This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json) Hash identifier: GcxRRrUQM24EY8+oyBYmGbECrpcvKvTX6Fs76kcXOWA= Subject key identifier: 12:B9:2F:53:C8:F3:B8:D7:B2:71:FB:0D:85:7F:64:0E:BA:D9:16:54 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B47701B8101027DC637A7F70B2F5221A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft Manifest number: 1797 Signing time: Mon 22 Dec 2025 19:01:27 +0000 Manifest this update: Mon 22 Dec 2025 19:01:27 +0000 Manifest next update: Tue 23 Dec 2025 19:01:27 +0000 Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=) 2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: 0xyEJalHIsXKv1w8prlgP1YE51FzCbf742/PlqBUv0c=) 3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=) 4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=) 5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=) 6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=) 7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:1b:81:01:02:7d:c6:37:a7:f7:0b:2f:52:21:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Dec 22 19:01:27 2025 GMT Not After : Dec 23 19:01:27 2025 GMT Subject: CN=12b92f53c8f3b8d7b271fb0d857f640ebad91654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:cb:80:af:c9:ea:22:dc:11:3f:18:db:b9: f1:89:a6:4a:04:fb:27:c1:16:3d:32:ba:22:dc:c6: ed:19:39:0a:4e:28:e8:8e:f1:72:23:22:00:e4:cf: 00:49:56:d0:34:cf:14:b4:f4:4a:d6:85:37:04:ba: 90:18:79:09:c0:b5:ad:14:d4:96:14:30:f2:21:48: fa:bc:a0:c8:d9:af:0b:6c:79:fc:35:dd:76:7f:7d: f5:a3:02:de:da:59:2d:fd:67:3c:e8:3b:1e:02:f7: 48:df:18:13:0d:36:2c:6e:6c:5b:03:e3:0f:f6:14: d2:ff:d4:cf:21:97:8d:44:c1:8a:4a:89:46:f7:b2: af:83:5e:30:ad:13:f8:14:0e:15:36:9e:43:81:94: 43:2f:39:c5:5f:e4:be:3a:51:b2:24:6f:13:3e:43: be:4a:e3:68:d9:e7:d8:cd:ba:97:fd:f4:20:d3:84: 24:1c:5d:21:eb:60:f0:7f:72:31:f5:76:99:0c:3c: 79:07:5f:7f:31:6e:bd:86:18:42:db:11:df:e5:fd: 78:70:e7:ea:fe:1b:4e:8d:7a:fe:a4:54:9a:f0:aa: de:e0:2b:8e:3f:c9:ac:b6:bb:4a:10:9b:af:55:f7: 84:4e:29:1d:f1:99:22:59:34:ea:1e:7d:6f:cd:22: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:2F:53:C8:F3:B8:D7:B2:71:FB:0D:85:7F:64:0E:BA:D9:16:54 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:22:43:b6:77:df:f3:91:22:1c:51:db:75:86:03:2d:f3: dd:4d:86:71:fb:b9:e9:19:05:aa:3b:a1:ae:5c:73:6c:0b:c5: c2:de:b4:05:4a:54:8f:e3:f1:a5:2e:d7:f9:93:33:e1:17:87: 6a:aa:48:fb:5f:64:a3:d6:41:dd:08:59:8c:df:ac:61:6b:22: bb:17:c4:3b:0e:5c:24:3d:57:9f:c9:0c:6f:7e:2c:77:ea:8d: fa:26:9c:77:2a:59:0e:49:57:0a:57:2a:0b:84:79:b1:3d:be: e0:e2:44:6e:80:be:1c:23:64:d3:62:41:46:1c:21:e4:dc:58: 76:c4:63:0c:5f:25:52:51:2d:49:9c:c6:42:59:59:2b:e5:fb: 51:f4:91:37:20:6f:5b:ca:70:ca:12:d3:6c:6c:7e:2a:1c:08: f5:40:61:25:d0:39:8e:6b:00:5c:0b:f6:51:40:0d:f2:36:61: dc:c1:8e:80:cf:d4:ed:e8:14:14:87:40:1e:5a:de:4c:42:b8: e6:25:35:b2:b8:7d:9c:c1:46:a4:31:12:6c:84:d2:61:c7:f7: 38:11:0e:3a:87:26:2c:17:4e:01:86:91:c5:69:ff:2c:34:23: 7a:e0:2b:df:80:a8:cc:16:4f:e9:9d:d4:bd:e7:79:28:99:53: 56:22:5e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcBuBAQJ9xjen9wsvUiGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjUxMjIyMTkwMTI3WhcNMjUxMjIzMTkwMTI3WjAzMTEwLwYDVQQD EygxMmI5MmY1M2M4ZjNiOGQ3YjI3MWZiMGQ4NTdmNjQwZWJhZDkxNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi73LgK/J6iLcET8Y27nxiaZKBPsn wRY9Mroi3MbtGTkKTijojvFyIyIA5M8ASVbQNM8UtPRK1oU3BLqQGHkJwLWtFNSW FDDyIUj6vKDI2a8LbHn8Nd12f331owLe2lkt/Wc86DseAvdI3xgTDTYsbmxbA+MP 9hTS/9TPIZeNRMGKSolG97Kvg14wrRP4FA4VNp5DgZRDLznFX+S+OlGyJG8TPkO+ SuNo2efYzbqX/fQg04QkHF0h62Dwf3Ix9XaZDDx5B19/MW69hhhC2xHf5f14cOfq /htOjXr+pFSa8Kre4CuOP8mstrtKEJuvVfeETikd8ZkiWTTqHn1vzSLBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK5L1PI87jXsnH7DYV/ZA662RZUMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDIiQ7Z3 3/ORIhxR23WGAy3z3U2Gcfu56RkFqjuhrlxzbAvFwt60BUpUj+PxpS7X+ZMz4ReH aqpI+19ko9ZB3QhZjN+sYWsiuxfEOw5cJD1Xn8kMb34sd+qN+iacdypZDklXClcq C4R5sT2+4OJEboC+HCNk02JBRhwh5NxYdsRjDF8lUlEtSZzGQllZK+X7UfSRNyBv W8pwyhLTbGx+KhwI9UBhJdA5jmsAXAv2UUAN8jZh3MGOgM/U7egUFIdAHlreTEK4 5iU1srh9nMFGpDESbITSYcf3OBEOOocmLBdOAYaRxWn/LDQjeuAr34CozBZP6Z3U ved5KJlTViJenA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:20:26 2025 by rpki-client