This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: IYQRU/Nnw3ifmKbtnYJcooiy+SWyty+7QhitEEHKwPA= Subject key identifier: 31:D6:1D:79:33:95:EE:5F:DA:6E:0B:86:6F:87:F1:F8:A9:AD:8F:74 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B06A24F30FA6C9E35F25680D11FE361EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 134B Signing time: Wed 10 Dec 2025 05:00:58 +0000 Manifest this update: Wed 10 Dec 2025 05:00:58 +0000 Manifest next update: Thu 11 Dec 2025 05:00:58 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: gPVFC8yvzHIRU7QJD+oD7xXBRrHbQ2pXQXBVVMF+lS4=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:4f:30:fa:6c:9e:35:f2:56:80:d1:1f:e3:61:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Dec 10 05:00:58 2025 GMT Not After : Dec 11 05:00:58 2025 GMT Subject: CN=31d61d793395ee5fda6e0b866f87f1f8a9ad8f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:f4:96:74:b7:e9:ea:6e:7e:4c:04:6e:b8: cb:7d:95:73:fb:29:43:67:4c:09:cf:94:4e:ad:4b: 51:c4:c9:05:dd:16:9c:6c:fd:a6:b2:93:02:c5:e2: 8a:35:ea:e6:be:c2:ef:fa:6f:56:a3:15:16:bd:48: 10:ba:68:f5:b5:44:1e:ab:79:31:d9:5a:21:13:7e: b4:ec:32:ca:0d:ce:4e:fe:9b:5d:61:eb:ca:f4:79: ec:51:c9:8b:0a:70:78:d5:73:25:a2:87:93:98:04: 83:8f:5b:fc:54:c4:ad:79:cc:bf:e8:03:e5:b2:9c: b3:51:80:e0:c3:e3:ec:62:53:5a:2f:be:cb:e8:fc: 89:e9:9e:e0:61:9d:e3:62:83:60:44:0c:16:38:d3: be:91:6e:eb:ba:7e:bf:29:56:d9:39:1c:78:5f:ec: 48:84:1c:37:b0:be:a3:d5:01:c9:c1:46:53:3f:d3: 71:dd:5d:86:0c:32:32:4e:fd:41:c2:46:4e:45:c2: ad:03:20:fe:8f:c7:57:68:87:41:1c:5a:48:01:2b: 91:ab:33:64:10:26:8e:39:09:77:49:12:d5:89:be: e2:79:ed:3e:fd:a8:e5:69:1e:e1:9f:2e:6d:56:2d: 58:fe:a5:f3:84:34:67:6d:c4:ac:9f:c4:ed:fc:f6: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D6:1D:79:33:95:EE:5F:DA:6E:0B:86:6F:87:F1:F8:A9:AD:8F:74 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c6:30:06:6d:b4:19:81:a6:06:6a:d8:52:2b:b8:56:2c:f4: 79:a5:2e:79:23:83:e2:9e:03:c2:51:3f:5f:36:95:c4:4f:4c: 20:92:7b:6c:19:7c:81:9f:91:f9:07:a7:fd:4f:43:38:58:bd: 57:df:d0:a3:cb:16:2d:32:52:5d:98:7d:79:e4:01:15:65:3d: d9:b9:a6:3a:8b:4a:df:a9:3a:d0:e9:2d:09:db:98:2c:6a:a9: f4:3f:71:e3:0e:d2:ab:6b:6a:e5:86:71:3e:37:80:27:50:cb: cc:6e:6f:c5:95:f8:55:9b:59:d3:7d:90:14:c1:07:6f:72:be: b4:5c:b1:6d:ab:52:3f:a3:1d:b8:9b:85:c3:d1:14:8d:a4:12: ca:2e:4c:6b:8d:c2:d5:af:2e:2b:cc:b4:d5:6b:93:5c:9a:10: bb:fb:d0:04:a2:ec:7a:94:13:a3:83:dd:8e:14:fc:a0:ed:7e: 86:be:45:f3:bb:f6:82:99:07:c6:4a:d3:46:ab:23:94:a5:ce: cb:7d:29:9f:ed:91:66:e1:9d:fa:54:8b:bf:9d:28:10:06:c5: f4:34:2c:c3:3c:39:cf:a7:4e:95:48:fc:ad:69:96:5b:d1:66: be:5d:27:65:2d:9a:87:d1:40:14:55:37:8f:d7:41:46:3f:ed: 47:d9:6d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGok8w+myeNfJWgNEf42HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUxMjEwMDUwMDU4WhcNMjUxMjExMDUwMDU4WjAzMTEwLwYDVQQD EygzMWQ2MWQ3OTMzOTVlZTVmZGE2ZTBiODY2Zjg3ZjFmOGE5YWQ4Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytH0lnS36epufkwEbrjLfZVz+ylD Z0wJz5ROrUtRxMkF3RacbP2mspMCxeKKNermvsLv+m9WoxUWvUgQumj1tUQeq3kx 2VohE3607DLKDc5O/ptdYevK9HnsUcmLCnB41XMlooeTmASDj1v8VMStecy/6APl spyzUYDgw+PsYlNaL77L6PyJ6Z7gYZ3jYoNgRAwWONO+kW7run6/KVbZORx4X+xI hBw3sL6j1QHJwUZTP9Nx3V2GDDIyTv1BwkZORcKtAyD+j8dXaIdBHFpIASuRqzNk ECaOOQl3SRLVib7iee0+/ajlaR7hny5tVi1Y/qXzhDRnbcSsn8Tt/PbkxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHWHXkzle5f2m4Lhm+H8fiprY90MB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8YwBm20 GYGmBmrYUiu4Viz0eaUueSOD4p4DwlE/XzaVxE9MIJJ7bBl8gZ+R+Qen/U9DOFi9 V9/Qo8sWLTJSXZh9eeQBFWU92bmmOotK36k60OktCduYLGqp9D9x4w7Sq2tq5YZx PjeAJ1DLzG5vxZX4VZtZ032QFMEHb3K+tFyxbatSP6MduJuFw9EUjaQSyi5Ma43C 1a8uK8y01WuTXJoQu/vQBKLsepQTo4PdjhT8oO1+hr5F87v2gpkHxkrTRqsjlKXO y30pn+2RZuGd+lSLv50oEAbF9DQswzw5z6dOlUj8rWmWW9Fmvl0nZS2ah9FAFFU3 j9dBRj/tR9lt2w== -----END CERTIFICATE-----Generated at Wed Dec 10 11:53:44 2025 by rpki-client