This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json) Hash identifier: z4D4uxBJP06wSKuTH9hBeE/xjER5vLZYoomdloKxIZA= Subject key identifier: 17:EB:8C:1C:85:52:EC:14:73:5C:2D:BD:4A:E5:40:92:64:BA:94:19 Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019B44A543705835C8D1B6AB783FB49EFC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 06:00:39 +0000 Manifest this update: Mon 22 Dec 2025 06:00:39 +0000 Manifest next update: Tue 23 Dec 2025 06:00:39 +0000 Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: THGKWQslkzJbqRqBzj8nA5e6VxV9xnKvxtnNC5JadNI=) 2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:43:70:58:35:c8:d1:b6:ab:78:3f:b4:9e:fc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Dec 22 06:00:39 2025 GMT Not After : Dec 23 06:00:39 2025 GMT Subject: CN=17eb8c1c8552ec14735c2dbd4ae5409264ba9419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a7:70:3a:1b:9c:92:09:7d:00:6d:79:72:9e: c5:8c:80:c2:3a:4e:8e:9a:01:62:20:9c:85:ba:19: d5:0c:78:84:32:6a:08:3a:be:b2:ec:a6:65:a5:cc: 5a:77:0e:93:f3:05:28:84:34:64:24:64:5a:96:88: aa:ea:d9:45:d6:2f:cc:03:88:a0:58:e1:20:a9:82: d2:7f:3c:f2:ae:3e:be:43:7c:88:35:bc:bb:d2:63: cb:d7:b3:29:dc:ce:0d:3b:40:cc:3a:62:eb:53:17: 19:2f:e7:f7:bb:23:21:04:0c:9f:ca:10:b1:cb:69: dd:84:3a:db:4d:57:93:55:7d:68:29:3d:dc:99:cd: 78:cc:e1:a2:c4:73:22:8b:86:cc:6c:86:7d:2e:32: 40:69:b9:44:60:b4:d8:8e:fb:fd:92:05:d0:78:61: fb:c6:cb:cb:c2:0f:d5:26:2d:6b:12:74:84:02:d6: 53:a0:54:29:9a:ee:e3:95:dd:40:21:74:02:99:77: 37:f3:2e:3b:15:e6:f3:d3:16:ed:cb:37:11:d2:20: bb:65:dd:d7:e5:c4:d3:57:19:11:38:54:35:f6:35: e6:ca:cc:38:a6:63:83:08:3e:1e:f5:ff:7a:88:89: 74:c6:dc:9f:5b:99:f4:a0:14:78:13:ec:3b:50:af: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:8C:1C:85:52:EC:14:73:5C:2D:BD:4A:E5:40:92:64:BA:94:19 X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:37:50:c2:51:b9:b2:c6:b5:4e:ee:f5:0c:07:f4:ce:11:90: f8:85:9c:83:3a:f4:d8:16:98:c0:88:80:fc:9c:78:aa:3f:99: 40:90:2c:ba:cc:ee:3b:f6:b7:d2:9a:bb:9b:19:d3:65:4c:68: b0:80:f8:f3:ce:55:4e:11:3f:c1:46:cb:9b:54:54:4c:13:42: 31:5f:1d:9e:8c:a7:34:10:55:34:36:bc:d1:cc:3d:92:f3:14: c7:f0:c1:e4:43:3c:95:49:eb:71:d8:15:ca:78:36:37:48:ad: 7f:65:08:72:87:db:df:f9:17:55:8b:f8:31:1a:22:68:a7:34: 13:12:ff:b8:26:aa:4f:d7:28:28:6d:b7:81:6e:6d:dc:0d:98: 08:14:1d:64:21:9f:e9:df:a3:89:03:a9:52:91:46:96:11:9c: 22:86:1c:f3:12:53:a4:f5:5f:ba:b6:2d:52:40:24:8a:db:1a: fc:df:47:b7:a2:a6:d5:f6:87:38:6a:57:e5:2a:7d:22:74:68: 6b:b3:f1:a7:a3:a5:f8:ac:c0:27:76:62:97:54:c0:d0:06:84: b1:ff:86:12:6b:74:fa:a9:56:a1:7b:4f:3b:3c:b6:fb:2e:b5: 77:4d:e3:22:98:92:48:29:6c:dc:79:61:8e:33:00:d8:44:12: 32:01:9d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpUNwWDXI0bareD+0nvwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjUxMjIyMDYwMDM5WhcNMjUxMjIzMDYwMDM5WjAzMTEwLwYDVQQD EygxN2ViOGMxYzg1NTJlYzE0NzM1YzJkYmQ0YWU1NDA5MjY0YmE5NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76dwOhuckgl9AG15cp7FjIDCOk6O mgFiIJyFuhnVDHiEMmoIOr6y7KZlpcxadw6T8wUohDRkJGRaloiq6tlF1i/MA4ig WOEgqYLSfzzyrj6+Q3yINby70mPL17Mp3M4NO0DMOmLrUxcZL+f3uyMhBAyfyhCx y2ndhDrbTVeTVX1oKT3cmc14zOGixHMii4bMbIZ9LjJAablEYLTYjvv9kgXQeGH7 xsvLwg/VJi1rEnSEAtZToFQpmu7jld1AIXQCmXc38y47Febz0xbtyzcR0iC7Zd3X 5cTTVxkROFQ19jXmysw4pmODCD4e9f96iIl0xtyfW5n0oBR4E+w7UK/k1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfrjByFUuwUc1wtvUrlQJJkupQZMB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjdQwlG5 ssa1Tu71DAf0zhGQ+IWcgzr02BaYwIiA/Jx4qj+ZQJAsuszuO/a30pq7mxnTZUxo sID4885VThE/wUbLm1RUTBNCMV8dnoynNBBVNDa80cw9kvMUx/DB5EM8lUnrcdgV yng2N0itf2UIcofb3/kXVYv4MRoiaKc0ExL/uCaqT9coKG23gW5t3A2YCBQdZCGf 6d+jiQOpUpFGlhGcIoYc8xJTpPVfurYtUkAkitsa/N9Ht6Km1faHOGpX5Sp9InRo a7Pxp6Ol+KzAJ3Zil1TA0AaEsf+GEmt0+qlWoXtPOzy2+y61d03jIpiSSCls3Hlh jjMA2EQSMgGdeA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:12:14 2025 by rpki-client