This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json) Hash identifier: Irv6kuYgG+ulABXCMeANxQjLjKIgrz+7oMW9BzOfQB8= Subject key identifier: 31:8E:D0:8D:2B:C2:C7:43:9E:37:45:36:C6:0A:0E:AD:36:48:FB:8C Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019B48828103B6BD6520C57701FC4CDF341A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft Manifest number: 0A6F Signing time: Tue 23 Dec 2025 00:01:10 +0000 Manifest this update: Tue 23 Dec 2025 00:01:10 +0000 Manifest next update: Wed 24 Dec 2025 00:01:10 +0000 Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: luX7FU/qRXExumbVsnw/nooJaHOa5y3yYOUg8/Vh47k=) 2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:81:03:b6:bd:65:20:c5:77:01:fc:4c:df:34:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Dec 23 00:01:10 2025 GMT Not After : Dec 24 00:01:10 2025 GMT Subject: CN=318ed08d2bc2c7439e374536c60a0ead3648fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:3e:65:d1:c4:81:93:82:bd:d6:d8:19:80: fc:a4:2f:20:6f:79:c1:78:64:21:aa:0d:f8:89:14: f3:12:03:0c:13:15:c2:5e:21:67:ba:1f:3c:0b:1e: 88:05:15:03:c1:4d:42:21:a2:4a:b1:fd:10:2a:9c: 8f:f2:fd:ef:88:02:58:41:a2:20:39:d7:ab:bd:83: 75:e1:49:d3:0e:d9:ac:69:97:4e:81:3a:b0:57:49: 6f:f0:ff:59:c6:c8:08:b1:8f:b8:55:50:ce:5e:69: 19:e4:ac:e5:fb:28:44:0c:b2:49:ff:d0:21:38:87: 3e:db:af:0c:e4:17:71:8e:ba:47:9e:a8:fe:7d:63: 7d:81:63:f5:60:bf:22:39:a2:89:62:1a:7c:b3:f9: e4:43:2f:d4:17:85:4e:80:f8:38:4f:76:e3:be:d5: 46:ed:a5:ab:b6:d7:5c:f2:23:57:59:86:19:a4:ba: 24:44:e9:c8:75:57:3c:81:f1:b1:3c:4b:69:0b:d7: 75:1f:20:d7:41:eb:9b:f6:a9:0c:ee:cd:8e:20:2d: c3:04:a6:69:fd:3e:4c:94:45:ae:cf:e6:87:31:5b: af:8c:8b:a3:65:87:fd:ec:63:45:fc:cb:af:bd:12: da:7a:eb:5f:f6:cc:0e:eb:a9:62:76:4a:ce:50:63: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8E:D0:8D:2B:C2:C7:43:9E:37:45:36:C6:0A:0E:AD:36:48:FB:8C X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e9:5d:1e:87:9a:31:cf:a9:25:3a:85:78:18:f4:8d:c1:0c: 4b:de:35:14:3f:91:09:be:68:26:c0:98:92:a1:c5:1a:c8:80: f7:e4:ef:bb:1c:6d:f4:1d:e1:a8:68:cf:dc:f1:f3:5b:3c:73: 28:7b:9b:6b:ac:b2:5b:1a:07:46:1c:0e:13:df:dd:75:00:a3: 39:1e:5e:2d:95:b2:fc:c5:95:4b:e7:fd:c1:3d:91:a1:f6:72: 5d:9a:3b:ba:51:e6:a6:f5:05:30:d0:d8:21:5b:04:09:00:ef: b5:54:e4:3a:21:e0:dc:71:46:2f:41:b7:3a:08:8d:b5:0a:fa: dd:8a:d1:9d:61:cc:91:83:c4:f8:d2:db:61:37:03:e0:6b:fa: c1:25:d9:ca:25:2e:41:45:50:9e:bf:f8:97:fc:48:db:87:33: 0a:17:e5:fb:85:c5:29:b0:78:16:7a:2b:59:dd:9d:57:91:8f: 7a:04:d6:6c:54:68:73:91:55:4e:80:65:7d:da:4b:01:df:46: fc:ca:16:03:65:d7:9d:a7:94:2c:ec:41:36:ee:8f:fe:8e:87: 27:47:a5:05:8e:8e:8b:5f:5e:10:9e:c0:f7:e5:e8:3b:52:53: d0:62:84:dc:63:85:89:69:35:5c:c9:21:56:74:f8:bd:1f:a7: 68:1e:b9:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgoEDtr1lIMV3AfxM3zQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjUxMjIzMDAwMTEwWhcNMjUxMjI0MDAwMTEwWjAzMTEwLwYDVQQD EygzMThlZDA4ZDJiYzJjNzQzOWUzNzQ1MzZjNjBhMGVhZDM2NDhmYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eo+ZdHEgZOCvdbYGYD8pC8gb3nB eGQhqg34iRTzEgMMExXCXiFnuh88Cx6IBRUDwU1CIaJKsf0QKpyP8v3viAJYQaIg OdervYN14UnTDtmsaZdOgTqwV0lv8P9ZxsgIsY+4VVDOXmkZ5Kzl+yhEDLJJ/9Ah OIc+268M5BdxjrpHnqj+fWN9gWP1YL8iOaKJYhp8s/nkQy/UF4VOgPg4T3bjvtVG 7aWrttdc8iNXWYYZpLokROnIdVc8gfGxPEtpC9d1HyDXQeub9qkM7s2OIC3DBKZp /T5MlEWuz+aHMVuvjIujZYf97GNF/MuvvRLaeutf9swO66lidkrOUGPXWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGO0I0rwsdDnjdFNsYKDq02SPuMMB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeldHoea Mc+pJTqFeBj0jcEMS941FD+RCb5oJsCYkqHFGsiA9+Tvuxxt9B3hqGjP3PHzWzxz KHuba6yyWxoHRhwOE9/ddQCjOR5eLZWy/MWVS+f9wT2RofZyXZo7ulHmpvUFMNDY IVsECQDvtVTkOiHg3HFGL0G3OgiNtQr63YrRnWHMkYPE+NLbYTcD4Gv6wSXZyiUu QUVQnr/4l/xI24czChfl+4XFKbB4FnorWd2dV5GPegTWbFRoc5FVToBlfdpLAd9G /MoWA2XXnaeULOxBNu6P/o6HJ0elBY6Oi19eEJ7A9+XoO1JT0GKE3GOFiWk1XMkh VnT4vR+naB65ww== -----END CERTIFICATE-----Generated at Tue Dec 23 06:04:31 2025 by rpki-client