This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json) Hash identifier: vlLCmR1A8D26SAW3Q0TfAVUD/myaDmkFEunWmdUVqUk= Subject key identifier: 47:52:33:70:AF:E5:D0:38:18:E9:AE:E6:50:49:54:DA:6C:A9:81:57 Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b Certificate serial: 019B3FED635CD74ABF9C4FB70EB9BAA6418E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft Manifest number: 0956 Signing time: Sun 21 Dec 2025 08:01:20 +0000 Manifest this update: Sun 21 Dec 2025 08:01:20 +0000 Manifest next update: Mon 22 Dec 2025 08:01:20 +0000 Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: 1tQzQvpOIt0BYd8i+CNTbvl7wfarIgz2DNJUqhLiCSI=) 2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:63:5c:d7:4a:bf:9c:4f:b7:0e:b9:ba:a6:41:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b Validity Not Before: Dec 21 08:01:20 2025 GMT Not After : Dec 22 08:01:20 2025 GMT Subject: CN=47523370afe5d03818e9aee6504954da6ca98157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:9e:13:87:2d:eb:3a:cd:0b:8d:15:75:e6: 24:00:7a:0b:76:1e:47:f6:4c:0a:cf:c5:0e:d0:af: 3c:2c:e2:b1:48:c0:c1:4d:08:44:11:db:73:d4:b8: 3f:e6:83:ba:0b:ee:7a:bb:d1:70:22:9e:14:62:fc: 83:51:56:5b:39:72:32:a9:d8:69:b7:cd:47:f5:fd: e9:3e:e3:c9:44:4a:17:bb:5e:85:41:32:30:7c:ec: 80:73:11:f5:24:84:d9:5e:ce:7e:14:41:a1:6a:f5: 11:e0:60:f7:f5:69:4b:86:63:f0:de:05:8d:bc:6a: 69:5e:21:fb:2c:ad:c7:68:93:a8:b6:19:35:bc:48: 52:6d:5c:d3:cc:c0:92:c4:c7:05:df:92:b7:21:5d: 3c:aa:8c:66:7b:d3:c2:a8:4a:4d:f9:6d:e7:33:fc: c8:2f:2e:b9:e8:e4:d7:23:97:3a:a8:44:95:06:69: f1:b1:d7:63:21:2d:8c:00:e4:51:bd:32:7e:06:02: d4:75:eb:f1:58:9c:b8:3e:a4:03:70:e2:f9:bf:9e: e7:a2:f0:31:a3:5e:6a:d8:0f:8c:2d:c6:28:93:4b: 1c:04:75:44:7d:7f:e1:4c:3c:24:fd:d2:a6:27:22: a7:3d:6c:b9:4a:5f:9e:c8:11:14:11:c0:27:3c:19: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:33:70:AF:E5:D0:38:18:E9:AE:E6:50:49:54:DA:6C:A9:81:57 X509v3 Authority Key Identifier: keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:36:59:c5:30:fb:63:ea:e9:1b:50:bf:2c:e6:41:d1:79:a7: f3:a1:6e:0f:44:57:67:d4:96:7d:f9:bd:a1:d4:db:57:59:d4: cf:a6:03:85:ba:93:39:09:0c:d2:c1:84:fb:5d:bf:ad:2e:7d: 96:28:d9:c4:6e:6d:77:ac:b1:21:70:91:5d:9c:ef:a8:86:47: d1:04:f9:ce:b4:be:f5:5c:c1:b4:b2:e4:64:c8:92:47:3d:86: 51:07:f2:85:e4:80:7d:2f:6e:68:d1:a9:38:26:4d:1f:d6:b3: 71:6d:27:61:9c:68:7a:11:86:37:d3:bb:67:d0:1d:83:bb:fe: 8b:67:32:c8:da:bb:aa:a7:a3:de:5a:23:73:05:45:b4:46:4d: b2:da:91:66:8c:6d:00:d3:67:26:4a:80:e3:e0:89:48:cb:a7: 27:57:4f:15:28:e5:51:47:92:a9:2c:40:6d:3e:9b:78:fb:e6: 00:3b:04:48:72:e3:e7:9c:8d:05:d8:81:2c:61:95:ba:4b:46: b3:ee:5e:70:de:ae:ee:56:65:c3:6d:e1:6b:13:34:a0:6e:1c: 8e:dd:5c:5e:47:cb:27:65:e7:a5:58:fa:e4:20:4f:d7:b6:ca: 54:be:db:c6:ed:3a:a2:8a:51:7f:58:53:29:eb:8a:4a:78:6b: 05:91:a0:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7WNc10q/nE+3Drm6pkGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGZhMDE3NTMyZmY2ZDlmYjM4YjQwMDM3ODk2YWZhZjBh YWNmOGIwHhcNMjUxMjIxMDgwMTIwWhcNMjUxMjIyMDgwMTIwWjAzMTEwLwYDVQQD Eyg0NzUyMzM3MGFmZTVkMDM4MThlOWFlZTY1MDQ5NTRkYTZjYTk4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF6eE4ct6zrNC40VdeYkAHoLdh5H 9kwKz8UO0K88LOKxSMDBTQhEEdtz1Lg/5oO6C+56u9FwIp4UYvyDUVZbOXIyqdhp t81H9f3pPuPJREoXu16FQTIwfOyAcxH1JITZXs5+FEGhavUR4GD39WlLhmPw3gWN vGppXiH7LK3HaJOothk1vEhSbVzTzMCSxMcF35K3IV08qoxme9PCqEpN+W3nM/zI Ly656OTXI5c6qESVBmnxsddjIS2MAORRvTJ+BgLUdevxWJy4PqQDcOL5v57novAx o15q2A+MLcYok0scBHVEfX/hTDwk/dKmJyKnPWy5Sl+eyBEUEcAnPBkgAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdSM3Cv5dA4GOmu5lBJVNpsqYFXMB8GA1UdIwQY MBaAFECPoBdTL/bZ+zi0ADeJavrwqs+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAt ZjE5ODJhNjkxZDQ1LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAtZjE5ODJhNjkxZDQ1 LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDZZxTD7 Y+rpG1C/LOZB0Xmn86FuD0RXZ9SWffm9odTbV1nUz6YDhbqTOQkM0sGE+12/rS59 lijZxG5td6yxIXCRXZzvqIZH0QT5zrS+9VzBtLLkZMiSRz2GUQfyheSAfS9uaNGp OCZNH9azcW0nYZxoehGGN9O7Z9Adg7v+i2cyyNq7qqej3lojcwVFtEZNstqRZoxt ANNnJkqA4+CJSMunJ1dPFSjlUUeSqSxAbT6bePvmADsESHLj55yNBdiBLGGVuktG s+5ecN6u7lZlw23haxM0oG4cjt1cXkfLJ2XnpVj65CBP17bKVL7bxu06oopRf1hT KeuKSnhrBZGggQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:21 2025 by rpki-client