This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json) Hash identifier: ENbtf5D25wb8mdfzxcouGyuaV1EZ5kn0W2qpbhfO9I8= Subject key identifier: 36:06:73:E6:5D:AD:1D:3E:12:06:90:AC:C5:95:34:62:AA:81:7F:7E Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2 Certificate serial: 019B43C9C936DF7F871D5424F90B793103A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:00:56 +0000 Manifest this update: Mon 22 Dec 2025 02:00:56 +0000 Manifest next update: Tue 23 Dec 2025 02:00:56 +0000 Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=) 2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: tHRCj/Q8MT2t3EvZSMjZf1QLub3ER1z3dbH7TIGD63c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:c9:36:df:7f:87:1d:54:24:f9:0b:79:31:03:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2 Validity Not Before: Dec 22 02:00:56 2025 GMT Not After : Dec 23 02:00:56 2025 GMT Subject: CN=360673e65dad1d3e120690acc5953462aa817f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:aa:a4:2c:4a:0d:70:5d:84:2f:9b:e3:49: 10:6a:11:26:9f:06:98:6e:a9:dd:8e:cd:ea:a1:b4: 4d:32:01:ee:cf:5c:3b:aa:cc:98:e1:68:fa:67:db: c8:17:70:e8:6f:a0:01:a8:16:45:76:db:ba:24:9c: b1:61:d8:22:04:85:fb:3d:6c:eb:50:65:a8:9e:f9: 2b:5b:38:32:db:7e:4d:f9:b8:4a:19:45:37:c2:18: bb:27:df:aa:8e:08:60:ee:cf:a9:fc:a0:e4:48:e0: be:f2:72:3f:99:54:76:2c:65:c8:f4:80:4d:a3:7a: b5:92:74:09:34:7c:d0:b6:de:ba:56:32:06:36:f0: 6b:09:ad:54:d0:1e:43:2f:9d:70:80:7c:f7:4b:50: 68:9a:aa:c4:cd:e8:ec:56:bc:0a:dc:68:f5:81:15: 23:29:4d:30:30:40:13:13:22:e3:6e:57:5a:00:1a: 11:98:d0:27:4e:a4:03:84:64:be:a3:f9:bc:0c:ed: 55:47:dc:c8:18:2a:02:22:16:aa:d3:b5:c7:24:f2: 77:f4:cb:21:74:44:76:45:f6:cd:8b:25:4e:ab:44: 48:b3:87:97:13:a8:4c:18:55:62:28:8d:79:5b:30: 6f:8b:55:b7:1c:cc:29:19:b8:7f:47:e3:43:c3:e2: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:06:73:E6:5D:AD:1D:3E:12:06:90:AC:C5:95:34:62:AA:81:7F:7E X509v3 Authority Key Identifier: keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d9:60:6b:d8:ad:78:dc:c2:6b:57:a6:82:b9:83:6f:a1:a8: c1:89:01:95:52:6b:00:f3:3d:09:e5:e7:b6:b2:d8:80:5a:d0: 75:b3:43:99:6d:5a:42:ba:26:7b:4f:1a:82:25:c9:4d:66:aa: 98:b8:cf:75:5c:ee:f7:23:9a:e4:69:10:02:ba:2c:f1:36:23: bf:76:f1:2e:30:a0:08:32:d2:60:9d:91:44:29:5a:07:d0:e3: 0e:9e:d6:45:2c:ec:13:35:d4:da:03:4d:79:c7:20:db:9d:c4: cf:f8:bc:8d:ff:93:03:8a:dd:d8:e8:e5:5e:1f:f7:d5:4a:36: 91:e5:dd:ab:a1:9a:fc:ec:f1:38:60:63:b3:b6:d9:7d:3a:0d: 49:14:f9:e7:96:de:fb:f6:3a:da:b8:56:cf:19:18:17:4d:b2: 3b:dc:bc:63:97:c3:67:f4:85:e3:b4:1d:84:48:35:b4:07:40: 9f:cc:92:87:84:5d:e0:26:0c:5a:06:8c:9c:12:c4:02:44:0f: 9e:b4:ab:6d:2f:93:dc:8c:22:62:32:5d:df:68:0e:45:4b:32: a8:72:16:32:24:a5:b6:68:2b:db:b7:f1:21:88:cf:40:40:88: 65:18:b0:44:2f:ba:3f:52:31:0e:0b:36:a6:e1:3b:38:46:58: 2d:a7:fe:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyck233+HHVQk+Qt5MQOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj MzkzYjIwHhcNMjUxMjIyMDIwMDU2WhcNMjUxMjIzMDIwMDU2WjAzMTEwLwYDVQQD EygzNjA2NzNlNjVkYWQxZDNlMTIwNjkwYWNjNTk1MzQ2MmFhODE3ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WqpCxKDXBdhC+b40kQahEmnwaY bqndjs3qobRNMgHuz1w7qsyY4Wj6Z9vIF3Dob6ABqBZFdtu6JJyxYdgiBIX7PWzr UGWonvkrWzgy235N+bhKGUU3whi7J9+qjghg7s+p/KDkSOC+8nI/mVR2LGXI9IBN o3q1knQJNHzQtt66VjIGNvBrCa1U0B5DL51wgHz3S1BomqrEzejsVrwK3Gj1gRUj KU0wMEATEyLjbldaABoRmNAnTqQDhGS+o/m8DO1VR9zIGCoCIhaq07XHJPJ39Msh dER2RfbNiyVOq0RIs4eXE6hMGFViKI15WzBvi1W3HMwpGbh/R+NDw+IA0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYGc+ZdrR0+EgaQrMWVNGKqgX9+MB8GA1UdIwQY MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNlga9it eNzCa1emgrmDb6GowYkBlVJrAPM9CeXntrLYgFrQdbNDmW1aQrome08agiXJTWaq mLjPdVzu9yOa5GkQAros8TYjv3bxLjCgCDLSYJ2RRClaB9DjDp7WRSzsEzXU2gNN eccg253Ez/i8jf+TA4rd2OjlXh/31Uo2keXdq6Ga/OzxOGBjs7bZfToNSRT555be +/Y62rhWzxkYF02yO9y8Y5fDZ/SF47QdhEg1tAdAn8ySh4Rd4CYMWgaMnBLEAkQP nrSrbS+T3IwiYjJd32gORUsyqHIWMiSltmgr27fxIYjPQECIZRiwRC+6P1IxDgs2 puE7OEZYLaf+vQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:27 2025 by rpki-client