This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json) Hash identifier: ul3xDhMyW863MDgcHqe5VnTL4XIpkcbF9XF0lPpJwvE= Subject key identifier: AF:99:A4:B2:F3:B7:82:D6:FE:06:8A:96:92:DA:36:DA:E8:AA:88:4F Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Certificate serial: 019B360EC57A4E052F2EDE44EBF627A3784D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 10:01:36 +0000 Manifest this update: Fri 19 Dec 2025 10:01:36 +0000 Manifest next update: Sat 20 Dec 2025 10:01:36 +0000 Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=) 2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: V8lfzG9jKKttaYYhnmTEEca/Omrg9LDZT1IBSESUvGM=) 3: UDUln-3qeCrp7STdtVtP-Xg_90E.roa (hash: vObdNNiNWw3evfnIcbLbfyalSMwTqD2xiNwmGGAngXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:c5:7a:4e:05:2f:2e:de:44:eb:f6:27:a3:78:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c Validity Not Before: Dec 19 10:01:36 2025 GMT Not After : Dec 20 10:01:36 2025 GMT Subject: CN=af99a4b2f3b782d6fe068a9692da36dae8aa884f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:8e:31:e4:7a:91:68:3b:ee:9d:cb:92:b4: 6d:0e:ef:62:68:af:58:18:1f:25:dd:5f:54:a2:c6: d8:70:4d:09:a5:89:5f:01:a1:53:af:32:ae:9f:9c: e3:f1:2a:42:a0:0f:71:5f:a2:9e:81:f3:a0:02:69: 10:84:d2:81:a0:62:6d:d8:7a:ec:ea:64:b4:9a:bc: a6:ea:64:24:3c:0b:c4:e3:34:cc:5d:65:9f:b0:8e: d2:a4:dd:e9:77:fc:24:16:2c:91:68:78:b7:d9:15: fc:16:12:63:43:c0:79:cc:f5:f0:82:18:0e:69:58: 12:dc:d7:e6:9c:68:e9:33:b2:bd:eb:33:14:59:48: a1:8b:7d:5e:bc:84:a0:85:f8:aa:24:2a:e8:17:c1: 34:3f:9d:02:46:38:88:91:ae:a1:51:af:c0:58:19: a3:26:00:a8:75:65:a9:c6:0f:9c:ae:66:ac:be:a7: 94:a7:37:45:b0:ad:a9:d1:f7:7b:bf:69:2d:26:e7: 64:7f:f0:7d:ed:92:dc:aa:70:8a:66:b5:70:b1:07: e8:9b:0f:c2:a4:f3:22:dd:95:53:23:b1:0e:b3:5d: a4:33:3a:9a:07:fb:bb:11:bf:6d:9f:f6:2f:3e:24: 8d:4e:27:b4:fa:fc:fc:97:f1:0b:2e:83:88:48:b8: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:99:A4:B2:F3:B7:82:D6:FE:06:8A:96:92:DA:36:DA:E8:AA:88:4F X509v3 Authority Key Identifier: keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:0b:e5:28:4d:7b:9b:0a:ff:6f:81:e7:d6:bc:6b:f9:45: 1c:08:7c:92:da:e5:a2:3e:e9:bd:37:e4:f7:d9:93:ff:28:84: ac:db:3e:11:c6:3f:34:48:db:1a:19:ec:9b:0e:a7:4f:b6:d9: 94:d8:0b:d2:dc:57:1a:94:c0:b7:e8:90:37:f7:28:8f:7d:94: 05:85:c6:b3:ce:9c:78:c0:25:1c:00:a5:ce:e8:9f:70:a4:fb: c5:49:fc:a7:59:d9:dd:ad:1b:0a:59:4e:93:89:1d:2c:12:63: 80:87:75:4a:fb:2a:03:01:ea:d7:70:65:70:4c:95:80:91:eb: 24:7b:b9:8c:58:30:5b:32:9f:9e:b3:39:0b:6e:c4:e3:68:d0: 38:cc:b1:5f:05:d9:50:46:f2:20:f6:fe:bd:77:c4:07:12:e2: 26:52:0d:0f:f6:6a:d8:ce:c3:e7:4a:9e:85:08:c6:63:24:dc: ef:db:31:0b:00:07:4d:3b:0e:f7:6b:55:27:6b:79:25:b6:c8: 95:45:8f:06:39:1d:18:0e:14:00:68:17:7b:61:00:29:6c:c8: c8:6f:ff:f7:fe:84:ab:9e:c9:7b:d2:09:18:66:d4:a3:06:46: ba:e7:9a:8d:f4:8b:d4:d7:fa:0e:11:b7:87:e4:06:c6:98:26: ff:64:33:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DsV6TgUvLt5E6/Yno3hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4 ZDI5MmMwHhcNMjUxMjE5MTAwMTM2WhcNMjUxMjIwMTAwMTM2WjAzMTEwLwYDVQQD EyhhZjk5YTRiMmYzYjc4MmQ2ZmUwNjhhOTY5MmRhMzZkYWU4YWE4ODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyWOMeR6kWg77p3LkrRtDu9iaK9Y GB8l3V9UosbYcE0JpYlfAaFTrzKun5zj8SpCoA9xX6KegfOgAmkQhNKBoGJt2Hrs 6mS0mrym6mQkPAvE4zTMXWWfsI7SpN3pd/wkFiyRaHi32RX8FhJjQ8B5zPXwghgO aVgS3NfmnGjpM7K96zMUWUihi31evISghfiqJCroF8E0P50CRjiIka6hUa/AWBmj JgCodWWpxg+crmasvqeUpzdFsK2p0fd7v2ktJudkf/B97ZLcqnCKZrVwsQfomw/C pPMi3ZVTI7EOs12kMzqaB/u7Eb9tn/YvPiSNTie0+vz8l/ELLoOISLjKwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+ZpLLzt4LW/gaKlpLaNtroqohPMB8GA1UdIwQY MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVwL5ShN e5sK/2+B59a8a/lFHAh8ktrloj7pvTfk99mT/yiErNs+EcY/NEjbGhnsmw6nT7bZ lNgL0txXGpTAt+iQN/coj32UBYXGs86ceMAlHAClzuifcKT7xUn8p1nZ3a0bCllO k4kdLBJjgId1SvsqAwHq13BlcEyVgJHrJHu5jFgwWzKfnrM5C27E42jQOMyxXwXZ UEbyIPb+vXfEBxLiJlIND/Zq2M7D50qehQjGYyTc79sxCwAHTTsO92tVJ2t5JbbI lUWPBjkdGA4UAGgXe2EAKWzIyG//9/6Eq57Je9IJGGbUowZGuueajfSL1Nf6DhG3 h+QGxpgm/2QzAg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:03:38 2025 by rpki-client