This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json) Hash identifier: tggIKvyYjVshlD61TSBokG+KEQNgvvpJop0/1HG0KhI= Subject key identifier: A9:85:7F:B3:C3:F7:B9:86:63:6C:02:97:A4:DC:18:38:97:99:43:C9 Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Certificate serial: 019B3AFD4937D8AF160FF42D1E6326825305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 09:00:36 +0000 Manifest this update: Sat 20 Dec 2025 09:00:36 +0000 Manifest next update: Sun 21 Dec 2025 09:00:36 +0000 Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=) 2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: PlvPERKWw8aPeiMCeEOYDFOCgWFv1H84Q/SRQzqAj3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:49:37:d8:af:16:0f:f4:2d:1e:63:26:82:53:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Validity Not Before: Dec 20 09:00:36 2025 GMT Not After : Dec 21 09:00:36 2025 GMT Subject: CN=a9857fb3c3f7b986636c0297a4dc1838979943c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:0d:99:cf:03:57:93:e5:97:17:47:30:29: f2:51:e8:d7:19:90:d8:6c:87:76:2f:65:66:96:08: f4:56:03:05:93:ff:a3:31:2d:68:b8:d6:d3:fd:41: 27:03:6e:f2:43:eb:98:db:ec:99:ca:45:89:3b:0c: ad:18:2b:5a:a8:13:3d:ee:28:97:02:6c:79:9d:dd: 4b:ac:40:17:94:42:35:3b:5c:6e:59:4e:bc:22:7f: 15:6e:3b:e2:78:94:0a:b5:6c:86:e4:c7:3e:1b:fa: 90:d4:ba:c9:f5:05:75:c0:3c:7c:20:23:ad:29:d3: ca:e7:39:50:be:4d:be:a6:9a:f9:aa:03:f5:27:fb: 3a:17:95:96:75:63:60:6e:10:3b:30:7c:15:67:87: 35:46:d2:94:3c:ce:2a:f6:21:98:1f:81:82:27:05: 61:1b:51:0f:e3:5f:26:3f:b4:2d:bd:f5:7e:59:1f: 02:d6:c5:a3:74:cc:a0:2b:2f:04:96:58:e7:7d:c4: 67:96:04:63:c1:7c:74:04:47:90:99:55:bd:12:2f: 68:6f:7f:94:c7:0c:be:b8:81:f5:b5:02:c8:60:66: d6:10:e6:f0:2c:32:2a:eb:2c:ed:5a:1a:e4:9b:27: 8c:64:f7:0d:f6:73:1f:9b:df:8c:23:6b:07:44:43: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:85:7F:B3:C3:F7:B9:86:63:6C:02:97:A4:DC:18:38:97:99:43:C9 X509v3 Authority Key Identifier: keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:26:d1:61:e9:ad:8a:eb:70:64:ed:52:1e:5a:00:a6:52: b2:da:e3:4f:51:13:c7:7c:0d:0e:4f:bf:6b:21:92:a6:0f:e5: 09:cc:e7:23:47:d1:7b:fc:58:11:22:16:0a:87:2d:5e:7e:8a: 7a:7d:db:cb:95:85:33:22:58:17:13:85:7a:40:54:3b:48:b6: 43:aa:b4:36:14:74:b2:2e:aa:8b:d6:17:4b:b3:d2:18:1a:85: a2:37:5f:2c:d5:25:25:92:1f:53:94:1c:8f:0b:a3:38:5e:bf: 28:e4:6c:14:44:4a:fd:73:aa:5e:0d:6b:ab:0a:35:bc:60:94: 24:b1:d2:2f:c5:a0:b7:52:f2:86:19:7d:a5:bf:1e:58:9b:4a: 49:df:aa:49:34:48:30:ca:2b:4b:a4:27:6d:6e:c2:21:16:cd: 3f:0b:2d:2c:e5:aa:bd:22:70:66:a9:e9:07:00:cf:85:6f:e7: f9:54:63:2c:9c:4b:58:a7:3a:46:f9:78:9b:bf:36:c5:4a:08: 85:7f:f2:68:1b:f8:97:34:8d:17:9d:8a:cb:db:5b:d9:58:ef: 10:d7:c9:c0:52:0c:1a:b6:e2:91:56:ad:40:29:e5:f1:07:99: f3:5b:78:38:76:5b:33:f7:9b:90:d4:1b:43:f3:2b:5a:00:e3: 99:7e:5c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Uk32K8WD/QtHmMmglMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw MGQ2ODQwHhcNMjUxMjIwMDkwMDM2WhcNMjUxMjIxMDkwMDM2WjAzMTEwLwYDVQQD EyhhOTg1N2ZiM2MzZjdiOTg2NjM2YzAyOTdhNGRjMTgzODk3OTk0M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYNmc8DV5PllxdHMCnyUejXGZDY bId2L2Vmlgj0VgMFk/+jMS1ouNbT/UEnA27yQ+uY2+yZykWJOwytGCtaqBM97iiX Amx5nd1LrEAXlEI1O1xuWU68In8VbjvieJQKtWyG5Mc+G/qQ1LrJ9QV1wDx8ICOt KdPK5zlQvk2+ppr5qgP1J/s6F5WWdWNgbhA7MHwVZ4c1RtKUPM4q9iGYH4GCJwVh G1EP418mP7QtvfV+WR8C1sWjdMygKy8ElljnfcRnlgRjwXx0BEeQmVW9Ei9ob3+U xwy+uIH1tQLIYGbWEObwLDIq6yztWhrkmyeMZPcN9nMfm9+MI2sHREOAmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmFf7PD97mGY2wCl6TcGDiXmUPJMB8GA1UdIwQY MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4 LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaQm0WHp rYrrcGTtUh5aAKZSstrjT1ETx3wNDk+/ayGSpg/lCcznI0fRe/xYESIWCoctXn6K en3by5WFMyJYFxOFekBUO0i2Q6q0NhR0si6qi9YXS7PSGBqFojdfLNUlJZIfU5Qc jwujOF6/KORsFERK/XOqXg1rqwo1vGCUJLHSL8Wgt1Lyhhl9pb8eWJtKSd+qSTRI MMorS6QnbW7CIRbNPwstLOWqvSJwZqnpBwDPhW/n+VRjLJxLWKc6Rvl4m782xUoI hX/yaBv4lzSNF52Ky9tb2VjvENfJwFIMGrbikVatQCnl8QeZ81t4OHZbM/ebkNQb Q/MrWgDjmX5c8w== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:41 2025 by rpki-client