This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json) Hash identifier: ZCEMkKTI9norSN4QQWbMTETWCGf2veL+F/nMCSDXUMw= Subject key identifier: C3:49:67:DF:9D:13:59:88:1E:BE:DC:98:9F:43:E0:85:03:D4:8A:DB Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0 Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0 Certificate serial: 019B50AA22E5C113AD31CD2AAE4555290996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 14:01:25 +0000 Manifest this update: Wed 24 Dec 2025 14:01:25 +0000 Manifest next update: Thu 25 Dec 2025 14:01:25 +0000 Files and hashes: 1: 7kOLb5agTvJNiZmHbg7oPOSBoq0.roa (hash: 0jza8HkowMAhNdk3rHbioNC6hwm48YtOGKmOL8x2OVw=) 2: OltzXJJiE9XyxoEWZKwac5KxNNc.roa (hash: MXwRj0eiEFB7lamZjGpRz17XKhXqe6VMpTtPXa7Dwss=) 3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: WlT67X4i6OhTv2f1zBK9TtuqO52SLrghksnxeUfbIAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:22:e5:c1:13:ad:31:cd:2a:ae:45:55:29:09:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0 Validity Not Before: Dec 24 14:01:25 2025 GMT Not After : Dec 25 14:01:25 2025 GMT Subject: CN=c34967df9d1359881ebedc989f43e08503d48adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:31:64:ac:97:f6:c8:25:25:03:8a:a4:63: 5e:6b:ab:ed:62:53:67:3f:a4:37:7d:7e:3b:d6:5f: 8c:90:3d:8d:8f:5b:11:0e:f8:c5:d1:31:d0:de:ef: 91:bb:cd:0e:07:8c:be:54:16:32:58:a9:15:47:34: 8e:28:24:98:d5:07:f3:dc:3d:75:ba:c7:51:b8:13: 3b:19:0b:a6:8b:cc:fc:19:be:53:90:fe:b8:de:d7: 56:84:ce:63:ea:54:15:f9:d9:8c:ca:d1:70:9f:9c: 04:44:33:94:d8:ee:b8:b9:4c:40:ab:63:dc:02:bd: 55:a1:6b:f9:66:ec:94:37:79:cc:db:b6:da:16:83: f5:67:7d:3a:d2:74:32:af:3f:ab:88:f5:74:53:00: 75:a6:64:77:dc:2b:04:ab:d7:52:6c:1d:02:fd:4b: 5c:b1:4e:3d:b1:d1:cc:ba:60:ed:eb:63:c8:8a:7d: 01:86:aa:7f:df:ab:f9:db:e4:4f:fb:38:93:83:f2: 0b:9f:f9:57:22:fe:32:dc:05:0e:b0:2b:73:61:13: 8c:2b:60:88:81:08:6a:2d:21:6d:c8:24:fb:f8:26: 3f:4a:69:77:0a:eb:f0:89:2f:95:03:dd:58:f0:1f: 50:62:8e:2d:28:0a:f5:32:3e:d1:da:cd:ed:54:d9: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:49:67:DF:9D:13:59:88:1E:BE:DC:98:9F:43:E0:85:03:D4:8A:DB X509v3 Authority Key Identifier: keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8a:aa:0e:89:9b:e0:34:11:bb:ee:1b:a4:52:0b:06:6c:5f: ac:9d:a5:5b:ca:8b:77:c6:f9:2d:ee:34:b0:c2:8b:c4:53:73: 06:b1:67:ef:af:4d:c4:fd:66:0e:85:5d:e1:7c:fa:7e:ba:b3: 8d:ea:21:f2:f0:c0:00:61:3e:44:20:3e:aa:93:3a:41:c7:0c: 76:39:a0:00:2c:de:39:a4:ca:8e:97:1f:ac:c2:b4:3a:75:d9: 58:88:ba:88:c8:77:ef:59:96:16:96:2c:5e:2a:36:1d:98:6b: 93:2d:5f:0e:64:de:88:ee:5d:04:70:8e:69:57:77:8d:d0:aa: 90:ef:53:db:45:ca:ee:4c:54:8a:a4:30:00:30:9d:25:cd:7e: 4d:99:84:16:20:47:1b:5a:63:55:3d:2a:9f:51:e0:f4:b5:0c: 73:80:fb:9b:a6:fe:ee:1a:b4:95:e0:67:ab:e4:b8:bf:de:dd: b6:6f:e8:31:5b:d5:83:72:cb:ac:27:aa:34:42:b4:0a:b6:01: f3:45:11:60:27:ea:74:58:88:a6:63:4c:c7:08:e4:77:2c:23: 07:b9:53:8c:45:8c:49:4d:26:69:aa:e5:4b:ce:2f:bf:6c:b7: 98:e7:09:3c:b3:18:65:0d:db:05:92:f5:6e:07:42:0e:30:14: 6d:7b:f0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqiLlwROtMc0qrkVVKQmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0 ZTRhZDAwHhcNMjUxMjI0MTQwMTI1WhcNMjUxMjI1MTQwMTI1WjAzMTEwLwYDVQQD EyhjMzQ5NjdkZjlkMTM1OTg4MWViZWRjOTg5ZjQzZTA4NTAzZDQ4YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4cxZKyX9sglJQOKpGNea6vtYlNn P6Q3fX471l+MkD2Nj1sRDvjF0THQ3u+Ru80OB4y+VBYyWKkVRzSOKCSY1Qfz3D11 usdRuBM7GQumi8z8Gb5TkP643tdWhM5j6lQV+dmMytFwn5wERDOU2O64uUxAq2Pc Ar1VoWv5ZuyUN3nM27baFoP1Z3060nQyrz+riPV0UwB1pmR33CsEq9dSbB0C/Utc sU49sdHMumDt62PIin0Bhqp/36v52+RP+ziTg/ILn/lXIv4y3AUOsCtzYROMK2CI gQhqLSFtyCT7+CY/Sml3CuvwiS+VA91Y8B9QYo4tKAr1Mj7R2s3tVNne8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNJZ9+dE1mIHr7cmJ9D4IUD1IrbMB8GA1UdIwQY MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt OGM1MmU2NjZhOGEyLzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoqqDomb 4DQRu+4bpFILBmxfrJ2lW8qLd8b5Le40sMKLxFNzBrFn769NxP1mDoVd4Xz6frqz jeoh8vDAAGE+RCA+qpM6QccMdjmgACzeOaTKjpcfrMK0OnXZWIi6iMh371mWFpYs Xio2HZhrky1fDmTeiO5dBHCOaVd3jdCqkO9T20XK7kxUiqQwADCdJc1+TZmEFiBH G1pjVT0qn1Hg9LUMc4D7m6b+7hq0leBnq+S4v97dtm/oMVvVg3LLrCeqNEK0CrYB 80URYCfqdFiIpmNMxwjkdywjB7lTjEWMSU0maarlS84vv2y3mOcJPLMYZQ3bBZL1 bgdCDjAUbXvwdw== -----END CERTIFICATE-----Generated at Wed Dec 24 22:04:50 2025 by rpki-client