This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json) Hash identifier: HaCu5d3zYFv/OZgOhTuAkkHg5gDicRJmBqXbdj+THAY= Subject key identifier: 70:EB:48:1A:F7:68:66:09:C6:D9:D0:A6:64:18:41:13:6B:98:26:7D Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Certificate serial: 019B42804E4B3D1985404260DC91ABF7269A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft Manifest number: 0B23 Signing time: Sun 21 Dec 2025 20:01:03 +0000 Manifest this update: Sun 21 Dec 2025 20:01:03 +0000 Manifest next update: Mon 22 Dec 2025 20:01:03 +0000 Files and hashes: 1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: 5sN4ysDx4tIhif4AseOI7NDrXZ0NB8MF+/jEn21rd7Q=) 2: nsxr-ZEmdIF029lEL2jBOA29dhU.roa (hash: CXCtk7B2cvL2XBTY4M31Fepzk6WUvK7IZRfvv/B2wes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:4e:4b:3d:19:85:40:42:60:dc:91:ab:f7:26:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf Validity Not Before: Dec 21 20:01:03 2025 GMT Not After : Dec 22 20:01:03 2025 GMT Subject: CN=70eb481af7686609c6d9d0a6641841136b98267d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:a2:4e:9b:6c:34:13:d0:f4:88:3a:ab:c4: 81:be:11:28:dd:9b:01:6d:9c:14:42:85:39:2f:0a: 0a:fd:95:88:ff:cc:41:5e:07:96:fe:07:82:2a:cf: d5:6e:a6:d7:f3:98:bf:93:17:b3:bf:e3:e2:cc:0c: 72:b4:74:fc:a4:c6:83:1a:0b:25:23:67:e2:0a:37: 8e:b5:d6:37:69:30:2b:f4:d8:ca:01:1a:bc:14:cf: be:f5:07:45:a8:dc:a0:90:54:95:83:02:44:fe:6d: 23:91:32:78:14:2a:1e:d1:41:b2:46:d8:f2:79:62: 8a:e0:f7:44:97:83:90:0a:a3:6f:d0:b1:91:ab:f8: 53:fc:e4:92:65:0c:71:3e:76:5a:17:2d:03:61:ab: 32:45:e4:df:86:65:15:61:eb:ef:64:83:a1:f2:e7: 4f:e4:1c:27:65:2e:22:f7:30:6d:40:8f:dd:3f:93: c1:d1:d9:09:e2:42:6c:78:23:31:bc:b3:d4:73:64: cf:67:1e:27:f3:a0:e0:21:96:2e:dc:3f:5e:7c:63: d0:1a:17:c6:41:53:6c:3b:3a:5c:ee:84:5b:12:81: 22:ba:55:6f:3f:34:39:0a:84:47:9b:56:7e:21:f1: 1d:49:fc:49:cf:ba:24:db:24:7f:d1:08:47:1d:bb: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EB:48:1A:F7:68:66:09:C6:D9:D0:A6:64:18:41:13:6B:98:26:7D X509v3 Authority Key Identifier: keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:94:02:e9:28:38:02:0c:0a:fd:96:a0:ca:5d:96:69:73: e7:b3:a8:94:6b:94:ce:75:01:b6:c1:08:ab:73:d9:ff:65:ea: 69:49:85:4f:1d:96:ad:71:5c:bc:37:ec:d5:3c:3c:aa:3f:f8: 0a:8f:dd:1a:a3:3e:d0:f0:51:fe:5c:3c:6a:e2:3f:32:4a:82: 86:36:0e:34:d9:0a:40:30:88:d8:f2:7e:73:7f:6d:23:d7:7c: 8e:b4:69:eb:15:7d:a8:66:42:10:49:c2:98:47:48:04:f4:0c: a9:15:af:d5:0c:dd:58:f5:5d:a3:0b:14:82:59:44:6e:6a:6c: 94:99:e8:28:29:06:c7:6f:f8:e6:c3:ac:ee:64:a1:12:90:be: 3a:6d:4c:cc:1d:63:da:ec:ef:ef:56:d0:b8:0b:b7:f3:48:0d: be:d3:c9:2e:17:c0:00:b9:4d:1a:9f:d7:01:a5:d4:fc:37:b8: 8b:1e:42:a9:a6:46:6a:38:fc:b4:a3:03:b2:e4:f9:b7:20:06: d6:79:39:04:eb:87:66:10:e0:e4:65:aa:ee:c0:25:55:5d:62: 9b:a9:fa:e2:54:8b:89:b2:6c:e1:38:7e:99:75:ab:aa:89:3b: 45:48:95:b3:4f:6b:39:43:ef:6c:b2:b1:bd:de:59:9e:b5:e0: 19:14:0d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgE5LPRmFQEJg3JGr9yaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNWMxMGY4NGRjMjI5MzdlZjZkMTVlYjcxYmJiNGE1MzA4 MTYyYmYwHhcNMjUxMjIxMjAwMTAzWhcNMjUxMjIyMjAwMTAzWjAzMTEwLwYDVQQD Eyg3MGViNDgxYWY3Njg2NjA5YzZkOWQwYTY2NDE4NDExMzZiOTgyNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWiTptsNBPQ9Ig6q8SBvhEo3ZsB bZwUQoU5LwoK/ZWI/8xBXgeW/geCKs/VbqbX85i/kxezv+PizAxytHT8pMaDGgsl I2fiCjeOtdY3aTAr9NjKARq8FM++9QdFqNygkFSVgwJE/m0jkTJ4FCoe0UGyRtjy eWKK4PdEl4OQCqNv0LGRq/hT/OSSZQxxPnZaFy0DYasyReTfhmUVYevvZIOh8udP 5BwnZS4i9zBtQI/dP5PB0dkJ4kJseCMxvLPUc2TPZx4n86DgIZYu3D9efGPQGhfG QVNsOzpc7oRbEoEiulVvPzQ5CoRHm1Z+IfEdSfxJz7ok2yR/0QhHHbvtVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDrSBr3aGYJxtnQpmQYQRNrmCZ9MB8GA1UdIwQY MBaAFEFcEPhNwik3720V63G7tKUwgWK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUt YzZiNmZkMTJjZTI3LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YzU3ZTctN2JhOC00YTYyLThkMTUtYzZiNmZkMTJjZTI3 LzEvUVZ3US1FM0NLVGZ2YlJYcmNidTBwVENCWXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1iUAuko OAIMCv2WoMpdlmlz57OolGuUznUBtsEIq3PZ/2XqaUmFTx2WrXFcvDfs1Tw8qj/4 Co/dGqM+0PBR/lw8auI/MkqChjYONNkKQDCI2PJ+c39tI9d8jrRp6xV9qGZCEEnC mEdIBPQMqRWv1QzdWPVdowsUgllEbmpslJnoKCkGx2/45sOs7mShEpC+Om1MzB1j 2uzv71bQuAu380gNvtPJLhfAALlNGp/XAaXU/De4ix5CqaZGajj8tKMDsuT5tyAG 1nk5BOuHZhDg5GWq7sAlVV1im6n64lSLibJs4Th+mXWrqok7RUiVs09rOUPvbLKx vd5ZnrXgGRQN/w== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:32 2025 by rpki-client