This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: t7BWEqu6THifvrDsNIFuVxTU+e50QolR96YQGAv+1W4= Subject key identifier: 66:B2:8C:CB:38:37:4E:BB:EA:A0:81:17:58:87:11:F7:4F:B9:CD:4F Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B126F78402DDCD3A5D33C1A34620B7358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0E1D Signing time: Fri 12 Dec 2025 12:00:53 +0000 Manifest this update: Fri 12 Dec 2025 12:00:53 +0000 Manifest next update: Sat 13 Dec 2025 12:00:53 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: VjcX3J9vDPI4ndAobMkWxKrnTdYThdmmzAfoK7XgjXI=) 6: XmW1bZIMAH1eUiD8pIh2qe-nzi4.roa (hash: OGkNzBo8j0AN5nV1X1VDsvF/YywJ3+cRgQIpDFVours=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 9: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (hash: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:78:40:2d:dc:d3:a5:d3:3c:1a:34:62:0b:73:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Dec 12 12:00:53 2025 GMT Not After : Dec 13 12:00:53 2025 GMT Subject: CN=66b28ccb38374ebbeaa08117588711f74fb9cd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:7d:f8:36:ce:84:18:1c:28:ac:71:01:7d: b0:09:eb:28:32:f5:12:32:da:55:54:a5:0d:5f:c3: 9d:24:93:6f:3e:bf:1f:8b:13:94:98:99:a2:83:dd: f3:20:44:97:70:c1:c7:a4:74:68:8c:1f:bf:1e:8b: af:46:0d:3c:c3:71:17:c0:d0:e2:0d:79:0c:13:3c: 82:38:b7:41:ec:0c:f1:d1:36:79:34:be:5a:fc:2c: 1f:c8:3a:55:fc:09:38:dd:55:52:9c:27:3d:25:43: 7c:7b:e0:13:44:ac:b1:5e:17:80:32:d3:0a:9c:58: b3:8b:66:79:ed:9a:a8:42:81:7b:78:07:5a:93:0b: 90:84:a7:5a:7c:72:bf:48:eb:a0:73:07:76:fc:09: 79:3c:52:e1:92:79:be:19:f3:7b:19:67:a9:9c:70: 7c:93:7c:1a:c2:99:bc:ae:86:68:1f:15:fe:bf:c9: 01:67:84:7e:d1:ad:69:3d:27:2b:44:ac:bf:8f:9e: fe:7b:7c:30:27:2c:ac:da:e5:34:03:57:43:c7:5d: 1f:45:81:95:0b:74:5e:e3:a4:08:a7:7a:ff:16:a3: 33:17:cd:bf:a5:39:b4:dd:5b:1f:01:b0:39:37:74: 0f:4c:94:9b:15:90:d1:53:47:7b:15:0f:c7:a1:76: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B2:8C:CB:38:37:4E:BB:EA:A0:81:17:58:87:11:F7:4F:B9:CD:4F X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:63:36:7a:f7:3f:d0:37:e4:9c:5d:0c:a3:f4:94:12:fe:48: 20:1e:90:c6:85:e1:42:6c:50:d9:3a:31:be:da:d6:68:8e:3d: 00:a7:f1:f8:1e:a7:36:8d:1e:0a:76:f7:94:c2:26:87:99:db: f1:a1:02:0e:b5:90:b5:ff:b0:48:be:57:06:c1:45:0a:30:56: 54:0a:ab:70:88:1f:b0:89:55:07:0b:9e:e3:6b:19:5f:f7:9b: 45:87:f7:95:5c:a0:b7:6a:2e:1a:0c:63:70:dd:06:32:c8:2a: 4a:16:99:56:f1:86:04:7c:ed:45:18:e9:8d:0e:8b:55:4d:44: 4c:7a:45:4c:4f:a2:57:a5:da:cc:7d:46:5d:2f:21:c4:df:cb: 94:0a:ff:63:98:46:a9:09:64:d4:9c:80:02:b8:47:f1:3d:a9: bc:d8:97:d1:fc:e9:41:2b:e3:24:d5:a4:36:67:09:5e:13:9d: 57:ac:18:cd:35:71:af:14:25:b7:2b:56:e0:5f:66:54:66:92: f3:dd:61:90:ce:ee:79:91:e9:6d:c0:37:a4:0e:d6:a1:70:2b: 61:fc:06:2d:21:72:b5:e7:82:59:6b:45:95:15:1a:fe:04:51: 78:88:6d:6e:f2:64:10:ff:b5:ee:6b:1b:e6:33:1a:29:3a:2a: 9c:26:ca:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb3hALdzTpdM8GjRiC3NYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUxMjEyMTIwMDUzWhcNMjUxMjEzMTIwMDUzWjAzMTEwLwYDVQQD Eyg2NmIyOGNjYjM4Mzc0ZWJiZWFhMDgxMTc1ODg3MTFmNzRmYjljZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDx9+DbOhBgcKKxxAX2wCesoMvUS MtpVVKUNX8OdJJNvPr8fixOUmJmig93zIESXcMHHpHRojB+/HouvRg08w3EXwNDi DXkMEzyCOLdB7Azx0TZ5NL5a/CwfyDpV/Ak43VVSnCc9JUN8e+ATRKyxXheAMtMK nFizi2Z57ZqoQoF7eAdakwuQhKdafHK/SOugcwd2/Al5PFLhknm+GfN7GWepnHB8 k3wawpm8roZoHxX+v8kBZ4R+0a1pPScrRKy/j57+e3wwJyys2uU0A1dDx10fRYGV C3Re46QIp3r/FqMzF82/pTm03VsfAbA5N3QPTJSbFZDRU0d7FQ/HoXZtgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGayjMs4N0676qCBF1iHEfdPuc1PMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2M2evc/ 0DfknF0Mo/SUEv5IIB6QxoXhQmxQ2ToxvtrWaI49AKfx+B6nNo0eCnb3lMImh5nb 8aECDrWQtf+wSL5XBsFFCjBWVAqrcIgfsIlVBwue42sZX/ebRYf3lVygt2ouGgxj cN0GMsgqShaZVvGGBHztRRjpjQ6LVU1ETHpFTE+iV6XazH1GXS8hxN/LlAr/Y5hG qQlk1JyAArhH8T2pvNiX0fzpQSvjJNWkNmcJXhOdV6wYzTVxrxQltytW4F9mVGaS 891hkM7ueZHpbcA3pA7WoXArYfwGLSFyteeCWWtFlRUa/gRReIhtbvJkEP+17msb 5jMaKToqnCbK4Q== -----END CERTIFICATE-----Generated at Fri Dec 12 16:15:25 2025 by rpki-client