This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json) Hash identifier: RR7OW8AVzxBHR5WUgjKr4h6EDTQAsTG6nhDnreQhjtw= Subject key identifier: EE:55:6E:5C:BF:1D:AA:DF:0A:EE:30:BE:62:5A:20:82:4A:22:5D:38 Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Certificate serial: 019B4AA7722079E78939974B124BD6F6F91D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 10:00:46 +0000 Manifest this update: Tue 23 Dec 2025 10:00:46 +0000 Manifest next update: Wed 24 Dec 2025 10:00:46 +0000 Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: C/kcxBE3CZlzM6mj3LLnrakoRYUThEEmZqyw3S28FLc=) 2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=) 3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:72:20:79:e7:89:39:97:4b:12:4b:d6:f6:f9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Validity Not Before: Dec 23 10:00:46 2025 GMT Not After : Dec 24 10:00:46 2025 GMT Subject: CN=ee556e5cbf1daadf0aee30be625a20824a225d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:df:3d:fd:80:73:00:f6:b7:27:eb:a8:81: 63:e0:3d:8d:b8:15:7c:8d:dd:d4:98:9d:2c:9d:f5: f5:dc:48:5a:15:ec:c1:60:b7:c4:fc:dd:28:35:0a: 54:ca:b0:63:28:bc:14:14:02:60:39:b1:20:fd:5b: 1a:18:f2:01:fc:99:5f:fc:90:37:85:b8:70:4d:48: c4:5d:f5:36:6b:88:d9:01:8d:5f:43:3f:3c:e4:2d: 11:ee:67:1b:b6:50:e5:58:6e:91:6d:0f:bc:ff:9d: c2:63:c2:ce:cf:5d:7f:47:4d:27:16:22:39:0b:fe: 74:a1:49:de:09:47:e6:ae:1a:48:78:ac:ad:b4:06: d8:15:7d:6f:2d:c2:5d:98:10:74:a5:3a:c2:a1:66: 80:b7:a8:23:ac:1f:15:29:dc:82:f8:6e:f1:21:92: 89:67:61:9a:2b:9d:f2:cc:df:77:f7:7f:26:a4:c5: 25:0b:95:cb:dd:61:ac:75:5b:03:74:78:7d:a2:46: 36:45:0b:ad:d8:50:59:42:e1:ac:27:96:0f:7c:29: 4e:db:06:f9:67:c4:b6:8e:cd:3b:06:53:f5:23:30: 9a:a7:2d:64:c6:9f:9a:c9:72:c8:e4:ee:c1:a6:2d: db:1c:b8:69:cc:e0:89:ee:be:37:77:ea:bf:c8:44: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:55:6E:5C:BF:1D:AA:DF:0A:EE:30:BE:62:5A:20:82:4A:22:5D:38 X509v3 Authority Key Identifier: keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e2:98:0e:98:ed:03:fc:7f:89:cf:82:e5:48:c2:3e:2a:8c: 7a:c2:7c:14:05:eb:87:2e:7c:9e:d0:37:91:dc:20:86:02:72: 20:c3:7a:ec:9e:e9:5e:97:be:08:ac:4b:9e:1b:d6:8b:14:54: cb:67:fd:09:f5:e4:6c:36:2d:bb:b4:51:09:89:d9:b5:7c:48: d1:2e:cd:09:04:6b:71:c2:93:2a:5d:26:62:96:a7:77:78:d7: e8:d1:6a:a6:7e:84:ac:8a:8c:50:45:2b:f9:ff:c7:68:e1:9f: 26:ea:7d:13:55:c9:1e:0b:df:af:91:21:67:f6:86:55:45:89: a9:44:a4:b7:49:55:48:23:c5:9c:ee:76:a4:85:39:19:7a:47: 44:0c:06:22:91:4c:ad:11:3b:61:e0:a9:66:28:c5:17:63:8e: 51:66:ea:7b:51:80:fc:17:31:26:86:63:03:af:b8:7e:db:1a: 38:4b:95:b6:b7:bf:a3:66:6e:16:aa:e8:32:69:b9:5a:82:5b: 9c:6f:d6:ea:c9:0f:95:c8:91:5c:e6:eb:18:72:7e:51:6c:82: d9:a9:67:fe:64:1d:5e:fa:36:0b:d2:1f:33:90:e5:10:97:dd: 2b:25:82:13:60:a6:98:3c:eb:c3:ff:88:85:0e:14:3f:f7:58: 19:d7:4f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp3IgeeeJOZdLEkvW9vkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2 NzllZTEwHhcNMjUxMjIzMTAwMDQ2WhcNMjUxMjI0MTAwMDQ2WjAzMTEwLwYDVQQD EyhlZTU1NmU1Y2JmMWRhYWRmMGFlZTMwYmU2MjVhMjA4MjRhMjI1ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwebfPf2AcwD2tyfrqIFj4D2NuBV8 jd3UmJ0snfX13EhaFezBYLfE/N0oNQpUyrBjKLwUFAJgObEg/VsaGPIB/Jlf/JA3 hbhwTUjEXfU2a4jZAY1fQz885C0R7mcbtlDlWG6RbQ+8/53CY8LOz11/R00nFiI5 C/50oUneCUfmrhpIeKyttAbYFX1vLcJdmBB0pTrCoWaAt6gjrB8VKdyC+G7xIZKJ Z2GaK53yzN93938mpMUlC5XL3WGsdVsDdHh9okY2RQut2FBZQuGsJ5YPfClO2wb5 Z8S2js07BlP1IzCapy1kxp+ayXLI5O7Bpi3bHLhpzOCJ7r43d+q/yETyFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5Vbly/HarfCu4wvmJaIIJKIl04MB8GA1UdIwQY MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOKYDpjt A/x/ic+C5UjCPiqMesJ8FAXrhy58ntA3kdwghgJyIMN67J7pXpe+CKxLnhvWixRU y2f9CfXkbDYtu7RRCYnZtXxI0S7NCQRrccKTKl0mYpand3jX6NFqpn6ErIqMUEUr +f/HaOGfJup9E1XJHgvfr5EhZ/aGVUWJqUSkt0lVSCPFnO52pIU5GXpHRAwGIpFM rRE7YeCpZijFF2OOUWbqe1GA/BcxJoZjA6+4ftsaOEuVtre/o2ZuFqroMmm5WoJb nG/W6skPlciRXObrGHJ+UWyC2aln/mQdXvo2C9IfM5DlEJfdKyWCE2CmmDzrw/+I hQ4UP/dYGddPIg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:53:52 2025 by rpki-client