This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json) Hash identifier: mGFj8K0WU/GQTwnfTDjhw6bLfiD4c06hV5XOCcFgGeI= Subject key identifier: EC:82:CB:70:17:95:16:F5:24:54:6D:E8:95:FD:9A:D2:5A:65:5C:98 Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Certificate serial: 019B32D6AE6DD7C59BB29213F65EF43F1BA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft Manifest number: 105B Signing time: Thu 18 Dec 2025 19:01:28 +0000 Manifest this update: Thu 18 Dec 2025 19:01:28 +0000 Manifest next update: Fri 19 Dec 2025 19:01:28 +0000 Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=) 2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: VtVJbEaUQynSU78RA+3cVxp2Ir1itPCBhGbewQrhzQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ae:6d:d7:c5:9b:b2:92:13:f6:5e:f4:3f:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Validity Not Before: Dec 18 19:01:28 2025 GMT Not After : Dec 19 19:01:28 2025 GMT Subject: CN=ec82cb70179516f524546de895fd9ad25a655c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:b6:e2:ea:e5:70:f6:28:c7:a3:d4:bf:70: 10:4a:4d:cf:f6:44:7f:2d:83:19:e4:de:9c:92:cf: 8d:d0:de:c8:b7:b7:55:9b:86:0c:cf:27:93:78:84: a9:9d:97:29:4a:ad:cb:bf:84:97:82:69:b7:59:7c: 85:92:20:74:6c:b2:d7:ce:0f:0e:1d:a8:49:ac:ab: 6d:b2:fb:e3:fd:1e:25:05:96:57:7d:52:1f:57:6f: aa:7c:00:5f:30:bd:1d:d3:60:18:a0:50:87:1b:9a: bd:89:32:63:d0:ee:49:de:ba:32:22:8a:94:50:97: 7d:eb:e8:71:5c:2c:0f:13:78:16:2b:f6:3a:3f:a6: 40:5a:3a:9e:11:a3:bb:80:17:67:91:a0:f6:31:b2: c7:da:9c:9b:f5:e7:d3:b5:af:33:8b:76:a6:15:99: 52:25:2d:00:a0:22:6c:c5:68:5e:1c:f5:a1:24:dc: 3e:b0:3e:13:6d:fa:3e:f7:29:7a:ad:bb:d3:65:10: 07:4f:78:a0:26:5d:dc:22:aa:97:51:9e:6d:ad:95: 18:7a:12:2f:50:e8:7a:34:b6:69:59:c8:bc:99:90: da:4c:18:ec:da:b3:02:0c:0f:d2:ed:d6:50:02:a2: e2:da:22:e3:98:40:4e:c3:92:a1:e5:99:83:14:a0: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:CB:70:17:95:16:F5:24:54:6D:E8:95:FD:9A:D2:5A:65:5C:98 X509v3 Authority Key Identifier: keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:89:1b:91:2d:b4:55:7c:1b:d6:17:90:39:52:53:91:49:f4: 9f:57:e7:1a:b8:94:23:dd:53:9d:f1:02:da:b3:9a:d8:e0:f1: e9:a0:6b:53:d5:23:2d:90:95:7b:50:fe:ec:fc:98:cf:c0:e2: 6e:1f:43:9b:b9:dd:b6:60:2c:3b:9c:2b:12:fd:f3:93:57:97: 30:20:b7:f7:ea:1d:76:ab:df:3d:8a:da:4b:5b:e0:80:06:68: 5a:9e:b4:c4:8a:33:07:40:a7:14:35:d8:ef:35:96:64:0d:32: ea:7f:9c:78:8f:95:53:3c:52:fd:82:a0:3d:97:90:37:7f:73: f1:48:e2:aa:23:c0:a2:01:37:9b:e9:ce:ca:ed:b8:01:01:b9: ef:06:a9:da:dc:3d:9b:44:cb:15:7c:04:2c:ca:02:3e:d4:de: 66:75:bc:74:bc:19:66:31:e1:7a:41:da:80:6d:bf:07:d6:f6: 6d:85:7b:ac:32:ee:65:1b:e7:96:d1:99:02:3a:f4:cb:5b:a1: 9d:80:5a:81:c9:5a:31:83:f8:e7:5a:fa:e3:77:7e:e6:34:08: da:e4:8c:21:7c:36:cd:5e:35:48:ef:61:27:e4:7f:ba:f4:a9: 30:98:12:be:02:3d:94:9e:a8:e4:1d:69:91:10:b2:39:4b:a1: 60:49:46:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1q5t18WbspIT9l70PxuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjc0ZjJjNWJlYjk5OTliODY3M2M3NjA3NDNjN2U3ZDMx Y2Q2NzMwHhcNMjUxMjE4MTkwMTI4WhcNMjUxMjE5MTkwMTI4WjAzMTEwLwYDVQQD EyhlYzgyY2I3MDE3OTUxNmY1MjQ1NDZkZTg5NWZkOWFkMjVhNjU1Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHi24urlcPYox6PUv3AQSk3P9kR/ LYMZ5N6cks+N0N7It7dVm4YMzyeTeISpnZcpSq3Lv4SXgmm3WXyFkiB0bLLXzg8O HahJrKttsvvj/R4lBZZXfVIfV2+qfABfML0d02AYoFCHG5q9iTJj0O5J3royIoqU UJd96+hxXCwPE3gWK/Y6P6ZAWjqeEaO7gBdnkaD2MbLH2pyb9efTta8zi3amFZlS JS0AoCJsxWheHPWhJNw+sD4Tbfo+9yl6rbvTZRAHT3igJl3cIqqXUZ5trZUYehIv UOh6NLZpWci8mZDaTBjs2rMCDA/S7dZQAqLi2iLjmEBOw5Kh5ZmDFKCvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyCy3AXlRb1JFRt6JX9mtJaZVyYMB8GA1UdIwQY MBaAFEEnTyxb65mZuGc8dgdDx+fTHNZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDIt YTQ4NzUyYjgwNGM3LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDItYTQ4NzUyYjgwNGM3 LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4kbkS20 VXwb1heQOVJTkUn0n1fnGriUI91TnfEC2rOa2ODx6aBrU9UjLZCVe1D+7PyYz8Di bh9Dm7ndtmAsO5wrEv3zk1eXMCC39+oddqvfPYraS1vggAZoWp60xIozB0CnFDXY 7zWWZA0y6n+ceI+VUzxS/YKgPZeQN39z8UjiqiPAogE3m+nOyu24AQG57wap2tw9 m0TLFXwELMoCPtTeZnW8dLwZZjHhekHagG2/B9b2bYV7rDLuZRvnltGZAjr0y1uh nYBagclaMYP451r643d+5jQI2uSMIXw2zV41SO9hJ+R/uvSpMJgSvgI9lJ6o5B1p kRCyOUuhYElG6A== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:27 2025 by rpki-client