This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 0r4RIugVt/HpBQYemTsQSPxr0SLbBKn+qlukeEkg3Jg= Subject key identifier: C9:66:E1:4F:FE:00:66:63:09:D0:29:75:81:85:EE:9A:5A:AA:7F:B5 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019AF68A5F93ADC9997D618759A8F8FDB078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 085F Signing time: Sun 07 Dec 2025 02:00:54 +0000 Manifest this update: Sun 07 Dec 2025 02:00:54 +0000 Manifest next update: Mon 08 Dec 2025 02:00:54 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: duGhnEGXPS/p39aiw3r8kM3jxzWuhoZZ6T+nUERTBEU=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: ltogBTKKP3YwW6qX9EFNQHqYqDY.roa (hash: 0g4YXtPVFTAZDoNyfjazoEulAUnVYgi84dLEleZkwWE=) 13: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 14: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:5f:93:ad:c9:99:7d:61:87:59:a8:f8:fd:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Dec 7 02:00:54 2025 GMT Not After : Dec 8 02:00:54 2025 GMT Subject: CN=c966e14ffe00666309d029758185ee9a5aaa7fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:42:cd:49:ac:ba:3b:d0:c9:eb:ee:44:a7: bc:f9:1c:90:3b:c9:b5:7c:c0:8c:7d:2a:1c:37:45: 2c:31:e9:b8:ea:33:62:12:ae:96:36:40:0a:75:71: eb:32:87:c5:3c:81:43:d7:27:a4:67:e8:73:5a:ae: be:a3:81:7e:c0:95:7b:13:71:a0:18:7e:9d:07:05: b2:2f:19:4a:c1:00:d7:10:35:b2:e3:32:ba:e6:3e: 0d:7e:32:1a:82:56:6b:88:a6:a5:c7:04:42:b8:22: e7:6e:4a:cf:ba:9b:39:01:7b:d5:d6:a1:75:cc:a9: 67:74:20:e2:eb:45:5a:75:7b:d9:26:bf:c5:00:63: 62:36:f2:96:e5:12:f7:ac:a9:75:f4:97:2f:82:04: f8:a5:15:ff:34:cf:3f:d3:1f:53:36:5b:3b:f2:37: 4e:11:1e:7e:a2:5d:97:e3:7e:d7:0c:c2:71:32:94: 97:1e:fe:d2:d6:9d:e4:e5:39:01:c3:62:01:5f:47: e5:a5:00:72:c4:f5:56:3c:07:ad:55:8e:6e:f0:33: bb:fc:80:49:15:eb:77:32:14:08:cc:27:9f:c9:ef: 6e:f5:f9:ad:2a:cc:15:a1:42:bf:5c:aa:3e:c9:75: 94:ae:73:32:09:72:1e:87:b8:67:5d:ae:22:69:f5: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:66:E1:4F:FE:00:66:63:09:D0:29:75:81:85:EE:9A:5A:AA:7F:B5 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1e:53:17:68:33:f6:34:bc:8a:81:85:8d:9c:17:5c:62:c3: 48:17:4f:34:16:59:66:2a:5a:71:e9:25:b7:b2:9e:eb:0f:9b: 36:80:ab:f2:d0:a8:18:0f:1e:7f:72:ca:b7:5e:67:66:32:03: 5c:d3:5d:b5:96:48:a7:df:4f:83:60:dc:97:0e:a5:2a:76:ae: 0f:4f:c6:90:1a:10:4c:bd:67:a3:4e:d5:bd:5b:2a:0b:30:59: 93:e3:86:76:2b:fb:cf:25:6c:b1:39:be:f5:37:98:4f:da:cd: ff:ca:d1:31:fb:7a:07:30:45:07:90:b3:34:92:28:50:74:81: 29:75:c7:17:91:57:52:d1:13:e5:29:c3:94:38:4e:0f:83:b7: 7e:0d:7c:7f:d8:61:6d:a7:64:63:8d:39:35:89:58:d8:4d:41: 13:61:c2:1d:c4:d6:a5:c3:a6:c0:d4:ce:d8:1d:6f:ac:59:63: 5d:c4:49:27:05:cb:ad:ab:4f:43:34:fe:20:c0:24:a1:7d:7e: 10:ed:fa:21:19:a2:02:02:a0:13:83:31:9e:fa:c5:f9:9a:6b: f6:50:e1:f5:ec:7d:d0:5b:fa:6a:13:fd:a4:37:f5:f8:13:c6: 4f:c5:2c:a3:60:44:9a:e5:a8:e7:b2:22:0b:1c:91:b1:e2:16: 18:cd:95:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2il+TrcmZfWGHWaj4/bB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUxMjA3MDIwMDU0WhcNMjUxMjA4MDIwMDU0WjAzMTEwLwYDVQQD EyhjOTY2ZTE0ZmZlMDA2NjYzMDlkMDI5NzU4MTg1ZWU5YTVhYWE3ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr19CzUmsujvQyevuRKe8+RyQO8m1 fMCMfSocN0UsMem46jNiEq6WNkAKdXHrMofFPIFD1yekZ+hzWq6+o4F+wJV7E3Gg GH6dBwWyLxlKwQDXEDWy4zK65j4NfjIaglZriKalxwRCuCLnbkrPups5AXvV1qF1 zKlndCDi60VadXvZJr/FAGNiNvKW5RL3rKl19JcvggT4pRX/NM8/0x9TNls78jdO ER5+ol2X437XDMJxMpSXHv7S1p3k5TkBw2IBX0flpQByxPVWPAetVY5u8DO7/IBJ Fet3MhQIzCefye9u9fmtKswVoUK/XKo+yXWUrnMyCXIeh7hnXa4iafXB6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlm4U/+AGZjCdApdYGF7ppaqn+1MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx5TF2gz 9jS8ioGFjZwXXGLDSBdPNBZZZipaceklt7Ke6w+bNoCr8tCoGA8ef3LKt15nZjID XNNdtZZIp99Pg2Dclw6lKnauD0/GkBoQTL1no07VvVsqCzBZk+OGdiv7zyVssTm+ 9TeYT9rN/8rRMft6BzBFB5CzNJIoUHSBKXXHF5FXUtET5SnDlDhOD4O3fg18f9hh badkY405NYlY2E1BE2HCHcTWpcOmwNTO2B1vrFljXcRJJwXLratPQzT+IMAkoX1+ EO36IRmiAgKgE4MxnvrF+Zpr9lDh9ex90Fv6ahP9pDf1+BPGT8Uso2BEmuWo57Ii CxyRseIWGM2Vvw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:15:34 2025 by rpki-client