This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json) Hash identifier: NVPcz+TwjMRFmd+gxmulPbB549ssLSN23y9U5LUlSuQ= Subject key identifier: AD:08:33:41:08:6F:C8:78:8D:2E:FF:30:67:BB:07:8F:ED:2D:E3:68 Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Certificate serial: 019B2664434F333BB06DA2477A7C52847654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft Manifest number: 13CC Signing time: Tue 16 Dec 2025 09:01:03 +0000 Manifest this update: Tue 16 Dec 2025 09:01:03 +0000 Manifest next update: Wed 17 Dec 2025 09:01:03 +0000 Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: hh8gzho02p+oeEyKO58Hof8JkYwMI3JObozheg0AfCE=) 2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:43:4f:33:3b:b0:6d:a2:47:7a:7c:52:84:76:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Validity Not Before: Dec 16 09:01:03 2025 GMT Not After : Dec 17 09:01:03 2025 GMT Subject: CN=ad083341086fc8788d2eff3067bb078fed2de368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:d7:15:0e:cb:c9:9c:71:66:eb:00:24:9e: 03:8a:8d:16:be:a4:e1:ed:be:72:fa:bb:49:20:ee: 3e:e4:0f:91:13:a8:7c:25:cc:f8:93:ed:aa:4e:21: 55:5b:3d:43:5d:c7:ed:05:1e:97:03:da:f9:fb:7f: d3:ff:a6:4e:83:6e:e8:a9:8e:9d:f9:96:6e:24:be: 6a:06:66:3d:6a:ab:68:d8:37:3c:16:9a:7b:37:cf: c7:7d:3b:ea:96:2d:bf:e6:bd:17:7e:a3:ca:01:11: 2b:a8:da:6a:7c:a1:b9:5f:57:27:19:1a:65:3f:1b: 26:64:a3:06:b3:45:0d:9c:44:f0:d7:91:3b:55:5d: 4b:d5:36:08:cb:8a:5d:0e:80:53:7b:eb:9e:9e:24: 6a:cc:0b:3a:07:61:8f:c3:2e:bd:79:a1:f2:d9:c6: 34:a6:f1:66:38:e9:16:1e:40:c4:d9:ed:6d:72:b8: 08:79:73:ed:4d:6b:63:43:04:b9:65:33:f4:02:38: bb:24:d0:47:54:68:7e:9d:da:7f:b4:d2:7f:20:44: a3:3a:99:dc:5b:e0:d4:7d:fb:f7:74:0c:2c:fd:43: fb:fe:92:81:8b:fc:72:3c:29:f1:85:fe:f4:5c:c6: 82:9b:f5:da:3e:4b:ac:02:83:a9:b0:eb:4f:6a:be: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:08:33:41:08:6F:C8:78:8D:2E:FF:30:67:BB:07:8F:ED:2D:E3:68 X509v3 Authority Key Identifier: keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:29:cf:76:4e:8b:50:32:0b:3b:f7:40:3c:12:d3:c0:cf:fe: 6a:0a:e7:1a:56:79:0b:b9:0d:fe:7d:03:66:19:13:18:b7:e7: a2:bf:9c:5c:24:09:fe:1c:6a:37:76:c1:da:ca:ba:e1:40:2c: cd:3a:74:da:cf:85:8d:cb:50:be:99:20:da:0a:33:38:80:8c: 2e:a3:d7:cc:0a:76:fd:fd:a6:72:36:ec:30:5a:89:01:4e:04: e6:69:22:ff:e1:46:fc:1f:7b:71:14:f2:31:f1:b9:dd:d5:14: f4:76:bb:a8:08:33:20:03:c3:d8:38:6a:44:da:9b:63:bb:a4: 2c:bc:88:28:37:82:58:2a:5d:5e:84:2e:a6:c8:8e:ca:de:a8: aa:d5:e0:b5:11:14:49:73:df:fa:54:56:04:af:37:03:be:7a: 8b:c0:c4:2b:31:dd:24:f9:2c:bf:6e:a1:b1:63:db:8f:67:82: 39:40:49:b1:cd:f2:3c:cd:6b:56:97:62:61:fb:df:ed:1d:3e: ec:b9:8b:95:6f:9d:25:d9:26:f4:d1:dd:5f:19:83:52:35:a8: 90:7b:e8:29:7c:de:79:f0:d1:7b:6c:4d:7f:2a:fd:4b:be:75: 7f:28:d9:f7:40:77:81:95:d3:b1:fc:df:14:62:1a:b2:4b:85: 6a:ea:a6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZENPMzuwbaJHenxShHZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1 OGIzZTcwHhcNMjUxMjE2MDkwMTAzWhcNMjUxMjE3MDkwMTAzWjAzMTEwLwYDVQQD EyhhZDA4MzM0MTA4NmZjODc4OGQyZWZmMzA2N2JiMDc4ZmVkMmRlMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkETXFQ7LyZxxZusAJJ4Dio0WvqTh 7b5y+rtJIO4+5A+RE6h8Jcz4k+2qTiFVWz1DXcftBR6XA9r5+3/T/6ZOg27oqY6d +ZZuJL5qBmY9aqto2Dc8Fpp7N8/HfTvqli2/5r0XfqPKARErqNpqfKG5X1cnGRpl PxsmZKMGs0UNnETw15E7VV1L1TYIy4pdDoBTe+ueniRqzAs6B2GPwy69eaHy2cY0 pvFmOOkWHkDE2e1tcrgIeXPtTWtjQwS5ZTP0Aji7JNBHVGh+ndp/tNJ/IESjOpnc W+DUffv3dAws/UP7/pKBi/xyPCnxhf70XMaCm/XaPkusAoOpsOtPar52FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0IM0EIb8h4jS7/MGe7B4/tLeNoMB8GA1UdIwQY MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtinPdk6L UDILO/dAPBLTwM/+agrnGlZ5C7kN/n0DZhkTGLfnor+cXCQJ/hxqN3bB2sq64UAs zTp02s+FjctQvpkg2gozOICMLqPXzAp2/f2mcjbsMFqJAU4E5mki/+FG/B97cRTy MfG53dUU9Ha7qAgzIAPD2DhqRNqbY7ukLLyIKDeCWCpdXoQupsiOyt6oqtXgtREU SXPf+lRWBK83A756i8DEKzHdJPksv26hsWPbj2eCOUBJsc3yPM1rVpdiYfvf7R0+ 7LmLlW+dJdkm9NHdXxmDUjWokHvoKXzeefDRe2xNfyr9S751fyjZ90B3gZXTsfzf FGIaskuFauqmJg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:11:35 2025 by rpki-client