This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json) Hash identifier: DVRn3YqWxaSXcJ9TH6yYfJ1SMZxYUPYcamf/Nzh5BXE= Subject key identifier: 44:5C:86:14:1B:0D:7E:3B:36:E3:56:07:92:79:CF:75:DF:FD:F4:A9 Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Certificate serial: 019B40FFCE946CAB0B13D99C78C6EE8302BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 13:01:04 +0000 Manifest this update: Sun 21 Dec 2025 13:01:04 +0000 Manifest next update: Mon 22 Dec 2025 13:01:04 +0000 Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: +STnke2T3AVCPFAfGPMkViJBZVS2e/nJ8vIL2i2imUU=) 2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=) 3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:ce:94:6c:ab:0b:13:d9:9c:78:c6:ee:83:02:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Validity Not Before: Dec 21 13:01:04 2025 GMT Not After : Dec 22 13:01:04 2025 GMT Subject: CN=445c86141b0d7e3b36e356079279cf75dffdf4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:2b:25:b6:0c:d6:ef:d1:3a:c9:9d:54:65: 8e:43:c5:44:30:dc:17:47:10:bb:88:5d:eb:dc:db: a1:ea:a8:24:4f:b6:51:82:f5:f1:e7:92:29:18:67: 77:5b:13:2d:5a:19:0f:14:81:2e:0d:bd:28:ba:ee: f6:5c:66:a3:89:8b:4f:e1:65:ff:43:27:00:ef:b0: 12:bd:13:c1:c1:d0:b0:f0:b2:92:2d:a0:a2:49:32: a7:07:c8:61:92:53:dd:ed:bb:11:e0:2d:43:91:c8: aa:ec:5b:8c:e9:a0:c8:ca:f1:6c:77:4e:4d:c5:7f: 88:d3:7a:e4:2d:69:81:3c:b1:af:f8:1b:5c:be:b7: da:ee:33:33:52:ab:ab:02:11:e9:8f:db:2f:ee:9b: 08:64:6a:df:1c:6b:50:76:0e:da:78:27:e8:76:44: ac:6c:6f:da:ee:71:6b:0b:d7:e7:60:2e:af:56:c3: 5c:89:e0:aa:11:e9:aa:81:c1:45:34:70:76:f8:13: fc:78:d0:3e:37:ab:89:84:97:2a:0c:d0:ac:a8:c3: 06:ca:b3:f8:c4:2d:60:06:3e:e9:39:c2:8a:4c:33: 1b:4b:1d:6f:fe:37:c3:36:a3:75:c6:de:b7:28:27: 55:76:d0:37:a1:af:73:36:9b:68:6a:ff:68:c5:fc: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:86:14:1B:0D:7E:3B:36:E3:56:07:92:79:CF:75:DF:FD:F4:A9 X509v3 Authority Key Identifier: keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:5f:5a:0c:85:97:d1:15:8f:67:c3:86:2b:88:29:62:d1: 61:cf:39:35:55:23:0b:3f:6f:a7:68:53:d7:71:eb:78:ab:19: 11:43:1e:be:59:59:61:5b:4c:73:4a:e7:32:00:8e:50:8b:81: e2:3a:a3:01:d6:17:c9:4b:05:46:34:e6:ca:32:94:ef:a4:6d: 00:7b:28:13:ab:38:ee:3a:9a:90:b9:4a:d1:fe:c3:df:43:b9: 51:ba:25:43:89:40:5e:0f:7c:df:0c:bd:58:3d:65:75:7f:ea: 53:4c:80:aa:9e:3c:0a:7e:05:f4:c7:80:cc:03:9d:f7:36:0f: e4:81:e1:fa:3a:00:b2:d8:d0:7a:ea:95:6b:3f:90:f7:77:16: 22:a4:b8:53:fc:b0:89:0c:8b:64:bc:e6:b1:d4:86:7b:c3:66: 91:19:aa:0e:20:60:ec:3f:76:79:f3:db:0c:72:24:69:3b:6e: 51:0d:84:ac:1f:4b:55:ce:2f:09:3d:e8:8c:2c:23:e6:9e:22: 41:60:f4:01:4c:4a:19:f7:0d:67:56:fd:af:ba:91:d5:f7:68: c7:0d:19:d8:ae:53:f1:13:e9:5c:31:86:65:8b:bc:b3:5b:3b: 1a:bb:fb:a4:16:6c:32:df:a6:3c:86:53:dc:f2:ee:26:34:de: 4e:7f:83:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/86UbKsLE9mceMbugwK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2 NzllZTEwHhcNMjUxMjIxMTMwMTA0WhcNMjUxMjIyMTMwMTA0WjAzMTEwLwYDVQQD Eyg0NDVjODYxNDFiMGQ3ZTNiMzZlMzU2MDc5Mjc5Y2Y3NWRmZmRmNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywrJbYM1u/ROsmdVGWOQ8VEMNwX RxC7iF3r3Nuh6qgkT7ZRgvXx55IpGGd3WxMtWhkPFIEuDb0ouu72XGajiYtP4WX/ QycA77ASvRPBwdCw8LKSLaCiSTKnB8hhklPd7bsR4C1Dkciq7FuM6aDIyvFsd05N xX+I03rkLWmBPLGv+Btcvrfa7jMzUqurAhHpj9sv7psIZGrfHGtQdg7aeCfodkSs bG/a7nFrC9fnYC6vVsNcieCqEemqgcFFNHB2+BP8eNA+N6uJhJcqDNCsqMMGyrP4 xC1gBj7pOcKKTDMbSx1v/jfDNqN1xt63KCdVdtA3oa9zNptoav9oxfw+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERchhQbDX47NuNWB5J5z3Xf/fSpMB8GA1UdIwQY MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeFfWgyF l9EVj2fDhiuIKWLRYc85NVUjCz9vp2hT13HreKsZEUMevllZYVtMc0rnMgCOUIuB 4jqjAdYXyUsFRjTmyjKU76RtAHsoE6s47jqakLlK0f7D30O5UbolQ4lAXg983wy9 WD1ldX/qU0yAqp48Cn4F9MeAzAOd9zYP5IHh+joAstjQeuqVaz+Q93cWIqS4U/yw iQyLZLzmsdSGe8NmkRmqDiBg7D92efPbDHIkaTtuUQ2ErB9LVc4vCT3ojCwj5p4i QWD0AUxKGfcNZ1b9r7qR1fdoxw0Z2K5T8RPpXDGGZYu8s1s7Grv7pBZsMt+mPIZT 3PLuJjTeTn+DhA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:07 2025 by rpki-client