This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json) Hash identifier: dbq5H12nQKV7S6hBrqGj9D1LnvsT6YV6IR9hwyy/Gbs= Subject key identifier: 48:EB:5D:91:67:70:1C:A7:D8:81:F4:4E:FD:C5:52:B2:F5:FC:4E:C6 Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Certificate serial: 019B33E8CCDBFE4D9AFF001C06F2B21B3814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft Manifest number: 049C Signing time: Fri 19 Dec 2025 00:00:53 +0000 Manifest this update: Fri 19 Dec 2025 00:00:53 +0000 Manifest next update: Sat 20 Dec 2025 00:00:53 +0000 Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=) 2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: TkCjqvqKZGLpN7Ge9bZ0LjkKxoudThPL4RwB0fA9DfQ=) 3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:cc:db:fe:4d:9a:ff:00:1c:06:f2:b2:1b:38:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Validity Not Before: Dec 19 00:00:53 2025 GMT Not After : Dec 20 00:00:53 2025 GMT Subject: CN=48eb5d9167701ca7d881f44efdc552b2f5fc4ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:14:a7:5f:67:5b:9e:a5:79:6f:5f:82:57: 95:99:36:c3:d0:b0:a1:74:9e:3d:41:dd:a4:99:0b: 26:d3:e3:fe:08:4c:0d:6f:45:13:3c:e2:db:a3:d8: 8d:8c:12:86:60:4f:63:1a:b9:57:40:d4:e7:ea:9e: ec:ce:81:dc:0d:c2:86:39:8c:0f:c9:be:11:6c:0d: ba:db:50:1b:3b:05:59:61:02:fa:ba:e2:c4:07:df: 13:17:44:43:78:6a:99:b7:6c:92:07:e5:b9:36:d2: 31:52:fe:a5:f8:a3:ce:2d:6d:1e:da:a2:fd:3c:9b: e0:2e:60:9a:a1:9f:c8:47:dd:7f:b5:0a:1c:87:8e: 67:e9:7d:4c:a1:a6:0c:89:7b:63:9e:4d:03:77:b2: 02:aa:c0:3b:a8:85:71:87:dd:9f:bc:3f:56:41:4e: 8b:63:49:03:e1:79:84:77:d7:33:45:7a:22:45:77: 00:20:16:39:ee:2d:04:c9:d1:87:cd:d5:3d:70:6b: 65:bc:7b:6f:72:e8:13:09:94:b9:c0:06:87:d9:8d: 89:63:5e:8b:91:4b:d4:c9:d7:53:8b:10:5e:e5:ad: 9f:4c:bd:b6:d6:14:98:84:5b:f1:5c:e3:c0:fa:db: f5:43:c9:2c:a3:fe:ea:48:41:da:ca:eb:e3:f6:f8: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EB:5D:91:67:70:1C:A7:D8:81:F4:4E:FD:C5:52:B2:F5:FC:4E:C6 X509v3 Authority Key Identifier: keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:83:9f:1f:78:f6:6f:ae:9f:a3:b1:17:69:52:77:8e:84: 07:6a:39:ee:8e:0e:e8:77:91:ed:da:88:32:07:fe:9a:26:d0: af:f2:20:fa:08:da:77:e3:25:ba:4e:93:dd:94:38:c6:69:62: f2:aa:58:e9:91:5d:7b:fd:e4:f1:4d:9b:92:a0:69:a8:f4:2c: 1d:f4:bf:ac:6b:db:c6:7b:39:3c:04:d1:29:a8:75:87:06:47: 76:b5:eb:09:ef:a2:57:61:41:79:f4:4f:c1:ad:90:a8:ae:10: 2a:0f:2b:a9:2b:f9:db:78:b9:2b:ff:e0:12:fe:74:86:5f:1b: cb:58:8e:2e:f8:e1:4b:26:cb:15:2a:9b:ee:bd:45:56:15:c3: b4:ba:35:aa:90:4b:94:73:e6:dd:47:b8:45:af:42:8c:aa:ea: a3:1f:bf:8b:4c:1a:66:02:dc:fc:fd:9d:cb:cc:92:fd:e7:a6: 44:ec:4d:d8:aa:c0:c5:09:54:43:f6:9f:be:0f:7a:1c:d4:88: d9:5f:5f:9c:c4:1b:a8:ed:bd:d4:5d:5a:13:92:ce:a6:85:40: 23:a4:b0:cb:41:a2:9c:59:a3:e0:f1:7e:14:7d:eb:47:d1:17: b8:08:f1:d9:53:df:42:94:02:9b:ce:0c:5d:3c:42:77:c4:df: c7:2f:88:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Mzb/k2a/wAcBvKyGzgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm YjVmNDIwHhcNMjUxMjE5MDAwMDUzWhcNMjUxMjIwMDAwMDUzWjAzMTEwLwYDVQQD Eyg0OGViNWQ5MTY3NzAxY2E3ZDg4MWY0NGVmZGM1NTJiMmY1ZmM0ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDEUp19nW56leW9fgleVmTbD0LCh dJ49Qd2kmQsm0+P+CEwNb0UTPOLbo9iNjBKGYE9jGrlXQNTn6p7szoHcDcKGOYwP yb4RbA2621AbOwVZYQL6uuLEB98TF0RDeGqZt2ySB+W5NtIxUv6l+KPOLW0e2qL9 PJvgLmCaoZ/IR91/tQoch45n6X1MoaYMiXtjnk0Dd7ICqsA7qIVxh92fvD9WQU6L Y0kD4XmEd9czRXoiRXcAIBY57i0EydGHzdU9cGtlvHtvcugTCZS5wAaH2Y2JY16L kUvUyddTixBe5a2fTL221hSYhFvxXOPA+tv1Q8kso/7qSEHayuvj9vhCpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjrXZFncByn2IH0Tv3FUrL1/E7GMB8GA1UdIwQY MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMiDnx94 9m+un6OxF2lSd46EB2o57o4O6HeR7dqIMgf+mibQr/Ig+gjad+Mluk6T3ZQ4xmli 8qpY6ZFde/3k8U2bkqBpqPQsHfS/rGvbxns5PATRKah1hwZHdrXrCe+iV2FBefRP wa2QqK4QKg8rqSv523i5K//gEv50hl8by1iOLvjhSybLFSqb7r1FVhXDtLo1qpBL lHPm3Ue4Ra9CjKrqox+/i0waZgLc/P2dy8yS/eemROxN2KrAxQlUQ/afvg96HNSI 2V9fnMQbqO291F1aE5LOpoVAI6Swy0GinFmj4PF+FH3rR9EXuAjx2VPfQpQCm84M XTxCd8Tfxy+IjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:14:24 2025 by rpki-client