This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json) Hash identifier: BarKyOdVK9fIOxzYsOI5ddFAFST1qBp3qIkPklBJAKo= Subject key identifier: 34:3E:93:69:4B:30:FC:D4:84:45:57:88:45:45:F7:4A:84:3D:7D:56 Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019B1FF3F2F9DC31959DC62F9FE6C637F1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 03:00:39 +0000 Manifest this update: Mon 15 Dec 2025 03:00:39 +0000 Manifest next update: Tue 16 Dec 2025 03:00:39 +0000 Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: u7fHnUuA65XSje/EIN5Q6ybuCv0p+1w75XJKE5XosvU=) 2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:f2:f9:dc:31:95:9d:c6:2f:9f:e6:c6:37:f1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Dec 15 03:00:39 2025 GMT Not After : Dec 16 03:00:39 2025 GMT Subject: CN=343e93694b30fcd4844557884545f74a843d7d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:ce:02:a4:27:e2:f7:c6:02:31:a1:8b:83: 29:b3:5d:73:ee:ab:9e:92:8b:2a:f3:38:a0:5b:2d: 6b:05:15:7b:dd:25:cd:33:43:f5:47:14:6d:8a:07: f2:f5:e5:b8:b3:8a:ce:3c:45:81:92:e3:52:7e:44: c6:36:1e:8c:bf:01:99:e9:d9:c6:c5:be:86:0d:e0: cc:43:1b:77:72:8d:67:f3:a9:cc:62:20:0b:21:be: 2f:34:dd:87:b5:9e:73:47:fa:ef:08:1d:db:13:72: 2e:ec:bc:ff:9e:64:28:84:4d:e5:0a:c8:63:e5:b0: 1c:00:4c:20:8e:73:a7:fa:b6:75:68:a6:44:97:32: 10:0f:67:fc:61:e4:6a:2e:0a:6e:cf:5a:d6:52:b1: 54:cf:28:67:6f:fb:9b:ae:58:35:d6:83:18:5e:e1: 23:16:a4:54:6f:69:d0:3a:8b:16:df:69:e5:0b:bd: a6:42:13:0f:a8:4e:8e:32:30:c4:92:5c:0e:0d:ba: a2:62:48:33:c1:b9:94:46:30:1f:0f:30:48:13:cb: 92:ac:0d:49:18:df:3f:df:d5:b8:8e:f3:95:76:b0: c6:5f:b3:69:88:c2:40:58:4e:57:96:29:fb:45:ac: 01:04:37:fb:b9:a7:aa:c9:f9:cb:76:2c:89:d5:e2: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:93:69:4B:30:FC:D4:84:45:57:88:45:45:F7:4A:84:3D:7D:56 X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:51:1e:26:5f:6f:c9:59:37:20:00:28:d7:90:b6:b4:d0:43: 03:11:a6:d3:0f:a6:67:4b:e6:20:18:23:6b:fe:e0:f0:58:30: e7:a7:53:18:22:91:bd:94:3f:0f:75:70:20:ad:17:f9:d8:15: f6:07:13:9b:a4:45:34:ae:34:e8:77:f3:0d:5f:d1:97:8c:c3: dd:79:da:6c:bd:b7:a1:2e:6e:b3:20:01:f5:46:6b:e8:a4:9d: 37:29:6b:b9:95:2f:fc:cb:ee:1f:a2:9c:5d:6f:98:1d:5c:c5: d5:a1:68:59:f5:2c:3a:14:ae:b0:c2:e8:51:04:2b:06:b8:7a: 1e:6a:f0:87:df:fb:b0:7a:9f:68:ec:9f:d0:21:f0:83:62:a0: 56:a1:ba:e1:af:94:94:87:d7:09:b9:f8:f7:4a:d3:bc:62:bf: a7:fe:1f:fe:be:6d:82:0e:1c:c9:70:88:8c:70:da:84:3b:74: 36:3a:94:cf:01:6d:b3:cc:68:9a:9a:35:fa:47:11:a0:dc:37: 5a:5f:a9:c2:3d:67:ab:cb:24:0b:75:af:95:95:18:6d:3f:3a: bf:29:83:c5:3b:27:36:68:b7:b7:44:f4:14:f4:c7:80:74:0e: 17:cd:92:78:34:e6:10:bc:c3:bb:c9:76:67:ee:ab:23:94:ec: eb:38:4a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf8/L53DGVncYvn+bGN/GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjUxMjE1MDMwMDM5WhcNMjUxMjE2MDMwMDM5WjAzMTEwLwYDVQQD EygzNDNlOTM2OTRiMzBmY2Q0ODQ0NTU3ODg0NTQ1Zjc0YTg0M2Q3ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ7OAqQn4vfGAjGhi4Mps11z7que kosq8zigWy1rBRV73SXNM0P1RxRtigfy9eW4s4rOPEWBkuNSfkTGNh6MvwGZ6dnG xb6GDeDMQxt3co1n86nMYiALIb4vNN2HtZ5zR/rvCB3bE3Iu7Lz/nmQohE3lCshj 5bAcAEwgjnOn+rZ1aKZElzIQD2f8YeRqLgpuz1rWUrFUzyhnb/ubrlg11oMYXuEj FqRUb2nQOosW32nlC72mQhMPqE6OMjDEklwODbqiYkgzwbmURjAfDzBIE8uSrA1J GN8/39W4jvOVdrDGX7NpiMJAWE5Xlin7RawBBDf7uaeqyfnLdiyJ1eJgSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ+k2lLMPzUhEVXiEVF90qEPX1WMB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFEeJl9v yVk3IAAo15C2tNBDAxGm0w+mZ0vmIBgja/7g8Fgw56dTGCKRvZQ/D3VwIK0X+dgV 9gcTm6RFNK406HfzDV/Rl4zD3XnabL23oS5usyAB9UZr6KSdNylruZUv/MvuH6Kc XW+YHVzF1aFoWfUsOhSusMLoUQQrBrh6Hmrwh9/7sHqfaOyf0CHwg2KgVqG64a+U lIfXCbn490rTvGK/p/4f/r5tgg4cyXCIjHDahDt0NjqUzwFts8xompo1+kcRoNw3 Wl+pwj1nq8skC3WvlZUYbT86vymDxTsnNmi3t0T0FPTHgHQOF82SeDTmELzDu8l2 Z+6rI5Ts6zhKNg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:55 2025 by rpki-client