This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json) Hash identifier: po+YrAWiNkRZXl+f6j2s7VTkVD430gS4uqTh3DsV74Q= Subject key identifier: 42:F7:A4:C6:ED:27:7C:0C:60:19:17:C8:9C:D2:17:3F:78:85:AF:8F Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4 Certificate serial: 019B3AC69F9DEC12E0969B50C37C20040E6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft Manifest number: 0974 Signing time: Sat 20 Dec 2025 08:00:54 +0000 Manifest this update: Sat 20 Dec 2025 08:00:54 +0000 Manifest next update: Sun 21 Dec 2025 08:00:54 +0000 Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: jFhTIyyXR0jjPEud5NipMvdh51KDf2m2K9jjJcAs2sg=) 2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=) 3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:9f:9d:ec:12:e0:96:9b:50:c3:7c:20:04:0e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4 Validity Not Before: Dec 20 08:00:54 2025 GMT Not After : Dec 21 08:00:54 2025 GMT Subject: CN=42f7a4c6ed277c0c601917c89cd2173f7885af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:25:01:61:4a:75:e4:07:c0:db:55:f4:dd: 68:c3:7a:be:15:e6:4c:ee:b7:f8:60:c7:d7:6a:68: dd:31:49:01:dd:2d:b0:1e:e0:b4:e4:0c:45:ff:c9: 3a:89:ab:b3:fc:cb:46:dc:e5:fa:5a:51:d6:0c:db: 7e:60:66:31:27:3a:81:64:91:e6:01:ce:9c:c1:98: 8c:72:bc:2d:f6:c4:dc:2b:be:09:68:73:b2:fd:70: ca:54:c6:5e:aa:61:bf:48:9b:57:8b:8b:25:ff:e0: 04:61:76:4a:16:2f:ed:48:c9:ed:dd:35:3e:0b:79: 6d:28:3e:7a:f2:84:d2:a3:87:c8:b9:f1:18:02:94: 6c:24:c5:76:be:7a:80:20:77:9e:c1:59:b7:03:e9: 47:fc:78:df:36:3f:4e:6d:cb:9b:ee:15:f6:80:8a: b6:02:a2:0e:36:be:e9:5e:01:d5:10:6c:a0:a0:1c: 99:55:c1:48:73:6d:e0:a2:c3:65:af:7b:93:48:7f: 02:32:ba:28:3c:5e:45:71:b1:eb:16:2d:cb:1b:6b: 79:b8:ba:a2:d2:f6:07:49:8d:66:29:f3:02:a1:0b: 55:10:0f:b5:fd:4a:44:e0:42:47:bd:84:b3:ad:da: 51:5d:ec:8c:6c:99:5e:f3:2d:b6:39:1b:82:9f:f9: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:A4:C6:ED:27:7C:0C:60:19:17:C8:9C:D2:17:3F:78:85:AF:8F X509v3 Authority Key Identifier: keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:06:0f:b4:05:9e:19:4b:53:a5:1a:7f:85:86:e3:0c:4a:89: 4a:6b:ef:39:bd:82:99:91:9a:3f:ae:3a:0e:21:f2:bf:d8:6d: 92:36:25:b3:fa:11:b8:bd:86:03:a1:bf:0a:fc:02:89:4d:f8: b2:8d:88:22:9a:bb:50:97:17:8a:0a:1b:d7:e0:ae:78:c5:59: 24:1e:d0:f8:af:28:59:1b:8c:17:1f:31:f7:89:17:c6:e6:fc: d1:a5:a9:6a:96:cf:5f:4d:d2:40:8d:c6:7d:6e:99:98:03:34: 50:52:10:04:00:2f:31:22:59:83:5a:c1:bf:58:75:fd:0d:22: 7e:a3:6a:6d:49:34:4f:68:cb:0e:ff:7c:2e:e7:19:96:db:a2: 11:1f:e1:db:71:b9:95:5e:2f:9d:d3:b1:f5:59:4a:78:11:a4: c8:cc:41:38:c1:7e:03:78:6a:59:46:fa:ab:a0:19:c9:05:31: e6:d5:d6:1f:bb:a5:2a:09:a9:53:8a:52:b4:6d:ad:5e:a4:8f: 7a:86:f7:ff:0e:e9:b3:e9:f2:83:a6:02:5b:cd:5c:e4:86:97: 4d:24:a0:f0:cc:ad:99:ca:f2:9a:68:a4:f3:78:dc:7a:ba:8e: 6a:67:65:b9:0f:10:97:ab:ab:52:62:44:96:0a:dc:85:98:06: da:fc:98:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xp+d7BLglptQw3wgBA5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi ZmNkZTQwHhcNMjUxMjIwMDgwMDU0WhcNMjUxMjIxMDgwMDU0WjAzMTEwLwYDVQQD Eyg0MmY3YTRjNmVkMjc3YzBjNjAxOTE3Yzg5Y2QyMTczZjc4ODVhZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu78lAWFKdeQHwNtV9N1ow3q+FeZM 7rf4YMfXamjdMUkB3S2wHuC05AxF/8k6iauz/MtG3OX6WlHWDNt+YGYxJzqBZJHm Ac6cwZiMcrwt9sTcK74JaHOy/XDKVMZeqmG/SJtXi4sl/+AEYXZKFi/tSMnt3TU+ C3ltKD568oTSo4fIufEYApRsJMV2vnqAIHeewVm3A+lH/HjfNj9Obcub7hX2gIq2 AqIONr7pXgHVEGygoByZVcFIc23gosNlr3uTSH8CMrooPF5FcbHrFi3LG2t5uLqi 0vYHSY1mKfMCoQtVEA+1/UpE4EJHvYSzrdpRXeyMbJle8y22ORuCn/nxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL3pMbtJ3wMYBkXyJzSFz94ha+PMB8GA1UdIwQY MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewYPtAWe GUtTpRp/hYbjDEqJSmvvOb2CmZGaP646DiHyv9htkjYls/oRuL2GA6G/CvwCiU34 so2IIpq7UJcXigob1+CueMVZJB7Q+K8oWRuMFx8x94kXxub80aWpapbPX03SQI3G fW6ZmAM0UFIQBAAvMSJZg1rBv1h1/Q0ifqNqbUk0T2jLDv98LucZltuiER/h23G5 lV4vndOx9VlKeBGkyMxBOMF+A3hqWUb6q6AZyQUx5tXWH7ulKgmpU4pStG2tXqSP eob3/w7ps+nyg6YCW81c5IaXTSSg8Mytmcrymmik83jcerqOamdluQ8Ql6urUmJE lgrchZgG2vyYhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:34:59 2025 by rpki-client