This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json) Hash identifier: 7E5nJAspV7tk4uSQRU71PRQf/7OrSOGemdYLXtV+8wQ= Subject key identifier: EE:43:4B:55:54:D8:11:35:99:BA:8C:5C:9A:9F:1D:E9:39:A7:93:4A Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Certificate serial: 019B2F30AF216C00CEC3E076C58371D9F6F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft Manifest number: 0B19 Signing time: Thu 18 Dec 2025 02:01:18 +0000 Manifest this update: Thu 18 Dec 2025 02:01:18 +0000 Manifest next update: Fri 19 Dec 2025 02:01:18 +0000 Files and hashes: 1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: 8phIEyJn9zY+MBv75FK6+XVH0TVXllulT8zk5HBlPgE=) 2: nsxr-ZEmdIF029lEL2jBOA29dhU.roa (hash: CXCtk7B2cvL2XBTY4M31Fepzk6WUvK7IZRfvv/B2wes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:af:21:6c:00:ce:c3:e0:76:c5:83:71:d9:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Validity Not Before: Dec 18 02:01:18 2025 GMT Not After : Dec 19 02:01:18 2025 GMT Subject: CN=ee434b5554d8113599ba8c5c9a9f1de939a7934a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:e7:20:dc:69:e0:9b:bb:8c:c9:b0:db:35: b8:d5:82:a9:b4:48:ee:ec:67:05:01:eb:24:f2:5d: e2:e8:9d:99:08:1e:50:c5:86:39:a2:30:35:8f:1c: 68:81:5b:73:a2:77:3f:19:58:30:f3:fb:91:ec:b7: 71:d2:96:dc:4c:59:5b:8b:d1:a4:14:2b:f1:df:79: 5f:a2:60:7a:40:ad:1b:94:4d:3e:74:b1:df:9b:2e: 10:58:59:66:bb:06:6b:63:3d:7f:fb:2f:6d:15:3e: d4:dd:71:bd:60:dc:5c:02:de:99:43:e8:85:29:22: f4:dc:d7:56:62:19:0a:79:d9:06:8a:aa:88:b6:68: 36:1e:7b:5c:02:3b:42:0f:08:bd:70:f7:98:dc:f2: 1d:c0:61:cf:d3:5e:09:48:af:b0:80:98:b5:22:c8: 2a:a7:10:1c:94:b3:4d:d8:ad:ce:71:2d:58:eb:1a: 71:e3:3c:de:67:94:56:cb:51:b5:cc:66:35:db:1c: 7b:fe:b0:3e:be:91:17:36:8e:db:d9:ac:21:01:73: ec:6e:00:37:14:97:0b:14:10:47:62:5b:17:82:8a: 30:6e:be:42:7a:3f:e3:20:e0:e9:d6:31:28:93:ef: f6:1a:8b:d1:91:ef:19:79:fb:b2:27:4b:f9:80:36: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:43:4B:55:54:D8:11:35:99:BA:8C:5C:9A:9F:1D:E9:39:A7:93:4A X509v3 Authority Key Identifier: keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1f:bf:72:e3:0b:c5:c3:26:4d:83:6c:e2:54:70:78:ea:42: de:de:e6:93:f8:cc:a3:d0:98:44:eb:53:09:a3:27:08:25:6d: 6b:56:c5:3c:32:79:89:a3:4c:2e:3b:1a:90:81:9d:ed:be:8b: bc:15:72:d1:47:0a:74:a0:40:17:cd:75:4d:7e:80:55:3e:46: 97:a1:f2:e2:a2:8c:90:cd:b3:fb:f1:63:5a:4d:97:f6:ed:9e: 8d:3a:0c:b3:21:5e:df:98:3c:ee:c7:9d:3a:00:1c:0c:1c:e8: fb:8b:36:12:d9:84:a1:7b:36:9e:08:82:3b:05:2b:2d:59:a6: ec:f2:89:3e:0d:44:7d:7e:5a:52:5b:d3:e7:c2:6a:f8:d7:df: 23:26:0a:b9:36:d2:26:ee:3d:29:74:78:9a:80:b0:92:2f:1b: 57:ad:9a:2f:dd:ae:9a:58:d5:f0:7a:02:6d:4a:dc:29:25:a9: d7:b7:0d:90:62:24:46:06:ac:f4:d6:a7:d8:70:d4:5d:51:8f: da:1a:82:e6:a8:5f:28:d8:2f:59:1b:d1:e2:c0:68:78:19:9f: a0:05:9d:bc:8b:87:a9:fc:a3:a5:a7:80:00:b6:be:6b:91:4b: 6d:b4:47:e0:00:f9:8e:89:b4:8c:4b:46:d1:3d:c2:19:96:66: 3a:f3:e4:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMK8hbADOw+B2xYNx2fb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNWMxMGY4NGRjMjI5MzdlZjZkMTVlYjcxYmJiNGE1MzA4 MTYyYmYwHhcNMjUxMjE4MDIwMTE4WhcNMjUxMjE5MDIwMTE4WjAzMTEwLwYDVQQD EyhlZTQzNGI1NTU0ZDgxMTM1OTliYThjNWM5YTlmMWRlOTM5YTc5MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr3nINxp4Ju7jMmw2zW41YKptEju 7GcFAesk8l3i6J2ZCB5QxYY5ojA1jxxogVtzonc/GVgw8/uR7Ldx0pbcTFlbi9Gk FCvx33lfomB6QK0blE0+dLHfmy4QWFlmuwZrYz1/+y9tFT7U3XG9YNxcAt6ZQ+iF KSL03NdWYhkKedkGiqqItmg2HntcAjtCDwi9cPeY3PIdwGHP014JSK+wgJi1Isgq pxAclLNN2K3OcS1Y6xpx4zzeZ5RWy1G1zGY12xx7/rA+vpEXNo7b2awhAXPsbgA3 FJcLFBBHYlsXgoowbr5Cej/jIODp1jEok+/2GovRke8ZefuyJ0v5gDbd5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5DS1VU2BE1mbqMXJqfHek5p5NKMB8GA1UdIwQY MBaAFEFcEPhNwik3720V63G7tKUwgWK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUt YzZiNmZkMTJjZTI3LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUtYzZiNmZkMTJjZTI3 LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh+/cuML xcMmTYNs4lRweOpC3t7mk/jMo9CYROtTCaMnCCVta1bFPDJ5iaNMLjsakIGd7b6L vBVy0UcKdKBAF811TX6AVT5Gl6Hy4qKMkM2z+/FjWk2X9u2ejToMsyFe35g87sed OgAcDBzo+4s2EtmEoXs2ngiCOwUrLVmm7PKJPg1EfX5aUlvT58Jq+NffIyYKuTbS Ju49KXR4moCwki8bV62aL92umljV8HoCbUrcKSWp17cNkGIkRgas9Nan2HDUXVGP 2hqC5qhfKNgvWRvR4sBoeBmfoAWdvIuHqfyjpaeAALa+a5FLbbRH4AD5jom0jEtG 0T3CGZZmOvPkxA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:47 2025 by rpki-client