This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: 2BDjlF9kuqt4YTYSyTyoC84udjA8DNL7rIDJZBUo4b0= Subject key identifier: C0:6F:03:D4:D0:6C:36:65:DD:C1:AB:F9:54:49:B5:98:AE:B3:85:DE Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B67687BAB8334FF3D665E1C58FEE26278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 1411 Signing time: Mon 29 Dec 2025 00:00:59 +0000 Manifest this update: Mon 29 Dec 2025 00:00:59 +0000 Manifest next update: Tue 30 Dec 2025 00:00:59 +0000 Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=) 2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=) 3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: estmGGs2MI7f82tlC4AGk7Psunhp59tIb4xpyurBDKw=) 4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=) 5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=) 6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=) 7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:7b:ab:83:34:ff:3d:66:5e:1c:58:fe:e2:62:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Dec 29 00:00:59 2025 GMT Not After : Dec 30 00:00:59 2025 GMT Subject: CN=c06f03d4d06c3665ddc1abf95449b598aeb385de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:47:5f:25:c2:5a:db:02:85:c6:f5:fd:40: 12:b9:f3:93:0e:bc:60:83:a4:be:16:db:ac:57:31: c6:c2:9a:b8:a0:55:7c:22:ae:be:e3:93:de:9b:1e: df:6a:24:15:04:fe:e0:c3:87:87:8e:0f:32:17:7e: cc:ea:be:bd:1b:99:10:e1:69:2e:c9:dd:aa:82:7b: c5:16:f9:38:14:c0:4e:0d:66:9f:fd:f3:8c:35:d0: 9c:f9:cf:20:fa:9a:8f:e7:e2:33:44:89:4c:56:d3: a6:70:7c:6b:54:6d:ef:4a:28:df:03:58:d7:2e:c3: ed:2b:c6:6c:29:e9:82:da:bd:49:38:36:9c:c7:d4: 58:53:35:f6:3a:9d:31:8a:99:15:6c:c2:fe:af:75: 2c:4a:20:47:bc:39:49:be:68:c2:60:36:f0:a3:61: 46:7f:3f:41:f3:0a:22:3e:9f:93:93:c1:60:68:ae: 62:a9:61:65:d9:df:dc:b9:29:d8:01:64:fc:d0:5e: 4f:a4:86:43:19:c9:3d:d9:a7:11:63:6c:cb:08:f8: bc:91:7b:05:5a:90:54:4e:a6:ca:a4:8e:8f:2c:3c: 8d:45:b1:ba:0f:31:65:96:ff:95:f1:57:28:da:ce: 37:21:c4:c3:4f:10:c9:e0:8d:cd:b3:04:e6:8e:bc: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6F:03:D4:D0:6C:36:65:DD:C1:AB:F9:54:49:B5:98:AE:B3:85:DE X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6f:8b:c3:55:48:09:4e:f6:69:dc:04:3c:43:8d:c9:b9:14: 90:66:9a:0e:85:8b:82:24:bc:aa:8c:46:8a:7a:fe:76:a2:f0: f0:a4:48:5d:d6:74:f8:66:b3:b5:c1:1c:a9:34:8b:37:91:11: 59:0c:3a:dc:9b:09:a6:66:cf:4d:29:9b:39:1b:35:1b:f9:dc: 7b:9b:23:13:1d:1c:81:24:cd:d9:40:48:ba:cf:a1:f6:cb:81: b1:79:fc:7e:2e:89:82:3a:9a:69:d0:1f:3f:f8:d7:70:2f:55: 6a:17:8b:2a:9d:d5:ae:a3:51:cf:1a:ee:8c:a7:8b:65:70:9c: 08:8e:fe:92:80:61:ed:b6:a9:a9:24:c7:08:21:c9:5b:60:52: e4:e4:14:92:8b:0e:33:99:d3:73:d1:a7:05:cb:b4:38:3f:af: e6:45:cb:08:4e:7d:39:15:9b:6e:5b:18:c6:b3:59:2a:15:32: fc:06:b5:01:ae:02:3a:65:13:05:d4:d0:42:89:e8:eb:d8:1f: 44:da:23:bf:b0:e6:22:d4:ce:02:65:68:bd:de:9e:d2:93:79: 75:56:03:fe:57:55:36:c3:15:f6:c6:b8:ca:d2:a4:46:e8:2b: 74:0a:2d:31:53:db:ce:43:17:b2:a6:b0:19:d6:18:42:89:b6: 76:fa:25:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaHurgzT/PWZeHFj+4mJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjUxMjI5MDAwMDU5WhcNMjUxMjMwMDAwMDU5WjAzMTEwLwYDVQQD EyhjMDZmMDNkNGQwNmMzNjY1ZGRjMWFiZjk1NDQ5YjU5OGFlYjM4NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NJHXyXCWtsChcb1/UASufOTDrxg g6S+FtusVzHGwpq4oFV8Iq6+45Pemx7faiQVBP7gw4eHjg8yF37M6r69G5kQ4Wku yd2qgnvFFvk4FMBODWaf/fOMNdCc+c8g+pqP5+IzRIlMVtOmcHxrVG3vSijfA1jX LsPtK8ZsKemC2r1JODacx9RYUzX2Op0xipkVbML+r3UsSiBHvDlJvmjCYDbwo2FG fz9B8woiPp+Tk8FgaK5iqWFl2d/cuSnYAWT80F5PpIZDGck92acRY2zLCPi8kXsF WpBUTqbKpI6PLDyNRbG6DzFllv+V8Vco2s43IcTDTxDJ4I3NswTmjrw/swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBvA9TQbDZl3cGr+VRJtZius4XeMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2+Lw1VI CU72adwEPEONybkUkGaaDoWLgiS8qoxGinr+dqLw8KRIXdZ0+GaztcEcqTSLN5ER WQw63JsJpmbPTSmbORs1G/nce5sjEx0cgSTN2UBIus+h9suBsXn8fi6JgjqaadAf P/jXcC9VaheLKp3VrqNRzxrujKeLZXCcCI7+koBh7bapqSTHCCHJW2BS5OQUkosO M5nTc9GnBcu0OD+v5kXLCE59ORWbblsYxrNZKhUy/Aa1Aa4COmUTBdTQQono69gf RNojv7DmItTOAmVovd6e0pN5dVYD/ldVNsMV9sa4ytKkRugrdAotMVPbzkMXsqaw GdYYQom2dvoltw== -----END CERTIFICATE-----Generated at Mon Dec 29 08:30:01 2025 by rpki-client