This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json) Hash identifier: nxXOwSu2/TiGBWhfdejRjvmG7M9i/meJtZehSUox4FI= Subject key identifier: 9A:F0:27:B6:9D:5C:77:56:9C:FC:6C:2F:89:7B:79:D3:5F:25:FB:67 Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Certificate serial: 019B34C50A8DBAC613F6202B5CD072D6EF3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft Manifest number: 105C Signing time: Fri 19 Dec 2025 04:01:26 +0000 Manifest this update: Fri 19 Dec 2025 04:01:26 +0000 Manifest next update: Sat 20 Dec 2025 04:01:26 +0000 Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=) 2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: AiJLwbj2C5Ndi5n7/flIJl0jWlJOw77i8Bx5Qn9h4vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:0a:8d:ba:c6:13:f6:20:2b:5c:d0:72:d6:ef:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673 Validity Not Before: Dec 19 04:01:26 2025 GMT Not After : Dec 20 04:01:26 2025 GMT Subject: CN=9af027b69d5c77569cfc6c2f897b79d35f25fb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:fc:5d:a5:f2:32:b5:6b:08:df:6d:ab:d3: 65:7d:7d:14:39:1d:d2:2c:c0:e6:70:ce:5f:31:bb: 42:90:02:fa:bc:eb:b1:ad:ca:56:6e:12:57:d0:a4: 33:d8:70:17:9e:67:e1:bf:37:9c:86:a1:9c:f1:54: aa:01:8f:c8:ce:9f:cd:ac:f6:3c:7e:c7:cd:87:27: 11:60:c1:c2:88:15:d9:53:30:3e:22:a5:39:9a:c4: 76:61:f5:54:bf:84:8f:84:81:4b:5d:ee:d4:5d:51: bf:4d:74:83:d3:2a:9a:41:da:53:dd:23:56:c0:6e: 8b:7a:03:6f:f0:d9:93:b5:5a:58:2e:59:82:7a:52: 54:88:ba:6a:7d:fa:8e:c9:d6:c8:69:6c:7e:cc:a3: a3:67:54:4a:56:a2:c0:27:ec:e2:b5:a8:eb:eb:3d: a4:21:48:c1:dc:bc:ed:9d:b3:cb:8c:dc:45:47:d2: d9:e6:b2:26:ec:48:ef:a4:7d:e4:ca:2c:b0:9c:fc: 1e:f8:29:6a:52:18:fc:6b:75:df:91:b0:48:5e:0d: 5a:ff:e7:04:8d:bb:fb:e9:5d:d9:26:dc:2f:5a:92: 77:ac:9f:22:68:58:32:cc:f4:be:c5:04:69:c1:72: b8:6c:89:4e:3d:52:51:ec:f9:35:bb:92:81:7f:f4: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:27:B6:9D:5C:77:56:9C:FC:6C:2F:89:7B:79:D3:5F:25:FB:67 X509v3 Authority Key Identifier: keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:93:29:e0:43:dc:a6:7a:07:d4:40:a8:66:99:35:3d:c9: c0:21:cb:c9:0c:db:6f:ef:29:7f:a8:91:a3:ea:e4:73:c8:f5: 92:fa:80:73:24:61:6e:bb:1d:27:6e:37:ea:d1:ce:8b:a2:2f: 1d:6a:ca:cf:fd:f8:4f:b3:14:44:2e:f5:bf:b5:ac:b6:66:1e: a1:4d:05:70:3d:ce:63:57:12:2a:f7:73:41:5b:c1:2a:b2:d7: 1b:90:6d:3c:1a:84:0d:84:27:a1:8a:13:7a:4d:ca:4a:2e:b9: d6:d5:1b:15:0f:89:98:6e:dc:b5:49:98:96:de:1e:e4:06:83: 45:0b:55:15:43:c1:49:3a:fd:22:8a:82:b3:b5:6e:83:f6:cc: 57:ad:9d:66:7a:b6:aa:23:7b:47:fb:4b:bb:23:76:4b:70:c0: 56:89:c7:43:cb:9a:e3:8f:6a:82:e2:0e:66:8a:d9:39:53:6c: 00:15:2f:05:0c:f2:7c:c1:77:a2:49:fd:68:90:74:a1:e5:c3: 35:fb:92:d0:f0:f3:a7:0c:06:2f:14:c4:3d:27:9f:d1:96:4d: 45:a1:dd:45:b9:2b:a5:57:cb:ac:0a:93:55:f3:a4:20:10:97: c0:0c:ed:8d:a9:c0:42:bf:5f:6b:3b:16:cd:f3:26:78:3c:30: f8:57:4d:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xQqNusYT9iArXNBy1u89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjc0ZjJjNWJlYjk5OTliODY3M2M3NjA3NDNjN2U3ZDMx Y2Q2NzMwHhcNMjUxMjE5MDQwMTI2WhcNMjUxMjIwMDQwMTI2WjAzMTEwLwYDVQQD Eyg5YWYwMjdiNjlkNWM3NzU2OWNmYzZjMmY4OTdiNzlkMzVmMjVmYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgb8XaXyMrVrCN9tq9NlfX0UOR3S LMDmcM5fMbtCkAL6vOuxrcpWbhJX0KQz2HAXnmfhvzechqGc8VSqAY/Izp/NrPY8 fsfNhycRYMHCiBXZUzA+IqU5msR2YfVUv4SPhIFLXe7UXVG/TXSD0yqaQdpT3SNW wG6LegNv8NmTtVpYLlmCelJUiLpqffqOydbIaWx+zKOjZ1RKVqLAJ+zitajr6z2k IUjB3LztnbPLjNxFR9LZ5rIm7EjvpH3kyiywnPwe+ClqUhj8a3XfkbBIXg1a/+cE jbv76V3ZJtwvWpJ3rJ8iaFgyzPS+xQRpwXK4bIlOPVJR7Pk1u5KBf/TUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrwJ7adXHdWnPxsL4l7edNfJftnMB8GA1UdIwQY MBaAFEEnTyxb65mZuGc8dgdDx+fTHNZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDIt YTQ4NzUyYjgwNGM3LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDItYTQ4NzUyYjgwNGM3 LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufOTKeBD 3KZ6B9RAqGaZNT3JwCHLyQzbb+8pf6iRo+rkc8j1kvqAcyRhbrsdJ2436tHOi6Iv HWrKz/34T7MURC71v7WstmYeoU0FcD3OY1cSKvdzQVvBKrLXG5BtPBqEDYQnoYoT ek3KSi651tUbFQ+JmG7ctUmYlt4e5AaDRQtVFUPBSTr9IoqCs7Vug/bMV62dZnq2 qiN7R/tLuyN2S3DAVonHQ8ua449qguIOZorZOVNsABUvBQzyfMF3okn9aJB0oeXD NfuS0PDzpwwGLxTEPSef0ZZNRaHdRbkrpVfLrAqTVfOkIBCXwAztjanAQr9fazsW zfMmeDww+FdNcw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:01 2025 by rpki-client