This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json) Hash identifier: wqBhSLnCwUwD02hhjJY3RkNBKIjusOF6mXuWIFpiCVg= Subject key identifier: 3F:55:C5:F6:8B:8D:4F:AC:93:70:BA:03:88:79:E9:07:34:63:6B:D9 Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Certificate serial: 019B0CA43B72F5E9B78A899461BBCC2299D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft Manifest number: 108C Signing time: Thu 11 Dec 2025 09:00:48 +0000 Manifest this update: Thu 11 Dec 2025 09:00:48 +0000 Manifest next update: Fri 12 Dec 2025 09:00:48 +0000 Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=) 2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=) 3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=) 4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: hY43ZcBO9YqDWjxyEsn6fjC8ockcTBFnKU3qudF6aZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:3b:72:f5:e9:b7:8a:89:94:61:bb:cc:22:99:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Validity Not Before: Dec 11 09:00:48 2025 GMT Not After : Dec 12 09:00:48 2025 GMT Subject: CN=3f55c5f68b8d4fac9370ba038879e90734636bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:04:3f:20:39:72:ee:40:dd:7e:e0:56:c2: 3e:4e:84:a2:e8:d6:87:36:d5:81:6d:7d:ff:24:5f: 2c:cd:8d:b8:57:1a:9d:67:58:09:89:cc:80:a5:f6: bf:a0:21:33:75:b7:c2:b6:5a:43:57:e1:d3:d5:73: 0d:62:c0:99:54:9d:98:0e:33:fb:0a:d8:a0:5a:b9: 40:59:35:cc:87:9e:b8:da:f3:0d:0a:9e:fb:c4:1b: 2e:1b:74:70:4b:86:ad:e5:32:b8:20:86:cf:cf:69: cf:51:29:6d:1d:e9:f2:4e:ed:81:70:64:78:10:04: 81:f7:39:7b:7c:3b:85:ed:83:26:1a:c7:10:bf:0f: 92:dc:a8:50:15:3f:64:05:5e:9d:0d:0d:bb:3a:79: 55:e6:aa:89:78:95:cf:49:c7:75:79:a9:c8:75:70: 49:cd:93:c9:d7:2a:89:ac:3c:7f:bd:27:14:be:9c: 26:35:96:08:27:19:7d:f5:e3:9a:8f:9b:72:62:3b: 82:db:cc:ae:a7:5b:89:80:91:8a:c9:a2:2f:7c:85: 1f:35:c3:f4:df:17:0f:3b:6c:f6:10:f3:be:4d:3b: 92:3f:18:97:1c:77:1a:e7:da:93:fb:ec:1a:00:d3: e5:13:18:90:5c:9e:e8:2a:ce:6b:95:c1:0a:7d:01: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:C5:F6:8B:8D:4F:AC:93:70:BA:03:88:79:E9:07:34:63:6B:D9 X509v3 Authority Key Identifier: keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:77:fa:fc:e0:b0:02:92:1b:d5:5f:05:2f:fa:75:96:8c: 07:52:5b:9e:9c:af:44:a3:9f:4a:f0:39:88:dd:03:30:c3:ec: e3:1a:3f:29:b8:83:b9:bf:0b:b8:f1:1e:39:1a:2b:cf:df:83: c0:fe:70:50:46:2d:01:3e:45:2f:aa:09:e5:ad:ce:4b:5b:63: 90:b8:1e:db:c4:27:52:a9:e3:e9:7b:2d:23:43:c3:af:a4:b9: af:4a:19:9c:a8:e0:fd:41:c6:3d:3e:8f:85:7c:26:85:6b:8d: d5:60:94:8b:73:39:64:6f:f4:e8:1d:41:0e:7b:0d:9c:5e:0d: 00:07:16:4f:f0:13:0c:b3:76:b4:21:71:9a:22:92:7c:e2:56: 09:41:e5:c0:37:84:a0:45:e6:a8:b2:86:50:09:e7:e1:5e:29: 4b:b5:72:8e:c5:ad:4e:f6:c5:66:80:14:70:65:cb:64:2a:30: b5:5b:a9:b4:26:4a:e0:0a:99:f1:32:6c:cc:17:9f:8b:79:e2: c5:d5:a7:2e:ba:de:4b:3d:31:3d:b7:bf:f7:cf:79:71:c6:fd: 4b:1b:fc:1b:8d:07:4a:e5:74:28:3c:3b:a7:ed:b8:60:97:37: 6a:c3:bd:86:29:9e:c8:65:39:11:ed:44:7e:6b:24:15:38:2a: e6:d6:d5:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMpDty9em3iomUYbvMIpnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm ZDI4MjcwHhcNMjUxMjExMDkwMDQ4WhcNMjUxMjEyMDkwMDQ4WjAzMTEwLwYDVQQD EygzZjU1YzVmNjhiOGQ0ZmFjOTM3MGJhMDM4ODc5ZTkwNzM0NjM2YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM0EPyA5cu5A3X7gVsI+ToSi6NaH NtWBbX3/JF8szY24VxqdZ1gJicyApfa/oCEzdbfCtlpDV+HT1XMNYsCZVJ2YDjP7 CtigWrlAWTXMh5642vMNCp77xBsuG3RwS4at5TK4IIbPz2nPUSltHenyTu2BcGR4 EASB9zl7fDuF7YMmGscQvw+S3KhQFT9kBV6dDQ27OnlV5qqJeJXPScd1eanIdXBJ zZPJ1yqJrDx/vScUvpwmNZYIJxl99eOaj5tyYjuC28yup1uJgJGKyaIvfIUfNcP0 3xcPO2z2EPO+TTuSPxiXHHca59qT++waANPlExiQXJ7oKs5rlcEKfQGnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9VxfaLjU+sk3C6A4h56Qc0Y2vZMB8GA1UdIwQY MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgB3+vzg sAKSG9VfBS/6dZaMB1JbnpyvRKOfSvA5iN0DMMPs4xo/KbiDub8LuPEeORorz9+D wP5wUEYtAT5FL6oJ5a3OS1tjkLge28QnUqnj6XstI0PDr6S5r0oZnKjg/UHGPT6P hXwmhWuN1WCUi3M5ZG/06B1BDnsNnF4NAAcWT/ATDLN2tCFxmiKSfOJWCUHlwDeE oEXmqLKGUAnn4V4pS7VyjsWtTvbFZoAUcGXLZCowtVuptCZK4AqZ8TJszBefi3ni xdWnLrreSz0xPbe/9895ccb9Sxv8G40HSuV0KDw7p+24YJc3asO9himeyGU5Ee1E fmskFTgq5tbVTQ== -----END CERTIFICATE-----Generated at Thu Dec 11 15:09:04 2025 by rpki-client