This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json) Hash identifier: qcawIPT6DTWLkjrWDxlnPDeHmtLu8nQu9PpPWt9UOhc= Subject key identifier: E8:D5:7D:E8:44:86:77:3A:78:FC:35:3E:DE:0C:E4:75:F1:3B:73:AE Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019B3CEBDCF9E1A803FCE97FF802D130A8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft Manifest number: 0A69 Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: B9sSUxMJZQBqCkPsc6XRoJ2YL+AUAMl2daMr/T2YgyY=) 2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:dc:f9:e1:a8:03:fc:e9:7f:f8:02:d1:30:a8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=e8d57de84486773a78fc353ede0ce475f13b73ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:5c:bb:d2:20:4e:08:aa:05:d4:17:99:b0: a3:8b:c3:e4:a6:25:92:4e:b0:c4:4f:c4:56:53:39: 94:10:60:3a:aa:47:26:90:a2:0e:86:5a:a1:cc:16: 68:74:43:a9:2a:3c:8c:9f:8d:04:54:7f:bf:7a:23: 3e:25:ee:9f:7f:b9:7c:fc:4f:cd:78:06:99:66:25: cc:08:f3:5c:e6:87:8f:79:4d:c0:4d:fc:0f:2a:d6: d1:d0:ec:68:7f:80:9a:51:e0:bc:8a:69:49:35:b3: 17:dc:96:25:90:75:2c:e8:6e:07:e1:33:23:79:98: e3:39:4d:b9:9f:71:c5:54:b0:66:f5:48:f5:04:cb: a8:b2:2a:0a:c1:31:26:8e:d8:a3:3d:f4:83:6d:a9: 56:6f:d7:4e:81:a3:e1:02:7a:5b:e5:a5:38:f7:0a: dc:fb:d8:8d:96:62:76:cf:8c:96:d7:5b:96:42:37: 96:a0:eb:30:b6:dd:82:f3:f0:e1:6f:7f:58:19:e8: 99:7c:e8:04:5d:c9:03:9d:53:6f:9e:12:e0:96:54: 1e:fb:e9:1b:be:5a:bd:4d:c4:27:60:60:91:24:46: c4:75:74:16:db:a1:a7:69:36:69:5c:2c:89:23:1d: 93:cf:b2:4e:9f:54:7b:fd:eb:8d:65:bc:ec:44:02: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:7D:E8:44:86:77:3A:78:FC:35:3E:DE:0C:E4:75:F1:3B:73:AE X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:a0:8f:bf:92:60:f9:13:7d:2e:a1:93:46:ba:cc:57:4b: b1:18:3e:23:fe:15:ca:d6:da:ea:37:cc:a7:ea:e9:0c:de:d2: 63:10:6c:24:e9:4d:ef:0e:67:5e:30:99:da:9f:16:d0:92:84: 6a:a0:57:c4:43:ea:8c:7c:a7:93:63:37:1a:a9:af:46:65:73: b4:b4:48:8f:74:d0:96:00:1c:3b:01:ca:b3:e5:81:ae:49:0d: 6b:39:3c:0b:8d:61:2a:4f:42:64:3d:9c:52:8d:b0:3d:ea:e0: 8c:01:19:da:08:af:a8:55:c8:23:05:c1:2f:0e:d7:97:df:c5: f4:b9:9b:04:7e:3e:0c:be:e6:fb:d9:0b:c9:5a:fc:23:d6:00: c2:2d:52:bf:68:e7:fb:26:44:a8:1a:16:7f:b8:46:39:62:5d: 6d:0f:5b:fd:d5:38:6c:81:aa:48:6c:3e:07:d2:6b:74:57:5c: 84:61:48:20:c6:03:2f:73:5f:a1:62:e2:d1:f4:e5:05:64:0d: 1f:ca:16:17:13:0c:5e:1d:51:9e:2f:3e:49:b3:83:85:c7:c3: 01:a2:2d:3b:9b:9c:71:30:fb:88:7c:3e:68:17:2f:a2:3c:ea: 36:a9:95:32:05:b3:9f:ac:e9:b1:91:7f:7c:81:16:66:22:51: ce:6a:46:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869z54agD/Ol/+ALRMKjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD EyhlOGQ1N2RlODQ0ODY3NzNhNzhmYzM1M2VkZTBjZTQ3NWYxM2I3M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGpcu9IgTgiqBdQXmbCji8PkpiWS TrDET8RWUzmUEGA6qkcmkKIOhlqhzBZodEOpKjyMn40EVH+/eiM+Je6ff7l8/E/N eAaZZiXMCPNc5oePeU3ATfwPKtbR0Oxof4CaUeC8imlJNbMX3JYlkHUs6G4H4TMj eZjjOU25n3HFVLBm9Uj1BMuosioKwTEmjtijPfSDbalWb9dOgaPhAnpb5aU49wrc +9iNlmJ2z4yW11uWQjeWoOswtt2C8/Dhb39YGeiZfOgEXckDnVNvnhLgllQe++kb vlq9TcQnYGCRJEbEdXQW26GnaTZpXCyJIx2Tz7JOn1R7/euNZbzsRALhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjVfehEhnc6ePw1Pt4M5HXxO3OuMB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXagj7+S YPkTfS6hk0a6zFdLsRg+I/4Vytba6jfMp+rpDN7SYxBsJOlN7w5nXjCZ2p8W0JKE aqBXxEPqjHynk2M3GqmvRmVztLRIj3TQlgAcOwHKs+WBrkkNazk8C41hKk9CZD2c Uo2wPergjAEZ2givqFXIIwXBLw7Xl9/F9LmbBH4+DL7m+9kLyVr8I9YAwi1Sv2jn +yZEqBoWf7hGOWJdbQ9b/dU4bIGqSGw+B9JrdFdchGFIIMYDL3NfoWLi0fTlBWQN H8oWFxMMXh1Rni8+SbODhcfDAaItO5uccTD7iHw+aBcvojzqNqmVMgWzn6zpsZF/ fIEWZiJRzmpGOw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:36 2025 by rpki-client