This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json) Hash identifier: 6cjqhoZKbXhBogwMFffO42sfL79ZwwcJw70T/8jyGZQ= Subject key identifier: 14:45:C4:02:29:90:00:CC:09:16:76:50:0B:51:53:75:B7:22:E5:B8 Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Certificate serial: 019B3D90C6DCCF0619934D4DD6C358D89C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft Manifest number: 13D8 Signing time: Sat 20 Dec 2025 21:00:56 +0000 Manifest this update: Sat 20 Dec 2025 21:00:56 +0000 Manifest next update: Sun 21 Dec 2025 21:00:56 +0000 Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 5ycd6lkG3HADyz6APlRHyyhNBbg/tgG/f4ZAR0Gqj18=) 2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c6:dc:cf:06:19:93:4d:4d:d6:c3:58:d8:9c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7 Validity Not Before: Dec 20 21:00:56 2025 GMT Not After : Dec 21 21:00:56 2025 GMT Subject: CN=1445c402299000cc091676500b515375b722e5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:d8:09:54:0b:60:87:58:c9:64:8b:02:1c: 0c:f2:73:75:20:20:73:e6:74:cf:7b:ba:8a:ba:66: c1:f4:c8:c8:60:d0:85:a0:3d:db:62:5e:b6:73:f8: c9:ec:a5:10:f6:e2:54:f6:ac:f3:40:56:25:e5:94: 3d:25:89:f2:63:bd:23:09:4c:bd:c6:75:9b:8c:a1: 27:de:d6:e6:14:b8:00:f8:e5:c3:a9:de:67:e5:a0: 68:dc:94:82:74:f7:c5:89:de:0a:a8:67:85:10:41: 64:5d:98:4f:39:aa:6a:41:20:f0:46:62:d6:3b:bc: d5:86:65:e3:fc:f0:5f:8a:70:4b:d3:6f:52:d9:f8: 33:50:d8:30:56:70:63:aa:be:2b:a8:a5:68:44:59: 97:81:82:47:0a:70:51:cf:db:e3:27:a3:ba:06:53: a1:65:d5:6b:6a:30:62:c1:2d:46:d4:8d:5a:15:e2: cf:33:4a:f4:5f:b6:fd:99:2e:2f:cc:59:80:15:38: d4:5c:5d:0c:63:b4:b7:8f:94:84:87:fa:c2:ed:c5: 38:b3:cc:21:13:cb:eb:57:db:7d:c6:10:f9:01:0b: a5:61:21:9b:02:5e:41:5d:d5:00:22:31:22:59:98: 47:08:75:5c:61:62:a1:16:0e:95:00:0a:92:bc:eb: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:C4:02:29:90:00:CC:09:16:76:50:0B:51:53:75:B7:22:E5:B8 X509v3 Authority Key Identifier: keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:09:68:ee:17:8c:c9:59:fb:02:f0:4e:4d:2f:bd:3d:88:07: a8:8e:52:60:22:61:1e:3b:9c:cc:4b:09:3d:17:33:d8:27:6d: 4c:81:2b:16:8c:05:50:31:f7:70:e6:ac:dc:41:aa:d8:f7:5f: 3c:78:bc:fa:46:2e:92:de:5e:6b:c5:a6:3a:8b:0b:ef:00:19: d1:22:15:54:d1:f9:9d:05:90:c6:5e:50:20:fa:b0:fb:fd:a3: 7e:07:f7:60:44:8d:b2:b8:ee:15:db:cb:dc:c9:5b:d0:5c:e0: f9:02:a9:e8:aa:e5:8f:f9:5f:cb:20:e0:52:13:a7:bd:a4:fd: 27:8b:31:c7:00:8d:e2:58:92:1a:94:c1:99:e2:52:d7:c0:45: 7a:4e:da:7e:92:98:65:cf:87:f4:35:d5:59:15:d5:e1:63:80: 6f:36:cd:3e:fc:da:34:57:de:72:71:0e:ac:f4:d8:e8:d2:09: 4c:33:43:12:0f:25:a1:e5:18:19:d5:05:b9:d5:8d:f0:d4:fa: b6:3d:06:c2:ea:55:37:a4:e6:f8:cd:30:3a:c9:48:d3:62:f4: 4d:94:6c:cb:42:e3:74:78:90:c7:d7:94:8e:17:0d:2b:87:6e: ed:01:09:b7:b9:a4:fc:62:15:da:bc:18:bd:67:ef:03:4b:38: 88:cf:ed:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMbczwYZk01N1sNY2JyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1 OGIzZTcwHhcNMjUxMjIwMjEwMDU2WhcNMjUxMjIxMjEwMDU2WjAzMTEwLwYDVQQD EygxNDQ1YzQwMjI5OTAwMGNjMDkxNjc2NTAwYjUxNTM3NWI3MjJlNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MrYCVQLYIdYyWSLAhwM8nN1ICBz 5nTPe7qKumbB9MjIYNCFoD3bYl62c/jJ7KUQ9uJU9qzzQFYl5ZQ9JYnyY70jCUy9 xnWbjKEn3tbmFLgA+OXDqd5n5aBo3JSCdPfFid4KqGeFEEFkXZhPOapqQSDwRmLW O7zVhmXj/PBfinBL029S2fgzUNgwVnBjqr4rqKVoRFmXgYJHCnBRz9vjJ6O6BlOh ZdVrajBiwS1G1I1aFeLPM0r0X7b9mS4vzFmAFTjUXF0MY7S3j5SEh/rC7cU4s8wh E8vrV9t9xhD5AQulYSGbAl5BXdUAIjEiWZhHCHVcYWKhFg6VAAqSvOu0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRFxAIpkADMCRZ2UAtRU3W3IuW4MB8GA1UdIwQY MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQlo7heM yVn7AvBOTS+9PYgHqI5SYCJhHjuczEsJPRcz2CdtTIErFowFUDH3cOas3EGq2Pdf PHi8+kYukt5ea8WmOosL7wAZ0SIVVNH5nQWQxl5QIPqw+/2jfgf3YESNsrjuFdvL 3Mlb0Fzg+QKp6Krlj/lfyyDgUhOnvaT9J4sxxwCN4liSGpTBmeJS18BFek7afpKY Zc+H9DXVWRXV4WOAbzbNPvzaNFfecnEOrPTY6NIJTDNDEg8loeUYGdUFudWN8NT6 tj0GwupVN6Tm+M0wOslI02L0TZRsy0LjdHiQx9eUjhcNK4du7QEJt7mk/GIV2rwY vWfvA0s4iM/tjw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:51 2025 by rpki-client