This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json) Hash identifier: SGjQ53RT4LD5XPvwKFW7Bo9NRoXPVRGKTcychbZVPDY= Subject key identifier: 83:84:C7:B7:94:18:AB:17:0A:B3:9E:C9:B8:24:20:DF:4A:F4:30:7B Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a Certificate serial: 019B37C5CDAE07AFC67398B84A143F4D3161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft Manifest number: 1089 Signing time: Fri 19 Dec 2025 18:01:08 +0000 Manifest this update: Fri 19 Dec 2025 18:01:08 +0000 Manifest next update: Sat 20 Dec 2025 18:01:08 +0000 Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=) 2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: 4ILNoMWlcZDdvyafD0ujHy4RpM/doZPzVhmu8dPNKxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:cd:ae:07:af:c6:73:98:b8:4a:14:3f:4d:31:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a Validity Not Before: Dec 19 18:01:08 2025 GMT Not After : Dec 20 18:01:08 2025 GMT Subject: CN=8384c7b79418ab170ab39ec9b82420df4af4307b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:fc:6f:3a:33:13:c6:d1:e5:cd:2f:96:12: e3:69:db:f0:d7:fd:94:4e:5d:1d:7e:f9:f3:0c:eb: 5d:e1:bd:95:ba:44:f8:30:ea:37:53:6c:f6:91:67: b4:9c:8c:9b:4f:f7:2d:fb:d4:c6:24:ee:32:8e:70: 29:4d:8f:8d:9e:46:20:57:1d:bb:f3:ac:04:00:24: 25:58:3a:17:64:51:49:72:02:59:ee:14:05:65:27: 9a:44:5a:7d:64:f6:48:25:85:80:1d:71:d2:c9:17: 9f:f5:75:74:6f:a9:2b:eb:b8:91:b1:20:e4:46:01: 53:77:25:ae:a6:a7:5a:14:3b:f3:7a:30:9c:76:54: 5f:c2:81:61:74:f5:ba:5b:ab:a0:f3:8f:c8:37:e8: 46:a0:80:73:83:99:61:d2:4b:f1:a5:53:ba:1f:6b: 69:40:0f:c9:02:b3:dd:af:00:f6:06:00:36:f4:b5: 73:16:f2:c3:03:1c:5b:19:f8:4c:04:57:e7:23:59: e1:6b:dc:b6:67:e9:18:6e:9e:e3:19:5f:ef:10:b8: 64:53:50:17:02:d2:46:2c:0d:d1:41:b7:1b:54:a6: da:08:6f:8b:92:66:c6:f3:1b:1b:4a:c2:0c:70:fd: 29:25:8a:71:9d:e0:ee:c5:e5:b7:a2:76:54:d4:6f: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:C7:B7:94:18:AB:17:0A:B3:9E:C9:B8:24:20:DF:4A:F4:30:7B X509v3 Authority Key Identifier: keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4a:ee:0a:2c:93:ba:03:ef:49:0d:f5:74:0c:ba:c4:31:c4: ae:d0:1b:d3:81:63:cd:51:6a:bb:4e:af:e7:cd:f9:f3:43:94: f8:d9:d4:fc:87:2c:70:b1:04:46:97:c0:0e:45:83:52:bb:f5: 1b:15:a8:f4:81:0c:41:db:05:c1:47:92:89:03:0a:15:cb:30: 0e:e7:75:45:6b:ef:bc:0a:5c:82:7f:f7:28:f8:9c:e5:28:b1: 65:80:4c:92:0f:cc:80:1c:a5:77:6c:07:c3:0e:0f:56:77:c9: c7:5c:08:e2:bc:04:c3:59:6f:fb:f3:aa:06:bf:f4:02:11:27: 8d:f6:45:17:fe:b2:00:0e:d8:79:6b:f6:34:4f:5f:a7:d5:7c: eb:8e:81:16:8f:7e:1c:7c:68:41:8c:13:63:4f:26:5c:f2:e3: d3:0a:c8:30:c1:82:85:7b:dd:ea:53:f6:b5:4b:b3:79:24:08: be:d9:f5:59:98:2b:1f:fe:9d:2f:ee:4b:3e:8c:0e:50:84:0c: 6f:af:75:15:a8:05:22:d7:e7:85:3e:95:0a:1c:e4:7f:a9:36: ca:91:f4:b0:37:14:88:84:b1:ff:e2:ed:ca:ad:2d:e2:3d:2d: 68:84:a9:b6:38:cd:5b:78:01:6e:f9:df:98:28:b2:a1:bb:fa: 85:4c:06:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xc2uB6/Gc5i4ShQ/TTFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3 Y2ZiMGEwHhcNMjUxMjE5MTgwMTA4WhcNMjUxMjIwMTgwMTA4WjAzMTEwLwYDVQQD Eyg4Mzg0YzdiNzk0MThhYjE3MGFiMzllYzliODI0MjBkZjRhZjQzMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6L8bzozE8bR5c0vlhLjadvw1/2U Tl0dfvnzDOtd4b2VukT4MOo3U2z2kWe0nIybT/ct+9TGJO4yjnApTY+NnkYgVx27 86wEACQlWDoXZFFJcgJZ7hQFZSeaRFp9ZPZIJYWAHXHSyRef9XV0b6kr67iRsSDk RgFTdyWupqdaFDvzejCcdlRfwoFhdPW6W6ug84/IN+hGoIBzg5lh0kvxpVO6H2tp QA/JArPdrwD2BgA29LVzFvLDAxxbGfhMBFfnI1nha9y2Z+kYbp7jGV/vELhkU1AX AtJGLA3RQbcbVKbaCG+LkmbG8xsbSsIMcP0pJYpxneDuxeW3onZU1G/VKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOEx7eUGKsXCrOeybgkIN9K9DB7MB8GA1UdIwQY MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUruCiyT ugPvSQ31dAy6xDHErtAb04FjzVFqu06v583580OU+NnU/IcscLEERpfADkWDUrv1 GxWo9IEMQdsFwUeSiQMKFcswDud1RWvvvApcgn/3KPic5SixZYBMkg/MgByld2wH ww4PVnfJx1wI4rwEw1lv+/OqBr/0AhEnjfZFF/6yAA7YeWv2NE9fp9V8646BFo9+ HHxoQYwTY08mXPLj0wrIMMGChXvd6lP2tUuzeSQIvtn1WZgrH/6dL+5LPowOUIQM b691FagFItfnhT6VChzkf6k2ypH0sDcUiISx/+Ltyq0t4j0taISptjjNW3gBbvnf mCiyobv6hUwGfg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:22 2025 by rpki-client