This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json) Hash identifier: bLTeAhu3sLhUlLCrocDonzPWjEYea2YJRCsoEnOUfkc= Subject key identifier: 13:E5:BE:0F:07:84:D2:DB:16:50:55:73:38:39:57:37:71:38:E9:BE Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Certificate serial: 019B4927649789699AAD8049CE5B2439F522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft Manifest number: 1795 Signing time: Tue 23 Dec 2025 03:01:16 +0000 Manifest this update: Tue 23 Dec 2025 03:01:16 +0000 Manifest next update: Wed 24 Dec 2025 03:01:16 +0000 Files and hashes: 1: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=) 2: JXRwLyORpbcFfOkjraKAN1359es.roa (hash: mZE8AHoKrvk4ZHGUVFzeByWnnas5X1rVeFc8IH1Z7sw=) 3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: rFO6dlIzsvoM+bIovPRmcEOlSDrDdDxom7ae/prQGtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:64:97:89:69:9a:ad:80:49:ce:5b:24:39:f5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Validity Not Before: Dec 23 03:01:16 2025 GMT Not After : Dec 24 03:01:16 2025 GMT Subject: CN=13e5be0f0784d2db16505573383957377138e9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:6a:ff:72:4a:ad:0b:24:90:7e:66:34:29: d9:cd:61:c4:3c:99:74:eb:da:81:e0:ea:42:7d:71: 49:2d:b8:94:e7:3f:ee:bd:06:5d:68:64:d1:53:1d: c2:03:69:ba:67:8a:96:90:81:14:c2:34:c5:0a:c9: 70:96:b9:65:a6:1b:09:29:5a:d2:c4:52:3d:fe:ca: c2:ed:c3:cc:b0:31:3e:04:a5:1e:76:c7:71:d8:57: 88:ae:8a:a1:4f:8d:83:5c:f7:fb:88:96:f5:81:7b: 4d:73:d9:de:43:93:5f:cb:24:6d:bc:4f:eb:ee:9c: 4e:9b:05:34:c5:b6:56:3a:fd:da:d0:9d:fb:50:45: 82:78:ef:d8:97:04:2e:2b:0b:11:b6:98:b9:0f:5b: 45:3f:64:0e:69:b8:0a:af:4d:48:86:67:5d:d4:7b: 53:b5:b4:4b:ee:4f:9b:38:cd:53:e4:00:b4:c1:0f: 5f:a1:a1:ab:61:d0:6b:6f:82:1e:72:7c:75:c5:d5: 7d:a3:95:10:9d:81:91:a4:0b:1e:ed:e7:d1:bf:6a: 42:75:aa:cc:c9:b3:0f:67:9c:6a:7c:73:5c:bc:6f: c5:27:c7:d2:4f:7c:f5:1e:ef:02:a8:00:55:b5:83: 6a:3e:ad:82:f1:99:11:cb:3e:4d:34:cb:f7:2e:2b: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:BE:0F:07:84:D2:DB:16:50:55:73:38:39:57:37:71:38:E9:BE X509v3 Authority Key Identifier: keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0a:88:c2:57:04:8f:71:6c:b3:42:18:26:77:61:ef:44:65: eb:53:ab:6c:6a:f9:42:dc:e8:06:76:82:d2:a9:d4:c4:f1:26: e9:b5:66:4a:4d:4c:70:0a:b8:89:69:4e:96:db:ba:7d:0f:0a: bb:9c:5c:45:c9:3c:fa:2c:c9:10:2a:04:22:71:d0:6c:34:57: 00:e0:90:8c:d0:2e:e5:2d:d8:8e:ed:18:cd:f6:15:46:1a:27: 63:43:d7:fa:e7:c6:e0:ce:65:98:e7:ab:35:7e:56:ce:77:75: 91:03:f4:b3:d6:f6:5e:ae:81:a8:9c:a6:c9:c7:7f:4e:f2:53: 9e:e4:1c:1c:96:e1:58:bd:af:da:d3:a3:b8:23:32:4f:a7:a1: 1d:43:cb:2c:c5:ef:26:91:6d:0f:1f:cd:20:7b:5c:bf:89:b2: 02:37:d1:e0:d6:0c:05:ff:08:5a:e7:92:c6:da:6e:9c:a5:1f: d5:75:2f:5f:c5:51:12:8a:54:10:9f:a6:8a:e9:4e:96:02:fd: 77:af:79:5d:2d:0b:49:c7:60:91:7e:9e:95:34:74:ad:4a:01: 53:21:34:64:9a:b2:fc:fe:40:25:54:81:28:5d:7a:66:36:1c: cc:0b:3b:37:7b:c8:b4:5b:6e:c5:70:9c:aa:8a:21:4a:19:90: 1c:a6:d5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ2SXiWmarYBJzlskOfUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz NzRlZDgwHhcNMjUxMjIzMDMwMTE2WhcNMjUxMjI0MDMwMTE2WjAzMTEwLwYDVQQD EygxM2U1YmUwZjA3ODRkMmRiMTY1MDU1NzMzODM5NTczNzcxMzhlOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Bq/3JKrQskkH5mNCnZzWHEPJl0 69qB4OpCfXFJLbiU5z/uvQZdaGTRUx3CA2m6Z4qWkIEUwjTFCslwlrllphsJKVrS xFI9/srC7cPMsDE+BKUedsdx2FeIroqhT42DXPf7iJb1gXtNc9neQ5NfyyRtvE/r 7pxOmwU0xbZWOv3a0J37UEWCeO/YlwQuKwsRtpi5D1tFP2QOabgKr01Ihmdd1HtT tbRL7k+bOM1T5AC0wQ9foaGrYdBrb4Iecnx1xdV9o5UQnYGRpAse7efRv2pCdarM ybMPZ5xqfHNcvG/FJ8fST3z1Hu8CqABVtYNqPq2C8ZkRyz5NNMv3LivH1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPlvg8HhNLbFlBVczg5VzdxOOm+MB8GA1UdIwQY MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4 LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAqIwlcE j3Fss0IYJndh70Rl61OrbGr5QtzoBnaC0qnUxPEm6bVmSk1McAq4iWlOltu6fQ8K u5xcRck8+izJECoEInHQbDRXAOCQjNAu5S3Yju0YzfYVRhonY0PX+ufG4M5lmOer NX5Wznd1kQP0s9b2Xq6BqJymycd/TvJTnuQcHJbhWL2v2tOjuCMyT6ehHUPLLMXv JpFtDx/NIHtcv4myAjfR4NYMBf8IWueSxtpunKUf1XUvX8VREopUEJ+miulOlgL9 d695XS0LScdgkX6elTR0rUoBUyE0ZJqy/P5AJVSBKF16ZjYczAs7N3vItFtuxXCc qoohShmQHKbVOw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:34:33 2025 by rpki-client