This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json) Hash identifier: pDRapOE04hAN0XQy+FiPq8/qcFJ8HyKCnYTV62aNF2g= Subject key identifier: 5D:30:0A:D9:F1:6F:57:66:FC:35:40:C0:89:B4:16:46:A0:49:52:9A Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Certificate serial: 019B21AB8554AF85B9C245A75B0E22D8D5B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft Manifest number: 0B12 Signing time: Mon 15 Dec 2025 11:00:47 +0000 Manifest this update: Mon 15 Dec 2025 11:00:47 +0000 Manifest next update: Tue 16 Dec 2025 11:00:47 +0000 Files and hashes: 1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: /7Ze3h5x6egOAf/oCfxPxhuqDrZqfGXlig/gvVQEQaU=) 2: nsxr-ZEmdIF029lEL2jBOA29dhU.roa (hash: CXCtk7B2cvL2XBTY4M31Fepzk6WUvK7IZRfvv/B2wes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:85:54:af:85:b9:c2:45:a7:5b:0e:22:d8:d5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Validity Not Before: Dec 15 11:00:47 2025 GMT Not After : Dec 16 11:00:47 2025 GMT Subject: CN=5d300ad9f16f5766fc3540c089b41646a049529a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:3a:c8:f8:e3:65:48:81:3a:20:55:30:0d: c1:2a:bb:d7:33:f7:08:6c:88:fd:5d:47:9e:79:33: b1:43:ab:60:59:e6:ab:f1:76:42:35:83:66:b9:cc: 0a:8c:0c:bb:fb:54:85:70:94:2d:bb:e8:f0:54:be: 1e:37:a0:1a:6d:ac:24:18:22:d2:47:20:24:8d:d0: 0d:9b:41:96:d8:5d:a0:da:1d:cc:fb:4f:10:ae:d1: 5e:be:4b:90:c8:4e:93:54:ea:a5:1c:dc:3c:3b:55: ac:f1:5e:51:ee:e6:be:5e:9a:b8:e9:20:af:bc:f0: 3d:77:b5:d3:54:07:2a:c6:91:26:53:af:0e:93:3a: 4f:b0:48:73:e9:6b:2b:1b:b7:55:88:11:72:12:c6: 22:65:f4:75:bf:b5:09:ee:57:fc:17:8f:6f:b4:71: 59:72:90:36:c1:22:72:1f:11:a3:a0:79:51:95:d3: ec:77:37:4a:f8:ac:7d:b2:7a:80:e5:76:78:89:19: a7:c0:89:e7:3f:96:36:1d:ac:62:df:f1:be:82:27: 74:c9:d3:97:0f:ee:99:8d:77:9c:66:28:35:32:ab: 45:9b:c6:ad:c3:5d:c3:37:4d:72:83:1a:b6:e2:ed: 8e:18:d8:0f:cc:de:52:f4:5c:5e:e4:a2:34:75:e9: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:0A:D9:F1:6F:57:66:FC:35:40:C0:89:B4:16:46:A0:49:52:9A X509v3 Authority Key Identifier: keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7a:3f:c6:a1:bd:49:da:86:1a:27:0c:3c:9c:a8:8f:d0:77: 55:62:6c:c1:95:7f:ff:09:7c:bc:ca:11:2a:1b:ef:fd:f9:54: 10:fe:9b:04:05:b4:0a:6d:6b:e3:32:34:e6:d2:bd:4c:52:10: 85:a5:6b:7f:4a:87:73:b7:d2:8e:58:9e:4d:82:4e:b9:bf:e5: 7a:c8:e2:ff:1a:d2:0a:22:82:aa:3e:ab:ba:d0:a1:5a:e4:41: 97:9d:a3:94:4e:9a:2c:22:b4:b3:ae:3f:17:18:90:e9:e9:a9: 6c:78:ef:19:09:ba:cc:99:b2:54:91:1c:e2:b2:ce:c2:54:52: fc:1c:2a:17:bb:d6:26:06:ba:02:b2:96:57:72:63:3d:ab:0c: 82:32:06:4f:53:29:e1:d4:02:23:1e:5c:89:99:4f:36:3b:35: 43:51:95:e6:4b:9d:ad:9c:db:23:0b:89:95:80:56:31:39:bb: de:4f:f9:20:31:90:61:fb:16:84:23:ae:8e:02:58:cd:55:35: 8a:37:9e:a9:04:8a:af:c8:9d:77:59:57:51:38:62:6e:51:3e: a0:05:d1:0c:e9:86:d1:fd:9b:60:7e:34:f3:c3:d1:81:23:e2: 55:ac:47:5e:02:ec:14:bc:1d:cb:04:cc:29:65:b0:ee:c9:23: e4:8f:1f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq4VUr4W5wkWnWw4i2NW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNWMxMGY4NGRjMjI5MzdlZjZkMTVlYjcxYmJiNGE1MzA4 MTYyYmYwHhcNMjUxMjE1MTEwMDQ3WhcNMjUxMjE2MTEwMDQ3WjAzMTEwLwYDVQQD Eyg1ZDMwMGFkOWYxNmY1NzY2ZmMzNTQwYzA4OWI0MTY0NmEwNDk1MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35M6yPjjZUiBOiBVMA3BKrvXM/cI bIj9XUeeeTOxQ6tgWear8XZCNYNmucwKjAy7+1SFcJQtu+jwVL4eN6AabawkGCLS RyAkjdANm0GW2F2g2h3M+08QrtFevkuQyE6TVOqlHNw8O1Ws8V5R7ua+Xpq46SCv vPA9d7XTVAcqxpEmU68OkzpPsEhz6WsrG7dViBFyEsYiZfR1v7UJ7lf8F49vtHFZ cpA2wSJyHxGjoHlRldPsdzdK+Kx9snqA5XZ4iRmnwInnP5Y2Haxi3/G+gid0ydOX D+6ZjXecZig1MqtFm8atw13DN01ygxq24u2OGNgPzN5S9Fxe5KI0delNewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0wCtnxb1dm/DVAwIm0FkagSVKaMB8GA1UdIwQY MBaAFEFcEPhNwik3720V63G7tKUwgWK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUt YzZiNmZkMTJjZTI3LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUtYzZiNmZkMTJjZTI3 LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3o/xqG9 SdqGGicMPJyoj9B3VWJswZV//wl8vMoRKhvv/flUEP6bBAW0Cm1r4zI05tK9TFIQ haVrf0qHc7fSjlieTYJOub/lesji/xrSCiKCqj6rutChWuRBl52jlE6aLCK0s64/ FxiQ6empbHjvGQm6zJmyVJEc4rLOwlRS/BwqF7vWJga6ArKWV3JjPasMgjIGT1Mp 4dQCIx5ciZlPNjs1Q1GV5kudrZzbIwuJlYBWMTm73k/5IDGQYfsWhCOujgJYzVU1 ijeeqQSKr8idd1lXUThiblE+oAXRDOmG0f2bYH4088PRgSPiVaxHXgLsFLwdywTM KWWw7skj5I8fcg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:50:57 2025 by rpki-client