This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json) Hash identifier: UX3RYE/RikF5+8ZO0s4VUAHPnU44gp4aflGlACcoLF4= Subject key identifier: 01:D1:B6:10:12:3E:B7:7F:13:09:00:4E:DD:8E:7C:A3:B3:27:F7:C3 Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B2F67931F48A3FE42F3E6C54EBEAF0525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft Manifest number: 1014 Signing time: Thu 18 Dec 2025 03:01:15 +0000 Manifest this update: Thu 18 Dec 2025 03:01:15 +0000 Manifest next update: Fri 19 Dec 2025 03:01:15 +0000 Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=) 2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=) 3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: qYucBOHRUoSGR+NOTLIp/+Tj8nblU0SAXfTArR5Njw0=) 4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:93:1f:48:a3:fe:42:f3:e6:c5:4e:be:af:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Dec 18 03:01:15 2025 GMT Not After : Dec 19 03:01:15 2025 GMT Subject: CN=01d1b610123eb77f1309004edd8e7ca3b327f7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:97:87:c6:02:01:7e:bd:11:71:7b:d0:83: bc:7c:2a:10:ce:dd:3c:7f:db:d6:86:75:36:07:11: 8c:6c:bc:7d:67:48:03:cd:ea:93:5b:c0:dd:db:40: 7a:e4:37:76:95:7e:05:93:d1:2e:be:bd:85:d7:b4: 65:d8:30:59:91:45:50:b6:7a:32:e5:55:24:58:95: b3:71:72:d0:a7:a8:fe:4c:be:62:14:73:84:12:0f: 6c:44:77:8a:32:83:b2:ba:43:e3:9d:30:37:8d:de: 6a:e9:9f:88:fd:52:b4:72:db:0d:f4:ec:3b:a4:59: 7b:c7:f7:01:89:b2:8c:a6:c9:a4:00:2f:a0:f5:a7: d4:32:00:6b:b9:7d:1d:f5:0f:f8:20:e5:cd:a5:54: b4:33:ea:b4:0a:57:08:03:04:6e:28:e6:f0:80:8c: b5:25:05:eb:09:18:c0:39:8f:7f:f3:e4:07:06:4e: 45:24:25:fd:d2:a2:55:9d:64:2a:b6:f8:c2:a1:87: 06:6f:31:f8:7c:19:73:d9:88:52:f2:1e:ea:09:b7: 20:70:a0:41:2b:d5:36:56:3c:82:53:99:da:6f:2c: 70:0a:1a:73:fd:e7:0f:ec:0a:66:d2:a8:1e:23:13: e9:71:2b:a3:9f:a2:6b:ff:a2:d3:cd:ba:4c:72:de: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:B6:10:12:3E:B7:7F:13:09:00:4E:DD:8E:7C:A3:B3:27:F7:C3 X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:47:08:7a:14:6a:c2:cf:a5:48:c5:17:11:3d:91:55:f1: ae:f2:ad:66:45:77:df:d5:c2:44:42:30:2c:44:e9:f4:53:34: 53:3e:30:e9:c0:0f:bf:8b:c1:bf:7d:7a:08:31:70:b6:24:0a: 9b:0c:c1:cc:5c:33:5f:8f:c4:f0:39:32:98:c7:99:45:b9:6b: 6f:e4:43:b1:1b:cc:6a:f5:ea:ef:aa:35:48:76:9f:a8:b8:96: 4a:ec:5e:90:40:55:56:c3:3a:ec:d3:66:dd:56:45:30:79:80: 17:26:1e:96:6a:5b:eb:66:c4:1a:de:f6:0e:df:bc:ae:f1:67: 8f:9b:ee:1f:47:e7:fa:39:96:8c:34:19:33:8f:90:f2:c5:0f: de:00:3d:a4:45:06:f2:c2:a3:fd:93:99:00:cb:b9:68:f0:45: 31:2d:0f:f7:e9:71:5d:30:b7:79:41:0e:7c:48:3c:70:ae:f3: 85:3b:c8:83:74:87:98:0a:bb:38:0a:fe:31:57:e4:6f:27:88: e0:62:29:dc:ae:9d:fb:b4:27:9f:b6:ce:bf:aa:2b:89:b2:5f: 18:83:15:6d:0f:77:30:15:2b:21:42:ed:b9:a2:e7:9a:8f:cc: 2b:64:6a:7c:69:1a:70:90:af:9b:cf:d7:4a:b0:12:63:6a:f7: c9:34:f8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ5MfSKP+QvPmxU6+rwUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjUxMjE4MDMwMTE1WhcNMjUxMjE5MDMwMTE1WjAzMTEwLwYDVQQD EygwMWQxYjYxMDEyM2ViNzdmMTMwOTAwNGVkZDhlN2NhM2IzMjdmN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLCXh8YCAX69EXF70IO8fCoQzt08 f9vWhnU2BxGMbLx9Z0gDzeqTW8Dd20B65Dd2lX4Fk9Euvr2F17Rl2DBZkUVQtnoy 5VUkWJWzcXLQp6j+TL5iFHOEEg9sRHeKMoOyukPjnTA3jd5q6Z+I/VK0ctsN9Ow7 pFl7x/cBibKMpsmkAC+g9afUMgBruX0d9Q/4IOXNpVS0M+q0ClcIAwRuKObwgIy1 JQXrCRjAOY9/8+QHBk5FJCX90qJVnWQqtvjCoYcGbzH4fBlz2YhS8h7qCbcgcKBB K9U2VjyCU5nabyxwChpz/ecP7Apm0qgeIxPpcSujn6Jr/6LTzbpMct5rWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHRthASPrd/EwkATt2OfKOzJ/fDMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAxHCHoU asLPpUjFFxE9kVXxrvKtZkV339XCREIwLETp9FM0Uz4w6cAPv4vBv316CDFwtiQK mwzBzFwzX4/E8DkymMeZRblrb+RDsRvMavXq76o1SHafqLiWSuxekEBVVsM67NNm 3VZFMHmAFyYelmpb62bEGt72Dt+8rvFnj5vuH0fn+jmWjDQZM4+Q8sUP3gA9pEUG 8sKj/ZOZAMu5aPBFMS0P9+lxXTC3eUEOfEg8cK7zhTvIg3SHmAq7OAr+MVfkbyeI 4GIp3K6d+7Qnn7bOv6oribJfGIMVbQ93MBUrIULtuaLnmo/MK2RqfGkacJCvm8/X SrASY2r3yTT4Vw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:56:21 2025 by rpki-client