This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json) Hash identifier: p+1Of7W5UbN6w+2LSjtA/kWJrOh9VcN80itdyS8J8O8= Subject key identifier: 86:75:12:AC:2F:F0:86:D7:9F:1F:7E:DD:89:C4:01:B3:AB:11:42:7C Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed Certificate serial: 019B08C800DCAE8710041C45E94729ED8FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft Manifest number: 09D6 Signing time: Wed 10 Dec 2025 15:01:23 +0000 Manifest this update: Wed 10 Dec 2025 15:01:23 +0000 Manifest next update: Thu 11 Dec 2025 15:01:23 +0000 Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: yuulY1p9UdnoW5yIVufDF2wMw578/yJ2Z7iana0d2bg=) 2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:00:dc:ae:87:10:04:1c:45:e9:47:29:ed:8f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed Validity Not Before: Dec 10 15:01:23 2025 GMT Not After : Dec 11 15:01:23 2025 GMT Subject: CN=867512ac2ff086d79f1f7edd89c401b3ab11427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:4b:0e:0b:98:7e:83:5b:ad:83:2b:cb:8d: af:51:49:b2:16:ec:a0:05:22:22:35:15:9b:4e:77: 99:21:6b:67:38:b9:89:a0:48:82:02:2a:6f:33:3a: 28:bc:b2:e3:04:e4:d0:28:78:e4:79:72:93:f6:40: ca:62:8d:59:d5:fd:3b:53:1b:c4:3c:9a:a9:6f:6d: fe:a0:1d:48:c2:77:28:b6:e8:0f:26:0f:c4:0c:59: de:25:4a:96:4f:bd:a0:3c:2a:7f:30:f5:9b:a7:08: 4a:3e:a1:9f:53:8c:ab:c2:f9:02:8c:3e:8b:e6:b5: ad:64:97:b5:da:ac:31:87:ac:f8:2a:e8:1b:bb:56: 48:98:81:6a:01:5a:3c:cb:26:34:24:84:b0:d8:19: b4:54:9e:c2:5c:f8:fe:20:b9:82:c3:e3:64:dc:78: 8d:ed:3d:45:f4:c5:3b:2d:ad:74:63:00:94:e8:ea: 32:d8:0e:e3:d3:21:74:57:56:3e:d2:1d:14:95:36: 42:15:81:ec:4e:55:89:2b:68:bc:72:1a:89:27:ac: 06:91:54:e8:60:38:4a:ce:27:ea:f2:80:17:01:24: 50:2b:b9:0e:f5:04:05:92:d0:a2:23:22:bf:23:ae: da:20:b1:a1:03:b5:b6:01:d3:f7:67:6c:eb:ff:a9: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:12:AC:2F:F0:86:D7:9F:1F:7E:DD:89:C4:01:B3:AB:11:42:7C X509v3 Authority Key Identifier: keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fa:ec:b6:74:bf:13:85:92:1f:b5:3f:bf:ac:73:67:06:15: 06:98:38:25:e0:81:96:32:93:16:a7:c7:44:f8:28:a2:0a:4f: 9a:c4:ec:ca:15:27:38:fd:c5:9b:2f:f4:18:23:f8:6a:aa:0a: 0b:c4:f6:1b:b5:fc:79:88:58:6f:da:65:76:da:ba:d4:15:fd: b8:31:15:6b:06:44:99:e6:de:14:d3:da:05:4a:00:95:b6:35: 8b:97:1c:45:24:e9:90:9b:fe:4e:a1:7c:a2:fd:9f:3c:e7:d5: a1:b7:3f:08:87:ae:4f:30:4b:12:ce:b3:ae:b6:2e:7f:9e:c9: 3f:60:02:4f:39:9e:d1:dd:06:02:47:36:df:5c:29:4a:f0:89: ee:b2:9e:85:ba:1a:1d:e5:5a:84:3e:99:88:5a:5b:4c:f7:ce: a3:7e:1d:14:1a:de:62:f4:6d:a2:fa:b0:89:54:09:34:bf:b9: 58:a6:1d:e2:ab:63:db:40:f7:47:c8:56:f6:d9:ad:05:32:18: a4:ce:10:1a:a3:b9:38:06:a1:cd:0a:b6:f3:a8:94:0f:ab:7c: a4:45:de:35:15:cf:0e:50:86:b1:59:89:c6:7f:dc:a5:32:6a: 0b:ad:62:8e:b8:c7:f3:74:f5:15:1b:70:a8:76:28:5f:66:27: 19:b2:b5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyADcrocQBBxF6Ucp7Y/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGUwN2Q3OTlmYjM1NWM5NTIwMjVmM2QyN2IwMGU5YjRl ZTM0ZWQwHhcNMjUxMjEwMTUwMTIzWhcNMjUxMjExMTUwMTIzWjAzMTEwLwYDVQQD Eyg4Njc1MTJhYzJmZjA4NmQ3OWYxZjdlZGQ4OWM0MDFiM2FiMTE0MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidtLDguYfoNbrYMry42vUUmyFuyg BSIiNRWbTneZIWtnOLmJoEiCAipvMzoovLLjBOTQKHjkeXKT9kDKYo1Z1f07UxvE PJqpb23+oB1IwncotugPJg/EDFneJUqWT72gPCp/MPWbpwhKPqGfU4yrwvkCjD6L 5rWtZJe12qwxh6z4Kugbu1ZImIFqAVo8yyY0JISw2Bm0VJ7CXPj+ILmCw+Nk3HiN 7T1F9MU7La10YwCU6Ooy2A7j0yF0V1Y+0h0UlTZCFYHsTlWJK2i8chqJJ6wGkVTo YDhKzifq8oAXASRQK7kO9QQFktCiIyK/I67aILGhA7W2AdP3Z2zr/6ldbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZ1Eqwv8IbXnx9+3YnEAbOrEUJ8MB8GA1UdIwQY MBaAFEAOB9eZ+zVclSAl89J7AOm07jTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt NDhmZTYzM2IxYjNmLzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm LzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPrstnS/ E4WSH7U/v6xzZwYVBpg4JeCBljKTFqfHRPgoogpPmsTsyhUnOP3Fmy/0GCP4aqoK C8T2G7X8eYhYb9pldtq61BX9uDEVawZEmebeFNPaBUoAlbY1i5ccRSTpkJv+TqF8 ov2fPOfVobc/CIeuTzBLEs6zrrYuf57JP2ACTzme0d0GAkc231wpSvCJ7rKehboa HeVahD6ZiFpbTPfOo34dFBreYvRtovqwiVQJNL+5WKYd4qtj20D3R8hW9tmtBTIY pM4QGqO5OAahzQq286iUD6t8pEXeNRXPDlCGsVmJxn/cpTJqC61ijrjH83T1FRtw qHYoX2YnGbK1bA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:06:59 2025 by rpki-client