This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json) Hash identifier: Tev/hyX30q0FoPYHiJGieX6ObJeOPK3gH0/GvvDLNEI= Subject key identifier: 73:49:DF:80:39:4F:75:9E:22:6D:D5:F3:03:73:92:CF:42:F3:46:2C Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Certificate serial: 019B33B19A1A8951648E248AEDB24D7E212D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft Manifest number: 0446 Signing time: Thu 18 Dec 2025 23:00:35 +0000 Manifest this update: Thu 18 Dec 2025 23:00:35 +0000 Manifest next update: Fri 19 Dec 2025 23:00:35 +0000 Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: /Xtwj9y3Qzb0MPWT3B62OXq4ukdEqg3XqDKM7eXRV1A=) 2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:9a:1a:89:51:64:8e:24:8a:ed:b2:4d:7e:21:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Validity Not Before: Dec 18 23:00:35 2025 GMT Not After : Dec 19 23:00:35 2025 GMT Subject: CN=7349df80394f759e226dd5f3037392cf42f3462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:c6:96:cd:d2:c5:73:21:d1:59:6e:c0:bc: 75:57:25:72:c9:66:84:fe:66:d7:d3:53:b3:04:35: 7e:07:0f:e2:2e:01:67:ab:ac:a6:5a:63:d0:4d:9e: 49:6f:98:71:4f:7f:2b:30:52:f7:02:6d:fe:8b:83: 3b:f7:4e:eb:4c:95:f4:94:77:97:ac:d6:12:1e:06: a4:76:2f:16:04:b2:45:42:65:b1:17:e4:33:19:d5: be:68:b7:69:ee:f3:a6:ae:24:06:1a:31:44:0f:c9: df:35:1c:e5:31:d4:8f:25:b8:e7:0c:4f:80:3a:d8: fe:e1:81:84:54:41:08:b8:97:22:00:1f:9d:e8:83: 71:fe:35:18:d9:08:fb:ed:0e:30:eb:d9:9c:b0:1c: c0:ae:f7:95:ff:3d:ce:ac:a9:68:f5:63:0d:d7:fd: 17:27:4b:12:83:e2:00:bd:de:bc:35:3d:88:9b:0e: 54:b3:72:03:6d:dd:01:66:82:f9:c0:ec:ae:ac:8a: 24:56:be:a1:e3:36:0b:4a:72:78:74:56:38:da:ba: ba:9f:08:17:43:e9:40:f7:9b:76:f0:90:4f:8a:8d: 63:34:6c:0f:09:aa:eb:0a:07:bd:16:56:1b:0b:27: ce:53:7c:59:86:0c:1f:fa:2d:c6:46:bc:19:23:2b: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:49:DF:80:39:4F:75:9E:22:6D:D5:F3:03:73:92:CF:42:F3:46:2C X509v3 Authority Key Identifier: keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4e:6d:a1:c4:c0:0e:1c:a5:b1:c4:16:be:c4:a1:e4:7f:94: b1:3c:84:54:b8:87:71:b8:ea:18:16:0d:d9:8c:fd:b9:c7:da: bb:d2:ff:21:13:44:e8:58:e4:1f:ec:81:9f:81:b2:a2:86:87: e1:49:8e:b1:01:4e:29:21:ea:de:d1:5d:b8:33:3c:8f:96:32: 5f:85:fb:c2:9a:41:28:c3:93:fd:99:3b:be:bf:5a:f4:5e:10: 37:9e:74:1e:ab:b4:3e:6b:5d:56:a0:c1:4e:81:d7:3f:ca:1b: 65:e9:22:7a:d3:c6:9d:05:32:0d:d3:3f:c5:c0:6b:a6:f1:cd: ad:c6:7a:9c:81:82:5f:94:f4:af:6c:2a:a2:52:18:13:14:75: 70:0a:44:27:e2:13:53:04:6b:3e:9a:2c:51:95:2b:4b:8d:e1: f9:ad:3a:1d:fb:a3:8a:51:7e:98:7f:67:e9:e4:ab:23:66:a5: 9c:0d:d3:6a:06:d1:3d:a5:78:5a:74:57:13:fd:f7:6d:a2:d3: b5:d5:6a:02:e4:b6:3d:36:3d:50:db:a7:61:c6:10:9c:9d:bb: 17:c5:3f:19:c3:57:e9:5b:9f:c1:4a:41:6d:a9:03:c0:db:24: 0d:96:79:aa:58:75:2d:b8:fe:ca:2f:a8:2c:bd:95:81:c9:ce: bb:9e:6e:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZoaiVFkjiSK7bJNfiEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMThmNTVhNmIwMzNiMjQ0Zjg2MTQ1YmQ5ZjBhNmYxNDAw YzFiZmYwHhcNMjUxMjE4MjMwMDM1WhcNMjUxMjE5MjMwMDM1WjAzMTEwLwYDVQQD Eyg3MzQ5ZGY4MDM5NGY3NTllMjI2ZGQ1ZjMwMzczOTJjZjQyZjM0NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7PGls3SxXMh0VluwLx1VyVyyWaE /mbX01OzBDV+Bw/iLgFnq6ymWmPQTZ5Jb5hxT38rMFL3Am3+i4M7907rTJX0lHeX rNYSHgakdi8WBLJFQmWxF+QzGdW+aLdp7vOmriQGGjFED8nfNRzlMdSPJbjnDE+A Otj+4YGEVEEIuJciAB+d6INx/jUY2Qj77Q4w69mcsBzArveV/z3OrKlo9WMN1/0X J0sSg+IAvd68NT2Imw5Us3IDbd0BZoL5wOyurIokVr6h4zYLSnJ4dFY42rq6nwgX Q+lA95t28JBPio1jNGwPCarrCge9FlYbCyfOU3xZhgwf+i3GRrwZIyu2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNJ34A5T3WeIm3V8wNzks9C80YsMB8GA1UdIwQY MBaAFEAY9VprAzskT4YUW9nwpvFADBv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAt NmUxNjlkNjVjOTExLzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAtNmUxNjlkNjVjOTEx LzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk5tocTA DhylscQWvsSh5H+UsTyEVLiHcbjqGBYN2Yz9ucfau9L/IRNE6FjkH+yBn4GyooaH 4UmOsQFOKSHq3tFduDM8j5YyX4X7wppBKMOT/Zk7vr9a9F4QN550Hqu0PmtdVqDB ToHXP8obZekietPGnQUyDdM/xcBrpvHNrcZ6nIGCX5T0r2wqolIYExR1cApEJ+IT UwRrPposUZUrS43h+a06HfujilF+mH9n6eSrI2alnA3TagbRPaV4WnRXE/33baLT tdVqAuS2PTY9UNunYcYQnJ27F8U/GcNX6VufwUpBbakDwNskDZZ5qlh1Lbj+yi+o LL2VgcnOu55ufw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:09 2025 by rpki-client