This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json) Hash identifier: 6qwOYMJkBR++qwOJrEI6CNhMY4ktaJSjN7YrCuJZAlc= Subject key identifier: 6D:D9:25:D5:3C:4F:F7:CE:B3:B5:A4:D2:D5:5A:4A:62:5D:52:15:3C Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019B72FE3983B682E9E3D4C2ACCA7C227A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft Manifest number: 17A8 Signing time: Wed 31 Dec 2025 06:00:21 +0000 Manifest this update: Wed 31 Dec 2025 06:00:21 +0000 Manifest next update: Thu 01 Jan 2026 06:00:21 +0000 Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=) 2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: n+f9C3zclAQmvqYAlbmI3OrPF/R7XKTBcHK9S15nSf4=) 3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:39:83:b6:82:e9:e3:d4:c2:ac:ca:7c:22:7a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Dec 31 06:00:21 2025 GMT Not After : Jan 1 06:00:21 2026 GMT Subject: CN=6dd925d53c4ff7ceb3b5a4d2d55a4a625d52153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:e3:05:66:dc:38:9d:c5:ab:42:8a:ff:e9: bc:0a:d7:87:df:b6:76:9c:28:d7:f6:43:05:1b:e2: ee:08:a8:b9:4d:66:a9:bf:10:bb:74:0c:db:53:ea: 73:92:26:29:f8:e1:ee:d4:4a:f7:ac:69:a1:68:47: a2:c4:c0:45:ed:bc:57:60:ab:11:b3:c1:c5:66:ed: 0e:04:9d:93:9e:78:29:38:cc:48:13:90:16:6e:10: 54:be:60:55:c9:0a:2c:ec:13:c2:6f:bb:23:19:1b: db:50:0c:40:12:52:f8:41:dd:2c:09:09:af:ba:fa: 1b:cb:2e:e7:9d:ae:e3:06:5c:9a:57:01:ad:72:65: 58:19:86:30:f1:0f:ae:ab:4f:67:b7:c2:75:92:7d: b0:a6:09:11:60:8f:6e:a6:d2:27:90:f3:22:40:46: 3c:94:ae:01:d1:32:dc:67:d0:06:7d:ec:9f:51:74: 3e:ee:be:53:a1:54:4e:40:e7:97:10:60:23:f2:0a: 7c:11:01:44:7a:9a:7b:17:83:25:36:f6:70:9e:ec: 57:df:da:30:cf:27:02:dd:8c:77:07:20:14:33:0f: 05:a0:72:40:22:7f:f4:0a:c5:46:df:68:9d:42:0c: 48:67:e8:c2:42:53:49:17:6f:a2:ec:c7:bb:bb:a9: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:25:D5:3C:4F:F7:CE:B3:B5:A4:D2:D5:5A:4A:62:5D:52:15:3C X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f0:4c:39:6d:3c:60:fc:d4:b6:79:e9:a6:11:ad:d2:cd:30: f7:51:6c:5c:fd:a2:d3:1d:6e:45:70:ec:32:d8:0e:8a:54:0a: dc:57:28:ef:63:52:64:45:f8:f8:81:a6:aa:e3:cd:0d:5b:cf: f2:a7:28:c4:3f:08:4c:23:53:80:34:22:ad:e5:0c:77:2c:c8: 8d:3b:12:16:19:ff:fc:30:65:a1:54:2f:f8:0d:7c:11:4d:11: d7:b9:2d:2e:92:e4:af:9d:5f:fd:b5:8e:ce:b3:40:35:8b:cf: ae:cd:69:cf:73:50:e0:de:ae:5d:d5:f6:74:23:4a:48:da:e4: cd:dc:16:01:f4:9b:e3:7d:d8:62:dd:6c:b9:9f:80:26:37:23: 72:9f:ca:df:18:01:c2:66:db:9a:1c:bd:3e:cb:30:95:60:93: 2f:e8:e0:52:c9:88:c5:75:db:9f:1c:06:4c:ed:66:a7:7b:8d: bf:94:f0:2e:56:44:4a:65:4f:ca:1c:dc:80:bf:a8:2c:b2:5e: 37:dc:a2:49:42:51:f3:bb:bf:60:c9:af:34:c7:78:ff:ed:bc: 86:b8:3a:03:15:96:fc:c4:54:3f:e0:67:de:54:55:e8:b2:a1: 16:9a:81:dc:0a:0c:79:b8:77:58:42:d6:ad:1c:03:b1:ce:53: fa:09:40:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/jmDtoLp49TCrMp8Ino9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjUxMjMxMDYwMDIxWhcNMjYwMTAxMDYwMDIxWjAzMTEwLwYDVQQD Eyg2ZGQ5MjVkNTNjNGZmN2NlYjNiNWE0ZDJkNTVhNGE2MjVkNTIxNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6rjBWbcOJ3Fq0KK/+m8CteH37Z2 nCjX9kMFG+LuCKi5TWapvxC7dAzbU+pzkiYp+OHu1Er3rGmhaEeixMBF7bxXYKsR s8HFZu0OBJ2TnngpOMxIE5AWbhBUvmBVyQos7BPCb7sjGRvbUAxAElL4Qd0sCQmv uvobyy7nna7jBlyaVwGtcmVYGYYw8Q+uq09nt8J1kn2wpgkRYI9uptInkPMiQEY8 lK4B0TLcZ9AGfeyfUXQ+7r5ToVROQOeXEGAj8gp8EQFEepp7F4MlNvZwnuxX39ow zycC3Yx3ByAUMw8FoHJAIn/0CsVG32idQgxIZ+jCQlNJF2+i7Me7u6kI9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3ZJdU8T/fOs7Wk0tVaSmJdUhU8MB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/BMOW08 YPzUtnnpphGt0s0w91FsXP2i0x1uRXDsMtgOilQK3Fco72NSZEX4+IGmquPNDVvP 8qcoxD8ITCNTgDQireUMdyzIjTsSFhn//DBloVQv+A18EU0R17ktLpLkr51f/bWO zrNANYvPrs1pz3NQ4N6uXdX2dCNKSNrkzdwWAfSb433YYt1suZ+AJjcjcp/K3xgB wmbbmhy9PsswlWCTL+jgUsmIxXXbnxwGTO1mp3uNv5TwLlZESmVPyhzcgL+oLLJe N9yiSUJR87u/YMmvNMd4/+28hrg6AxWW/MRUP+Bn3lRV6LKhFpqB3AoMebh3WELW rRwDsc5T+glAJw== -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:51 2025 by rpki-client