This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json) Hash identifier: GRtf+EL5HzAzKCOV+IdwXoP4hCPiO59BJiB9DkX4J5I= Subject key identifier: 63:2B:86:26:B3:4C:74:99:05:37:4C:51:94:5F:81:15:49:BC:0D:2D Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Certificate serial: 019B34C45B2D875F386C8B256ED6CB7786C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft Manifest number: 066F Signing time: Fri 19 Dec 2025 04:00:42 +0000 Manifest this update: Fri 19 Dec 2025 04:00:42 +0000 Manifest next update: Sat 20 Dec 2025 04:00:42 +0000 Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: 6pShPhL+jb+EWqk3PO3VQgWBOR+4SUa7vtSb63/PZro=) 2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:5b:2d:87:5f:38:6c:8b:25:6e:d6:cb:77:86:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Validity Not Before: Dec 19 04:00:42 2025 GMT Not After : Dec 20 04:00:42 2025 GMT Subject: CN=632b8626b34c749905374c51945f811549bc0d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:c7:54:5a:63:e2:a5:48:f6:d0:cf:23:e1: 0a:ce:cc:c5:b0:77:bb:7e:d0:61:c8:89:82:73:ed: c7:38:f6:c3:9b:a6:0b:64:f3:da:f2:df:bd:35:c4: 5a:1f:47:72:24:cb:04:32:5b:b3:d7:61:eb:fc:48: 23:b6:75:1f:5a:0f:52:d0:b5:dd:07:ad:10:e6:b2: 30:b3:26:a6:e3:cb:f9:0d:c1:b3:ae:17:3d:7e:73: 6d:91:d8:7f:c3:6c:0d:f2:4f:0c:00:c9:8e:fd:af: 24:75:58:43:9c:a8:8b:46:b3:10:1f:aa:6f:85:5d: 57:15:be:01:e8:58:e3:eb:be:54:48:9e:c1:53:29: 32:da:7c:26:f9:43:83:ec:6e:b0:b9:52:18:df:82: 68:ee:a8:1f:b2:e3:dc:7c:96:1a:ea:69:44:2b:81: 9d:15:98:49:b6:d9:65:61:8f:48:c8:9c:0d:e1:38: fa:2f:14:1e:7e:f5:93:bd:05:98:36:49:0f:eb:92: 93:7a:14:6a:07:e0:45:18:37:10:cb:b7:e6:ec:41: b8:4c:de:82:88:b4:fd:48:24:17:10:48:d7:f9:b3: 58:71:3b:e0:e1:97:7d:34:f7:9c:ce:42:f3:7e:d9: 35:8b:b9:23:47:d9:d8:af:e6:1b:06:65:c6:8d:94: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:86:26:B3:4C:74:99:05:37:4C:51:94:5F:81:15:49:BC:0D:2D X509v3 Authority Key Identifier: keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2a:d4:a8:c8:5e:8d:df:41:cd:67:e6:82:7b:99:f1:2c:a9: fa:7a:70:2c:f0:53:60:06:a4:9f:cb:ce:16:c8:ca:dd:47:28: e4:1b:59:2b:b1:89:ff:ba:5b:dd:f0:1b:1c:78:17:f3:98:62: f8:60:d2:cb:42:12:9d:41:5e:cc:e9:4b:ae:5a:9b:7b:6f:30: 71:a0:16:4b:c9:ba:33:96:db:06:12:ff:d2:7f:3d:a8:4d:92: 89:a9:ca:17:0e:1f:bd:5e:67:49:bd:a6:1b:6e:a1:f0:02:22: 93:54:95:68:8c:37:87:bd:4d:25:c9:3a:bc:9a:a6:a5:dc:3f: 2c:20:81:f7:da:ec:46:ea:4e:f8:26:51:71:fb:5d:92:4e:c3: 25:2e:20:36:70:61:e4:94:64:76:94:67:a8:2b:0b:f9:58:1b: c2:16:70:89:80:31:ca:54:b3:d9:08:0c:e0:fb:d1:3a:71:c7: 28:e3:96:7f:d2:a7:17:bb:fb:4e:52:21:d2:07:ec:d6:3a:3e: af:d1:f9:21:8b:60:e2:45:3b:fc:b5:fd:11:02:96:a2:70:bc: 3f:04:9c:35:f9:07:c8:30:b9:66:63:e0:bf:ff:c4:2e:47:1c: 04:88:b8:d7:57:d3:24:8a:50:88:a6:bd:43:dc:db:5f:bd:38: b0:80:d1:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFsth184bIslbtbLd4bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZmYzU0ZTJkMjQxZjQ0MWFkMDNjYzE4ZTMzMWJmZTM0 YTU3ZWYwHhcNMjUxMjE5MDQwMDQyWhcNMjUxMjIwMDQwMDQyWjAzMTEwLwYDVQQD Eyg2MzJiODYyNmIzNGM3NDk5MDUzNzRjNTE5NDVmODExNTQ5YmMwZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMHHVFpj4qVI9tDPI+EKzszFsHe7 ftBhyImCc+3HOPbDm6YLZPPa8t+9NcRaH0dyJMsEMluz12Hr/EgjtnUfWg9S0LXd B60Q5rIwsyam48v5DcGzrhc9fnNtkdh/w2wN8k8MAMmO/a8kdVhDnKiLRrMQH6pv hV1XFb4B6Fjj675USJ7BUyky2nwm+UOD7G6wuVIY34Jo7qgfsuPcfJYa6mlEK4Gd FZhJttllYY9IyJwN4Tj6LxQefvWTvQWYNkkP65KTehRqB+BFGDcQy7fm7EG4TN6C iLT9SCQXEEjX+bNYcTvg4Zd9NPeczkLzftk1i7kjR9nYr+YbBmXGjZSVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMrhiazTHSZBTdMUZRfgRVJvA0tMB8GA1UdIwQY MBaAFEFm/FTi0kH0Qa0DzBjjMb/jSlfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTct ZjExYzZlMDY0ODhmLzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTctZjExYzZlMDY0ODhm LzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACirUqMhe jd9BzWfmgnuZ8Syp+npwLPBTYAakn8vOFsjK3Uco5BtZK7GJ/7pb3fAbHHgX85hi +GDSy0ISnUFezOlLrlqbe28wcaAWS8m6M5bbBhL/0n89qE2SianKFw4fvV5nSb2m G26h8AIik1SVaIw3h71NJck6vJqmpdw/LCCB99rsRupO+CZRcftdkk7DJS4gNnBh 5JRkdpRnqCsL+VgbwhZwiYAxylSz2QgM4PvROnHHKOOWf9KnF7v7TlIh0gfs1jo+ r9H5IYtg4kU7/LX9EQKWonC8PwScNfkHyDC5ZmPgv//ELkccBIi411fTJIpQiKa9 Q9zbX704sIDR8A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:07:14 2025 by rpki-client