This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json) Hash identifier: kdoUSs3mYOIUHJVnErghOawJZ6zZua1nuAleu7PnKxM= Subject key identifier: BC:D0:94:61:DC:81:1C:F7:11:4E:AE:73:35:76:11:28:3C:33:2B:5C Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Certificate serial: 019B19BB9E10BB38AB93193C8A1A0E92D715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft Manifest number: 10F6 Signing time: Sat 13 Dec 2025 22:01:24 +0000 Manifest this update: Sat 13 Dec 2025 22:01:24 +0000 Manifest next update: Sun 14 Dec 2025 22:01:24 +0000 Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=) 2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: Tm1DzELP9R4eBaa7BWosdgNZudTF8aY27is5zRwmk/8=) 3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:9e:10:bb:38:ab:93:19:3c:8a:1a:0e:92:d7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Validity Not Before: Dec 13 22:01:24 2025 GMT Not After : Dec 14 22:01:24 2025 GMT Subject: CN=bcd09461dc811cf7114eae73357611283c332b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:53:b0:1b:3b:5f:1e:46:cb:1c:d7:c5:a2: 71:e8:38:b4:50:f6:27:17:c8:2e:f8:2d:5e:cc:1e: 80:b6:ee:7c:d4:3b:d6:a1:33:77:01:a9:b0:32:c6: b1:d7:7e:56:ce:77:88:57:e0:10:84:07:54:df:77: 69:2d:8f:69:0b:fd:f1:3f:b9:0d:6f:47:cd:4c:e8: fa:09:a1:9d:8c:f5:3b:4c:e0:4d:fe:b5:ce:a3:00: 13:b2:35:0c:2a:43:07:b0:f9:9a:61:d0:8e:5f:2e: 1e:cb:23:70:44:20:5d:8c:f4:a7:51:f2:c2:43:df: dc:0d:29:8f:4e:3e:8f:15:14:0c:ce:17:53:05:2a: 88:3d:43:9c:54:79:f4:d7:0a:da:a4:a6:2e:d5:88: d8:55:bd:ae:0e:4f:ca:46:22:3a:b0:9d:41:a5:49: 8a:bc:97:5f:ca:ce:7b:45:0a:81:87:4d:14:fd:15: 49:d8:ae:56:1e:8e:66:ab:5b:e9:9c:1f:9f:39:dc: 29:f3:7d:2e:0d:55:8a:4e:5b:65:74:63:63:ae:3a: 18:17:93:1a:ee:11:e4:7c:48:65:38:d3:bf:0c:10: 57:ec:34:c9:9e:08:3f:03:47:66:91:a2:4e:85:3f: 78:64:59:e0:bf:ab:1e:cf:99:53:5a:49:b0:58:45: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:94:61:DC:81:1C:F7:11:4E:AE:73:35:76:11:28:3C:33:2B:5C X509v3 Authority Key Identifier: keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:92:e6:e0:78:a1:73:f3:6a:97:d6:3c:b6:ce:34:9c:91:61: b1:94:9b:3f:d1:e6:ae:2d:38:5f:ad:0b:ec:50:84:ee:48:67: d8:93:c0:14:77:4f:57:3e:ce:b3:98:66:e5:83:db:a0:f5:5c: 87:3a:a5:d8:28:00:2a:b3:5a:56:28:d3:ac:02:01:78:16:96: b4:87:e3:c4:ae:be:a4:2e:5b:f8:09:cd:17:8a:ae:54:eb:45: dd:0a:52:16:97:23:e7:20:c4:33:99:cd:e2:da:75:fa:22:90: 69:aa:ab:6f:5f:5e:6e:28:d3:78:14:6c:da:c6:ce:7d:74:05: 58:45:db:51:2f:83:55:d3:0b:9f:3d:36:c8:34:df:4a:23:58: 35:39:a5:65:8a:36:82:13:5b:e8:b5:7b:cd:21:2c:4e:70:f3: 22:5d:c5:0c:39:d9:17:d1:b4:90:b0:a8:2e:f9:9b:ae:87:1f: 10:f3:fc:cd:aa:24:16:0a:4c:cf:36:2e:70:ca:21:fb:73:01: 37:fd:70:0c:c8:bd:58:ea:15:e4:6d:2e:55:58:af:d1:dc:1f: 7e:db:e7:3d:da:81:5e:75:23:4f:a3:3d:76:1e:92:9d:73:b9: f6:e5:45:70:65:cf:1c:be:66:ec:0f:30:f1:8c:cf:57:27:4b: cf:81:56:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu54Quzirkxk8ihoOktcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5 NDlmYTgwHhcNMjUxMjEzMjIwMTI0WhcNMjUxMjE0MjIwMTI0WjAzMTEwLwYDVQQD EyhiY2QwOTQ2MWRjODExY2Y3MTE0ZWFlNzMzNTc2MTEyODNjMzMyYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvtTsBs7Xx5GyxzXxaJx6Di0UPYn F8gu+C1ezB6Atu581DvWoTN3AamwMsax135WzneIV+AQhAdU33dpLY9pC/3xP7kN b0fNTOj6CaGdjPU7TOBN/rXOowATsjUMKkMHsPmaYdCOXy4eyyNwRCBdjPSnUfLC Q9/cDSmPTj6PFRQMzhdTBSqIPUOcVHn01wrapKYu1YjYVb2uDk/KRiI6sJ1BpUmK vJdfys57RQqBh00U/RVJ2K5WHo5mq1vpnB+fOdwp830uDVWKTltldGNjrjoYF5Ma 7hHkfEhlONO/DBBX7DTJngg/A0dmkaJOhT94ZFngv6sez5lTWkmwWEWB3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzQlGHcgRz3EU6uczV2ESg8MytcMB8GA1UdIwQY MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpLm4Hih c/Nql9Y8ts40nJFhsZSbP9Hmri04X60L7FCE7khn2JPAFHdPVz7Os5hm5YPboPVc hzql2CgAKrNaVijTrAIBeBaWtIfjxK6+pC5b+AnNF4quVOtF3QpSFpcj5yDEM5nN 4tp1+iKQaaqrb19ebijTeBRs2sbOfXQFWEXbUS+DVdMLnz02yDTfSiNYNTmlZYo2 ghNb6LV7zSEsTnDzIl3FDDnZF9G0kLCoLvmbrocfEPP8zaokFgpMzzYucMoh+3MB N/1wDMi9WOoV5G0uVViv0dwfftvnPdqBXnUjT6M9dh6SnXO59uVFcGXPHL5m7A8w 8YzPVydLz4FWTg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:15 2025 by rpki-client