E8:C8:C7 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:62:c9:00:c9:af:de:e1:28:3d:5c:f9:79:be:d9:11:96:98: b4:b0:a8:f4:a0:84:67:95:05:bd:6e:1e:f1:27:74:37:e6:30: fb:eb:d7:cd:b0:7c:28:10:34:c8:ab:d9:35:45:95:03:37:be: dc:68:4f:16:c9:a7:4e:d5:9b:fe:e1:0e:bc:85:71:e0:a7:8c: 4c:4b:2b:22:28:6c:e1:9f:d4:39:9e:b8:d4:83:e9:7e:79:ff: e9:5f:aa:1a:24:96:aa:e1:7b:8a:f8:d8:46:d9:ca:75:0d:f3: fb:71:d3:51:16:8c:84:6c:f8:9b:3c:be:f9:be:0a:ea:e3:bb: d5:0a:1b:3c:a0:e8:b4:86:2f:b8:dc:f3:2f:93:38:85:e3:e5: d2:89:c7:41:bd:cb:22:ac:48:35:4e:b8:f6:46:0f:c5:d0:97: b7:b8:2c:50:bb:97:5e:76:6d:e4:ee:ba:52:71:4a:b1:33:82: 5e:18:30:c4:c4:3a:f1:4b:12:d1:4f:eb:74:65:bb:68:77:4f: 5a:4b:64:e1:ac:e4:d3:73:80:28:7f:2e:3f:0e:3e:8c:12:a4: d8:24:a4:75:d1:24:48:b7:cd:03:63:b2:6a:a8:6b:ab:34:82: d4:a0:39:a3:07:f0:e9:46:ad:91:9f:ee:e9:be:21:50:df:0d: 44:c7:fd:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJTtAOU2PSeg0Nq73rtQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjUxMjExMTYwMTE5WhcNMjUxMjEyMTYwMTE5WjAzMTEwLwYDVQQD Eyg1MzAyOGQxMGJmYzc1MWI4ODVhNDBjZTZkMzY4MWNlNzcxZThjOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrcEsQMrVC8vN4ZlF9DziE17P+k2 XzOPnpaZM9GwLMSB/FYxrZjV3+vZwRxppEcblCLZb4mWHIVpL7PkFeUYn3KInhrP sB/e2y6c/dFfFke0W9aTFB9HPetOqmUMLYY/3MVkFsS/OvH+xY/9ivk2fOsQPae8 r15eKkGA3hNcNpLf2pjnETXHZql/qVWqGupAZ93nuDFL9UqDJ8zhY293metyzGAn ASeALclM7Id3RkUMb4YwQHjJuL+Da+IkbGqr0uhRwJFFYKkTSvNcjdTC6BF/SKyI +gQLryby3C4k2CQDcQPgoffG4KwHXTxAyEhaFFz7RrmP5hy4/F1zgEbZIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMCjRC/x1G4haQM5tNoHOdx6MjHMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGLJAMmv 3uEoPVz5eb7ZEZaYtLCo9KCEZ5UFvW4e8Sd0N+Yw++vXzbB8KBA0yKvZNUWVAze+ 3GhPFsmnTtWb/uEOvIVx4KeMTEsrIihs4Z/UOZ641IPpfnn/6V+qGiSWquF7ivjY RtnKdQ3z+3HTURaMhGz4mzy++b4K6uO71QobPKDotIYvuNzzL5M4hePl0onHQb3L IqxINU649kYPxdCXt7gsULuXXnZt5O66UnFKsTOCXhgwxMQ68UsS0U/rdGW7aHdP Wktk4azk03OAKH8uPw4+jBKk2CSkddEkSLfNA2OyaqhrqzSC1KA5owfw6UatkZ/u 6b4hUN8NRMf9Jg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:20:44 2025 by rpki-client