This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json) Hash identifier: WvcO2wYkRrjxFGY24R+ooe9GHiDfnAAvZcK/q2qcTr4= Subject key identifier: 2B:54:C4:02:03:F2:62:B5:91:FD:D6:13:39:D1:6C:2F:69:AD:4C:FA Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Certificate serial: 019B3CB4B6AEE9A2A947C889C28BEB2347AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft Manifest number: 148E Signing time: Sat 20 Dec 2025 17:00:34 +0000 Manifest this update: Sat 20 Dec 2025 17:00:34 +0000 Manifest next update: Sun 21 Dec 2025 17:00:34 +0000 Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=) 2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: Udg4pz6ITFczzP7/TxTXf2/uJ1PwT7CSDOS2nhAtntw=) 3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b6:ae:e9:a2:a9:47:c8:89:c2:8b:eb:23:47:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Validity Not Before: Dec 20 17:00:34 2025 GMT Not After : Dec 21 17:00:34 2025 GMT Subject: CN=2b54c40203f262b591fdd61339d16c2f69ad4cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:ec:37:e3:65:81:14:ac:61:79:a3:e2:e3: ab:e9:c7:65:af:6c:ee:8b:bd:b6:86:29:62:a8:b6: 92:cc:69:7d:1a:0c:01:3d:68:f5:ed:2e:d5:69:7f: f2:8e:b2:56:9d:68:98:bf:74:78:89:dc:68:1c:cd: 82:87:6b:24:49:f3:87:6e:06:e0:2f:35:ba:7b:42: c1:4f:f1:17:6b:63:f6:b9:c1:7e:bf:56:70:19:19: 7f:48:cb:b1:44:1a:9e:04:cc:70:57:ff:a0:37:4a: 82:76:9f:88:1f:23:a5:a9:d6:5b:be:71:8c:32:55: 51:4d:4d:fd:b1:ba:87:22:28:1c:05:2f:3b:76:e2: da:2f:ab:e6:b4:75:e5:9c:e8:85:0d:9e:67:d2:7a: d8:0e:cd:74:bb:2f:97:d8:92:74:e5:74:13:15:e7: 73:c4:bc:82:c6:ba:05:fa:ff:e5:29:b9:d0:ab:1a: b0:35:13:64:65:ab:67:e4:3b:18:8b:fa:f5:1e:72: 6a:fb:8b:ae:d7:59:3c:04:94:ab:fe:5c:07:dd:6e: d7:71:ed:0b:6e:ae:92:68:2d:ab:0a:cb:b8:4f:06: 77:a6:14:10:b9:e1:8b:c8:38:05:b1:54:5f:35:33: 0f:e8:45:cf:ca:cb:9f:63:89:cf:b6:ed:3a:53:4a: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:54:C4:02:03:F2:62:B5:91:FD:D6:13:39:D1:6C:2F:69:AD:4C:FA X509v3 Authority Key Identifier: keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a9:f6:53:2f:90:b9:e7:59:47:bc:11:16:f2:5a:3b:28:8f: 79:c2:29:d6:47:2f:41:f3:b7:87:8c:56:12:d1:29:11:16:d1: 41:4d:33:5b:d8:8b:74:90:85:89:89:9f:fb:8e:fe:d2:a1:e4: 37:2e:ce:f8:c0:e1:37:80:e2:b5:78:02:1f:44:7f:68:9e:2a: 31:24:7b:a5:39:1e:b7:ce:5c:fc:86:ff:0d:4a:2c:c7:ca:ae: fa:87:43:b7:83:44:94:5b:ea:a1:e6:bb:fa:bc:a2:9a:40:10: f1:25:61:9a:77:f1:20:ce:80:1b:8c:bd:99:79:29:a2:65:87: 49:f5:57:46:39:6f:24:79:51:80:d0:fe:c7:23:c9:e0:48:56: df:56:e4:db:3d:16:88:4c:11:03:3d:11:60:8d:1c:fe:dc:50: 86:ec:43:62:6c:b3:42:8b:f1:30:4a:71:f1:6d:c0:3b:9b:21: 86:d2:77:f2:75:d3:d7:3b:e0:12:9e:b2:a6:d6:21:90:8b:51: 01:33:b3:a1:fe:59:4b:33:ae:95:40:0e:e5:b8:4f:ad:1b:4b: e9:fb:8b:4f:1c:af:df:b1:35:10:42:dd:fd:85:32:d5:fb:35: 81:56:7c:8a:74:66:2e:00:cc:16:c5:65:74:aa:3d:96:12:e5: 0a:bc:bb:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLau6aKpR8iJwovrI0etMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi YjgwOTIwHhcNMjUxMjIwMTcwMDM0WhcNMjUxMjIxMTcwMDM0WjAzMTEwLwYDVQQD EygyYjU0YzQwMjAzZjI2MmI1OTFmZGQ2MTMzOWQxNmMyZjY5YWQ0Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTzsN+NlgRSsYXmj4uOr6cdlr2zu i722hiliqLaSzGl9GgwBPWj17S7VaX/yjrJWnWiYv3R4idxoHM2Ch2skSfOHbgbg LzW6e0LBT/EXa2P2ucF+v1ZwGRl/SMuxRBqeBMxwV/+gN0qCdp+IHyOlqdZbvnGM MlVRTU39sbqHIigcBS87duLaL6vmtHXlnOiFDZ5n0nrYDs10uy+X2JJ05XQTFedz xLyCxroF+v/lKbnQqxqwNRNkZatn5DsYi/r1HnJq+4uu11k8BJSr/lwH3W7Xce0L bq6SaC2rCsu4TwZ3phQQueGLyDgFsVRfNTMP6EXPysufY4nPtu06U0rKQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtUxAID8mK1kf3WEznRbC9prUz6MB8GA1UdIwQY MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALan2Uy+Q uedZR7wRFvJaOyiPecIp1kcvQfO3h4xWEtEpERbRQU0zW9iLdJCFiYmf+47+0qHk Ny7O+MDhN4DitXgCH0R/aJ4qMSR7pTket85c/Ib/DUosx8qu+odDt4NElFvqoea7 +ryimkAQ8SVhmnfxIM6AG4y9mXkpomWHSfVXRjlvJHlRgND+xyPJ4EhW31bk2z0W iEwRAz0RYI0c/txQhuxDYmyzQovxMEpx8W3AO5shhtJ38nXT1zvgEp6yptYhkItR ATOzof5ZSzOulUAO5bhPrRtL6fuLTxyv37E1EELd/YUy1fs1gVZ8inRmLgDMFsVl dKo9lhLlCry7vQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:25 2025 by rpki-client