This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json) Hash identifier: eHg3Cy3zwLVmoPzncaPNK42Rg4APDGiCslFw4SYvBMo= Subject key identifier: 34:49:54:2B:6B:D5:9D:3E:3A:F2:D5:1B:34:60:CD:7B:98:83:9F:B8 Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Certificate serial: 019B3268E5D02FBDF845BA8175D267BFB390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft Manifest number: 132D Signing time: Thu 18 Dec 2025 17:01:33 +0000 Manifest this update: Thu 18 Dec 2025 17:01:33 +0000 Manifest next update: Fri 19 Dec 2025 17:01:33 +0000 Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=) 2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: LFKm2PrtvykGXV5UlP6DOR3KQXjdWChTeaF6tGk31oQ=) 3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:e5:d0:2f:bd:f8:45:ba:81:75:d2:67:bf:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Validity Not Before: Dec 18 17:01:33 2025 GMT Not After : Dec 19 17:01:33 2025 GMT Subject: CN=3449542b6bd59d3e3af2d51b3460cd7b98839fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:95:1c:0c:7a:e1:ae:11:8e:94:8f:03:94: e7:dd:f1:9c:23:20:69:f2:c2:b3:92:ce:f8:62:ab: a3:39:e4:9a:1a:fc:5c:75:ad:6c:81:17:2c:05:0d: 07:f6:ae:20:65:89:c5:6f:f9:12:36:8a:d8:b9:f3: fc:41:4a:12:1c:ae:ea:55:c7:b3:04:c8:45:6a:e4: a0:80:44:2e:38:7b:91:f0:87:ce:7b:06:22:09:85: 61:93:4a:03:fc:d5:b7:16:d2:d8:3a:ef:0b:88:1a: 9f:76:d2:65:5f:ce:97:54:2d:1b:5d:9a:2d:f8:37: f8:e9:ed:23:58:f1:aa:25:49:9b:0a:d2:a8:97:96: 51:13:09:36:21:7c:f1:1d:45:1b:5b:51:ec:45:ba: 62:09:80:64:7b:fb:28:b3:98:ab:a7:e2:52:fd:d7: 76:53:25:a0:0b:eb:07:74:64:34:74:1b:b5:b4:de: b5:34:1e:2f:28:79:4b:15:62:6d:97:b2:fc:46:fb: ec:f9:53:5c:ec:47:56:54:9e:f1:de:23:26:a1:40: f6:46:4a:89:db:ee:68:ba:14:65:a5:77:d6:78:45: ad:02:46:c1:6f:e4:39:d8:2e:84:01:02:3d:77:85: ec:d8:b1:58:27:31:d9:7c:05:cd:d4:c2:07:22:fa: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:54:2B:6B:D5:9D:3E:3A:F2:D5:1B:34:60:CD:7B:98:83:9F:B8 X509v3 Authority Key Identifier: keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:aa:c2:10:ef:c0:79:5c:65:04:1b:79:5f:8c:d8:a1:d2:10: 1d:e5:3a:88:fb:50:9a:85:7a:0b:83:e4:14:bb:fb:3a:22:6c: 1d:cd:d3:bb:ad:6a:52:4b:92:d9:74:04:33:c3:83:10:ae:87: 57:84:25:bd:0b:62:61:8c:1d:c3:1a:67:53:da:43:a7:cd:65: a3:ab:d9:1b:b5:54:c2:76:b5:4d:cf:1d:ef:54:9a:8b:a5:b8: 67:42:4f:4b:e8:d6:ca:05:c3:27:a9:ba:d6:e1:0f:87:7f:db: ad:65:b6:ea:ce:12:a7:ea:37:94:48:9f:46:a3:94:ce:4f:fd: cd:56:1a:b2:90:39:0e:c9:eb:c6:38:ec:23:96:6b:83:44:65: 0a:d0:f5:89:16:06:d4:1f:6b:9c:07:36:74:2d:02:8d:5d:21: c8:f2:47:aa:8e:12:73:0d:35:f7:7a:b6:0a:2d:5c:e8:f2:43: 46:9d:61:09:f1:a7:20:a5:4c:0e:ad:ec:9a:40:cb:52:fe:d7: d3:51:57:4a:29:b9:1d:3a:a0:97:b2:fe:d7:a0:f5:c7:df:38: 41:03:99:19:74:99:fb:be:0c:8a:d5:fb:26:bf:35:59:9f:37: 60:9c:32:f7:60:01:bc:23:06:d4:db:49:38:e4:83:c1:af:39: b0:a8:5c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaOXQL734RbqBddJnv7OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk YTQ3ZDcwHhcNMjUxMjE4MTcwMTMzWhcNMjUxMjE5MTcwMTMzWjAzMTEwLwYDVQQD EygzNDQ5NTQyYjZiZDU5ZDNlM2FmMmQ1MWIzNDYwY2Q3Yjk4ODM5ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yeVHAx64a4RjpSPA5Tn3fGcIyBp 8sKzks74YqujOeSaGvxcda1sgRcsBQ0H9q4gZYnFb/kSNorYufP8QUoSHK7qVcez BMhFauSggEQuOHuR8IfOewYiCYVhk0oD/NW3FtLYOu8LiBqfdtJlX86XVC0bXZot +Df46e0jWPGqJUmbCtKol5ZREwk2IXzxHUUbW1HsRbpiCYBke/sos5irp+JS/dd2 UyWgC+sHdGQ0dBu1tN61NB4vKHlLFWJtl7L8Rvvs+VNc7EdWVJ7x3iMmoUD2RkqJ 2+5ouhRlpXfWeEWtAkbBb+Q52C6EAQI9d4Xs2LFYJzHZfAXN1MIHIvqtowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRJVCtr1Z0+OvLVGzRgzXuYg5+4MB8GA1UdIwQY MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKrCEO/A eVxlBBt5X4zYodIQHeU6iPtQmoV6C4PkFLv7OiJsHc3Tu61qUkuS2XQEM8ODEK6H V4QlvQtiYYwdwxpnU9pDp81lo6vZG7VUwna1Tc8d71Sai6W4Z0JPS+jWygXDJ6m6 1uEPh3/brWW26s4Sp+o3lEifRqOUzk/9zVYaspA5DsnrxjjsI5Zrg0RlCtD1iRYG 1B9rnAc2dC0CjV0hyPJHqo4Scw0193q2Ci1c6PJDRp1hCfGnIKVMDq3smkDLUv7X 01FXSim5HTqgl7L+16D1x984QQOZGXSZ+74MitX7Jr81WZ83YJwy92ABvCMG1NtJ OOSDwa85sKhcrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:01:59 2025 by rpki-client