This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json) Hash identifier: VTzKVMKdXggFCD6rFNs+Qj7P4xHKXZIp40zhIkiWGiY= Subject key identifier: 1A:87:8E:32:D0:13:18:EF:90:74:7C:B0:50:8E:C2:05:6B:1F:0C:D8 Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7 Certificate serial: 019B2E8BC9DAA639065B51A6329A29BD39D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 23:01:11 +0000 Manifest this update: Wed 17 Dec 2025 23:01:11 +0000 Manifest next update: Thu 18 Dec 2025 23:01:11 +0000 Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=) 2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: 85ZrxtLBcn7rkYgbW9HzSRSJ6ILtfP2tWayCTtVwN0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:c9:da:a6:39:06:5b:51:a6:32:9a:29:bd:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7 Validity Not Before: Dec 17 23:01:11 2025 GMT Not After : Dec 18 23:01:11 2025 GMT Subject: CN=1a878e32d01318ef90747cb0508ec2056b1f0cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:ee:d3:0b:8b:e5:e0:ab:64:35:4f:88:3c: d2:4c:07:e2:2d:68:87:5f:d3:04:a9:f6:72:01:0e: 7f:5b:42:cd:51:2a:59:04:10:74:7e:6b:f9:42:21: 01:61:41:b4:85:30:ec:17:e4:67:69:9c:0f:6f:58: dc:5a:59:1f:c4:76:39:c6:30:ce:43:24:69:c1:6d: c4:5e:60:85:46:7e:bb:65:58:1b:ea:24:31:9d:0c: 3d:e3:3a:c2:a9:37:36:8c:89:45:56:16:99:0a:d3: 86:62:8f:8f:6c:2d:9f:df:e6:34:95:c8:4b:97:fc: c2:17:59:aa:30:de:a8:f2:f4:c9:55:80:2a:28:a4: 22:57:0a:1c:7f:09:cd:2a:36:58:94:b6:e1:d3:98: a2:7a:17:20:61:73:c5:a5:1b:3a:45:41:57:6e:a7: ce:0c:95:c6:c3:2b:b6:b4:b2:a8:57:2e:93:69:56: 61:02:d7:b1:ea:e4:2c:44:a0:a8:07:9c:0b:26:06: d5:39:57:93:8e:b8:16:2d:22:4d:f1:13:c5:94:c1: 0d:89:b9:71:b0:c2:76:91:38:ae:c3:96:cf:7e:9e: aa:dd:52:39:ea:ff:ef:c6:a0:be:f6:86:82:59:f3: 00:ae:25:01:5a:3e:e3:bc:a9:45:51:42:85:a0:bc: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:87:8E:32:D0:13:18:EF:90:74:7C:B0:50:8E:C2:05:6B:1F:0C:D8 X509v3 Authority Key Identifier: keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:49:5b:67:80:34:a1:96:4c:96:3c:e9:95:0d:7d:75:a1:b3: eb:c4:d6:1c:3f:cb:95:89:e6:22:d9:b1:70:a2:a6:62:d3:eb: fd:c7:b2:41:75:82:50:32:4c:8d:92:11:2e:52:f1:6d:69:3a: 88:40:2f:d7:f5:92:c8:2d:8c:80:1d:4a:02:d7:72:7f:ac:cd: f5:dc:79:d7:2e:c7:9e:dc:37:35:b5:d0:85:b9:9c:21:4c:4e: 14:3c:c5:7e:bf:f0:72:18:43:5d:69:fc:cd:e5:34:80:59:26: 5e:05:49:9f:40:cb:bd:ed:8a:78:82:e3:50:1b:3a:04:47:82: ce:84:f2:fb:50:aa:4b:62:eb:7d:2a:3f:01:9f:3c:be:74:85: 4a:5c:c1:c6:20:7a:ae:14:6f:9a:6a:b4:75:83:42:9d:f9:fc: 58:d6:4f:58:e4:f2:53:ca:fe:99:48:7f:97:b9:df:85:39:89: 37:99:72:e4:ae:13:dd:4a:4c:5c:dc:69:02:30:81:e1:95:e1: 95:1a:26:ba:a4:37:61:f7:0d:68:7e:fe:f5:8f:d2:6f:a4:4d: 69:e9:33:d7:2e:ed:7f:8b:be:39:bb:d7:5b:a4:fd:53:b3:3e: cd:7c:8d:93:d2:6b:20:54:2e:1b:9b:9d:69:71:7f:1d:98:ce: cb:1f:5d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui8napjkGW1GmMpopvTnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2 OTA2ZDcwHhcNMjUxMjE3MjMwMTExWhcNMjUxMjE4MjMwMTExWjAzMTEwLwYDVQQD EygxYTg3OGUzMmQwMTMxOGVmOTA3NDdjYjA1MDhlYzIwNTZiMWYwY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA163u0wuL5eCrZDVPiDzSTAfiLWiH X9MEqfZyAQ5/W0LNUSpZBBB0fmv5QiEBYUG0hTDsF+RnaZwPb1jcWlkfxHY5xjDO QyRpwW3EXmCFRn67ZVgb6iQxnQw94zrCqTc2jIlFVhaZCtOGYo+PbC2f3+Y0lchL l/zCF1mqMN6o8vTJVYAqKKQiVwocfwnNKjZYlLbh05iiehcgYXPFpRs6RUFXbqfO DJXGwyu2tLKoVy6TaVZhAtex6uQsRKCoB5wLJgbVOVeTjrgWLSJN8RPFlMENiblx sMJ2kTiuw5bPfp6q3VI56v/vxqC+9oaCWfMAriUBWj7jvKlFUUKFoLyvdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqHjjLQExjvkHR8sFCOwgVrHwzYMB8GA1UdIwQY MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4 LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACklbZ4A0 oZZMljzplQ19daGz68TWHD/LlYnmItmxcKKmYtPr/ceyQXWCUDJMjZIRLlLxbWk6 iEAv1/WSyC2MgB1KAtdyf6zN9dx51y7Hntw3NbXQhbmcIUxOFDzFfr/wchhDXWn8 zeU0gFkmXgVJn0DLve2KeILjUBs6BEeCzoTy+1CqS2LrfSo/AZ88vnSFSlzBxiB6 rhRvmmq0dYNCnfn8WNZPWOTyU8r+mUh/l7nfhTmJN5ly5K4T3UpMXNxpAjCB4ZXh lRomuqQ3YfcNaH7+9Y/Sb6RNaekz1y7tf4u+ObvXW6T9U7M+zXyNk9JrIFQuG5ud aXF/HZjOyx9d/g== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:35 2025 by rpki-client