This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json) Hash identifier: WVBTsAYIe4AaqFJAW0Zth/KW/ZJPeaK1POnf+cvGZiM= Subject key identifier: 0B:D8:D1:59:60:53:75:92:E9:12:A5:AC:3B:E3:91:08:D8:97:AE:DA Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Certificate serial: 019B44A5490EA29A0CD8A205DBC32DDD88D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 06:00:41 +0000 Manifest this update: Mon 22 Dec 2025 06:00:41 +0000 Manifest next update: Tue 23 Dec 2025 06:00:41 +0000 Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=) 2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: VhXif7+1xWFmCHJ68RSB+w7lj890TF5lNjPUj/fgjg0=) 3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:49:0e:a2:9a:0c:d8:a2:05:db:c3:2d:dd:88:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Validity Not Before: Dec 22 06:00:41 2025 GMT Not After : Dec 23 06:00:41 2025 GMT Subject: CN=0bd8d15960537592e912a5ac3be39108d897aeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:1c:29:f0:ed:f3:c4:05:ba:87:f4:1b:0d: 2b:6d:9e:3d:96:71:b7:b3:83:df:d9:c2:10:ee:1c: 6a:1a:d2:90:e2:dd:77:cc:42:5e:34:dc:d9:01:0b: 46:19:62:4d:12:0f:bf:05:97:78:97:0e:74:e5:18: 9d:9f:b8:e4:81:53:df:44:c0:36:61:a3:7c:2c:cd: e7:ab:94:4f:b6:6b:7c:4e:93:6c:00:54:1c:23:a6: 67:08:86:6c:aa:e5:76:59:62:47:1c:f5:4d:f3:04: d3:d5:ba:02:e8:90:e1:87:3c:02:60:20:59:29:ac: 3b:ef:ce:60:32:64:cf:79:bf:c3:57:c2:15:05:44: 10:26:92:a7:f9:15:05:0f:a0:82:40:f7:28:84:3c: 33:8e:43:b0:be:d0:c0:bd:9d:e8:e4:d4:49:3d:55: 9b:4c:34:2d:66:4b:cf:6f:95:df:9f:23:1a:2d:91: a0:54:d7:72:dc:f4:dc:43:f1:66:d4:60:4c:d6:45: 11:71:d3:a1:2d:ca:12:27:07:9f:fc:3f:b9:2a:34: a5:52:97:42:7a:1e:0a:a2:6a:83:aa:2b:59:97:fa: 0d:68:9b:44:dc:d1:8d:52:8a:7f:d7:87:f1:c1:bd: 38:8f:96:ab:5d:a0:13:bc:4f:67:15:30:9d:c4:14: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D8:D1:59:60:53:75:92:E9:12:A5:AC:3B:E3:91:08:D8:97:AE:DA X509v3 Authority Key Identifier: keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:00:cb:f2:f7:c8:5e:56:23:5f:1e:41:39:e6:3d:29:95:b1: 41:97:a2:92:c2:37:4f:42:87:d2:39:df:53:b0:cb:09:ad:fb: c9:8d:75:00:b1:a8:aa:b2:e2:54:f9:a3:bd:8a:90:a8:e7:75: 89:a4:b5:d9:bd:51:a4:24:c2:af:be:cc:ff:e9:36:44:0f:4e: 42:90:d1:d8:f2:67:59:98:06:e9:4c:eb:ce:70:02:2c:14:80: a0:d9:3a:6e:9b:c9:ec:f5:ce:92:1b:77:99:60:8b:e2:85:43: 7f:6d:c4:cd:28:49:99:c8:5a:4b:ec:de:1d:c0:1c:1a:d1:9b: c5:0d:d6:04:c2:61:58:ed:70:d5:5a:3d:dc:8b:27:d3:43:c0: 31:c3:55:ba:42:f7:43:4f:5a:ca:a3:2d:e4:33:b4:c5:6c:c2: 84:e8:9a:ac:a3:cd:5f:b0:be:06:64:9d:ff:74:80:eb:2b:be: 70:20:ee:af:5c:0c:52:bc:8d:2f:5c:38:e7:1e:e8:0f:8c:68: ec:ec:3f:d8:55:38:d9:d1:7e:17:03:16:f9:c6:cd:f2:11:0c: ee:8c:af:62:6f:c4:b5:d0:47:df:c9:fb:9a:55:81:08:2b:f6: 23:1b:11:c3:8f:6a:ac:82:0a:d8:0d:7f:8f:99:3f:12:f5:95: 34:ac:1e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpUkOopoM2KIF28Mt3YjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx YTI4YjkwHhcNMjUxMjIyMDYwMDQxWhcNMjUxMjIzMDYwMDQxWjAzMTEwLwYDVQQD EygwYmQ4ZDE1OTYwNTM3NTkyZTkxMmE1YWMzYmUzOTEwOGQ4OTdhZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoYcKfDt88QFuof0Gw0rbZ49lnG3 s4Pf2cIQ7hxqGtKQ4t13zEJeNNzZAQtGGWJNEg+/BZd4lw505Ridn7jkgVPfRMA2 YaN8LM3nq5RPtmt8TpNsAFQcI6ZnCIZsquV2WWJHHPVN8wTT1boC6JDhhzwCYCBZ Kaw7785gMmTPeb/DV8IVBUQQJpKn+RUFD6CCQPcohDwzjkOwvtDAvZ3o5NRJPVWb TDQtZkvPb5XfnyMaLZGgVNdy3PTcQ/Fm1GBM1kURcdOhLcoSJwef/D+5KjSlUpdC eh4KomqDqitZl/oNaJtE3NGNUop/14fxwb04j5arXaATvE9nFTCdxBRsFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvY0VlgU3WS6RKlrDvjkQjYl67aMB8GA1UdIwQY MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5 LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgDL8vfI XlYjXx5BOeY9KZWxQZeiksI3T0KH0jnfU7DLCa37yY11ALGoqrLiVPmjvYqQqOd1 iaS12b1RpCTCr77M/+k2RA9OQpDR2PJnWZgG6UzrznACLBSAoNk6bpvJ7PXOkht3 mWCL4oVDf23EzShJmchaS+zeHcAcGtGbxQ3WBMJhWO1w1Vo93Isn00PAMcNVukL3 Q09ayqMt5DO0xWzChOiarKPNX7C+BmSd/3SA6yu+cCDur1wMUryNL1w45x7oD4xo 7Ow/2FU42dF+FwMW+cbN8hEM7oyvYm/EtdBH38n7mlWBCCv2IxsRw49qrIIK2A1/ j5k/EvWVNKwesA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:03:17 2025 by rpki-client