This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: vzw7TpIWF3PNZw6Ss+SFxFn6BP1U1wphHl5hIZzJ/DI= Subject key identifier: 36:D7:FB:39:00:F1:9E:FA:44:D1:1A:7F:3B:9D:19:EF:C7:FF:78:6E Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B3CEBC22D618FDACD268CAA97AD8767AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0E33 Signing time: Sat 20 Dec 2025 18:00:42 +0000 Manifest this update: Sat 20 Dec 2025 18:00:42 +0000 Manifest next update: Sun 21 Dec 2025 18:00:42 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: u9ZfYAtoraxLppiQCjVzxX0t1eYSxvzhVnRxAu9y7/w=) 6: XmW1bZIMAH1eUiD8pIh2qe-nzi4.roa (hash: OGkNzBo8j0AN5nV1X1VDsvF/YywJ3+cRgQIpDFVours=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 9: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (hash: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c2:2d:61:8f:da:cd:26:8c:aa:97:ad:87:67:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Dec 20 18:00:42 2025 GMT Not After : Dec 21 18:00:42 2025 GMT Subject: CN=36d7fb3900f19efa44d11a7f3b9d19efc7ff786e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:0f:f0:7d:e4:ae:b7:42:15:08:ea:6d:dc: 27:21:18:72:43:09:7a:93:c8:cd:24:5b:b5:f0:3e: 96:60:88:d7:63:ac:b3:db:be:d0:37:36:b5:4e:8e: 44:5c:a6:03:62:8f:d8:20:fb:7c:f2:90:1f:a7:8a: cd:68:e9:2f:85:8c:38:64:61:76:98:07:a7:e0:d4: 05:0d:ed:b7:5c:f1:46:0d:3d:56:89:98:9e:61:d3: 64:86:e8:d0:9b:c3:50:1e:e9:10:f5:f7:39:6c:01: 5f:eb:12:77:03:0a:92:cd:7f:33:e9:d1:44:f8:64: 75:f8:7b:2d:6e:88:84:e1:3d:36:04:35:ab:f5:b8: f8:eb:7c:9b:fa:56:aa:49:1c:a5:b4:4d:d0:b7:b4: 93:0a:e0:0f:32:7e:ab:84:9a:b8:95:91:dd:27:98: 97:45:04:4b:d8:d8:ce:da:84:43:a6:3a:68:4c:e6: 2e:ca:29:33:d9:c6:07:c1:18:2a:af:ea:05:e5:52: fa:ae:f1:74:e9:64:2e:30:a4:a2:7f:dc:db:40:71: 85:07:ae:ae:c4:57:4e:0f:5c:3a:a7:39:5b:7d:e7: ce:3c:3c:1a:ef:ee:a6:76:9f:db:d1:9d:66:b5:c1: 0e:54:f6:c5:b3:99:44:dc:5b:85:9a:9f:84:f1:89: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D7:FB:39:00:F1:9E:FA:44:D1:1A:7F:3B:9D:19:EF:C7:FF:78:6E X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:48:e2:50:2e:8c:3f:3f:0f:56:88:56:17:1a:a4:16:90:2d: ff:3a:7d:54:89:b8:95:dc:7b:14:24:ed:01:49:b2:1c:a8:fa: 9c:28:f9:56:c6:bf:0a:ff:f8:dc:aa:79:c7:10:3f:fd:96:1d: 56:fb:80:75:2d:85:a6:3c:a8:d6:b7:fe:7f:96:2e:49:68:cd: 40:f1:5a:c0:0f:2f:49:75:c9:9b:dd:21:90:4d:69:29:c9:8d: e7:e8:cb:9a:7c:a8:c7:6b:d0:79:d4:a5:02:ab:42:e9:3b:33: 1a:58:2d:51:6d:e9:a8:8e:9c:94:4a:0d:4d:9c:c7:f7:89:66: b1:f3:3b:18:97:09:05:c8:98:fc:08:ee:44:02:8b:90:82:cd: 05:ae:58:4b:36:94:d3:d5:60:16:40:94:f0:50:e2:ab:b0:f3: 41:6f:6d:c4:10:70:5d:4c:db:15:f2:61:76:85:87:b5:63:5a: f9:39:e1:e0:df:87:37:cc:0d:15:83:b5:d9:e6:ca:4b:b0:79: 9b:ef:2b:0f:56:03:92:20:f7:83:c1:8d:82:c2:cd:e7:57:60: 81:d3:5c:c9:6f:7d:b9:b6:03:dc:ce:9b:88:8a:a2:df:7e:d0: c7:0a:98:d6:fb:20:27:c2:0f:51:b8:bd:11:0a:12:91:d6:a6: 16:70:2d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868ItYY/azSaMqpeth2erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUxMjIwMTgwMDQyWhcNMjUxMjIxMTgwMDQyWjAzMTEwLwYDVQQD EygzNmQ3ZmIzOTAwZjE5ZWZhNDRkMTFhN2YzYjlkMTllZmM3ZmY3ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnQP8H3krrdCFQjqbdwnIRhyQwl6 k8jNJFu18D6WYIjXY6yz277QNza1To5EXKYDYo/YIPt88pAfp4rNaOkvhYw4ZGF2 mAen4NQFDe23XPFGDT1WiZieYdNkhujQm8NQHukQ9fc5bAFf6xJ3AwqSzX8z6dFE +GR1+HstboiE4T02BDWr9bj463yb+laqSRyltE3Qt7STCuAPMn6rhJq4lZHdJ5iX RQRL2NjO2oRDpjpoTOYuyikz2cYHwRgqr+oF5VL6rvF06WQuMKSif9zbQHGFB66u xFdOD1w6pzlbfefOPDwa7+6mdp/b0Z1mtcEOVPbFs5lE3FuFmp+E8YlkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbX+zkA8Z76RNEafzudGe/H/3huMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUjiUC6M Pz8PVohWFxqkFpAt/zp9VIm4ldx7FCTtAUmyHKj6nCj5Vsa/Cv/43Kp5xxA//ZYd VvuAdS2Fpjyo1rf+f5YuSWjNQPFawA8vSXXJm90hkE1pKcmN5+jLmnyox2vQedSl AqtC6TszGlgtUW3pqI6clEoNTZzH94lmsfM7GJcJBciY/AjuRAKLkILNBa5YSzaU 09VgFkCU8FDiq7DzQW9txBBwXUzbFfJhdoWHtWNa+Tnh4N+HN8wNFYO12ebKS7B5 m+8rD1YDkiD3g8GNgsLN51dggdNcyW99ubYD3M6biIqi337QxwqY1vsgJ8IPUbi9 EQoSkdamFnAtdg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:03 2025 by rpki-client