This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: IaYccuqklw+Fk2f4adFjwHNZSJEkEUVRbWBUj8UhZfA=
Subject key identifier: F2:6E:0B:52:71:C5:F4:DA:B5:A4:D7:6D:5A:37:DF:1B:36:E6:1F:C3
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019B3A8FDB0FD91CAC7E335B6A1301ACA26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 147D
Signing time: Sat 20 Dec 2025 07:01:04 +0000
Manifest this update: Sat 20 Dec 2025 07:01:04 +0000
Manifest next update: Sun 21 Dec 2025 07:01:04 +0000
Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=)
2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=)
3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=)
4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: Dha8UHrjcHKHgXMwTIPmCXj6Eykl75AscdOWi3kDKL4=)
5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=)
6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=)
7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=)
8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=)
9: pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa (hash: DrEWgUVj7gCBwHBTYVQ96Bg2DTFMTX1DlgA0NmJXb+E=)
10: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:8f:db:0f:d9:1c:ac:7e:33:5b:6a:13:01:ac:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Dec 20 07:01:04 2025 GMT
Not After : Dec 21 07:01:04 2025 GMT
Subject: CN=f26e0b5271c5f4dab5a4d76d5a37df1b36e61fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:28:97:fd:81:99:35:a1:5c:4c:b0:9d:4f:
2c:44:ed:fd:6b:0c:70:95:44:7b:25:73:55:ce:43:
71:3f:57:06:a4:4b:1c:79:49:bb:b3:8c:6a:b8:9c:
1e:6f:02:1a:a7:6f:f9:45:fb:d2:70:02:e6:5f:75:
91:01:f7:bc:8c:b1:cf:b3:e7:7d:01:06:69:6a:a0:
a6:60:e6:e9:8d:f4:53:3d:a9:ab:5c:41:2c:a0:26:
44:86:c2:f7:0f:e6:c6:c4:c3:81:df:ae:95:c6:57:
d9:0e:6b:d1:7c:5a:38:72:c1:1c:4f:fc:3e:91:1b:
0c:b9:bd:30:fa:2a:19:51:f8:34:d9:b9:e3:d6:dc:
a3:bb:da:13:b2:5f:85:67:23:50:26:c9:31:8b:ac:
b3:83:28:4d:99:29:e1:84:24:b6:f1:95:92:67:6c:
d8:5b:7d:f1:b0:7a:7e:56:b7:9d:cb:0b:87:3b:79:
06:bf:b3:e4:2b:44:46:69:4b:66:29:8e:84:43:85:
66:3d:b2:e2:bf:1d:27:39:0a:2f:5a:b6:cf:0e:3b:
60:f8:d3:5d:92:cb:1f:9e:71:6a:18:a5:36:ef:bc:
56:f0:83:cd:99:a3:12:33:1b:1c:0a:3d:6d:3c:38:
0c:e1:2c:81:7b:a7:f8:eb:01:04:71:32:94:8a:c7:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:0B:52:71:C5:F4:DA:B5:A4:D7:6D:5A:37:DF:1B:36:E6:1F:C3
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:bc:9f:96:09:96:72:02:1a:ee:ae:25:d4:ca:00:ee:c4:
13:00:c0:5a:64:25:0c:68:f6:21:6a:77:7b:ea:aa:ff:f1:f7:
c5:b9:d2:1f:89:3e:09:4f:57:9a:7b:d2:d7:d9:50:56:94:82:
aa:6f:01:56:6f:ff:93:b3:6f:90:c7:50:25:c5:ef:f4:57:7e:
c4:d2:19:25:f5:6a:6c:56:6d:67:dc:7a:71:ee:9f:c2:d5:3e:
08:38:0e:1b:94:cd:14:15:98:a8:09:22:f8:23:34:2f:38:26:
14:6e:d4:11:c3:da:b8:99:95:f6:7b:4d:43:ed:b7:38:d8:8a:
18:af:39:17:b8:73:5e:6c:6b:35:17:e0:1e:7e:33:d4:f1:97:
a2:26:d7:04:6f:59:61:e5:c9:34:0c:78:75:d4:57:3e:a4:06:
56:3d:5e:08:c0:3d:5e:93:16:b5:42:dd:1f:b0:3d:93:64:d1:
7f:f7:56:b5:ca:30:72:6a:df:69:1f:d5:88:1f:7b:fa:f6:0a:
65:70:85:f5:7a:1c:61:a5:27:ae:12:a0:f6:6d:2a:81:ae:82:
f1:a8:cd:e0:2f:4c:44:27:4d:c5:3c:87:93:b7:81:98:c0:76:
f0:ea:5e:99:9d:e9:66:9f:0a:5a:f2:a2:8a:48:81:46:5a:25:
aa:91:2f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6j9sP2RysfjNbahMBrKJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjUxMjIwMDcwMTA0WhcNMjUxMjIxMDcwMTA0WjAzMTEwLwYDVQQD
EyhmMjZlMGI1MjcxYzVmNGRhYjVhNGQ3NmQ1YTM3ZGYxYjM2ZTYxZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwYol/2BmTWhXEywnU8sRO39awxw
lUR7JXNVzkNxP1cGpEsceUm7s4xquJwebwIap2/5RfvScALmX3WRAfe8jLHPs+d9
AQZpaqCmYObpjfRTPamrXEEsoCZEhsL3D+bGxMOB366VxlfZDmvRfFo4csEcT/w+
kRsMub0w+ioZUfg02bnj1tyju9oTsl+FZyNQJskxi6yzgyhNmSnhhCS28ZWSZ2zY
W33xsHp+VredywuHO3kGv7PkK0RGaUtmKY6EQ4VmPbLivx0nOQovWrbPDjtg+NNd
kssfnnFqGKU277xW8IPNmaMSMxscCj1tPDgM4SyBe6f46wEEcTKUisct7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJuC1JxxfTataTXbVo33xs25h/DMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm+8n5YJ
lnICGu6uJdTKAO7EEwDAWmQlDGj2IWp3e+qq//H3xbnSH4k+CU9XmnvS19lQVpSC
qm8BVm//k7NvkMdQJcXv9Fd+xNIZJfVqbFZtZ9x6ce6fwtU+CDgOG5TNFBWYqAki
+CM0LzgmFG7UEcPauJmV9ntNQ+23ONiKGK85F7hzXmxrNRfgHn4z1PGXoibXBG9Z
YeXJNAx4ddRXPqQGVj1eCMA9XpMWtULdH7A9k2TRf/dWtcowcmrfaR/ViB97+vYK
ZXCF9XocYaUnrhKg9m0qga6C8ajN4C9MRCdNxTyHk7eBmMB28OpemZ3pZp8KWvKi
ikiBRlolqpEv5A==
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:38:39 2025 by rpki-client