This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json) Hash identifier: xI0OYZ8DYwEqKUCexWF9zvQvs5PyFXrC3/LAoVxBeUE= Subject key identifier: F6:0D:CA:FA:F9:E9:6B:BA:3F:49:CF:39:25:15:66:23:55:CF:62:8B Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7 Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7 Certificate serial: 019B41DB0F15FB66FF186D801770B651EF2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 17:00:33 +0000 Manifest this update: Sun 21 Dec 2025 17:00:33 +0000 Manifest next update: Mon 22 Dec 2025 17:00:33 +0000 Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: s4IWkMVJbroVLqkjfvEf1hhH3rtgtRBJdk5eFjOrEek=) 2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:0f:15:fb:66:ff:18:6d:80:17:70:b6:51:ef:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7 Validity Not Before: Dec 21 17:00:33 2025 GMT Not After : Dec 22 17:00:33 2025 GMT Subject: CN=f60dcafaf9e96bba3f49cf392515662355cf628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:d1:4a:53:da:f5:9b:83:ae:98:a0:d2:57: 2c:e1:6a:d2:ed:f7:81:b9:72:d0:96:75:cf:bb:ad: 08:08:49:dd:1b:56:f6:a0:e3:b1:de:6e:ee:a0:34: 4f:7e:7a:cc:97:41:5a:80:18:75:2c:be:3d:16:7b: 9c:5c:1b:20:cf:0d:a5:63:af:63:24:a6:5d:dc:5f: aa:dd:74:a8:05:f4:fc:81:19:7f:10:ac:ec:0b:18: c8:e4:e5:c3:5f:b2:f8:cc:cd:1a:9d:88:f2:fb:ad: 79:ec:f5:d8:03:18:02:93:b3:3f:c5:ac:4e:b7:21: 8f:77:36:49:59:6d:cc:9a:f8:56:8a:95:73:9b:9d: 3a:43:10:b3:51:45:c6:80:49:88:bb:37:dc:c8:67: 82:0e:00:d3:0f:03:75:d7:c9:14:ec:98:c4:2f:8a: b5:bc:e3:0a:4a:b9:3d:07:04:55:b2:2d:b2:46:a4: 58:6a:6a:e6:af:15:57:27:ef:5f:ad:f2:83:0c:d4: 83:f8:e1:3d:f8:cf:22:30:40:f8:0e:1c:6f:46:4c: e5:a3:70:82:24:a1:fe:c1:df:58:44:fe:e0:26:d8: 8d:16:df:8c:f0:6d:ae:28:63:4a:38:67:35:6d:c8: 74:50:d4:bc:22:dd:56:23:8e:ec:f4:a8:f9:d1:bf: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0D:CA:FA:F9:E9:6B:BA:3F:49:CF:39:25:15:66:23:55:CF:62:8B X509v3 Authority Key Identifier: keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ce:7d:eb:cc:e5:b7:65:bd:81:a3:c6:7a:c4:59:d0:65:da: 39:af:52:4c:82:21:0a:48:a0:68:c3:a2:ab:18:3e:74:a0:a3: 2c:7a:65:82:df:21:a6:21:71:32:83:24:6d:69:36:6f:56:b0: 30:d4:55:14:cb:f0:c3:e8:69:46:27:da:62:55:3c:e0:4f:c7: 7c:16:1a:42:04:6c:76:e0:57:ed:d7:bc:43:03:7e:f4:75:ce: a2:6d:b0:fe:a4:39:00:ab:68:a0:01:33:ba:86:0e:17:1f:13: 62:41:5e:73:c3:8b:60:5f:35:48:2e:e9:4a:30:f5:71:51:f1: 65:27:5b:69:a2:fd:67:b4:72:1f:5b:24:f4:02:04:18:5c:2e: 87:76:a8:8a:15:1d:ec:da:0c:06:54:aa:99:df:de:3f:bb:ee: b9:e9:a0:f7:f1:f1:ad:2a:e9:d9:62:fd:07:0f:36:a3:18:02: b0:94:cb:7e:dd:83:bc:3b:72:70:18:6a:c0:20:29:89:25:a8: 77:08:e3:9c:95:d8:a7:fb:28:3c:97:eb:6e:fb:2f:be:7d:f8: dc:0e:07:51:f2:6a:b5:aa:35:5c:b0:b6:c5:66:ae:f8:0a:26: 4d:48:f9:6e:77:b0:b3:6a:11:7f:08:e6:5e:9e:b4:5e:eb:4c: 90:e0:6c:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2w8V+2b/GG2AF3C2Ue8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWI0Y2Q0MGJhZTQ3ZDQ4ZjUxYzljY2NjNjA3Y2NlNTdj ZTAwZjcwHhcNMjUxMjIxMTcwMDMzWhcNMjUxMjIyMTcwMDMzWjAzMTEwLwYDVQQD EyhmNjBkY2FmYWY5ZTk2YmJhM2Y0OWNmMzkyNTE1NjYyMzU1Y2Y2MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hPRSlPa9ZuDrpig0lcs4WrS7feB uXLQlnXPu60ICEndG1b2oOOx3m7uoDRPfnrMl0FagBh1LL49FnucXBsgzw2lY69j JKZd3F+q3XSoBfT8gRl/EKzsCxjI5OXDX7L4zM0anYjy+6157PXYAxgCk7M/xaxO tyGPdzZJWW3MmvhWipVzm506QxCzUUXGgEmIuzfcyGeCDgDTDwN118kU7JjEL4q1 vOMKSrk9BwRVsi2yRqRYamrmrxVXJ+9frfKDDNSD+OE9+M8iMED4DhxvRkzlo3CC JKH+wd9YRP7gJtiNFt+M8G2uKGNKOGc1bch0UNS8It1WI47s9Kj50b9q4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYNyvr56Wu6P0nPOSUVZiNVz2KLMB8GA1UdIwQY MBaAFEIbTNQLrkfUj1HJzMxgfM5XzgD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEt ODRjY2YzNDIwMjg2LzEvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEtODRjY2YzNDIwMjg2 LzEvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU85968zl t2W9gaPGesRZ0GXaOa9STIIhCkigaMOiqxg+dKCjLHplgt8hpiFxMoMkbWk2b1aw MNRVFMvww+hpRifaYlU84E/HfBYaQgRsduBX7de8QwN+9HXOom2w/qQ5AKtooAEz uoYOFx8TYkFec8OLYF81SC7pSjD1cVHxZSdbaaL9Z7RyH1sk9AIEGFwuh3aoihUd 7NoMBlSqmd/eP7vuuemg9/HxrSrp2WL9Bw82oxgCsJTLft2DvDtycBhqwCApiSWo dwjjnJXYp/soPJfrbvsvvn343A4HUfJqtao1XLC2xWau+AomTUj5bnews2oRfwjm Xp60XutMkOBsgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:43 2025 by rpki-client