This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json) Hash identifier: MImw2shgFyZ+U/a+mUs9OTidCXh7VHiIszqptZo8Stc= Subject key identifier: 6C:43:21:DD:68:8B:68:6D:06:3C:6B:C5:02:B7:42:74:39:3C:6D:B2 Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019B390F503F3BF15FBF999FF334CD8B011E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft Manifest number: 0A67 Signing time: Sat 20 Dec 2025 00:01:03 +0000 Manifest this update: Sat 20 Dec 2025 00:01:03 +0000 Manifest next update: Sun 21 Dec 2025 00:01:03 +0000 Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 7LCon886t64UEElqchxM609y4HfCe+2WWYDR/6xKnr4=) 2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:50:3f:3b:f1:5f:bf:99:9f:f3:34:cd:8b:01:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Dec 20 00:01:03 2025 GMT Not After : Dec 21 00:01:03 2025 GMT Subject: CN=6c4321dd688b686d063c6bc502b74274393c6db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:66:a6:c3:56:85:90:2c:78:2d:df:f9:0e: 0e:b8:0f:ba:c7:79:09:06:4d:60:65:41:09:35:e4: 53:01:40:64:ae:c6:0f:1e:0b:a6:68:20:3c:6d:85: 6d:29:da:8b:29:52:5f:53:b2:bd:5a:91:c0:df:e6: b4:ad:d6:a0:c7:93:65:9a:ca:bd:b5:87:bd:e2:f2: 88:6d:69:9b:41:bb:72:b9:2d:ec:57:b9:df:71:30: 66:6f:1c:3e:8a:d1:08:e0:45:ad:3f:7d:a8:c8:43: 6e:7c:7d:9c:dd:d2:54:0f:3a:07:b4:19:7a:ef:46: 3e:ae:d3:6d:b4:71:fb:10:d6:54:4e:77:8d:ba:14: 5d:87:57:6e:2a:8b:42:d6:df:ff:f2:ef:c4:89:6a: ae:74:a0:bf:7c:5a:b0:fe:93:e2:5f:bf:c6:90:23: 53:b3:dd:8f:cf:51:29:aa:a2:dd:c1:31:79:61:4d: 9b:9c:1a:2d:25:89:48:31:c7:b6:13:bd:40:20:76: ba:e5:29:c7:bd:e1:a7:b6:28:dc:58:e1:99:3a:2d: 7a:b4:c4:56:3f:b1:98:86:c7:a5:b2:06:f5:b9:59: 24:09:bd:b7:af:57:c2:e4:47:ec:71:a5:17:da:49: 39:60:b9:50:5d:6b:3f:e3:1a:18:7a:e3:65:2c:a1: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:43:21:DD:68:8B:68:6D:06:3C:6B:C5:02:B7:42:74:39:3C:6D:B2 X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:95:c0:90:e2:cc:42:d8:5a:9e:03:8c:2c:f8:73:50:fd:10: 73:ae:10:65:86:47:05:ab:7d:98:4d:87:28:e6:25:11:89:76: 05:7e:17:0d:6c:b9:6c:6f:18:8a:3a:46:d6:23:a8:35:ab:d0: b8:20:19:56:51:66:91:4a:66:67:35:16:c7:0a:73:6b:21:d3: 78:73:bd:5c:19:c7:65:b1:20:ce:d6:04:89:3f:64:c4:f7:de: 40:40:5e:1a:25:1f:35:a2:20:81:01:28:cb:d2:ec:41:b2:58: 12:53:3c:15:89:ac:e4:ac:bb:64:df:29:22:a1:01:8a:dd:9a: 6f:84:a3:18:1a:61:0c:f7:92:da:a4:ff:5f:a9:98:7a:f8:a0: db:dc:8a:ee:b1:91:f4:25:bb:54:ca:e3:38:07:df:41:9c:f3: 88:11:52:53:bc:1e:47:ae:2e:c1:eb:d7:6b:0c:ce:74:64:42: 3c:c0:68:6a:d1:14:44:6b:97:eb:c8:50:c7:d9:8c:b6:cb:de: f8:96:f4:c8:9b:12:b5:73:1b:21:56:92:55:24:e7:81:68:a2: 43:5f:bf:e2:78:c9:ea:22:87:bf:fe:91:0d:91:35:cd:01:10: 72:98:b0:2c:2f:6c:83:cf:fc:c3:35:c5:48:1e:fd:29:8a:3e: 84:8b:72:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1A/O/Ffv5mf8zTNiwEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjUxMjIwMDAwMTAzWhcNMjUxMjIxMDAwMTAzWjAzMTEwLwYDVQQD Eyg2YzQzMjFkZDY4OGI2ODZkMDYzYzZiYzUwMmI3NDI3NDM5M2M2ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoxmpsNWhZAseC3f+Q4OuA+6x3kJ Bk1gZUEJNeRTAUBkrsYPHgumaCA8bYVtKdqLKVJfU7K9WpHA3+a0rdagx5Nlmsq9 tYe94vKIbWmbQbtyuS3sV7nfcTBmbxw+itEI4EWtP32oyENufH2c3dJUDzoHtBl6 70Y+rtNttHH7ENZUTneNuhRdh1duKotC1t//8u/EiWqudKC/fFqw/pPiX7/GkCNT s92Pz1EpqqLdwTF5YU2bnBotJYlIMce2E71AIHa65SnHveGntijcWOGZOi16tMRW P7GYhselsgb1uVkkCb23r1fC5EfscaUX2kk5YLlQXWs/4xoYeuNlLKFAfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxDId1oi2htBjxrxQK3QnQ5PG2yMB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZXAkOLM QthangOMLPhzUP0Qc64QZYZHBat9mE2HKOYlEYl2BX4XDWy5bG8YijpG1iOoNavQ uCAZVlFmkUpmZzUWxwpzayHTeHO9XBnHZbEgztYEiT9kxPfeQEBeGiUfNaIggQEo y9LsQbJYElM8FYms5Ky7ZN8pIqEBit2ab4SjGBphDPeS2qT/X6mYevig29yK7rGR 9CW7VMrjOAffQZzziBFSU7weR64uwevXawzOdGRCPMBoatEURGuX68hQx9mMtsve +Jb0yJsStXMbIVaSVSTngWiiQ1+/4njJ6iKHv/6RDZE1zQEQcpiwLC9sg8/8wzXF SB79KYo+hItyCg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:34:08 2025 by rpki-client