This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json) Hash identifier: AOSD72EiESOurOSHtYEKhHOk6rMB67mu+ZUEfumJG8E= Subject key identifier: D9:E8:43:B5:5C:15:8B:58:59:75:41:92:E3:F9:4C:E3:BB:1E:53:29 Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16 Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716 Certificate serial: 019B4883485F554555E4B54C93E8D6463E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 00:02:01 +0000 Manifest this update: Tue 23 Dec 2025 00:02:01 +0000 Manifest next update: Wed 24 Dec 2025 00:02:01 +0000 Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=) 2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: +/yuncUPO363+e0SkKlPSH9Uj8RCqJqoLw5vFW43PdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:48:5f:55:45:55:e4:b5:4c:93:e8:d6:46:3e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716 Validity Not Before: Dec 23 00:02:01 2025 GMT Not After : Dec 24 00:02:01 2025 GMT Subject: CN=d9e843b55c158b5859754192e3f94ce3bb1e5329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:00:57:7a:76:68:c1:a0:78:46:86:d3:c2: fe:63:29:25:b2:ae:85:7f:bc:40:2e:52:27:cc:54: 99:33:b6:e1:e3:ac:0b:88:05:f6:ee:68:21:98:05: b6:d8:c0:31:a7:99:62:aa:a3:0a:ce:a4:cb:77:55: 40:e1:b8:48:c4:01:39:b4:ee:58:32:20:3e:eb:d6: 95:36:4b:86:c6:a7:f5:a7:32:49:7f:6f:75:3a:d9: ff:58:76:ad:cf:f8:af:b9:5a:0f:5a:96:8b:e3:63: 62:42:ca:f0:dc:e3:db:c7:7c:ef:e7:31:e1:6a:1a: a0:64:39:78:ea:23:02:ed:29:1a:8e:d5:0f:de:db: b3:24:af:fa:b6:07:de:83:73:01:d2:52:94:5c:3e: 0c:6c:f5:b9:cb:cb:85:94:a3:89:00:67:f6:13:1f: d7:0e:f1:47:2c:25:e8:7c:be:17:fd:77:a1:aa:ce: 8f:6b:51:c4:5a:ad:8d:09:af:71:c8:9b:35:07:c1: e4:8e:2c:cf:75:d0:c5:ac:31:50:e2:f8:b1:2c:c7: f7:87:83:80:69:67:dc:48:b8:2a:9c:4c:b4:d7:cc: 5b:4d:a5:8c:2b:b2:65:b8:c5:b6:87:17:91:02:c8: 89:1f:7d:18:65:e6:16:9b:f1:17:3a:c2:25:95:76: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:43:B5:5C:15:8B:58:59:75:41:92:E3:F9:4C:E3:BB:1E:53:29 X509v3 Authority Key Identifier: keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:16:7f:ba:f7:46:78:e2:f1:4f:ec:82:22:cd:71:a3:85:b6: a2:96:9d:eb:e9:d2:03:ad:7c:a8:ee:3d:4a:4b:0c:1a:5a:51: a7:03:f1:45:dd:9f:b9:28:32:c5:67:35:f5:55:41:d5:da:78: 3b:67:6f:81:5e:d3:e8:77:16:e5:be:93:4b:05:1d:07:22:de: 84:dc:aa:3c:56:5c:8d:bf:11:a8:6b:46:cf:7f:99:23:39:e4: ac:a7:5c:1f:5e:b3:1a:b9:96:c6:b7:81:2f:7a:16:82:fa:29: 2f:fa:91:f6:4b:cc:ed:00:7a:36:ab:31:b6:72:1d:82:0d:aa: 59:ae:08:03:bf:c9:42:40:4d:99:32:66:3d:d8:0f:ac:b9:df: 95:8d:a5:72:68:86:c1:d5:7e:e8:51:bc:08:c0:6b:a5:70:de: 9c:bb:4f:18:6e:f9:30:0a:9c:ea:c0:2d:7b:d6:f3:de:b9:44: bf:01:69:6d:db:b7:bc:e2:e0:9c:d1:6f:4b:b5:b7:a3:16:de: 94:59:e2:9c:fb:9b:27:aa:7a:3b:c5:a3:ad:3a:91:51:6a:21: 9a:5b:da:f3:eb:26:ff:7d:61:15:eb:d1:2b:0b:77:ed:da:42: a4:5b:b2:5c:f0:76:a2:c6:93:66:70:01:b8:c5:6e:fd:d8:09: ac:58:0f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIg0hfVUVV5LVMk+jWRj4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZkMWEzYTAyNThkY2NhNjdmYzlkZGRiZjRlMzYxNTdl NmE3MTYwHhcNMjUxMjIzMDAwMjAxWhcNMjUxMjI0MDAwMjAxWjAzMTEwLwYDVQQD EyhkOWU4NDNiNTVjMTU4YjU4NTk3NTQxOTJlM2Y5NGNlM2JiMWU1MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfkAV3p2aMGgeEaG08L+Yyklsq6F f7xALlInzFSZM7bh46wLiAX27mghmAW22MAxp5liqqMKzqTLd1VA4bhIxAE5tO5Y MiA+69aVNkuGxqf1pzJJf291Otn/WHatz/ivuVoPWpaL42NiQsrw3OPbx3zv5zHh ahqgZDl46iMC7SkajtUP3tuzJK/6tgfeg3MB0lKUXD4MbPW5y8uFlKOJAGf2Ex/X DvFHLCXofL4X/Xehqs6Pa1HEWq2NCa9xyJs1B8HkjizPddDFrDFQ4vixLMf3h4OA aWfcSLgqnEy018xbTaWMK7JluMW2hxeRAsiJH30YZeYWm/EXOsIllXb3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnoQ7VcFYtYWXVBkuP5TOO7HlMpMB8GA1UdIwQY MBaAFEJP0aOgJY3Mpn/J3dv042FX5qcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2Njct NzQ3YjBlNTdhYjVlLzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2NjctNzQ3YjBlNTdhYjVl LzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBZ/uvdG eOLxT+yCIs1xo4W2opad6+nSA618qO49SksMGlpRpwPxRd2fuSgyxWc19VVB1dp4 O2dvgV7T6HcW5b6TSwUdByLehNyqPFZcjb8RqGtGz3+ZIznkrKdcH16zGrmWxreB L3oWgvopL/qR9kvM7QB6NqsxtnIdgg2qWa4IA7/JQkBNmTJmPdgPrLnflY2lcmiG wdV+6FG8CMBrpXDenLtPGG75MAqc6sAte9bz3rlEvwFpbdu3vOLgnNFvS7W3oxbe lFninPubJ6p6O8WjrTqRUWohmlva8+sm/31hFevRKwt37dpCpFuyXPB2osaTZnAB uMVu/dgJrFgPSQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:17:12 2025 by rpki-client