This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json) Hash identifier: Mzx5knGj6+O9xKk2WVl8ezzSgpQraFcL//u8SNh8t0U= Subject key identifier: 54:6E:75:6F:4F:B9:78:0E:22:72:30:93:1E:96:11:81:02:8D:3B:49 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B1539ABACC929B083BE515E2FFB66DB1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft Manifest number: 177D Signing time: Sat 13 Dec 2025 01:00:59 +0000 Manifest this update: Sat 13 Dec 2025 01:00:59 +0000 Manifest next update: Sun 14 Dec 2025 01:00:59 +0000 Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=) 2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: 1iGbWDeqDmmah1BGHIKfKi/5YqjL7D4FuRhtX90I2Fo=) 3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=) 4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=) 5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=) 6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=) 7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:39:ab:ac:c9:29:b0:83:be:51:5e:2f:fb:66:db:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Dec 13 01:00:59 2025 GMT Not After : Dec 14 01:00:59 2025 GMT Subject: CN=546e756f4fb9780e227230931e961181028d3b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:96:5a:c7:bb:6d:bc:65:10:ec:9d:ce:34: db:2a:e1:ca:c6:f3:2f:95:cf:17:b7:5c:b7:85:84: 30:31:b5:bc:20:62:cc:e2:ba:71:4b:36:0f:6f:52: f4:a7:0b:d6:78:4c:cc:9b:92:bd:02:4f:3f:9a:c8: bb:bf:3f:58:67:a3:e3:85:32:2f:2d:7a:6a:79:d1: 81:2f:67:dd:e5:7a:01:31:e3:8a:fc:a2:03:dc:a7: 9e:50:76:5c:f9:6b:22:11:1f:56:55:ec:4f:13:82: b0:6a:49:1e:da:f7:03:d8:e8:ba:ab:a1:ae:d1:21: 04:85:08:89:da:2c:14:2b:03:a1:4d:6d:00:8f:f8: 30:37:60:87:1e:79:bd:78:84:0b:18:5c:90:60:4c: ba:3f:27:24:7b:f7:12:4c:fb:76:0e:1f:71:2d:9a: e8:12:37:14:83:90:a8:23:ca:12:d5:ce:3a:d5:57: 89:8f:f1:b5:c2:87:ed:68:d5:12:ef:51:20:c2:b6: f5:c0:b9:54:aa:7f:26:ee:fc:0f:2a:cc:2d:9d:7c: a7:72:c3:b1:22:d9:05:f6:94:23:20:50:0a:25:a1: fb:47:97:d8:1c:34:48:f8:c9:9c:95:4c:32:2c:48: 5b:97:4a:e6:33:bf:25:87:33:69:7c:b6:c5:38:c6: a6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6E:75:6F:4F:B9:78:0E:22:72:30:93:1E:96:11:81:02:8D:3B:49 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:cc:e4:c9:62:5c:80:5d:4a:4b:68:b1:fb:b9:77:8d:9b:7c: 85:cd:c8:9d:03:c3:a5:fa:35:08:dd:2a:0d:fe:29:c6:34:91: c8:8f:18:bd:44:18:84:20:7b:2b:b7:2e:47:66:c9:43:f3:66: 31:3f:14:91:f8:3a:7b:3e:fb:98:52:95:35:61:54:7e:68:47: 79:fa:55:c9:21:1b:ed:3e:9d:50:f6:de:2e:70:94:ed:9f:69: 24:da:d3:49:23:ce:64:b2:d9:6c:d6:4e:cc:99:43:de:75:1d: 70:7a:d4:63:29:b3:4a:0e:3d:8e:18:55:8b:56:46:c2:8e:17: 79:9c:ea:7c:ed:8a:35:74:b4:61:51:a2:1a:5c:46:8b:2a:93: 94:22:70:6c:24:e3:0e:71:cd:07:d2:3d:48:09:ba:b4:61:de: e1:8a:92:b5:21:24:06:65:05:f0:51:e2:dc:b6:ff:54:9d:d3: 81:81:45:7f:a4:34:38:9e:83:c5:6c:c0:54:4b:5f:c0:94:0b: 41:58:f6:28:07:63:28:7d:67:41:1b:f8:9b:0d:5b:0b:ef:b3: 8c:c1:45:e4:dd:16:7c:34:05:51:02:f7:30:bb:5b:0a:df:14: 91:8a:51:00:66:3c:0a:a1:81:7b:98:69:d1:c1:9e:da:65:11: c0:20:15:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsVOausySmwg75RXi/7ZtseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjUxMjEzMDEwMDU5WhcNMjUxMjE0MDEwMDU5WjAzMTEwLwYDVQQD Eyg1NDZlNzU2ZjRmYjk3ODBlMjI3MjMwOTMxZTk2MTE4MTAyOGQzYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSeWWse7bbxlEOydzjTbKuHKxvMv lc8Xt1y3hYQwMbW8IGLM4rpxSzYPb1L0pwvWeEzMm5K9Ak8/msi7vz9YZ6PjhTIv LXpqedGBL2fd5XoBMeOK/KID3KeeUHZc+WsiER9WVexPE4Kwakke2vcD2Oi6q6Gu 0SEEhQiJ2iwUKwOhTW0Aj/gwN2CHHnm9eIQLGFyQYEy6Pycke/cSTPt2Dh9xLZro EjcUg5CoI8oS1c461VeJj/G1woftaNUS71Egwrb1wLlUqn8m7vwPKswtnXyncsOx ItkF9pQjIFAKJaH7R5fYHDRI+MmclUwyLEhbl0rmM78lhzNpfLbFOMamuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRudW9PuXgOInIwkx6WEYECjTtJMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMzkyWJc gF1KS2ix+7l3jZt8hc3InQPDpfo1CN0qDf4pxjSRyI8YvUQYhCB7K7cuR2bJQ/Nm MT8Ukfg6ez77mFKVNWFUfmhHefpVySEb7T6dUPbeLnCU7Z9pJNrTSSPOZLLZbNZO zJlD3nUdcHrUYymzSg49jhhVi1ZGwo4XeZzqfO2KNXS0YVGiGlxGiyqTlCJwbCTj DnHNB9I9SAm6tGHe4YqStSEkBmUF8FHi3Lb/VJ3TgYFFf6Q0OJ6DxWzAVEtfwJQL QVj2KAdjKH1nQRv4mw1bC++zjMFF5N0WfDQFUQL3MLtbCt8UkYpRAGY8CqGBe5hp 0cGe2mURwCAVJA== -----END CERTIFICATE-----Generated at Sat Dec 13 02:33:50 2025 by rpki-client