This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json) Hash identifier: ujlwhkxRoP1/GySxmftZxo1h0COtsTY8XbB10M2vcc8= Subject key identifier: EB:E2:A3:BC:5F:45:EE:37:69:17:C5:17:FC:CB:B9:98:07:6A:64:5C Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4 Certificate serial: 019B2F3054B12F63392FC62F73D5D08A9BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft Manifest number: 096E Signing time: Thu 18 Dec 2025 02:00:54 +0000 Manifest this update: Thu 18 Dec 2025 02:00:54 +0000 Manifest next update: Fri 19 Dec 2025 02:00:54 +0000 Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: 8AnwMnMH2cHZRfUU09bdL5ANAH0bGGWdkM6MzbagRes=) 2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=) 3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:54:b1:2f:63:39:2f:c6:2f:73:d5:d0:8a:9b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4 Validity Not Before: Dec 18 02:00:54 2025 GMT Not After : Dec 19 02:00:54 2025 GMT Subject: CN=ebe2a3bc5f45ee376917c517fccbb998076a645c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:38:16:94:b1:ed:e3:9f:a3:dc:c8:d5:3e: e4:a2:d7:81:3b:02:cf:a0:d0:40:88:51:56:9e:93: 7f:46:1f:ef:c4:b8:8c:58:eb:f2:73:0c:11:fd:d1: 18:50:dd:e8:b6:67:fe:f9:af:96:29:43:6a:b7:b6: 88:60:c0:a2:d9:3b:cd:e3:d0:26:7b:e6:8a:3a:e9: bb:c7:89:ec:5d:b0:50:ac:ee:57:15:21:7e:7e:2a: 6a:d6:e5:16:e3:a0:74:dc:f2:24:53:51:aa:7e:71: 4a:51:1c:b3:bf:89:7b:7f:f2:0b:c2:26:37:35:d7: 84:87:5b:66:48:6e:b7:97:58:d4:7d:13:4c:a9:80: a1:18:63:50:e5:10:0e:12:cf:4d:ea:e8:75:ab:b7: 61:c9:ef:bb:39:06:0e:dc:70:36:ad:b3:90:ec:5f: c8:4b:d8:5a:c3:44:84:89:3f:fe:6e:c1:78:21:32: e4:b8:ea:a9:41:60:3d:50:82:72:4a:ea:68:20:2b: 74:99:1e:07:19:d7:ab:a1:4f:98:91:dc:c8:21:83: bf:57:df:0d:f9:86:df:88:20:b0:32:a2:a0:8b:23: 26:e5:67:14:72:3e:01:99:df:0e:f4:89:b9:f5:ba: 2e:6c:4c:91:a0:df:53:be:3d:dc:c7:5a:4d:90:ac: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E2:A3:BC:5F:45:EE:37:69:17:C5:17:FC:CB:B9:98:07:6A:64:5C X509v3 Authority Key Identifier: keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:a7:cc:08:c8:39:24:ea:21:f5:03:44:fe:b5:49:2c:e2: 97:2e:e8:9a:70:cd:ac:51:23:90:ed:7f:35:c3:34:4b:b7:4f: b2:21:02:82:f4:fc:7a:00:2d:a9:30:b8:8e:e4:39:d2:d6:39: af:52:2b:03:7e:22:f5:26:09:fa:98:e2:92:4d:6a:16:b7:24: fe:7d:9b:ac:44:e2:ea:b8:01:10:61:11:b4:b9:19:40:7c:e5: 20:df:b0:69:b9:08:5c:04:ad:6c:75:d9:fc:5f:dc:9c:ee:f1: 92:bb:9f:45:1d:96:a9:b2:68:a4:df:d5:f2:2c:cf:47:29:29: c9:62:2d:7e:1c:3e:94:f7:9b:73:b5:3a:af:12:fa:d6:9e:4c: f2:5d:7f:9a:04:ed:87:64:fb:bf:69:4b:10:6a:78:19:f5:2f: 36:d0:d0:29:a5:28:55:98:92:84:e4:b5:9d:d2:53:27:3e:72: fa:c7:8f:28:bf:05:68:1c:df:86:b3:8c:6d:31:16:eb:88:d0: 7a:30:60:db:95:43:b4:7a:6c:96:2e:71:b4:73:5a:c9:a4:34: c6:d8:af:29:b0:c6:0c:b9:5d:4c:81:20:98:a8:86:5b:53:ac: 95:0d:81:83:0b:be:d1:90:a5:f8:f8:69:47:5f:be:b1:c6:e7: ca:35:2d:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFSxL2M5L8Yvc9XQipviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi ZmNkZTQwHhcNMjUxMjE4MDIwMDU0WhcNMjUxMjE5MDIwMDU0WjAzMTEwLwYDVQQD EyhlYmUyYTNiYzVmNDVlZTM3NjkxN2M1MTdmY2NiYjk5ODA3NmE2NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNA4FpSx7eOfo9zI1T7koteBOwLP oNBAiFFWnpN/Rh/vxLiMWOvycwwR/dEYUN3otmf++a+WKUNqt7aIYMCi2TvN49Am e+aKOum7x4nsXbBQrO5XFSF+fipq1uUW46B03PIkU1GqfnFKURyzv4l7f/ILwiY3 NdeEh1tmSG63l1jUfRNMqYChGGNQ5RAOEs9N6uh1q7dhye+7OQYO3HA2rbOQ7F/I S9haw0SEiT/+bsF4ITLkuOqpQWA9UIJySupoICt0mR4HGderoU+YkdzIIYO/V98N +YbfiCCwMqKgiyMm5WcUcj4Bmd8O9Im59boubEyRoN9Tvj3cx1pNkKwTQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvio7xfRe43aRfFF/zLuZgHamRcMB8GA1UdIwQY MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6inzAjI OSTqIfUDRP61SSzily7omnDNrFEjkO1/NcM0S7dPsiECgvT8egAtqTC4juQ50tY5 r1IrA34i9SYJ+pjikk1qFrck/n2brETi6rgBEGERtLkZQHzlIN+wabkIXAStbHXZ /F/cnO7xkrufRR2WqbJopN/V8izPRykpyWItfhw+lPebc7U6rxL61p5M8l1/mgTt h2T7v2lLEGp4GfUvNtDQKaUoVZiShOS1ndJTJz5y+sePKL8FaBzfhrOMbTEW64jQ ejBg25VDtHpsli5xtHNayaQ0xtivKbDGDLldTIEgmKiGW1OslQ2Bgwu+0ZCl+Php R1++scbnyjUt+Q== -----END CERTIFICATE-----Generated at Thu Dec 18 06:35:18 2025 by rpki-client