This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json) Hash identifier: eKc4JDtl05sEmVaVoFSnEknsejOrbYJD5WF/a0pcpUQ= Subject key identifier: F3:9B:14:E0:C4:52:96:55:EB:D4:3C:85:CB:0E:78:F6:FE:35:14:4E Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Certificate serial: 019B0F37A1A880BA3DDAC58E8A9C7603311D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft Manifest number: 177A Signing time: Thu 11 Dec 2025 21:01:02 +0000 Manifest this update: Thu 11 Dec 2025 21:01:02 +0000 Manifest next update: Fri 12 Dec 2025 21:01:02 +0000 Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: CrNVvgIeHpDPD5Eeo43ZLPssR+W0OLW827gfXgoepUk=) 2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=) 3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=) 4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=) 5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a1:a8:80:ba:3d:da:c5:8e:8a:9c:76:03:31:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Validity Not Before: Dec 11 21:01:02 2025 GMT Not After : Dec 12 21:01:02 2025 GMT Subject: CN=f39b14e0c4529655ebd43c85cb0e78f6fe35144e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:0a:0f:74:d2:ed:88:9d:a1:f0:8b:0d:4d: e5:24:34:fa:90:a9:ca:d1:31:6b:29:5f:d2:4b:30: 03:68:4a:4a:1e:47:42:01:b1:40:f1:c1:9c:99:d2: 53:f6:d0:ee:f0:a7:f9:e5:76:df:d2:7d:e2:41:41: b9:86:0c:36:37:c7:e4:ed:a1:65:aa:63:af:64:e1: 6b:fb:49:87:00:bf:78:3c:a3:4c:ef:59:bb:ab:fe: 01:61:64:3f:03:4c:ee:40:2c:1f:ac:6d:ff:34:82: a9:01:ae:ea:cd:77:22:5e:06:4c:9a:64:6c:bf:ed: e6:f6:cd:18:22:bf:4d:fa:9e:c8:c3:61:d6:67:08: 03:55:e0:87:64:0e:26:35:5c:2b:28:dc:66:c2:55: 1a:d9:69:2d:70:0b:99:28:bc:51:bc:0a:c4:69:57: c5:65:42:2e:d4:42:cb:25:6d:9d:42:71:68:5a:10: 87:fa:ac:7a:5b:06:67:16:16:70:8c:5f:08:1d:34: cb:74:5c:8d:a4:a9:6a:32:3f:1b:25:9b:e7:1c:85: d9:f5:31:f8:e0:09:2f:ef:06:9e:7c:04:b2:f6:68: e8:ec:03:b1:69:81:b8:44:4b:10:f9:81:50:90:9d: 69:83:2c:34:2b:6b:69:69:52:be:75:e5:a6:a3:63: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9B:14:E0:C4:52:96:55:EB:D4:3C:85:CB:0E:78:F6:FE:35:14:4E X509v3 Authority Key Identifier: keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:23:73:57:8c:98:32:52:52:69:92:6c:9e:da:7d:d9:48:24: a1:b5:dd:b2:94:e4:ca:dd:10:67:f3:76:01:1e:a5:74:fa:7c: 23:d5:ad:30:05:bf:47:9c:64:68:08:34:90:a5:f1:7d:02:cd: 52:65:80:73:59:37:c0:53:ff:99:1a:e8:e5:d4:1f:74:2a:35: 42:a4:f0:80:5d:59:96:a4:26:9b:34:2c:ed:1b:6a:bf:3b:c9: 51:5c:b3:66:7f:86:ef:e9:38:de:47:1f:60:25:ca:39:3b:a4: 37:b2:66:28:ab:07:42:92:6a:52:d6:c3:59:5c:73:1c:08:48: 81:12:41:c4:7f:3b:68:bc:f6:44:56:e8:59:8a:ec:54:84:b8: cd:68:a4:15:c8:e1:e1:8f:d1:c7:24:fe:48:83:00:bb:76:c0: 9d:7e:b4:48:9d:92:3f:24:fb:82:09:ec:85:a4:27:e5:49:34: 21:c0:f0:e3:e0:b2:d4:39:92:ef:ee:67:f9:e9:46:2d:f5:56: 52:ee:36:9b:69:43:63:81:a7:35:0c:01:c2:70:e2:49:27:f9: 21:bc:b4:d5:b7:45:b1:ca:eb:5c:ab:47:91:bb:96:9c:63:87: 73:63:be:ea:7e:96:6a:e0:cc:06:da:bb:a4:6f:05:2f:77:1e: e1:cd:4f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6GogLo92sWOipx2AzEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj NWUyMWMwHhcNMjUxMjExMjEwMTAyWhcNMjUxMjEyMjEwMTAyWjAzMTEwLwYDVQQD EyhmMzliMTRlMGM0NTI5NjU1ZWJkNDNjODVjYjBlNzhmNmZlMzUxNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5sKD3TS7YidofCLDU3lJDT6kKnK 0TFrKV/SSzADaEpKHkdCAbFA8cGcmdJT9tDu8Kf55Xbf0n3iQUG5hgw2N8fk7aFl qmOvZOFr+0mHAL94PKNM71m7q/4BYWQ/A0zuQCwfrG3/NIKpAa7qzXciXgZMmmRs v+3m9s0YIr9N+p7Iw2HWZwgDVeCHZA4mNVwrKNxmwlUa2WktcAuZKLxRvArEaVfF ZUIu1ELLJW2dQnFoWhCH+qx6WwZnFhZwjF8IHTTLdFyNpKlqMj8bJZvnHIXZ9TH4 4Akv7waefASy9mjo7AOxaYG4REsQ+YFQkJ1pgyw0K2tpaVK+deWmo2O15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPObFODEUpZV69Q8hcsOePb+NRROMB8GA1UdIwQY MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyNzV4yY MlJSaZJsntp92UgkobXdspTkyt0QZ/N2AR6ldPp8I9WtMAW/R5xkaAg0kKXxfQLN UmWAc1k3wFP/mRro5dQfdCo1QqTwgF1ZlqQmmzQs7RtqvzvJUVyzZn+G7+k43kcf YCXKOTukN7JmKKsHQpJqUtbDWVxzHAhIgRJBxH87aLz2RFboWYrsVIS4zWikFcjh 4Y/RxyT+SIMAu3bAnX60SJ2SPyT7ggnshaQn5Uk0IcDw4+Cy1DmS7+5n+elGLfVW Uu42m2lDY4GnNQwBwnDiSSf5Iby01bdFscrrXKtHkbuWnGOHc2O+6n6WauDMBtq7 pG8FL3ce4c1PoQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:20 2025 by rpki-client