This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: xo4PSwWGoiR2H43yRqGr4A1MvyrHs/ZV9z4d5XIOfuk= Subject key identifier: 3E:1E:B5:8A:F5:70:6F:D8:01:DB:6F:3D:12:8A:C6:33:CB:87:9B:DA Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019B1126067FF285E9B04EF75247D85FBD10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 17B0 Signing time: Fri 12 Dec 2025 06:01:03 +0000 Manifest this update: Fri 12 Dec 2025 06:01:03 +0000 Manifest next update: Sat 13 Dec 2025 06:01:03 +0000 Files and hashes: 1: 587A_sxhnB_Cg2VH6zBxs_1aZV4.roa (hash: qUldoYoFLJ85vGl93bSFHpePwO1mUtBhilmXXO0xSlk=) 2: Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa (hash: mYux390OsCPiajLg/1tt+lZqU5GQYKEz7ajHTrFy5ig=) 3: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: jmScRQmry9ZewUpJJmIrVVQj2N+DjeIviSpA5drnhqA=) 4: kbldHkYN22HFUXNAof79Ipvp0FI.roa (hash: dlVB9s4P0rDIyUD+IpBdwwKW0GRfBoI6furMGa7ahso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:06:7f:f2:85:e9:b0:4e:f7:52:47:d8:5f:bd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Dec 12 06:01:03 2025 GMT Not After : Dec 13 06:01:03 2025 GMT Subject: CN=3e1eb58af5706fd801db6f3d128ac633cb879bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:66:02:57:a9:1a:4a:4b:9a:ae:0a:c8:79: 0f:66:29:bc:f8:bb:ac:c0:5f:0a:6b:ea:43:ee:ba: bf:1f:da:57:4c:70:4a:89:7d:e9:05:a4:8a:ab:db: 18:77:fd:4f:1f:f3:7f:b7:54:c0:62:c3:e9:6b:3f: 77:e2:c4:73:30:15:0a:f4:52:a8:61:97:b5:6c:22: 47:93:47:c0:b7:b8:63:ca:7f:0e:42:a9:1c:42:86: 62:de:24:2a:7c:93:a5:f6:27:50:73:ef:04:e5:3b: 7d:6b:10:6b:72:88:ce:be:12:2d:54:bb:61:35:17: 69:60:74:79:6c:2c:2c:b7:9d:bb:6b:f2:cf:81:83: 93:ea:6b:f9:c2:0d:a2:6b:72:fe:18:54:eb:59:ed: 67:b9:27:33:76:2f:91:bc:b4:4c:c8:2f:49:2f:c9: e4:d1:71:84:9b:0f:95:de:4a:b9:86:85:45:fc:db: a9:ea:dc:0e:d2:9a:3d:8f:a2:5e:00:29:4b:9f:9d: d1:34:82:96:6a:ed:08:96:ed:d0:83:13:52:04:63: 3b:a5:5c:d6:96:aa:08:c7:3d:00:d4:0e:69:44:38: 30:fa:0a:f0:f3:3f:cf:8e:31:68:5d:e9:63:0f:0a: 9b:5f:b5:dc:c8:f8:21:d7:b2:07:1c:bb:58:d4:86: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:B5:8A:F5:70:6F:D8:01:DB:6F:3D:12:8A:C6:33:CB:87:9B:DA X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:56:07:a4:85:81:b2:a1:1e:07:0e:c4:e7:a4:c8:8c:41:5b: e3:53:82:74:68:9e:47:7c:22:dd:d3:c9:52:70:8c:5e:a1:27: c0:86:3e:4e:ab:21:f0:90:02:b2:26:93:37:ba:53:fe:3c:93: 0b:c8:e6:99:71:e0:24:8d:84:c9:63:81:ad:a2:0e:02:d6:c6: 4b:33:b8:7b:9d:ab:78:62:53:0e:9b:b1:ae:68:05:12:a6:16: ed:14:08:03:10:0c:a5:25:d2:f1:7b:b2:b5:92:d8:0a:4d:13: 4c:8d:85:f7:fa:df:c9:df:77:86:79:4c:18:76:97:8b:c8:1f: 06:49:2c:ab:46:56:aa:f4:ff:e6:6f:d5:d3:6c:26:ab:a4:1e: 6c:2c:dc:7e:d2:a3:8a:4c:a2:21:eb:cb:92:c7:a9:48:21:67: c3:a4:be:11:6b:54:0b:d9:a3:ab:3f:cb:1b:65:43:45:b8:18: 7d:ee:cd:e7:c2:9a:16:bf:0f:7c:dd:48:fa:2f:24:d0:3b:4a: 09:e1:2c:f6:4c:a7:cc:5c:7c:5b:ea:2b:44:df:77:15:f4:10: 18:e6:14:3e:f0:1e:df:40:74:b1:49:40:e7:6d:b3:d5:2b:9e: 48:56:9a:16:38:4b:e9:74:83:d8:34:01:13:0e:0e:85:b7:c2: b1:dd:35:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJgZ/8oXpsE73UkfYX70QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMjEyMDYwMTAzWhcNMjUxMjEzMDYwMTAzWjAzMTEwLwYDVQQD EygzZTFlYjU4YWY1NzA2ZmQ4MDFkYjZmM2QxMjhhYzYzM2NiODc5YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P9mAlepGkpLmq4KyHkPZim8+Lus wF8Ka+pD7rq/H9pXTHBKiX3pBaSKq9sYd/1PH/N/t1TAYsPpaz934sRzMBUK9FKo YZe1bCJHk0fAt7hjyn8OQqkcQoZi3iQqfJOl9idQc+8E5Tt9axBrcojOvhItVLth NRdpYHR5bCwst527a/LPgYOT6mv5wg2ia3L+GFTrWe1nuSczdi+RvLRMyC9JL8nk 0XGEmw+V3kq5hoVF/Nup6twO0po9j6JeAClLn53RNIKWau0Ilu3QgxNSBGM7pVzW lqoIxz0A1A5pRDgw+grw8z/PjjFoXeljDwqbX7XcyPgh17IHHLtY1IZR6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4etYr1cG/YAdtvPRKKxjPLh5vaMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFYHpIWB sqEeBw7E56TIjEFb41OCdGieR3wi3dPJUnCMXqEnwIY+Tqsh8JACsiaTN7pT/jyT C8jmmXHgJI2EyWOBraIOAtbGSzO4e52reGJTDpuxrmgFEqYW7RQIAxAMpSXS8Xuy tZLYCk0TTI2F9/rfyd93hnlMGHaXi8gfBkksq0ZWqvT/5m/V02wmq6QebCzcftKj ikyiIevLksepSCFnw6S+EWtUC9mjqz/LG2VDRbgYfe7N58KaFr8PfN1I+i8k0DtK CeEs9kynzFx8W+orRN93FfQQGOYUPvAe30B0sUlA522z1SueSFaaFjhL6XSD2DQB Ew4OhbfCsd01CQ== -----END CERTIFICATE-----Generated at Fri Dec 12 12:27:22 2025 by rpki-client