This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json) Hash identifier: HSHR6UXruEOlkJMSHZPXX2RiwoX1CyNcMKLBA33jvMw= Subject key identifier: D4:0D:D4:0F:20:90:A8:5D:59:58:46:EE:0C:A6:4B:F1:DF:E8:A2:BC Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Certificate serial: 019B2175E45D8AE1D876A15463FDE6BA9A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 10:02:12 +0000 Manifest this update: Mon 15 Dec 2025 10:02:12 +0000 Manifest next update: Tue 16 Dec 2025 10:02:12 +0000 Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=) 2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: M+7wLPMajfJKY9LuIR+E2yarlgPpggOhIfLARIyPyI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:e4:5d:8a:e1:d8:76:a1:54:63:fd:e6:ba:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Validity Not Before: Dec 15 10:02:12 2025 GMT Not After : Dec 16 10:02:12 2025 GMT Subject: CN=d40dd40f2090a85d595846ee0ca64bf1dfe8a2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:e7:9b:3b:85:57:dd:2b:29:48:9b:6d:12: 3f:67:67:b5:51:3d:e7:55:5d:73:76:c9:65:78:9a: 32:10:bf:98:bf:e1:7e:bb:95:20:6f:7f:73:2f:91: 64:7c:45:bb:eb:4f:e0:00:ad:9c:4b:53:d3:db:7f: 30:b8:38:cb:38:69:46:27:98:de:30:65:97:fb:2e: 22:ee:24:af:26:d4:67:5a:45:ef:62:41:45:d8:7c: 6a:06:d6:11:8e:c2:75:39:58:13:d0:e7:ed:3d:13: ad:9d:b7:c0:ff:81:43:bc:4e:a6:8c:b6:22:39:30: 1f:cd:ac:e6:25:fd:a3:c9:1e:06:1e:1b:a9:49:2e: 2f:56:68:cf:36:bc:05:0d:6e:8d:9b:cf:3d:c3:ea: 87:31:52:b6:62:87:e7:4f:b3:0e:59:29:85:96:d9: a5:fa:81:54:6d:1e:bd:17:35:07:b2:0d:9f:f1:0e: 07:64:08:33:96:03:94:e6:da:be:da:4c:4b:f9:df: c3:70:47:35:1c:ff:ca:b0:6b:08:77:3e:76:a7:3e: eb:82:30:c3:aa:a7:15:43:b0:b6:be:d3:8f:81:e3: 8a:30:e5:58:84:a7:17:ab:62:ae:9d:9a:25:c4:73: 85:84:15:c7:25:f7:e4:ff:48:6e:b4:d7:a7:aa:57: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:D4:0F:20:90:A8:5D:59:58:46:EE:0C:A6:4B:F1:DF:E8:A2:BC X509v3 Authority Key Identifier: keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9b:05:4b:04:85:e5:48:f1:a8:c5:c9:41:3f:c4:d1:ec:30: 92:63:e1:12:67:fb:bd:38:b2:cc:84:28:08:d8:9c:52:38:32: 3e:92:d1:71:c0:85:bc:bb:d1:3c:d9:92:9f:93:b4:e8:39:bc: 41:52:e5:1a:76:79:ff:20:1a:e8:25:e6:05:e6:18:c8:60:af: 0f:0a:42:e8:9c:3f:52:aa:bc:45:32:82:dd:e1:e8:d0:78:fb: 2c:18:1b:56:08:33:60:e6:18:8e:96:c9:8f:4e:80:1f:da:26: 96:5d:16:da:19:9f:91:e6:34:3c:63:8a:19:68:24:3b:f8:1d: f5:65:84:32:4c:97:b8:16:72:dd:42:ef:78:d5:c5:60:e0:ee: 05:d9:8b:f8:4c:65:0c:79:f2:db:d2:cd:bb:a2:2f:bb:95:ee: e0:fb:e4:18:97:35:f6:0f:ff:24:0e:e6:3c:11:ed:32:30:5f: a9:45:5c:93:08:9a:38:67:da:9d:e5:0e:4d:fd:99:c8:a2:79: 1f:9f:2d:e7:34:4b:ee:4e:c5:03:06:6e:3b:54:b0:65:28:ef: 28:82:b7:84:f2:93:25:a6:3c:0b:21:f6:a7:84:1d:f3:8e:e2: b6:34:b2:cf:bb:43:91:d2:3c:e9:85:10:46:ca:23:63:45:cf: e6:a4:fe:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdeRdiuHYdqFUY/3muppzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh Y2I0NGQwHhcNMjUxMjE1MTAwMjEyWhcNMjUxMjE2MTAwMjEyWjAzMTEwLwYDVQQD EyhkNDBkZDQwZjIwOTBhODVkNTk1ODQ2ZWUwY2E2NGJmMWRmZThhMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueXnmzuFV90rKUibbRI/Z2e1UT3n VV1zdslleJoyEL+Yv+F+u5Ugb39zL5FkfEW760/gAK2cS1PT238wuDjLOGlGJ5je MGWX+y4i7iSvJtRnWkXvYkFF2HxqBtYRjsJ1OVgT0OftPROtnbfA/4FDvE6mjLYi OTAfzazmJf2jyR4GHhupSS4vVmjPNrwFDW6Nm889w+qHMVK2YofnT7MOWSmFltml +oFUbR69FzUHsg2f8Q4HZAgzlgOU5tq+2kxL+d/DcEc1HP/KsGsIdz52pz7rgjDD qqcVQ7C2vtOPgeOKMOVYhKcXq2KunZolxHOFhBXHJffk/0hutNenqldBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQN1A8gkKhdWVhG7gymS/Hf6KK8MB8GA1UdIwQY MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZsFSwSF 5UjxqMXJQT/E0ewwkmPhEmf7vTiyzIQoCNicUjgyPpLRccCFvLvRPNmSn5O06Dm8 QVLlGnZ5/yAa6CXmBeYYyGCvDwpC6Jw/Uqq8RTKC3eHo0Hj7LBgbVggzYOYYjpbJ j06AH9omll0W2hmfkeY0PGOKGWgkO/gd9WWEMkyXuBZy3ULveNXFYODuBdmL+Exl DHny29LNu6Ivu5Xu4PvkGJc19g//JA7mPBHtMjBfqUVckwiaOGfaneUOTf2ZyKJ5 H58t5zRL7k7FAwZuO1SwZSjvKIK3hPKTJaY8CyH2p4Qd847itjSyz7tDkdI86YUQ RsojY0XP5qT+HQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:12:13 2025 by rpki-client