This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: TTeeFKWsbKx55OUCUl4bBW+CQnVPop7dYD66UwzSlMg= Subject key identifier: B8:39:12:32:88:60:91:98:E0:7F:30:FC:8A:B9:FB:C8:D8:2C:B5:99 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B3AFD75370264FA392C66A3CF9E9FD32F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 13FA Signing time: Sat 20 Dec 2025 09:00:47 +0000 Manifest this update: Sat 20 Dec 2025 09:00:47 +0000 Manifest next update: Sun 21 Dec 2025 09:00:47 +0000 Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=) 2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=) 3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: UC6xZZ15KBZ9oNTPTg+sOhRbwsZqIMjuk0zWdi9zEsk=) 4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=) 5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=) 6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=) 7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:75:37:02:64:fa:39:2c:66:a3:cf:9e:9f:d3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Dec 20 09:00:47 2025 GMT Not After : Dec 21 09:00:47 2025 GMT Subject: CN=b839123288609198e07f30fc8ab9fbc8d82cb599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fe:96:10:66:a2:43:3e:5b:8a:23:19:cc:4e: 35:bf:9d:af:60:3b:61:88:91:39:5d:a3:f4:23:cd: 70:cc:6c:ab:58:19:2c:40:64:fc:d6:bb:7b:a4:1d: 6b:f2:06:a2:b4:d9:b4:e5:10:d2:ef:94:f2:75:8e: 62:9a:78:7a:90:ae:cd:22:03:be:c6:43:5f:a1:1f: 7d:90:15:1d:80:c4:c6:1b:fc:d2:b1:c5:13:00:f7: d7:b5:6c:e8:38:cd:13:03:4f:5a:38:b7:67:03:a4: fa:7d:dc:ed:47:9a:b5:36:ef:c2:bf:b3:65:5e:2c: f4:37:d7:12:82:36:00:7a:d1:1a:f8:44:c4:c6:e5: ae:e6:e2:c9:44:e0:b5:d4:33:d8:50:95:94:7c:f1: 10:9b:8c:b6:0e:44:bb:24:97:3e:84:44:25:74:a5: 07:92:b6:26:c7:95:c5:c4:47:af:d2:53:6d:83:f4: 46:19:9f:53:ae:c4:3e:e1:26:b6:8e:34:66:f8:9e: f2:a1:80:95:20:62:49:18:4b:3c:1a:b4:70:0a:ae: 58:84:4f:ee:8c:d4:b9:71:4a:02:2c:0e:2e:67:1c: 72:18:5c:c0:72:79:dd:a7:4a:7a:8b:47:b9:3e:46: ff:f2:e3:5b:7f:95:23:ee:4a:b5:5d:73:34:fe:2f: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:12:32:88:60:91:98:E0:7F:30:FC:8A:B9:FB:C8:D8:2C:B5:99 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6f:f8:91:d8:92:7e:c9:12:b8:12:b8:68:88:02:9e:3d:4e: c3:8b:14:e9:48:ad:bb:5b:c0:f6:1f:57:8d:24:d4:c4:d6:96: b7:ea:4f:c6:c0:9c:63:d3:74:9c:4e:65:01:ba:cc:3e:14:42: ea:78:ab:97:42:82:d6:96:aa:5c:39:fb:db:8b:c8:33:e4:c9: b0:2e:dd:7e:d8:ed:8f:6b:aa:2f:64:c8:91:2a:cf:11:e0:7a: c3:2f:ec:cf:3a:29:a4:f7:55:3a:6c:9d:56:54:0f:b9:c0:5a: 39:12:4e:73:3e:7c:3a:fc:98:63:1d:9f:ce:38:a5:3a:5e:b3: d2:05:8f:05:d2:6c:9b:40:6b:cc:81:5b:2f:54:d3:e4:5f:e0: df:08:83:b9:fd:43:30:cc:ab:3b:1a:d3:bf:7a:ac:4f:09:c4: 7a:91:d9:88:0a:44:4a:22:9c:7a:ed:c3:16:ec:07:a6:fb:38: 9a:fa:95:72:82:0d:42:03:f6:01:48:5f:31:f7:b8:8a:2c:f9: 23:e6:5d:5f:1c:2d:ce:77:28:73:2a:d0:2b:e9:f4:b3:6f:48: 4e:4c:d3:6c:d4:66:4e:62:2e:0f:70:11:c2:6f:9a:4f:bc:b5: 91:24:9b:60:aa:57:86:4b:db:6f:fa:29:19:5b:a4:39:5c:35: 57:50:c5:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XU3AmT6OSxmo8+en9MvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjUxMjIwMDkwMDQ3WhcNMjUxMjIxMDkwMDQ3WjAzMTEwLwYDVQQD EyhiODM5MTIzMjg4NjA5MTk4ZTA3ZjMwZmM4YWI5ZmJjOGQ4MmNiNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf6WEGaiQz5biiMZzE41v52vYDth iJE5XaP0I81wzGyrWBksQGT81rt7pB1r8gaitNm05RDS75TydY5imnh6kK7NIgO+ xkNfoR99kBUdgMTGG/zSscUTAPfXtWzoOM0TA09aOLdnA6T6fdztR5q1Nu/Cv7Nl Xiz0N9cSgjYAetEa+ETExuWu5uLJROC11DPYUJWUfPEQm4y2DkS7JJc+hEQldKUH krYmx5XFxEev0lNtg/RGGZ9TrsQ+4Sa2jjRm+J7yoYCVIGJJGEs8GrRwCq5YhE/u jNS5cUoCLA4uZxxyGFzAcnndp0p6i0e5Pkb/8uNbf5Uj7kq1XXM0/i9pGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg5EjKIYJGY4H8w/Iq5+8jYLLWZMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG/4kdiS fskSuBK4aIgCnj1Ow4sU6Uitu1vA9h9XjSTUxNaWt+pPxsCcY9N0nE5lAbrMPhRC 6nirl0KC1paqXDn724vIM+TJsC7dftjtj2uqL2TIkSrPEeB6wy/szzoppPdVOmyd VlQPucBaORJOcz58OvyYYx2fzjilOl6z0gWPBdJsm0BrzIFbL1TT5F/g3wiDuf1D MMyrOxrTv3qsTwnEepHZiApESiKceu3DFuwHpvs4mvqVcoINQgP2AUhfMfe4iiz5 I+ZdXxwtzncocyrQK+n0s29ITkzTbNRmTmIuD3ARwm+aT7y1kSSbYKpXhkvbb/op GVukOVw1V1DF4w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:58:49 2025 by rpki-client