This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json) Hash identifier: jCl9VmKcCWbB997Uj8Vm3Hk0RUq8An6II6sifeQYKmk= Subject key identifier: 19:0E:E3:C4:2B:2B:09:F5:D1:C9:A1:59:C9:25:4C:1B:A1:35:20:83 Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Certificate serial: 019B37C55E5FFCFBA48F5F37D2E6C894787B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft Manifest number: 03CD Signing time: Fri 19 Dec 2025 18:00:40 +0000 Manifest this update: Fri 19 Dec 2025 18:00:40 +0000 Manifest next update: Sat 20 Dec 2025 18:00:40 +0000 Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: ErIvWj2+LSR7Dpc9vF9AwfLdUOWmzndW3hG2whHN9fM=) 2: ze1bnhxOodvSaZyqj0cJ_3ArzlU.roa (hash: PNnVRVHAf7Op/O6n5LoUeAnCU161uCDB3OvamWJNlzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:5e:5f:fc:fb:a4:8f:5f:37:d2:e6:c8:94:78:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306 Validity Not Before: Dec 19 18:00:40 2025 GMT Not After : Dec 20 18:00:40 2025 GMT Subject: CN=190ee3c42b2b09f5d1c9a159c9254c1ba1352083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:77:4b:2b:41:ea:8d:bf:5f:a5:1a:dc:13: 78:3c:a7:94:f3:ed:1d:ee:12:65:99:48:bf:42:be: bb:4c:c9:71:94:b1:0a:df:ab:5c:44:92:ff:44:bc: a8:44:09:97:cf:06:52:00:1d:c6:3d:28:8e:91:94: 2a:1d:34:6d:e8:fe:70:01:56:f4:76:e8:03:6e:94: 64:89:b0:d9:97:42:4d:9e:2a:57:4e:ff:8e:3b:66: 6e:7f:54:63:23:be:db:fd:f9:37:2e:69:b7:cc:57: 74:8a:06:3f:25:df:2a:e6:59:0b:9e:ae:24:46:fd: bd:10:d8:ee:1d:ae:9a:39:38:81:c9:b0:50:7d:fe: 3d:ec:b4:57:11:53:a9:c4:85:2e:ce:98:8d:fd:73: 59:9d:0c:4a:ae:a2:2e:d6:18:ac:df:4b:4d:06:7c: 0f:b7:88:9a:fb:44:2b:3d:8d:81:74:1e:da:25:f3: 8d:43:36:7a:30:9e:0a:ec:0a:ac:32:c5:ff:50:83: be:b3:ef:8b:da:b2:c7:ce:79:05:2c:e3:81:a4:b1: 5d:19:41:cc:5b:08:59:c5:23:3c:a5:a0:1e:03:67: b3:4a:ec:f0:0c:5e:00:16:84:93:a4:10:3c:09:da: 93:7b:4b:8f:35:5a:f3:a4:ae:f0:59:17:b4:07:36: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:E3:C4:2B:2B:09:F5:D1:C9:A1:59:C9:25:4C:1B:A1:35:20:83 X509v3 Authority Key Identifier: keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3e:c1:3d:4e:f5:16:24:47:81:e3:65:60:c0:42:b9:26:83: 41:35:60:54:4e:96:00:25:8e:20:af:55:62:b3:7a:14:2a:ea: 1b:aa:2f:15:5d:fd:62:1f:62:8a:e2:dd:1f:e2:1e:70:82:85: 5f:25:2d:c7:5a:df:0a:ee:37:4f:ea:ae:34:4c:95:4e:ce:78: c6:59:ea:c2:0f:b7:86:ce:1c:d2:da:41:55:83:02:77:95:a1: 7f:85:1d:5e:4d:5a:ef:c2:32:03:53:0c:da:42:90:65:6d:f4: c5:73:f4:c9:53:31:bf:f2:e1:e9:b6:1c:bd:24:06:75:4e:68: e7:f7:2c:89:51:05:17:8d:8a:e8:1a:10:ae:41:1a:8c:7a:31: 08:5c:92:df:6d:20:89:f6:5a:f1:4d:c4:46:33:3b:82:d9:3a: d1:24:37:ea:c9:89:e4:c3:dd:7f:52:9e:58:ba:a6:58:84:ff: 5b:18:31:f0:88:a7:9a:6f:9f:5e:ce:4b:d5:c1:12:a3:7e:c2: 11:f8:8f:4f:63:07:08:b8:df:53:2a:3c:5d:f8:0e:91:6b:e7: 6a:ce:32:57:01:7e:69:dc:6e:f5:9d:eb:e1:5c:00:5e:d3:2d: 9b:c5:b5:c8:66:78:4c:f0:70:60:6d:ce:b8:f0:09:ef:57:90: 3f:0d:11:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xV5f/Pukj1830ubIlHh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWZmYzc0YWU5MjM4NmFmYjdjZTc3MGYwMzkwZTkwZDRj ZGUzMDYwHhcNMjUxMjE5MTgwMDQwWhcNMjUxMjIwMTgwMDQwWjAzMTEwLwYDVQQD EygxOTBlZTNjNDJiMmIwOWY1ZDFjOWExNTljOTI1NGMxYmExMzUyMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L53SytB6o2/X6Ua3BN4PKeU8+0d 7hJlmUi/Qr67TMlxlLEK36tcRJL/RLyoRAmXzwZSAB3GPSiOkZQqHTRt6P5wAVb0 dugDbpRkibDZl0JNnipXTv+OO2Zuf1RjI77b/fk3Lmm3zFd0igY/Jd8q5lkLnq4k Rv29ENjuHa6aOTiBybBQff497LRXEVOpxIUuzpiN/XNZnQxKrqIu1his30tNBnwP t4ia+0QrPY2BdB7aJfONQzZ6MJ4K7AqsMsX/UIO+s++L2rLHznkFLOOBpLFdGUHM WwhZxSM8paAeA2ezSuzwDF4AFoSTpBA8CdqTe0uPNVrzpK7wWRe0BzbVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkO48QrKwn10cmhWcklTBuhNSCDMB8GA1UdIwQY MBaAFEBf/HSukjhq+3zncPA5DpDUzeMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQt NzI0NmFlZmNkMjcyLzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQtNzI0NmFlZmNkMjcy LzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT7BPU71 FiRHgeNlYMBCuSaDQTVgVE6WACWOIK9VYrN6FCrqG6ovFV39Yh9iiuLdH+IecIKF XyUtx1rfCu43T+quNEyVTs54xlnqwg+3hs4c0tpBVYMCd5Whf4UdXk1a78IyA1MM 2kKQZW30xXP0yVMxv/Lh6bYcvSQGdU5o5/csiVEFF42K6BoQrkEajHoxCFyS320g ifZa8U3ERjM7gtk60SQ36smJ5MPdf1KeWLqmWIT/Wxgx8Iinmm+fXs5L1cESo37C EfiPT2MHCLjfUyo8XfgOkWvnas4yVwF+adxu9Z3r4VwAXtMtm8W1yGZ4TPBwYG3O uPAJ71eQPw0R4w== -----END CERTIFICATE-----Generated at Sat Dec 20 02:50:17 2025 by rpki-client