This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json) Hash identifier: DLwDNUubv/56Lwj9GO92i9fK2xJQX8ka9R7kPGqj1KU= Subject key identifier: E2:16:78:21:66:9F:DB:4D:19:D5:40:24:9F:11:E0:92:E7:7B:41:70 Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Certificate serial: 019B42EE721ED76E1366E65F53E02846C284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:21 +0000 Manifest this update: Sun 21 Dec 2025 22:01:21 +0000 Manifest next update: Mon 22 Dec 2025 22:01:21 +0000 Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: 1LNZIP5rWpEDNBsS5cW4+K5KBHlJ8RrCmLvRegUE/BY=) 2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=) 3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:72:1e:d7:6e:13:66:e6:5f:53:e0:28:46:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Validity Not Before: Dec 21 22:01:21 2025 GMT Not After : Dec 22 22:01:21 2025 GMT Subject: CN=e2167821669fdb4d19d540249f11e092e77b4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:5a:cb:77:c5:ba:22:d4:fa:4f:91:af:30: cb:95:3a:5d:50:6e:2a:af:bf:74:12:e5:a6:68:4d: cb:36:47:38:45:67:e7:52:fa:1c:59:fc:f7:86:8a: a3:d4:0c:e0:83:30:e0:aa:10:ba:69:60:87:23:3e: ee:dc:1b:7e:1b:3c:ae:48:67:54:3e:12:22:d5:a2: 51:30:e7:aa:ff:d0:d7:35:4e:a2:78:2f:15:93:80: 35:fb:25:41:d4:58:8f:69:4a:2c:aa:32:19:f9:17: 9c:30:55:c0:cf:0c:8a:38:94:0c:5f:14:5b:40:50: 75:a8:34:b4:51:f6:52:c5:96:09:32:6e:0c:9a:ad: 8a:ef:4e:ee:4b:71:75:bd:09:10:7c:cc:e1:9b:37: e7:14:c9:d2:4b:f1:61:6e:91:ca:fc:9f:b8:a3:2d: ef:8b:1c:e2:ed:84:93:ed:49:8a:fe:da:b1:53:9a: aa:25:d3:ce:49:6b:66:95:f8:26:57:b7:13:d7:5f: 43:f2:a0:c6:ec:3b:c1:1c:cf:2c:60:60:dc:f5:72: bb:84:ca:c6:24:c3:aa:3a:cf:84:56:65:2c:6e:f8: 63:6a:be:f2:77:7c:0a:32:31:92:59:86:fd:a9:28: 81:3c:74:22:c3:08:eb:6a:3f:57:34:9b:ca:dc:e9: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:78:21:66:9F:DB:4D:19:D5:40:24:9F:11:E0:92:E7:7B:41:70 X509v3 Authority Key Identifier: keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:cc:74:dd:39:64:15:ae:40:08:bc:9c:ac:a9:f4:d2:dd: e3:3c:a0:f2:40:06:ba:53:81:68:66:b6:3f:e2:bb:7d:07:e4: 60:2f:b5:5e:25:eb:30:0f:c2:04:26:8c:ee:46:c4:3b:1a:fa: 50:97:4e:a5:6e:00:1b:7b:61:09:07:61:36:c6:23:7d:62:5c: 41:50:d9:bb:a0:7c:e2:1b:c4:4d:21:91:6a:0b:58:55:7d:b7: f6:a5:88:63:b2:12:35:76:40:7f:67:81:51:c9:57:59:8f:25: 1e:08:1d:0a:59:51:61:64:21:0b:a9:43:59:4f:36:7f:dc:8d: f4:da:1b:5f:f9:5b:c7:a2:6a:2b:94:3b:36:c8:54:77:a2:3e: 0f:70:78:aa:a0:a5:96:61:f2:4b:05:f3:73:f0:fc:7c:a5:86: 2e:40:11:c1:7d:79:3f:16:21:d9:3b:60:7b:1b:e8:f3:c8:b3: 12:39:42:01:6c:af:5d:7b:68:d0:74:23:aa:21:6d:3d:bc:e6: 33:fe:2b:db:ac:9c:cb:a0:9f:5c:cc:95:cc:e1:7e:d5:d8:75: 55:a1:b3:74:f1:5a:b2:91:eb:b5:1d:61:fe:bd:eb:0d:6b:10: b9:f3:84:83:bf:a7:8b:0c:d6:90:62:30:fa:5e:69:48:58:1e: 61:e8:9b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nIe124TZuZfU+AoRsKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2 NzllZTEwHhcNMjUxMjIxMjIwMTIxWhcNMjUxMjIyMjIwMTIxWjAzMTEwLwYDVQQD EyhlMjE2NzgyMTY2OWZkYjRkMTlkNTQwMjQ5ZjExZTA5MmU3N2I0MTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Ray3fFuiLU+k+RrzDLlTpdUG4q r790EuWmaE3LNkc4RWfnUvocWfz3hoqj1AzggzDgqhC6aWCHIz7u3Bt+GzyuSGdU PhIi1aJRMOeq/9DXNU6ieC8Vk4A1+yVB1FiPaUosqjIZ+RecMFXAzwyKOJQMXxRb QFB1qDS0UfZSxZYJMm4Mmq2K707uS3F1vQkQfMzhmzfnFMnSS/FhbpHK/J+4oy3v ixzi7YST7UmK/tqxU5qqJdPOSWtmlfgmV7cT119D8qDG7DvBHM8sYGDc9XK7hMrG JMOqOs+EVmUsbvhjar7yd3wKMjGSWYb9qSiBPHQiwwjraj9XNJvK3On87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIWeCFmn9tNGdVAJJ8R4JLne0FwMB8GA1UdIwQY MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8bMdN05 ZBWuQAi8nKyp9NLd4zyg8kAGulOBaGa2P+K7fQfkYC+1XiXrMA/CBCaM7kbEOxr6 UJdOpW4AG3thCQdhNsYjfWJcQVDZu6B84hvETSGRagtYVX239qWIY7ISNXZAf2eB UclXWY8lHggdCllRYWQhC6lDWU82f9yN9NobX/lbx6JqK5Q7NshUd6I+D3B4qqCl lmHySwXzc/D8fKWGLkARwX15PxYh2Ttgexvo88izEjlCAWyvXXto0HQjqiFtPbzm M/4r26ycy6CfXMyVzOF+1dh1VaGzdPFaspHrtR1h/r3rDWsQufOEg7+niwzWkGIw +l5pSFgeYeibqQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:14 2025 by rpki-client