This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: YPkDYD3Qfdq8Bv9Jr6IiB2Dj37mUVBuWZty9WIwvhk4= Subject key identifier: 57:F1:35:5C:C4:8D:5E:BA:0E:DD:46:53:F9:28:3A:2F:AA:BC:97:58 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B12DD334ED96CDCAE992314283E893168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 14D3 Signing time: Fri 12 Dec 2025 14:00:45 +0000 Manifest this update: Fri 12 Dec 2025 14:00:45 +0000 Manifest next update: Sat 13 Dec 2025 14:00:45 +0000 Files and hashes: 1: 67pXXJ9TGz4KS4CPk3F2qwCJvPs.roa (hash: TL11KjGZ23sagC+4BrDFrq5tRJiiJf48Twqx/FNbs0g=) 2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 0J5Pat0s32CsRNIpFrIObTc6M1b/ySxdFiROHQnOEaY=) 4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 7: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 8: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 9: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 10: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:33:4e:d9:6c:dc:ae:99:23:14:28:3e:89:31:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Dec 12 14:00:45 2025 GMT Not After : Dec 13 14:00:45 2025 GMT Subject: CN=57f1355cc48d5eba0edd4653f9283a2faabc9758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:87:03:b3:9f:17:9f:89:94:4f:11:fc:bb: 0e:21:27:a0:ef:a4:8d:e7:3b:35:d8:a3:78:2b:80: da:72:d4:63:4f:db:b3:e8:fc:da:46:32:6a:53:6d: 1f:c0:2e:26:e6:53:06:f0:a7:53:e0:72:99:6c:bd: 60:26:91:70:1a:10:69:bf:4f:64:fc:ad:d7:f6:e9: 30:ed:97:c5:22:5d:5e:14:7a:c1:6f:73:2d:ab:23: db:f5:b6:64:ff:e0:22:74:98:14:a9:23:a8:ea:3a: ee:44:40:ef:8f:85:63:a3:8e:9d:45:0a:a1:83:90: a5:91:12:0c:fa:85:77:2c:c9:40:9f:3f:92:7d:2c: f2:f8:23:8f:8d:91:19:66:37:80:cb:2f:39:a7:07: 44:23:b8:5c:42:2b:ba:59:61:1c:76:54:4f:81:c1: 3c:5e:98:ec:4c:fb:3e:f3:71:93:09:03:c8:1a:97: e4:10:eb:0a:1a:80:34:dd:75:37:d6:30:63:0e:17: cb:48:09:c1:c2:18:e4:df:50:d5:c4:31:bf:14:19: 1a:33:7f:5a:6b:44:be:66:ec:85:52:aa:ff:44:fc: af:d8:70:93:55:bf:3e:d5:bd:81:b9:b6:5d:28:de: 3c:19:15:6e:1c:41:2b:b7:57:15:08:95:8d:e7:1b: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F1:35:5C:C4:8D:5E:BA:0E:DD:46:53:F9:28:3A:2F:AA:BC:97:58 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:50:e3:0d:d5:44:7a:43:a0:6c:3a:a4:51:1c:b4:4e:e6: c2:5d:4f:dc:b8:05:18:a4:c5:a0:d0:24:4d:de:63:b2:4a:18: de:f9:0f:c2:7c:74:12:bb:62:77:82:d2:48:83:b8:8f:b5:43: 27:e0:ff:04:d2:a9:eb:fb:cc:69:9b:4a:13:35:dc:15:b7:9b: b3:9d:d5:c3:dc:c6:62:60:12:f9:80:fe:71:e6:8d:07:46:99: ea:7d:cb:7b:03:96:6c:ca:5d:b0:3c:f1:be:67:14:d4:ee:c6: 49:4b:c2:c0:34:1a:66:05:6e:9b:21:f6:88:2d:a3:02:f7:00: 7d:78:b1:b6:b9:21:d0:0d:d7:70:a4:9c:f5:19:35:4d:19:63: 99:0b:0d:d1:c6:12:42:b6:09:90:41:bf:c8:7c:1b:9c:01:0c: 2f:a0:be:9b:fa:3d:f6:f3:97:66:b3:67:f9:be:80:e7:61:26: e0:42:bc:39:a8:21:91:d2:fc:d8:f9:53:fa:5d:69:69:9b:bc: 76:fc:cf:45:54:49:43:3a:ac:47:f7:a3:22:35:e7:35:ed:2e: 1f:ba:b5:71:85:78:12:89:02:24:ce:11:56:dd:76:00:c3:16: 31:f5:84:dd:7c:aa:4e:ed:b3:2d:be:ab:07:e8:9f:f5:a3:76: d1:33:a7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3TNO2WzcrpkjFCg+iTFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMjEyMTQwMDQ1WhcNMjUxMjEzMTQwMDQ1WjAzMTEwLwYDVQQD Eyg1N2YxMzU1Y2M0OGQ1ZWJhMGVkZDQ2NTNmOTI4M2EyZmFhYmM5NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHuHA7OfF5+JlE8R/LsOISeg76SN 5zs12KN4K4DactRjT9uz6PzaRjJqU20fwC4m5lMG8KdT4HKZbL1gJpFwGhBpv09k /K3X9ukw7ZfFIl1eFHrBb3MtqyPb9bZk/+AidJgUqSOo6jruREDvj4Vjo46dRQqh g5ClkRIM+oV3LMlAnz+SfSzy+COPjZEZZjeAyy85pwdEI7hcQiu6WWEcdlRPgcE8 XpjsTPs+83GTCQPIGpfkEOsKGoA03XU31jBjDhfLSAnBwhjk31DVxDG/FBkaM39a a0S+ZuyFUqr/RPyv2HCTVb8+1b2BubZdKN48GRVuHEErt1cVCJWN5xucEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfxNVzEjV66Dt1GU/koOi+qvJdYMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXlQ4w3V RHpDoGw6pFEctE7mwl1P3LgFGKTFoNAkTd5jskoY3vkPwnx0Ertid4LSSIO4j7VD J+D/BNKp6/vMaZtKEzXcFbebs53Vw9zGYmAS+YD+ceaNB0aZ6n3LewOWbMpdsDzx vmcU1O7GSUvCwDQaZgVumyH2iC2jAvcAfXixtrkh0A3XcKSc9Rk1TRljmQsN0cYS QrYJkEG/yHwbnAEML6C+m/o99vOXZrNn+b6A52Em4EK8OaghkdL82PlT+l1paZu8 dvzPRVRJQzqsR/ejIjXnNe0uH7q1cYV4EokCJM4RVt12AMMWMfWE3XyqTu2zLb6r B+if9aN20TOnMA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:54:22 2025 by rpki-client