This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json) Hash identifier: Um7KBVPcCXVIZOq6x/ZuykdrjI8Bw4AYNbPxQ2Pd8xw= Subject key identifier: 06:BF:36:C6:F1:27:9F:65:D3:20:FA:F3:25:25:4D:01:00:76:10:23 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B0DEDD013A77B57BFD400DD55D708B868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft Manifest number: 177C Signing time: Thu 11 Dec 2025 15:00:47 +0000 Manifest this update: Thu 11 Dec 2025 15:00:47 +0000 Manifest next update: Fri 12 Dec 2025 15:00:47 +0000 Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=) 2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=) 3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=) 4: X0xBUO01yDVN5CRqvm4XAUfMOJU.roa (hash: 4DOTlT3v5tZvSddUKapPHYVNXtvABPFyf5Abe5iqGYM=) 5: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=) 6: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=) 7: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=) 8: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=) 9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: D5QSpJ1oLU8cy6aJHbAfSGH5FE4AQZSmKXrPKh9bCr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:d0:13:a7:7b:57:bf:d4:00:dd:55:d7:08:b8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Dec 11 15:00:47 2025 GMT Not After : Dec 12 15:00:47 2025 GMT Subject: CN=06bf36c6f1279f65d320faf325254d0100761023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:79:f9:8a:31:1f:f3:00:71:ba:a9:b1:9d: 70:97:f2:93:ff:42:70:f8:89:d7:66:bc:11:31:0f: d1:c0:1d:0b:da:0f:8f:a1:ac:28:5f:85:57:1a:89: 6a:3e:7e:19:1c:74:50:04:ce:a4:27:05:fb:60:d2: 08:63:26:e3:55:ed:d5:3c:70:df:3f:ad:a7:6e:cd: a1:49:98:37:95:19:90:b3:f5:df:a2:b4:5e:e2:14: d9:3e:63:b7:f3:5e:a5:26:46:64:8e:58:13:3b:21: a9:94:22:1f:17:e3:bc:79:31:b0:34:17:dc:82:4a: 08:b2:a4:01:33:48:4e:6f:17:9e:9e:4a:14:b9:ee: 56:6c:d8:e0:09:a9:3f:1b:74:0b:a0:68:0b:3b:a4: e0:7a:79:51:70:0a:3c:f5:c4:2f:22:a3:c4:9d:9b: e6:3d:0b:ba:4f:ab:7e:0a:5e:ff:41:c0:d9:75:85: dc:b8:96:70:ab:1d:8d:90:8e:27:a1:88:8a:c2:1c: 29:2c:3a:c8:dc:92:ad:56:13:91:f6:ec:2a:01:ed: 66:89:75:62:f6:e0:b4:b5:ac:f2:0d:86:62:c3:06: 48:da:40:9b:bf:5f:b0:4b:56:8d:5e:17:6d:23:6d: 8a:45:af:6e:dd:9c:df:54:35:a7:43:4b:be:08:0b: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:36:C6:F1:27:9F:65:D3:20:FA:F3:25:25:4D:01:00:76:10:23 X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ac:c7:bf:84:4f:ee:97:70:96:d1:5b:6f:3b:ed:da:97:b3: ef:21:2c:af:72:41:c9:2a:99:47:6b:d2:98:f6:d1:52:10:c0: d0:28:25:7b:f4:93:7c:01:dc:cb:d8:fa:1d:c2:d6:92:17:82: d4:3a:a2:de:c4:4a:cc:9b:0c:e3:31:37:5c:53:9b:2c:4d:14: 71:c4:64:a0:57:69:44:be:b1:31:bc:b5:f8:c4:07:1e:3b:49: 97:dc:21:c2:b7:22:a6:2f:ef:99:2b:a3:7e:36:c7:e5:65:cf: 0c:e4:85:29:d1:56:af:d5:4e:a9:7a:02:46:c0:88:43:4a:fd: 9c:18:b6:82:8f:b3:54:41:df:4d:50:06:52:b2:8e:d0:5b:40: e9:61:3e:3f:b0:38:58:22:a6:28:4d:4e:6b:5f:c4:8f:85:e0: a9:e5:04:94:be:77:2a:6a:e0:3d:85:31:37:25:8c:58:67:61: 8b:ef:29:41:c2:23:87:72:fa:64:30:36:e1:df:96:79:a8:08: e8:36:f4:00:6b:05:9b:60:8f:0b:0c:73:d8:9e:fb:43:94:c0: a2:50:3f:00:17:9e:06:9f:0a:eb:4f:f7:fd:11:53:b4:49:d3: da:11:a2:23:30:98:d7:31:c9:c0:82:66:ea:9f:05:4c:78:6f: 53:be:22:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7dATp3tXv9QA3VXXCLhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjUxMjExMTUwMDQ3WhcNMjUxMjEyMTUwMDQ3WjAzMTEwLwYDVQQD EygwNmJmMzZjNmYxMjc5ZjY1ZDMyMGZhZjMyNTI1NGQwMTAwNzYxMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MB5+YoxH/MAcbqpsZ1wl/KT/0Jw +InXZrwRMQ/RwB0L2g+PoawoX4VXGolqPn4ZHHRQBM6kJwX7YNIIYybjVe3VPHDf P62nbs2hSZg3lRmQs/XforRe4hTZPmO3816lJkZkjlgTOyGplCIfF+O8eTGwNBfc gkoIsqQBM0hObxeenkoUue5WbNjgCak/G3QLoGgLO6TgenlRcAo89cQvIqPEnZvm PQu6T6t+Cl7/QcDZdYXcuJZwqx2NkI4noYiKwhwpLDrI3JKtVhOR9uwqAe1miXVi 9uC0tazyDYZiwwZI2kCbv1+wS1aNXhdtI22KRa9u3ZzfVDWnQ0u+CAvMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa/NsbxJ59l0yD68yUlTQEAdhAjMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6zHv4RP 7pdwltFbbzvt2pez7yEsr3JBySqZR2vSmPbRUhDA0Cgle/STfAHcy9j6HcLWkheC 1Dqi3sRKzJsM4zE3XFObLE0UccRkoFdpRL6xMby1+MQHHjtJl9whwrcipi/vmSuj fjbH5WXPDOSFKdFWr9VOqXoCRsCIQ0r9nBi2go+zVEHfTVAGUrKO0FtA6WE+P7A4 WCKmKE1Oa1/Ej4XgqeUElL53KmrgPYUxNyWMWGdhi+8pQcIjh3L6ZDA24d+WeagI 6Db0AGsFm2CPCwxz2J77Q5TAolA/ABeeBp8K60/3/RFTtEnT2hGiIzCY1zHJwIJm 6p8FTHhvU74ihw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:28:55 2025 by rpki-client