This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: IaYccuqklw+Fk2f4adFjwHNZSJEkEUVRbWBUj8UhZfA= Subject key identifier: F2:6E:0B:52:71:C5:F4:DA:B5:A4:D7:6D:5A:37:DF:1B:36:E6:1F:C3 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B3A8FDB0FD91CAC7E335B6A1301ACA26B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 147D Signing time: Sat 20 Dec 2025 07:01:04 +0000 Manifest this update: Sat 20 Dec 2025 07:01:04 +0000 Manifest next update: Sun 21 Dec 2025 07:01:04 +0000 Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=) 2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=) 3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=) 4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: Dha8UHrjcHKHgXMwTIPmCXj6Eykl75AscdOWi3kDKL4=) 5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=) 6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=) 7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=) 8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=) 9: pW5tYkF6q2JtEa5-0wWR2y1MLiE.roa (hash: DrEWgUVj7gCBwHBTYVQ96Bg2DTFMTX1DlgA0NmJXb+E=) 10: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:db:0f:d9:1c:ac:7e:33:5b:6a:13:01:ac:a2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Dec 20 07:01:04 2025 GMT Not After : Dec 21 07:01:04 2025 GMT Subject: CN=f26e0b5271c5f4dab5a4d76d5a37df1b36e61fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:28:97:fd:81:99:35:a1:5c:4c:b0:9d:4f: 2c:44:ed:fd:6b:0c:70:95:44:7b:25:73:55:ce:43: 71:3f:57:06:a4:4b:1c:79:49:bb:b3:8c:6a:b8:9c: 1e:6f:02:1a:a7:6f:f9:45:fb:d2:70:02:e6:5f:75: 91:01:f7:bc:8c:b1:cf:b3:e7:7d:01:06:69:6a:a0: a6:60:e6:e9:8d:f4:53:3d:a9:ab:5c:41:2c:a0:26: 44:86:c2:f7:0f:e6:c6:c4:c3:81:df:ae:95:c6:57: d9:0e:6b:d1:7c:5a:38:72:c1:1c:4f:fc:3e:91:1b: 0c:b9:bd:30:fa:2a:19:51:f8:34:d9:b9:e3:d6:dc: a3:bb:da:13:b2:5f:85:67:23:50:26:c9:31:8b:ac: b3:83:28:4d:99:29:e1:84:24:b6:f1:95:92:67:6c: d8:5b:7d:f1:b0:7a:7e:56:b7:9d:cb:0b:87:3b:79: 06:bf:b3:e4:2b:44:46:69:4b:66:29:8e:84:43:85: 66:3d:b2:e2:bf:1d:27:39:0a:2f:5a:b6:cf:0e:3b: 60:f8:d3:5d:92:cb:1f:9e:71:6a:18:a5:36:ef:bc: 56:f0:83:cd:99:a3:12:33:1b:1c:0a:3d:6d:3c:38: 0c:e1:2c:81:7b:a7:f8:eb:01:04:71:32:94:8a:c7: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:0B:52:71:C5:F4:DA:B5:A4:D7:6D:5A:37:DF:1B:36:E6:1F:C3 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6f:bc:9f:96:09:96:72:02:1a:ee:ae:25:d4:ca:00:ee:c4: 13:00:c0:5a:64:25:0c:68:f6:21:6a:77:7b:ea:aa:ff:f1:f7: c5:b9:d2:1f:89:3e:09:4f:57:9a:7b:d2:d7:d9:50:56:94:82: aa:6f:01:56:6f:ff:93:b3:6f:90:c7:50:25:c5:ef:f4:57:7e: c4:d2:19:25:f5:6a:6c:56:6d:67:dc:7a:71:ee:9f:c2:d5:3e: 08:38:0e:1b:94:cd:14:15:98:a8:09:22:f8:23:34:2f:38:26: 14:6e:d4:11:c3:da:b8:99:95:f6:7b:4d:43:ed:b7:38:d8:8a: 18:af:39:17:b8:73:5e:6c:6b:35:17:e0:1e:7e:33:d4:f1:97: a2:26:d7:04:6f:59:61:e5:c9:34:0c:78:75:d4:57:3e:a4:06: 56:3d:5e:08:c0:3d:5e:93:16:b5:42:dd:1f:b0:3d:93:64:d1: 7f:f7:56:b5:ca:30:72:6a:df:69:1f:d5:88:1f:7b:fa:f6:0a: 65:70:85:f5:7a:1c:61:a5:27:ae:12:a0:f6:6d:2a:81:ae:82: f1:a8:cd:e0:2f:4c:44:27:4d:c5:3c:87:93:b7:81:98:c0:76: f0:ea:5e:99:9d:e9:66:9f:0a:5a:f2:a2:8a:48:81:46:5a:25: aa:91:2f:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9sP2RysfjNbahMBrKJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjUxMjIwMDcwMTA0WhcNMjUxMjIxMDcwMTA0WjAzMTEwLwYDVQQD EyhmMjZlMGI1MjcxYzVmNGRhYjVhNGQ3NmQ1YTM3ZGYxYjM2ZTYxZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwYol/2BmTWhXEywnU8sRO39awxw lUR7JXNVzkNxP1cGpEsceUm7s4xquJwebwIap2/5RfvScALmX3WRAfe8jLHPs+d9 AQZpaqCmYObpjfRTPamrXEEsoCZEhsL3D+bGxMOB366VxlfZDmvRfFo4csEcT/w+ kRsMub0w+ioZUfg02bnj1tyju9oTsl+FZyNQJskxi6yzgyhNmSnhhCS28ZWSZ2zY W33xsHp+VredywuHO3kGv7PkK0RGaUtmKY6EQ4VmPbLivx0nOQovWrbPDjtg+NNd kssfnnFqGKU277xW8IPNmaMSMxscCj1tPDgM4SyBe6f46wEEcTKUisct7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJuC1JxxfTataTXbVo33xs25h/DMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm+8n5YJ lnICGu6uJdTKAO7EEwDAWmQlDGj2IWp3e+qq//H3xbnSH4k+CU9XmnvS19lQVpSC qm8BVm//k7NvkMdQJcXv9Fd+xNIZJfVqbFZtZ9x6ce6fwtU+CDgOG5TNFBWYqAki +CM0LzgmFG7UEcPauJmV9ntNQ+23ONiKGK85F7hzXmxrNRfgHn4z1PGXoibXBG9Z YeXJNAx4ddRXPqQGVj1eCMA9XpMWtULdH7A9k2TRf/dWtcowcmrfaR/ViB97+vYK ZXCF9XocYaUnrhKg9m0qga6C8ajN4C9MRCdNxTyHk7eBmMB28OpemZ3pZp8KWvKi ikiBRlolqpEv5A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:38:39 2025 by rpki-client