This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json) Hash identifier: qsKeoyBT4LUfK4lYI+0nZKOVkwp+2kyLA0BqGB5eV5w= Subject key identifier: CC:C5:57:93:C7:04:A9:54:81:84:33:50:16:7B:10:0F:01:D5:EA:A1 Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Certificate serial: 019B390ED5D17EBDB12238D17A3D05B7B5B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 00:00:31 +0000 Manifest this update: Sat 20 Dec 2025 00:00:31 +0000 Manifest next update: Sun 21 Dec 2025 00:00:31 +0000 Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=) 2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: iJd+HVRsP8ZGZG7mgvbRB0fQpnzeVI+tvE5aTAiuzk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:d5:d1:7e:bd:b1:22:38:d1:7a:3d:05:b7:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684 Validity Not Before: Dec 20 00:00:31 2025 GMT Not After : Dec 21 00:00:31 2025 GMT Subject: CN=ccc55793c704a95481843350167b100f01d5eaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:a8:1d:33:6f:69:0d:b7:26:9f:4a:28:53: fd:7c:21:51:b1:31:a4:a2:6d:a5:3c:5e:ec:6a:db: 99:8c:95:78:a1:11:4a:5b:3f:78:aa:d3:2d:bd:e3: e9:81:00:d0:40:1b:6e:b2:71:d0:4b:82:a0:b6:00: a0:ae:ea:41:63:60:39:66:dd:82:08:83:80:34:c9: 72:cd:6d:0a:13:b3:96:59:1c:cf:a7:e2:97:24:ec: e1:e4:85:b2:2d:40:71:aa:ab:a4:68:17:93:bd:4e: 43:13:76:54:73:2c:4c:44:5d:80:ff:d7:16:6c:6a: 93:49:00:fc:0c:f5:92:93:0e:53:39:ae:bc:63:ce: c0:d5:67:df:93:82:27:47:c6:45:c0:f6:fd:b4:4a: 7e:43:20:63:6e:97:3b:60:96:5e:e7:b6:6c:44:97: 8f:43:be:2a:69:a5:04:2b:45:c9:a4:de:9a:01:fb: bf:d8:89:86:8e:1c:fd:0d:2a:5b:2f:6e:3c:25:d9: 30:b2:36:fa:20:a7:42:1d:dc:8c:be:c4:a4:46:19: fa:49:0d:fc:ab:10:d1:b3:44:c0:79:62:29:65:44: 1d:e4:34:9c:68:d2:f2:95:61:87:60:6b:6d:e1:7d: 11:23:5b:7a:6a:12:7c:74:9a:1e:17:80:3b:13:c3: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C5:57:93:C7:04:A9:54:81:84:33:50:16:7B:10:0F:01:D5:EA:A1 X509v3 Authority Key Identifier: keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cc:1f:c4:29:f1:19:6a:ea:06:44:3a:78:16:5a:65:29:87: db:8b:b9:cd:66:eb:b2:1d:60:95:89:43:29:e2:a3:bd:3b:08: c1:22:b2:f8:fc:e5:1f:ba:c4:d9:e7:c6:a3:7a:bb:35:d3:7a: f0:9e:6e:73:7c:db:fb:50:3e:f1:d2:ba:76:e8:b2:56:f7:91: f1:9d:60:78:5b:64:e3:52:cf:18:38:5e:79:c0:61:61:e0:47: 93:15:de:8b:10:cb:2e:eb:71:b2:a9:46:50:cd:b0:dd:5e:10: b3:63:2c:55:c2:94:0c:be:b1:b3:64:eb:9e:e1:01:e4:e9:0e: 7e:f7:6d:fc:55:12:19:a9:16:f3:89:f8:6d:a5:1f:08:d0:60: 6b:41:2a:3a:13:4d:13:f1:9c:47:f7:f0:ca:c8:36:b3:a4:8d: 27:51:c4:d4:e7:4e:77:c8:f2:11:8b:3b:28:f0:e0:f5:72:02: bb:1b:bc:24:bd:99:ed:dc:cb:ea:d4:a9:e4:71:e6:e6:89:7c: 4e:bb:b8:b0:1a:34:68:88:e4:10:00:99:66:46:ab:78:a8:43: 09:48:fb:98:35:f6:6d:37:79:2e:31:a5:93:64:46:fc:3d:78: 6f:18:ed:fd:03:f0:13:64:19:47:64:a0:b4:25:b8:6d:70:c5: e6:1d:65:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DtXRfr2xIjjRej0Ft7WyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw MGQ2ODQwHhcNMjUxMjIwMDAwMDMxWhcNMjUxMjIxMDAwMDMxWjAzMTEwLwYDVQQD EyhjY2M1NTc5M2M3MDRhOTU0ODE4NDMzNTAxNjdiMTAwZjAxZDVlYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn+oHTNvaQ23Jp9KKFP9fCFRsTGk om2lPF7satuZjJV4oRFKWz94qtMtvePpgQDQQBtusnHQS4KgtgCgrupBY2A5Zt2C CIOANMlyzW0KE7OWWRzPp+KXJOzh5IWyLUBxqqukaBeTvU5DE3ZUcyxMRF2A/9cW bGqTSQD8DPWSkw5TOa68Y87A1Wffk4InR8ZFwPb9tEp+QyBjbpc7YJZe57ZsRJeP Q74qaaUEK0XJpN6aAfu/2ImGjhz9DSpbL248Jdkwsjb6IKdCHdyMvsSkRhn6SQ38 qxDRs0TAeWIpZUQd5DScaNLylWGHYGtt4X0RI1t6ahJ8dJoeF4A7E8PVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzFV5PHBKlUgYQzUBZ7EA8B1eqhMB8GA1UdIwQY MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4 LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8wfxCnx GWrqBkQ6eBZaZSmH24u5zWbrsh1glYlDKeKjvTsIwSKy+PzlH7rE2efGo3q7NdN6 8J5uc3zb+1A+8dK6duiyVveR8Z1geFtk41LPGDheecBhYeBHkxXeixDLLutxsqlG UM2w3V4Qs2MsVcKUDL6xs2TrnuEB5OkOfvdt/FUSGakW84n4baUfCNBga0EqOhNN E/GcR/fwysg2s6SNJ1HE1OdOd8jyEYs7KPDg9XICuxu8JL2Z7dzL6tSp5HHm5ol8 Tru4sBo0aIjkEACZZkareKhDCUj7mDX2bTd5LjGlk2RG/D14bxjt/QPwE2QZR2Sg tCW4bXDF5h1lgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:55 2025 by rpki-client