This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json) Hash identifier: s1CXFY0bag4q37cyq7RmDQkkLvee7JuV5TNyg3i36qo= Subject key identifier: D4:E7:2E:2F:1F:51:21:DD:2F:71:86:3D:DD:0C:9B:BB:9E:B1:BC:02 Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Certificate serial: 019B5A1AA76B3995C7A66C482BC1C95B5837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft Manifest number: 1725 Signing time: Fri 26 Dec 2025 10:00:54 +0000 Manifest this update: Fri 26 Dec 2025 10:00:54 +0000 Manifest next update: Sat 27 Dec 2025 10:00:54 +0000 Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=) 2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: NQtnelW3rdyQ4wV+tquOijgfMQjBk8nlBOc1ih+x2F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a7:6b:39:95:c7:a6:6c:48:2b:c1:c9:5b:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Validity Not Before: Dec 26 10:00:54 2025 GMT Not After : Dec 27 10:00:54 2025 GMT Subject: CN=d4e72e2f1f5121dd2f71863ddd0c9bbb9eb1bc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:29:a0:91:96:4c:82:67:bd:09:d3:b3:c6:79: 97:90:3f:aa:64:b0:78:d5:f6:48:80:0a:32:7c:02: 49:24:26:f2:01:e1:ac:b3:06:59:ac:8d:c1:4c:de: d5:48:8e:b4:c5:94:77:b4:71:3c:10:20:c7:a5:89: 8a:02:c7:3e:83:fd:e9:03:f5:5c:64:2a:a0:84:51: 4f:d0:d6:6a:81:cd:c0:72:86:1b:67:3f:96:d1:6d: 8d:be:ab:01:ae:55:ab:31:fd:9d:bf:b6:1c:21:20: 68:1c:99:28:44:9b:65:8d:16:35:73:80:16:3d:ce: 20:b2:c0:c9:83:52:33:d0:4d:e5:fb:df:b7:98:b9: ca:94:9e:0e:2f:04:7e:e8:b9:19:07:a2:c4:88:ac: da:b7:eb:35:d7:2f:58:6d:34:79:6c:1f:ec:49:a0: ea:61:8a:dc:9e:a2:c4:3e:92:cc:03:92:84:71:88: ac:95:13:db:ce:3d:2d:fd:ed:3b:31:a8:d7:e4:2f: 24:eb:8b:f3:73:ba:c6:39:57:1d:88:20:b3:d8:8b: 33:ab:58:63:60:9e:07:b0:42:03:64:2a:4a:56:33: 8d:b8:3f:94:91:96:b9:a6:b0:8b:42:7e:3c:92:72: 9d:68:51:9b:f3:b0:b6:ae:a8:f0:2a:13:3e:da:46: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:2E:2F:1F:51:21:DD:2F:71:86:3D:DD:0C:9B:BB:9E:B1:BC:02 X509v3 Authority Key Identifier: keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:71:9c:40:80:34:65:90:2f:7f:2d:dd:ec:e3:84:de:d4:a0: 86:81:6e:1a:bf:94:76:a0:55:24:1b:8d:0d:65:41:23:0b:43: 1b:d9:4a:79:b5:72:0a:55:93:09:c0:c4:3e:6e:c7:27:af:2f: 41:61:07:76:e4:63:66:af:7a:9a:8b:af:ae:d0:a9:8e:64:f9: 43:19:55:97:50:23:7e:85:00:0f:2c:00:11:2b:30:72:3e:50: fb:bc:3e:17:84:21:24:08:ed:6d:12:a3:28:86:f9:5a:41:19: 4f:1c:31:c3:99:5f:e2:f1:41:d3:b5:f3:b4:d1:77:59:4d:55: a4:14:f1:31:7c:b2:0a:6d:ae:8a:d4:1e:14:31:11:b5:d8:f1: f3:9d:d8:a0:6f:fc:6d:96:75:23:fa:00:b3:53:72:d6:a1:f9: 76:5c:05:de:ba:6a:c7:43:31:75:41:aa:c2:c4:e7:13:76:5f: 73:b1:0a:de:be:b2:34:0d:dd:ee:f0:98:3d:5e:6c:0a:a8:8d: cb:34:49:7f:cc:7c:d5:56:84:de:96:ad:dc:c5:14:45:cc:83: ab:92:ab:84:0b:12:9a:e9:64:c7:29:a8:a3:e4:08:20:86:0b: 15:dc:4c:b4:2b:3d:eb:e2:97:dc:28:1f:65:11:15:49:98:27: 77:8c:9a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqdrOZXHpmxIK8HJW1g3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0 M2Q3YmEwHhcNMjUxMjI2MTAwMDU0WhcNMjUxMjI3MTAwMDU0WjAzMTEwLwYDVQQD EyhkNGU3MmUyZjFmNTEyMWRkMmY3MTg2M2RkZDBjOWJiYjllYjFiYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ymgkZZMgme9CdOzxnmXkD+qZLB4 1fZIgAoyfAJJJCbyAeGsswZZrI3BTN7VSI60xZR3tHE8ECDHpYmKAsc+g/3pA/Vc ZCqghFFP0NZqgc3AcoYbZz+W0W2NvqsBrlWrMf2dv7YcISBoHJkoRJtljRY1c4AW Pc4gssDJg1Iz0E3l+9+3mLnKlJ4OLwR+6LkZB6LEiKzat+s11y9YbTR5bB/sSaDq YYrcnqLEPpLMA5KEcYislRPbzj0t/e07MajX5C8k64vzc7rGOVcdiCCz2Iszq1hj YJ4HsEIDZCpKVjONuD+UkZa5prCLQn48knKdaFGb87C2rqjwKhM+2kb9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTnLi8fUSHdL3GGPd0Mm7uesbwCMB8GA1UdIwQY MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1 LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnGcQIA0 ZZAvfy3d7OOE3tSghoFuGr+UdqBVJBuNDWVBIwtDG9lKebVyClWTCcDEPm7HJ68v QWEHduRjZq96mouvrtCpjmT5QxlVl1AjfoUADywAESswcj5Q+7w+F4QhJAjtbRKj KIb5WkEZTxwxw5lf4vFB07XztNF3WU1VpBTxMXyyCm2uitQeFDERtdjx853YoG/8 bZZ1I/oAs1Ny1qH5dlwF3rpqx0MxdUGqwsTnE3Zfc7EK3r6yNA3d7vCYPV5sCqiN yzRJf8x81VaE3pat3MUURcyDq5KrhAsSmulkxymoo+QIIIYLFdxMtCs96+KX3Cgf ZREVSZgnd4yahg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client