This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json) Hash identifier: Vixb+0FNzaqpwTRIg27zjKZrZ7WKot3wRckIiaGlKc4= Subject key identifier: 9A:DC:96:3A:F6:13:00:20:81:39:62:2E:97:5D:43:36:23:55:96:AE Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Certificate serial: 019B0E930802F563DF281CD3D8011CB560FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 18:01:15 +0000 Manifest this update: Thu 11 Dec 2025 18:01:15 +0000 Manifest next update: Fri 12 Dec 2025 18:01:15 +0000 Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=) 2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: KrvWkd1JU3y2nHo2iW+ukhi0e163L0QjRb5C2DAADN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:08:02:f5:63:df:28:1c:d3:d8:01:1c:b5:60:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Validity Not Before: Dec 11 18:01:15 2025 GMT Not After : Dec 12 18:01:15 2025 GMT Subject: CN=9adc963af61300208139622e975d4336235596ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:f1:22:aa:84:4f:ef:51:b4:b6:ca:3f:91: e8:23:1b:5e:53:b7:aa:b5:bd:4d:10:61:04:cd:07: 58:30:97:14:99:ca:63:42:74:06:64:99:bb:79:29: a9:9e:76:50:08:05:89:09:24:c0:34:81:70:bf:ba: 2b:e7:b9:9b:7d:1f:b7:c7:1b:05:e5:3d:82:3f:9b: c0:0e:04:d4:59:f2:18:78:26:fc:e4:2a:51:69:8a: 25:71:6f:0f:cb:42:a4:46:ea:72:b7:e1:c6:f9:01: 8c:15:e8:d2:83:71:b8:8c:8b:30:1a:51:8b:4e:36: 70:8a:0f:8e:88:ce:84:1b:5d:5c:6e:db:38:bb:ca: 5e:22:95:3d:32:e5:be:43:14:ea:a6:4b:70:b2:5d: e9:ef:ef:a9:92:a4:56:e3:ca:13:ee:72:5e:c3:09: dd:d2:7d:51:df:4e:0a:4e:ff:4b:a6:df:7d:84:2d: 6c:87:77:9c:e4:00:30:5e:d4:1e:69:95:97:a6:bc: 7f:f7:0a:ec:aa:2c:5c:71:b1:06:86:78:65:95:af: 68:c7:1d:55:03:19:47:05:fe:ce:b0:00:1b:a4:b0: 55:b4:36:2f:cc:2c:5d:05:e8:de:1c:a6:a4:80:8e: 4f:6b:66:57:bb:c2:1a:1b:00:c3:fd:9a:b5:fb:6a: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:96:3A:F6:13:00:20:81:39:62:2E:97:5D:43:36:23:55:96:AE X509v3 Authority Key Identifier: keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:49:4c:09:29:47:9d:0b:db:5a:ac:e9:c8:b5:25:da:e2:3b: a6:9c:f7:45:df:a0:ac:27:07:33:a3:05:40:50:5b:58:ae:72: b1:ca:79:f2:49:d3:8c:74:22:dd:17:fc:6e:f2:4b:0a:bd:b1: 0d:3e:9b:5d:8d:85:91:46:36:b0:a3:a8:0f:66:29:1a:e7:cc: 95:e5:8b:5c:92:0a:42:c7:94:c5:27:8e:df:8a:de:85:7b:59: 67:c5:3a:92:72:b6:62:7c:11:9a:5e:c1:f8:3b:28:03:54:4d: 13:c1:af:7f:b0:1c:c2:4a:c6:22:d2:a3:65:11:35:f2:19:01: 28:be:26:21:fa:a2:7f:06:bc:5a:f2:2e:3e:d0:1d:51:a8:c1: b2:d0:2d:74:79:b1:46:26:29:c9:1d:4d:40:b5:03:a5:b1:9b: 6c:a7:4c:f4:dc:03:0a:82:44:e3:cb:9f:f4:a7:1d:65:61:0b: 59:da:d7:91:b9:2b:5f:53:18:ed:52:a9:87:bb:ed:56:ad:a0: c3:62:d3:d7:59:bb:b9:31:5d:bf:43:a7:67:5f:a7:2e:24:f5: d0:3f:92:2c:d9:dd:4d:ef:54:ba:bd:5a:67:d6:fa:8b:4f:65: 7c:ed:98:84:49:69:e5:2c:c6:5d:85:b9:f5:08:d5:8d:05:90: 6a:ed:9c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwgC9WPfKBzT2AEctWD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOGRmODY4ZjdkOWU5OGQ0ZmQ0MWU2ZGE1OTdhMjgzYzkx NDFiNDQwHhcNMjUxMjExMTgwMTE1WhcNMjUxMjEyMTgwMTE1WjAzMTEwLwYDVQQD Eyg5YWRjOTYzYWY2MTMwMDIwODEzOTYyMmU5NzVkNDMzNjIzNTU5NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueTxIqqET+9RtLbKP5HoIxteU7eq tb1NEGEEzQdYMJcUmcpjQnQGZJm7eSmpnnZQCAWJCSTANIFwv7or57mbfR+3xxsF 5T2CP5vADgTUWfIYeCb85CpRaYolcW8Py0KkRupyt+HG+QGMFejSg3G4jIswGlGL TjZwig+OiM6EG11cbts4u8peIpU9MuW+QxTqpktwsl3p7++pkqRW48oT7nJewwnd 0n1R304KTv9Lpt99hC1sh3ec5AAwXtQeaZWXprx/9wrsqixccbEGhnhlla9oxx1V AxlHBf7OsAAbpLBVtDYvzCxdBejeHKakgI5Pa2ZXu8IaGwDD/Zq1+2ptKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrcljr2EwAggTliLpddQzYjVZauMB8GA1UdIwQY MBaAFEGN+Gj32emNT9QebaWXooPJFBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEt ZWU5YzM0NTJjYmFmLzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEtZWU5YzM0NTJjYmFm LzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgklMCSlH nQvbWqzpyLUl2uI7ppz3Rd+grCcHM6MFQFBbWK5yscp58knTjHQi3Rf8bvJLCr2x DT6bXY2FkUY2sKOoD2YpGufMleWLXJIKQseUxSeO34rehXtZZ8U6knK2YnwRml7B +DsoA1RNE8Gvf7AcwkrGItKjZRE18hkBKL4mIfqifwa8WvIuPtAdUajBstAtdHmx RiYpyR1NQLUDpbGbbKdM9NwDCoJE48uf9KcdZWELWdrXkbkrX1MY7VKph7vtVq2g w2LT11m7uTFdv0OnZ1+nLiT10D+SLNndTe9Uur1aZ9b6i09lfO2YhElp5SzGXYW5 9QjVjQWQau2cKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:07 2025 by rpki-client