This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json) Hash identifier: QgiHfCsoOLc2AZrFsc7rv7UnS6ZT8t6OxBQyC6Be/x0= Subject key identifier: EF:6B:73:E6:92:9B:10:81:2F:37:8E:C9:8B:A8:8E:A3:E3:FE:F6:4E Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f Certificate serial: 019B1FBD1A8E78752A0740260E74D25458FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft Manifest number: 1432 Signing time: Mon 15 Dec 2025 02:00:45 +0000 Manifest this update: Mon 15 Dec 2025 02:00:45 +0000 Manifest next update: Tue 16 Dec 2025 02:00:45 +0000 Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: gFJCSej+WrWMMDWSPokjJCgBG87aRNP0JcjXRR2cpw4=) 2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:1a:8e:78:75:2a:07:40:26:0e:74:d2:54:58:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f Validity Not Before: Dec 15 02:00:45 2025 GMT Not After : Dec 16 02:00:45 2025 GMT Subject: CN=ef6b73e6929b10812f378ec98ba88ea3e3fef64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:04:6f:43:07:2b:d9:23:f5:11:aa:dc:54: 4c:4f:09:db:d8:be:ca:f9:7d:8a:b0:cd:ed:81:cf: 84:88:9e:5f:94:43:ac:b8:98:e0:5b:06:55:ca:6b: d3:3a:19:5e:8d:2a:a4:4d:16:91:e9:8a:5b:97:f1: 9d:04:13:1f:ee:fe:2f:77:0d:4b:77:81:8f:d3:ca: 8a:c8:da:36:bc:33:81:56:e5:58:e2:e9:0b:22:17: 42:1b:b3:3d:eb:08:1d:32:b9:bc:b3:0f:b8:d3:94: 6c:62:f5:9e:a1:56:1c:ca:bf:4c:08:69:62:ab:43: d7:e7:e7:77:cd:d5:6c:f4:c5:75:b6:af:a6:83:1c: 6e:95:8d:c9:6d:2c:4b:3f:d9:bf:0c:61:30:88:ed: fc:dc:e1:43:8c:a7:dd:e1:c4:a6:c0:51:74:6a:95: 25:2e:52:70:d4:85:68:1b:71:06:5c:ec:85:7e:49: 07:3b:55:66:6c:57:33:80:d2:1f:a4:ec:a1:72:c3: 55:64:a0:14:5c:c8:29:f4:bc:b7:5d:70:9c:a0:56: ff:2d:d8:5b:9f:b1:28:81:48:51:b0:86:41:54:f8: d5:6f:d6:58:9e:35:db:62:6e:bf:61:db:71:98:b2: c2:9e:17:bb:a7:95:0d:b5:f1:4b:a9:45:2a:e5:df: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6B:73:E6:92:9B:10:81:2F:37:8E:C9:8B:A8:8E:A3:E3:FE:F6:4E X509v3 Authority Key Identifier: keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:68:56:17:31:99:5f:5e:0e:4a:6b:0a:72:9b:18:af:6b:30: 41:db:39:9b:dc:b2:2b:66:28:f9:76:44:6d:55:f7:5f:6e:7e: b9:f6:6e:8f:40:59:42:f5:3f:02:0d:3e:69:a9:1c:c2:90:63: 9b:cc:44:4c:f7:e4:8c:2a:8f:e2:b9:db:6a:72:ba:22:fe:8a: 63:c5:63:ae:a3:d2:4f:8f:e9:e3:aa:9a:f2:c5:bd:1e:51:9d: 2c:46:42:b9:a5:26:d7:cb:51:6a:44:89:74:f9:83:62:28:20: ec:f9:dc:e5:d9:13:34:86:6c:78:82:71:ef:11:fb:52:b1:13: 5e:0a:05:50:2b:d9:c2:ed:ae:a0:02:35:de:98:2e:7e:4c:62: 91:7d:e4:9b:b3:cd:a1:ae:e3:d8:06:cf:6b:4d:ac:ae:8a:d3: 52:39:73:f3:a5:df:45:20:e7:18:e5:01:7f:fb:5d:77:51:77: 58:20:89:a2:e0:31:4a:1b:12:fb:99:4b:98:e2:fb:8c:35:3e: 45:83:04:3c:83:0f:9c:67:c5:ae:aa:02:ae:bd:3d:45:2b:9f: 42:db:81:e2:1b:c0:19:3a:f5:3a:7b:4f:a2:09:a0:70:4a:b1: e1:6a:a2:ca:52:87:f7:a9:8d:8d:52:d1:46:1d:83:0c:f2:c0: 37:fd:61:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvRqOeHUqB0AmDnTSVFj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz NjY2NmYwHhcNMjUxMjE1MDIwMDQ1WhcNMjUxMjE2MDIwMDQ1WjAzMTEwLwYDVQQD EyhlZjZiNzNlNjkyOWIxMDgxMmYzNzhlYzk4YmE4OGVhM2UzZmVmNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4QEb0MHK9kj9RGq3FRMTwnb2L7K +X2KsM3tgc+EiJ5flEOsuJjgWwZVymvTOhlejSqkTRaR6Ypbl/GdBBMf7v4vdw1L d4GP08qKyNo2vDOBVuVY4ukLIhdCG7M96wgdMrm8sw+405RsYvWeoVYcyr9MCGli q0PX5+d3zdVs9MV1tq+mgxxulY3JbSxLP9m/DGEwiO383OFDjKfd4cSmwFF0apUl LlJw1IVoG3EGXOyFfkkHO1VmbFczgNIfpOyhcsNVZKAUXMgp9Ly3XXCcoFb/Ldhb n7EogUhRsIZBVPjVb9ZYnjXbYm6/YdtxmLLCnhe7p5UNtfFLqUUq5d97sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9rc+aSmxCBLzeOyYuojqPj/vZOMB8GA1UdIwQY MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct Y2ZkZmNkNGVlMGYyLzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2hWFzGZ X14OSmsKcpsYr2swQds5m9yyK2Yo+XZEbVX3X25+ufZuj0BZQvU/Ag0+aakcwpBj m8xETPfkjCqP4rnbanK6Iv6KY8VjrqPST4/p46qa8sW9HlGdLEZCuaUm18tRakSJ dPmDYigg7Pnc5dkTNIZseIJx7xH7UrETXgoFUCvZwu2uoAI13pgufkxikX3km7PN oa7j2AbPa02srorTUjlz86XfRSDnGOUBf/tdd1F3WCCJouAxShsS+5lLmOL7jDU+ RYMEPIMPnGfFrqoCrr09RSufQtuB4hvAGTr1OntPogmgcEqx4WqiylKH96mNjVLR Rh2DDPLAN/1h2Q== -----END CERTIFICATE-----Generated at Mon Dec 15 05:00:17 2025 by rpki-client