This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json) Hash identifier: PklsRiln8kfUp8s0gTlZXlyb0ENSWJtQ/KnId9lnilE= Subject key identifier: 6F:F3:A4:9D:D8:E4:EC:26:EE:8E:4D:70:42:4A:46:4E:A1:A2:F3:C2 Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019B1014A60CE7C32F495E3B75E489FA03DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft Manifest number: 0660 Signing time: Fri 12 Dec 2025 01:02:27 +0000 Manifest this update: Fri 12 Dec 2025 01:02:27 +0000 Manifest next update: Sat 13 Dec 2025 01:02:27 +0000 Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: 8P2m7AYowRfI/sZVDjBBr56A4S/YxI8f7Uek5yNs5QQ=) 2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:a6:0c:e7:c3:2f:49:5e:3b:75:e4:89:fa:03:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Dec 12 01:02:27 2025 GMT Not After : Dec 13 01:02:27 2025 GMT Subject: CN=6ff3a49dd8e4ec26ee8e4d70424a464ea1a2f3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:2d:d8:b9:26:0e:87:5f:08:90:e6:38:2b: c6:72:ff:3b:5b:5f:5e:0d:35:33:b1:d2:9e:4f:87: 56:5e:b8:c6:76:1a:21:0d:e1:b1:46:b4:1f:90:b0: b1:e0:00:21:90:72:24:31:0e:cc:a0:bf:5c:01:f8: c2:99:30:be:e3:77:0e:fb:8a:30:7c:17:83:65:9f: d3:c9:a9:1e:16:65:69:61:75:d9:81:54:97:c0:de: a9:a5:ad:b6:ce:ea:82:2c:40:da:76:d4:a0:0a:4a: 23:de:95:60:90:9f:40:07:c6:83:6d:61:3e:8d:d3: ae:67:27:d3:59:7d:38:bd:81:ee:49:59:ae:ef:9c: 05:d0:22:0f:d1:21:84:b0:be:6f:a9:2b:c6:ed:f5: 5b:6c:ca:34:f3:ed:54:38:85:19:b9:f4:79:92:a9: d5:40:0f:61:cd:02:05:9d:35:37:4f:17:54:c5:d8: 35:fe:b2:68:e7:81:31:25:52:90:bd:24:7a:e0:60: 91:af:aa:11:28:76:4a:65:17:b3:bf:74:05:49:37: 75:15:1b:dc:34:be:ba:6e:2f:dd:ff:8a:93:fd:05: 4c:b4:39:6f:be:e3:25:7d:ac:a7:b4:14:75:c2:c3: de:17:64:7d:06:ea:1c:da:96:92:c1:6a:64:6f:cb: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F3:A4:9D:D8:E4:EC:26:EE:8E:4D:70:42:4A:46:4E:A1:A2:F3:C2 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:a4:47:f8:ff:6f:60:19:7a:f3:11:de:58:db:d8:87:67: 88:75:60:61:47:8e:54:fa:df:27:b7:69:ba:c8:9e:71:fc:0f: 36:4d:14:6a:59:19:e0:f7:17:d6:87:d0:17:0d:0e:ad:4f:92: 23:cc:c6:c2:4f:bc:f4:8b:b4:39:c2:91:d2:63:ca:2d:19:9d: 07:5e:5c:7b:cb:b5:ff:e0:26:e8:73:a1:4b:46:d7:3c:0d:e6: 82:11:b1:d2:8e:bf:75:04:af:bb:ff:ec:37:f6:e2:15:de:6f: c5:f7:dd:f3:67:f3:e6:df:95:4f:99:d3:9a:0b:4f:9f:e6:e7: 52:64:b0:29:a1:05:b7:dd:bc:bb:6f:30:9d:a6:1b:53:6c:49: b1:f9:69:05:06:1d:30:ef:0f:d6:c1:25:08:d3:ef:e2:d6:d1: ad:d3:a3:19:4e:33:90:6b:d5:cb:f1:1e:bb:19:37:b6:6b:6c: d1:3c:71:84:5c:f8:93:7e:20:0b:a1:52:24:64:2b:0a:77:85: 0d:0f:b8:2a:50:d1:e5:28:2d:9a:90:9e:b2:78:f2:49:4c:68: 81:2f:bb:3e:b7:c8:20:ab:45:1a:7b:df:72:8e:f5:29:f3:ce: bb:2d:48:b8:3d:f8:1a:25:4b:2a:74:c0:c2:fc:d6:4e:66:d3: 9d:6b:8d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFKYM58MvSV47deSJ+gPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjUxMjEyMDEwMjI3WhcNMjUxMjEzMDEwMjI3WjAzMTEwLwYDVQQD Eyg2ZmYzYTQ5ZGQ4ZTRlYzI2ZWU4ZTRkNzA0MjRhNDY0ZWExYTJmM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXgt2LkmDodfCJDmOCvGcv87W19e DTUzsdKeT4dWXrjGdhohDeGxRrQfkLCx4AAhkHIkMQ7MoL9cAfjCmTC+43cO+4ow fBeDZZ/TyakeFmVpYXXZgVSXwN6ppa22zuqCLEDadtSgCkoj3pVgkJ9AB8aDbWE+ jdOuZyfTWX04vYHuSVmu75wF0CIP0SGEsL5vqSvG7fVbbMo08+1UOIUZufR5kqnV QA9hzQIFnTU3TxdUxdg1/rJo54ExJVKQvSR64GCRr6oRKHZKZRezv3QFSTd1FRvc NL66bi/d/4qT/QVMtDlvvuMlfayntBR1wsPeF2R9Buoc2paSwWpkb8tIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/zpJ3Y5Owm7o5NcEJKRk6hovPCMB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpCkR/j/ b2AZevMR3ljb2IdniHVgYUeOVPrfJ7dpusiecfwPNk0UalkZ4PcX1ofQFw0OrU+S I8zGwk+89Iu0OcKR0mPKLRmdB15ce8u1/+Am6HOhS0bXPA3mghGx0o6/dQSvu//s N/biFd5vxffd82fz5t+VT5nTmgtPn+bnUmSwKaEFt928u28wnaYbU2xJsflpBQYd MO8P1sElCNPv4tbRrdOjGU4zkGvVy/Eeuxk3tmts0TxxhFz4k34gC6FSJGQrCneF DQ+4KlDR5SgtmpCesnjySUxogS+7PrfIIKtFGnvfco71KfPOuy1IuD34GiVLKnTA wvzWTmbTnWuNdg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:15 2025 by rpki-client