This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json) Hash identifier: Ti/EA9E559JiPCZFQGj06F0KWxivKoth2+1v38k+/Mk= Subject key identifier: 87:66:CC:80:16:9A:38:24:91:A3:3D:70:60:EB:06:6C:A1:2F:58:86 Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Certificate serial: 019B0521A20DDEA4D2202E9D41027EFD4420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft Manifest number: 0CC8 Signing time: Tue 09 Dec 2025 22:00:48 +0000 Manifest this update: Tue 09 Dec 2025 22:00:48 +0000 Manifest next update: Wed 10 Dec 2025 22:00:48 +0000 Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: uSvCaxHmPV5tGbsXRv6bY6ncLssc71ABcTPmuFtSBFA=) 2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=) 3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=) 4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:21:a2:0d:de:a4:d2:20:2e:9d:41:02:7e:fd:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Validity Not Before: Dec 9 22:00:48 2025 GMT Not After : Dec 10 22:00:48 2025 GMT Subject: CN=8766cc80169a382491a33d7060eb066ca12f5886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:c9:a9:62:ff:51:ac:a6:2b:53:b5:d0:ec: 29:35:52:8d:f8:23:52:0b:91:70:bf:a5:e1:7d:72: 1b:9d:27:0f:f8:7f:d6:0d:47:84:07:33:7f:93:7d: 8b:19:63:af:e7:ae:53:2b:12:c5:c0:1e:39:48:84: 2a:d6:75:72:9a:83:91:87:e6:e8:f2:a5:9b:fd:ed: df:95:fe:29:df:a9:eb:73:89:48:9d:cb:2f:32:53: 3d:1a:35:16:e8:f2:08:87:17:52:fb:0f:18:11:00: 46:71:7d:67:a3:03:67:66:5f:71:3c:36:28:f3:92: 0d:14:c7:cb:1e:71:2a:fd:73:39:04:18:0b:a4:fb: de:2a:79:02:e6:59:7b:57:74:e9:01:48:b2:c7:51: e8:6f:e8:19:b0:2d:00:fd:ad:da:a5:fe:bb:02:de: 75:4c:98:53:13:71:7c:02:47:08:a1:fc:78:d9:13: 7e:f4:70:05:f1:f5:29:c5:32:72:34:d2:e2:ad:51: a7:21:38:86:db:6a:5f:07:59:3e:aa:15:b1:59:27: d5:1b:cc:43:80:c4:16:b0:30:57:1f:1e:d5:c9:1b: e9:5e:fc:f7:cd:20:90:bf:b1:56:fb:e6:3a:b3:04: fd:f8:7e:3b:fa:9c:db:d3:e6:69:9d:8a:9b:b2:fd: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:66:CC:80:16:9A:38:24:91:A3:3D:70:60:EB:06:6C:A1:2F:58:86 X509v3 Authority Key Identifier: keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9a:0e:a8:11:7a:d9:65:fb:34:6a:d7:b1:e0:44:47:18:12: c4:d8:1e:25:d2:b9:4c:aa:89:39:4d:33:4c:24:b1:bc:e3:74: 9e:92:5e:bd:f1:1c:4e:10:68:dc:67:a3:b4:34:9e:cd:bc:cd: 97:8f:22:76:7b:6a:0d:11:20:44:9c:d7:96:e9:fe:cd:cf:48: 36:9d:d5:a7:57:c0:24:27:4f:a7:f4:11:d2:e6:da:39:2e:df: 64:8b:33:79:0d:04:fa:64:0f:5e:d2:a8:a4:5a:ae:0d:6d:6b: 31:07:5f:7e:13:d1:f6:30:19:25:e6:1e:aa:ec:6f:19:70:98: 6c:dc:21:89:74:2c:bc:04:ef:c4:33:93:00:a9:83:b8:00:6b: 4c:82:77:ab:60:40:30:2b:4c:4c:93:31:ae:cb:cc:17:5f:8d: b0:e7:66:70:ef:36:b2:06:45:81:00:95:94:37:1b:b7:cd:e0: a1:6a:83:27:a7:de:15:a9:19:47:3d:cf:6d:99:13:00:9d:9e: 07:d1:f5:7c:73:4b:5e:94:20:41:62:32:f9:9b:0a:af:07:05: a9:7d:c8:f8:45:f9:80:d8:1a:71:d4:25:c7:6b:9c:f1:84:25: 03:69:c9:99:c3:ee:7b:bb:d1:5a:6b:eb:91:8c:89:56:a8:fc: 4b:7b:5d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFIaIN3qTSIC6dQQJ+/UQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjUxMzQyZTA1ZDU4YjNiN2ZjOTNhMTVjYmExZWI3MWU1 NDIzODUwHhcNMjUxMjA5MjIwMDQ4WhcNMjUxMjEwMjIwMDQ4WjAzMTEwLwYDVQQD Eyg4NzY2Y2M4MDE2OWEzODI0OTFhMzNkNzA2MGViMDY2Y2ExMmY1ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32TJqWL/UaymK1O10OwpNVKN+CNS C5Fwv6XhfXIbnScP+H/WDUeEBzN/k32LGWOv565TKxLFwB45SIQq1nVymoORh+bo 8qWb/e3flf4p36nrc4lIncsvMlM9GjUW6PIIhxdS+w8YEQBGcX1nowNnZl9xPDYo 85INFMfLHnEq/XM5BBgLpPveKnkC5ll7V3TpAUiyx1Hob+gZsC0A/a3apf67At51 TJhTE3F8AkcIofx42RN+9HAF8fUpxTJyNNLirVGnITiG22pfB1k+qhWxWSfVG8xD gMQWsDBXHx7VyRvpXvz3zSCQv7FW++Y6swT9+H47+pzb0+ZpnYqbsv2vYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdmzIAWmjgkkaM9cGDrBmyhL1iGMB8GA1UdIwQY MBaAFEElE0LgXVizt/yToVy6HrceVCOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGIt YzM2NjhiNTAzYTFjLzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGItYzM2NjhiNTAzYTFj LzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepoOqBF6 2WX7NGrXseBERxgSxNgeJdK5TKqJOU0zTCSxvON0npJevfEcThBo3GejtDSezbzN l48idntqDREgRJzXlun+zc9INp3Vp1fAJCdPp/QR0ubaOS7fZIszeQ0E+mQPXtKo pFquDW1rMQdffhPR9jAZJeYequxvGXCYbNwhiXQsvATvxDOTAKmDuABrTIJ3q2BA MCtMTJMxrsvMF1+NsOdmcO82sgZFgQCVlDcbt83goWqDJ6feFakZRz3PbZkTAJ2e B9H1fHNLXpQgQWIy+ZsKrwcFqX3I+EX5gNgacdQlx2uc8YQlA2nJmcPue7vRWmvr kYyJVqj8S3td4A== -----END CERTIFICATE-----Generated at Wed Dec 10 07:53:58 2025 by rpki-client