This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: z4D4uxBJP06wSKuTH9hBeE/xjER5vLZYoomdloKxIZA=
Subject key identifier: 17:EB:8C:1C:85:52:EC:14:73:5C:2D:BD:4A:E5:40:92:64:BA:94:19
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019B44A543705835C8D1B6AB783FB49EFC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 178E
Signing time: Mon 22 Dec 2025 06:00:39 +0000
Manifest this update: Mon 22 Dec 2025 06:00:39 +0000
Manifest next update: Tue 23 Dec 2025 06:00:39 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: THGKWQslkzJbqRqBzj8nA5e6VxV9xnKvxtnNC5JadNI=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:a5:43:70:58:35:c8:d1:b6:ab:78:3f:b4:9e:fc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Dec 22 06:00:39 2025 GMT
Not After : Dec 23 06:00:39 2025 GMT
Subject: CN=17eb8c1c8552ec14735c2dbd4ae5409264ba9419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:70:3a:1b:9c:92:09:7d:00:6d:79:72:9e:
c5:8c:80:c2:3a:4e:8e:9a:01:62:20:9c:85:ba:19:
d5:0c:78:84:32:6a:08:3a:be:b2:ec:a6:65:a5:cc:
5a:77:0e:93:f3:05:28:84:34:64:24:64:5a:96:88:
aa:ea:d9:45:d6:2f:cc:03:88:a0:58:e1:20:a9:82:
d2:7f:3c:f2:ae:3e:be:43:7c:88:35:bc:bb:d2:63:
cb:d7:b3:29:dc:ce:0d:3b:40:cc:3a:62:eb:53:17:
19:2f:e7:f7:bb:23:21:04:0c:9f:ca:10:b1:cb:69:
dd:84:3a:db:4d:57:93:55:7d:68:29:3d:dc:99:cd:
78:cc:e1:a2:c4:73:22:8b:86:cc:6c:86:7d:2e:32:
40:69:b9:44:60:b4:d8:8e:fb:fd:92:05:d0:78:61:
fb:c6:cb:cb:c2:0f:d5:26:2d:6b:12:74:84:02:d6:
53:a0:54:29:9a:ee:e3:95:dd:40:21:74:02:99:77:
37:f3:2e:3b:15:e6:f3:d3:16:ed:cb:37:11:d2:20:
bb:65:dd:d7:e5:c4:d3:57:19:11:38:54:35:f6:35:
e6:ca:cc:38:a6:63:83:08:3e:1e:f5:ff:7a:88:89:
74:c6:dc:9f:5b:99:f4:a0:14:78:13:ec:3b:50:af:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:8C:1C:85:52:EC:14:73:5C:2D:BD:4A:E5:40:92:64:BA:94:19
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:37:50:c2:51:b9:b2:c6:b5:4e:ee:f5:0c:07:f4:ce:11:90:
f8:85:9c:83:3a:f4:d8:16:98:c0:88:80:fc:9c:78:aa:3f:99:
40:90:2c:ba:cc:ee:3b:f6:b7:d2:9a:bb:9b:19:d3:65:4c:68:
b0:80:f8:f3:ce:55:4e:11:3f:c1:46:cb:9b:54:54:4c:13:42:
31:5f:1d:9e:8c:a7:34:10:55:34:36:bc:d1:cc:3d:92:f3:14:
c7:f0:c1:e4:43:3c:95:49:eb:71:d8:15:ca:78:36:37:48:ad:
7f:65:08:72:87:db:df:f9:17:55:8b:f8:31:1a:22:68:a7:34:
13:12:ff:b8:26:aa:4f:d7:28:28:6d:b7:81:6e:6d:dc:0d:98:
08:14:1d:64:21:9f:e9:df:a3:89:03:a9:52:91:46:96:11:9c:
22:86:1c:f3:12:53:a4:f5:5f:ba:b6:2d:52:40:24:8a:db:1a:
fc:df:47:b7:a2:a6:d5:f6:87:38:6a:57:e5:2a:7d:22:74:68:
6b:b3:f1:a7:a3:a5:f8:ac:c0:27:76:62:97:54:c0:d0:06:84:
b1:ff:86:12:6b:74:fa:a9:56:a1:7b:4f:3b:3c:b6:fb:2e:b5:
77:4d:e3:22:98:92:48:29:6c:dc:79:61:8e:33:00:d8:44:12:
32:01:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:12:14 2025 by rpki-client