This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json) Hash identifier: yGfjzv+kF/eBaFqoRos0isBlQiQ0MzKwWmnWsMbDlKM= Subject key identifier: 41:51:8A:4A:82:B0:E1:FF:6A:99:89:FC:0C:E1:79:48:D6:68:1F:BB Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d Certificate serial: 019B38A2E4F8F4CA600060015729613FD14D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft Manifest number: 0B6E Signing time: Fri 19 Dec 2025 22:02:37 +0000 Manifest this update: Fri 19 Dec 2025 22:02:37 +0000 Manifest next update: Sat 20 Dec 2025 22:02:37 +0000 Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: qbLA875GGvA+AN79TxZKe7XMa1H2OORehRMSRtsLyl8=) 2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=) 3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:e4:f8:f4:ca:60:00:60:01:57:29:61:3f:d1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405d645741215677b7748d1fdefd416207adb12d Validity Not Before: Dec 19 22:02:37 2025 GMT Not After : Dec 20 22:02:37 2025 GMT Subject: CN=41518a4a82b0e1ff6a9989fc0ce17948d6681fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:72:86:09:83:d9:1d:bb:0f:d9:74:3f:57: a8:4f:49:aa:8b:f3:d2:0d:00:86:a6:d1:85:2c:b3: 4f:98:e1:8c:45:f0:81:eb:c4:2b:87:5c:bf:a5:ed: 54:30:41:bc:b2:cc:9f:22:a9:0e:90:ee:cd:90:ce: 3f:1a:0f:3b:40:6f:37:92:a8:c4:88:e3:51:86:80: 47:f3:ee:7d:70:96:34:d1:f8:d8:1f:2b:3f:e2:74: 68:d0:79:e7:7c:2f:23:63:d2:d5:f0:84:d5:80:2d: 2c:b9:1c:e3:34:3f:5c:4e:9d:e0:1c:33:0a:a3:d0: d9:56:88:38:52:85:14:51:18:50:67:b3:26:d0:ab: d2:35:5b:b9:18:e3:74:09:53:91:bb:b7:4e:ce:ae: a1:62:ab:b6:d2:87:80:c9:a5:5b:20:59:b6:c6:f6: 41:ec:89:a3:86:df:cf:fc:62:32:26:06:ce:1b:81: b7:53:45:c8:af:99:1b:a6:50:26:92:d8:81:81:a1: 69:df:82:f1:72:77:1a:ad:d5:51:48:43:82:3b:06: d0:58:6e:94:24:da:02:74:3f:9c:54:90:8b:38:0a: 19:8d:a8:7a:4d:39:7a:99:99:a3:70:69:8d:8d:7a: 92:8d:10:61:f5:aa:39:c3:e1:e8:04:64:40:11:84: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:51:8A:4A:82:B0:E1:FF:6A:99:89:FC:0C:E1:79:48:D6:68:1F:BB X509v3 Authority Key Identifier: keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f8:5d:df:ef:21:2c:7c:63:88:ef:3d:73:f6:96:9b:eb:3e: 18:73:75:83:7e:e5:91:05:de:52:54:5f:82:52:bc:87:a6:66: 64:7f:e0:ed:88:d4:9d:d8:12:d4:55:e1:5d:30:11:d3:62:ba: f2:f1:2d:ad:59:1d:c0:27:69:6e:ee:6f:e8:f5:e5:a1:e8:3f: 36:78:8a:26:35:ce:92:d6:a4:37:89:0c:94:57:d6:53:9f:8e: 64:b0:de:88:80:4c:0f:c1:bc:69:76:e0:5e:7f:60:b7:44:2e: 4b:d7:9e:58:57:b8:ab:8a:e7:51:7a:93:b3:37:a2:f0:e5:56: 4b:4c:dd:d0:3f:1e:34:74:9b:4f:cd:4b:55:e8:77:16:fe:b2: 8d:8f:06:e6:e0:af:92:b8:2d:8c:80:37:49:9e:7c:9c:8e:64: c8:07:9c:f5:a1:d5:b0:79:27:97:c6:63:57:67:41:61:75:1a: a9:2e:17:28:1b:7f:7c:a7:e3:a8:3c:a0:8a:a3:b7:a8:49:86: 54:46:40:2d:20:be:40:73:5d:4c:72:9b:7c:09:b2:86:7b:dd: 95:8a:34:6d:18:d9:28:ef:8e:f0:37:97:3a:42:e4:e9:df:d4: 21:e1:1b:3c:0f:23:fd:63:dd:6d:55:0c:33:1f:4a:38:b6:a4: 13:dd:83:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ouT49MpgAGABVylhP9FNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh ZGIxMmQwHhcNMjUxMjE5MjIwMjM3WhcNMjUxMjIwMjIwMjM3WjAzMTEwLwYDVQQD Eyg0MTUxOGE0YTgyYjBlMWZmNmE5OTg5ZmMwY2UxNzk0OGQ2NjgxZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowVyhgmD2R27D9l0P1eoT0mqi/PS DQCGptGFLLNPmOGMRfCB68Qrh1y/pe1UMEG8ssyfIqkOkO7NkM4/Gg87QG83kqjE iONRhoBH8+59cJY00fjYHys/4nRo0HnnfC8jY9LV8ITVgC0suRzjND9cTp3gHDMK o9DZVog4UoUUURhQZ7Mm0KvSNVu5GON0CVORu7dOzq6hYqu20oeAyaVbIFm2xvZB 7Imjht/P/GIyJgbOG4G3U0XIr5kbplAmktiBgaFp34LxcncardVRSEOCOwbQWG6U JNoCdD+cVJCLOAoZjah6TTl6mZmjcGmNjXqSjRBh9ao5w+HoBGRAEYT4jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFRikqCsOH/apmJ/AzheUjWaB+7MB8GA1UdIwQY MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt NDQwZGQwMTJiMTQxLzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfhd3+8h LHxjiO89c/aWm+s+GHN1g37lkQXeUlRfglK8h6ZmZH/g7YjUndgS1FXhXTAR02K6 8vEtrVkdwCdpbu5v6PXloeg/NniKJjXOktakN4kMlFfWU5+OZLDeiIBMD8G8aXbg Xn9gt0QuS9eeWFe4q4rnUXqTszei8OVWS0zd0D8eNHSbT81LVeh3Fv6yjY8G5uCv krgtjIA3SZ58nI5kyAec9aHVsHknl8ZjV2dBYXUaqS4XKBt/fKfjqDygiqO3qEmG VEZALSC+QHNdTHKbfAmyhnvdlYo0bRjZKO+O8DeXOkLk6d/UIeEbPA8j/WPdbVUM Mx9KOLakE92DvA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:21 2025 by rpki-client