This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json) Hash identifier: bCQ4AiH+XFVSeCIGZ47FgXTZKUnjx4REU+ZpW9jd6BU= Subject key identifier: 3B:40:62:99:FC:D1:BE:71:BB:DD:01:80:9A:FB:67:6A:92:AE:B5:AA Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7 Certificate serial: 019B1C17B04F7A271DE106841D3FE9CB1B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft Manifest number: 0542 Signing time: Sun 14 Dec 2025 09:01:13 +0000 Manifest this update: Sun 14 Dec 2025 09:01:13 +0000 Manifest next update: Mon 15 Dec 2025 09:01:13 +0000 Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=) 2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: wtftSEtotbr3qnboN8kkKaPTMhf76bhtM/h7FCNpORI=) 3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:b0:4f:7a:27:1d:e1:06:84:1d:3f:e9:cb:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Validity Not Before: Dec 14 09:01:13 2025 GMT Not After : Dec 15 09:01:13 2025 GMT Subject: CN=3b406299fcd1be71bbdd01809afb676a92aeb5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8b:1c:cf:38:83:2e:5d:82:36:01:6d:f9:9d: 16:a2:fe:46:3b:b0:f6:f8:4d:d0:ca:48:d9:75:c2: a4:b5:e7:11:40:e0:aa:19:98:ce:1f:95:09:37:bd: 5f:87:69:03:12:30:97:3d:1a:e5:ff:4e:e9:72:31: 68:98:b2:cd:bc:04:65:6a:7a:a5:90:d0:85:be:81: 18:d2:07:fd:eb:9c:07:18:e5:f6:56:4e:bc:48:34: 8b:a5:c0:e7:8a:99:a0:e2:1f:2f:c9:e1:77:e9:41: 81:f1:82:e3:69:4b:92:62:45:a1:0b:da:b7:d4:e2: 9f:ac:eb:f7:05:a3:ab:e5:61:f5:a8:46:a1:11:bf: 50:c9:d5:7f:42:3c:62:6b:59:ec:db:a3:90:9a:8d: 58:83:64:14:da:41:e8:44:ad:54:44:c5:f8:81:57: 3b:8b:28:a0:61:ee:43:a5:68:ae:5d:e4:c6:4f:8f: d6:2b:7c:5b:15:0c:ec:e6:3c:bf:ab:30:e7:45:4f: e3:ba:f8:39:f9:95:74:73:1a:67:7c:09:45:14:5a: 9d:4a:89:0a:5a:5f:7c:df:24:29:80:b4:5d:56:e5: c0:75:9e:86:d0:8e:40:bf:43:a6:f4:f9:94:20:4f: 4a:76:a1:90:8c:15:2e:a6:90:1e:f3:bf:03:01:b6: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:40:62:99:FC:D1:BE:71:BB:DD:01:80:9A:FB:67:6A:92:AE:B5:AA X509v3 Authority Key Identifier: keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:84:4a:19:d0:27:a4:0b:65:ff:08:b8:cf:a2:2e:1d:43:42: 0c:f1:02:8d:8e:1a:97:78:4c:b3:54:e7:96:ab:10:0e:a6:55: 30:60:32:da:91:74:2e:21:04:cd:4e:2e:9f:28:a1:82:da:29: 59:34:26:dd:66:a6:41:24:c5:52:36:ff:6b:28:1f:c4:2e:3f: 97:7c:3a:2c:1d:1b:f3:6c:82:46:15:5f:27:05:87:f4:1e:c9: 26:04:a8:78:fa:9b:a0:16:cc:4e:f2:2d:9e:d7:1f:ed:b8:2b: b7:08:19:16:80:ef:31:23:dc:c4:3d:bb:8f:9e:14:e5:45:54: 5f:5c:63:57:98:7f:40:a5:bd:66:84:01:84:54:94:6c:ed:32: 72:8c:72:d1:2c:62:23:b8:25:08:3d:63:9f:f3:68:b6:15:4d: ce:b6:ac:21:06:72:d8:8c:db:46:c4:fb:14:ab:45:ae:fa:cf: f8:21:f2:01:82:cd:39:a8:83:92:9f:3c:e2:3f:6b:c9:6c:a7: 8a:47:93:e3:f5:6b:85:50:39:56:8a:f0:5c:41:fa:4e:6a:e4: 2f:be:c0:0e:be:fe:75:2f:ce:00:63:56:df:2a:d7:7b:98:66: c6:f8:c6:b5:59:6e:f3:9d:9d:e2:d7:18:7f:03:39:1d:2f:18: 7c:63:0c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF7BPeicd4QaEHT/pyxtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm NjM1YjcwHhcNMjUxMjE0MDkwMTEzWhcNMjUxMjE1MDkwMTEzWjAzMTEwLwYDVQQD EygzYjQwNjI5OWZjZDFiZTcxYmJkZDAxODA5YWZiNjc2YTkyYWViNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YsczziDLl2CNgFt+Z0Wov5GO7D2 +E3QykjZdcKktecRQOCqGZjOH5UJN71fh2kDEjCXPRrl/07pcjFomLLNvARlanql kNCFvoEY0gf965wHGOX2Vk68SDSLpcDnipmg4h8vyeF36UGB8YLjaUuSYkWhC9q3 1OKfrOv3BaOr5WH1qEahEb9QydV/Qjxia1ns26OQmo1Yg2QU2kHoRK1URMX4gVc7 iyigYe5DpWiuXeTGT4/WK3xbFQzs5jy/qzDnRU/juvg5+ZV0cxpnfAlFFFqdSokK Wl983yQpgLRdVuXAdZ6G0I5Av0Om9PmUIE9KdqGQjBUuppAe878DAbbdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtAYpn80b5xu90BgJr7Z2qSrrWqMB8GA1UdIwQY MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYRKGdAn pAtl/wi4z6IuHUNCDPECjY4al3hMs1TnlqsQDqZVMGAy2pF0LiEEzU4unyihgtop WTQm3WamQSTFUjb/aygfxC4/l3w6LB0b82yCRhVfJwWH9B7JJgSoePqboBbMTvIt ntcf7bgrtwgZFoDvMSPcxD27j54U5UVUX1xjV5h/QKW9ZoQBhFSUbO0ycoxy0Sxi I7glCD1jn/NothVNzrasIQZy2IzbRsT7FKtFrvrP+CHyAYLNOaiDkp884j9ryWyn ikeT4/VrhVA5VorwXEH6TmrkL77ADr7+dS/OAGNW3yrXe5hmxvjGtVlu852d4tcY fwM5HS8YfGMMnQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:41:45 2025 by rpki-client