This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json) Hash identifier: r2crWBrX+AhPnJlJmKNfnqIFKcT9WPyiSZ2ObqQjSQw= Subject key identifier: 3E:21:8F:70:8E:81:01:90:BF:F0:DA:86:3A:E4:57:F3:92:49:04:67 Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8 Certificate serial: 019B66566B76F80493DB15BCFC83A9FD2A84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft Manifest number: 0B99 Signing time: Sun 28 Dec 2025 19:01:38 +0000 Manifest this update: Sun 28 Dec 2025 19:01:38 +0000 Manifest next update: Mon 29 Dec 2025 19:01:38 +0000 Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=) 2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: wHv8ulgr3cs3fiiB/RBKY8o/9azZ2yPNx8hO7kxR4zg=) 3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:6b:76:f8:04:93:db:15:bc:fc:83:a9:fd:2a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8 Validity Not Before: Dec 28 19:01:38 2025 GMT Not After : Dec 29 19:01:38 2025 GMT Subject: CN=3e218f708e810190bff0da863ae457f392490467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:e9:55:ec:bd:83:c8:e5:cb:a3:be:b4:9a: ff:fc:b3:4b:de:40:a8:b7:88:64:65:50:b6:aa:21: 1d:b8:5c:a8:6b:66:61:85:b3:32:37:24:6b:98:29: ae:77:37:f6:cb:e5:a6:2e:4e:fe:ec:8b:0c:80:24: d6:f3:40:b5:50:98:84:b3:46:68:e0:6c:76:a0:23: f6:94:5b:fc:66:6d:7a:af:38:7f:b1:77:5d:db:a2: 14:11:40:3d:d5:a4:93:d4:aa:88:71:00:b2:c2:88: cb:ff:6c:10:c3:93:d8:e0:28:12:e2:a7:48:e7:a8: 7c:db:5f:97:a2:27:7a:a4:cf:32:76:cb:23:4f:ff: ca:2f:2d:fc:9f:5f:82:49:df:b3:fd:4e:9a:f3:1c: 6e:c7:09:87:b2:00:46:12:24:63:34:7c:6a:d7:f3: 04:c7:2f:b6:a4:59:2a:ca:1b:bc:c4:75:ee:f7:2e: 4b:d1:af:8c:45:d2:96:68:6c:23:32:c4:a3:28:36: 69:51:74:52:1e:c0:85:3a:b5:e1:b0:46:cb:c6:f0: 09:6b:86:78:11:24:8f:2a:f1:b6:4d:dd:63:1d:b3: 0c:9f:ba:bd:d6:be:51:a4:e7:38:49:9e:7d:76:dd: 3a:89:82:f3:dd:a6:f6:0a:be:53:28:79:78:9e:da: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:21:8F:70:8E:81:01:90:BF:F0:DA:86:3A:E4:57:F3:92:49:04:67 X509v3 Authority Key Identifier: keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:eb:3b:a2:1d:d3:a7:01:7b:52:bb:6f:b5:4e:5a:ee:c2:96: 0e:c9:ca:93:b4:ac:3f:cc:c1:ca:2b:a0:99:1e:7a:a7:64:8a: 6f:4b:c2:57:8d:d0:ea:a8:40:80:ce:d0:b1:16:bc:f6:81:7e: a0:22:48:44:69:28:c1:f5:2a:ee:3f:fe:d5:51:34:f4:41:2a: 5f:af:fa:0a:76:f9:36:aa:66:fb:af:23:33:3c:c7:51:1f:4e: 87:08:ab:0a:c5:a0:d9:0c:7f:76:f9:12:bf:e7:c7:7c:d5:54: 39:ba:bd:1c:f5:0f:36:03:f3:d1:46:79:6f:38:26:42:fd:dd: 24:c2:ac:34:af:26:8e:4e:ec:94:6f:70:85:5a:27:86:ec:5e: 2a:49:8e:f4:95:40:63:02:f0:2b:6a:75:b1:bd:16:57:dc:da: e9:34:58:f3:a7:05:ed:20:dd:d4:00:32:59:5f:fc:c2:01:18: 34:07:86:d6:a0:64:12:ee:9a:54:e6:4a:e8:0c:7a:ea:cc:d8: 04:91:10:44:17:47:c8:4f:9d:48:55:d2:40:1c:93:f8:72:c5: 52:4c:8f:9f:38:e1:81:68:8c:63:36:53:20:8b:5f:a2:19:f6: 9b:87:4a:3a:79:50:ed:c5:67:cf:de:7d:fe:67:7f:f4:f8:c4: 5b:c7:32:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVmt2+AST2xW8/IOp/SqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk ODg0ZDgwHhcNMjUxMjI4MTkwMTM4WhcNMjUxMjI5MTkwMTM4WjAzMTEwLwYDVQQD EygzZTIxOGY3MDhlODEwMTkwYmZmMGRhODYzYWU0NTdmMzkyNDkwNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynbpVey9g8jly6O+tJr//LNL3kCo t4hkZVC2qiEduFyoa2ZhhbMyNyRrmCmudzf2y+WmLk7+7IsMgCTW80C1UJiEs0Zo 4Gx2oCP2lFv8Zm16rzh/sXdd26IUEUA91aST1KqIcQCywojL/2wQw5PY4CgS4qdI 56h821+Xoid6pM8ydssjT//KLy38n1+CSd+z/U6a8xxuxwmHsgBGEiRjNHxq1/ME xy+2pFkqyhu8xHXu9y5L0a+MRdKWaGwjMsSjKDZpUXRSHsCFOrXhsEbLxvAJa4Z4 ESSPKvG2Td1jHbMMn7q91r5RpOc4SZ59dt06iYLz3ab2Cr5TKHl4ntrKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4hj3COgQGQv/DahjrkV/OSSQRnMB8GA1UdIwQY MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2 LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOs7oh3T pwF7UrtvtU5a7sKWDsnKk7SsP8zByiugmR56p2SKb0vCV43Q6qhAgM7QsRa89oF+ oCJIRGkowfUq7j/+1VE09EEqX6/6Cnb5Nqpm+68jMzzHUR9OhwirCsWg2Qx/dvkS v+fHfNVUObq9HPUPNgPz0UZ5bzgmQv3dJMKsNK8mjk7slG9whVonhuxeKkmO9JVA YwLwK2p1sb0WV9za6TRY86cF7SDd1AAyWV/8wgEYNAeG1qBkEu6aVOZK6Ax66szY BJEQRBdHyE+dSFXSQByT+HLFUkyPnzjhgWiMYzZTIItfohn2m4dKOnlQ7cVnz959 /md/9PjEW8cyOQ== -----END CERTIFICATE-----Generated at Mon Dec 29 00:49:41 2025 by rpki-client