This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json) Hash identifier: VOBRrDW+cGeesIGhfc75yjce3sJj0/EL9Oc0iOkphHM= Subject key identifier: 8C:75:E3:6C:1E:FC:CF:E8:13:C4:DA:BB:85:49:96:26:9D:9A:CD:97 Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e Certificate serial: 019B533CDDDC6A5ACC9C7C962C3293CF47C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft Manifest number: 0D5F Signing time: Thu 25 Dec 2025 02:00:56 +0000 Manifest this update: Thu 25 Dec 2025 02:00:56 +0000 Manifest next update: Fri 26 Dec 2025 02:00:56 +0000 Files and hashes: 1: IbVX3LrFTxhR2c5rwBAGXni2IVg.roa (hash: i1+kfW3A/ZOMrSzikc6dwjCq+A7FU54gNo87BfXeXlo=) 2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: EwhWtA2ON1hWnt2cHfGXA9bonsZliD+vq/3thaRqb9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:dd:dc:6a:5a:cc:9c:7c:96:2c:32:93:cf:47:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e Validity Not Before: Dec 25 02:00:56 2025 GMT Not After : Dec 26 02:00:56 2025 GMT Subject: CN=8c75e36c1efccfe813c4dabb854996269d9acd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:24:ac:a1:9a:2a:0d:4b:fe:58:97:16:27: 20:ef:09:c2:ef:cd:c3:52:16:f4:14:d8:3c:6e:90: a6:07:83:b3:23:fa:ad:d6:5d:a4:38:3f:37:fd:2d: 06:7f:0f:0c:4b:d8:d4:2e:64:fe:12:bd:8d:f5:6d: 21:32:98:37:cd:ca:f1:2a:6f:74:48:f2:2b:38:82: 6e:d5:19:7d:05:34:74:f0:e0:7d:2b:45:9a:13:f0: 42:37:6d:7b:d3:b4:a9:32:70:16:a3:8f:37:f3:a6: 4e:ca:99:f5:ab:08:81:1b:e2:e1:f5:d0:3f:aa:cc: 98:a0:b7:e4:f4:0b:92:76:3a:a0:33:ef:60:e2:46: 9e:f7:5c:7f:81:a9:b1:fc:2b:c9:2d:fb:2b:8d:b8: 35:e0:80:a2:c9:1a:30:15:5c:c3:ba:1e:36:42:51: 6a:fe:f1:8c:8f:85:43:09:94:1b:83:63:ad:ba:66: 2d:1a:0b:ac:d9:97:72:ff:f9:44:9c:a3:ed:76:fa: 03:bf:8a:96:f7:76:3a:16:9a:53:9b:2a:5a:b7:c4: e8:bb:12:9b:00:82:be:2c:42:5f:54:d2:72:20:d7: e8:dd:74:62:7a:e7:c7:3a:e5:2e:cc:f1:c3:aa:3f: 96:24:16:31:1a:23:c7:6b:2e:b3:b4:5f:b7:4f:30: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:E3:6C:1E:FC:CF:E8:13:C4:DA:BB:85:49:96:26:9D:9A:CD:97 X509v3 Authority Key Identifier: keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3a:ca:2c:f5:3f:a4:c7:fd:2e:b9:2f:9e:2b:65:fc:ea:e1: bf:5f:eb:93:2a:ee:d9:6d:f6:38:90:02:43:42:fb:64:bb:df: 78:b8:94:ac:9e:64:9c:53:c0:88:1f:c8:86:0a:1e:18:c4:2a: 9c:12:7b:50:f5:4a:bc:de:83:25:0c:53:0f:23:d3:d7:d8:bd: 28:ec:3b:32:c5:da:c5:73:ec:f9:05:10:43:79:2c:73:c5:ff: b0:a9:9a:f5:1b:4b:7f:89:7e:ec:e3:5e:c1:7d:5d:78:bb:11: 93:31:6c:99:ee:9a:4c:f0:eb:b6:c1:3f:02:4d:44:7e:2d:ef: 4b:b8:53:ae:86:db:4d:5e:68:82:04:f0:15:68:03:50:c3:80: e5:ff:36:16:12:f5:75:c3:0c:b4:98:1c:83:d8:58:0a:c1:11: 0b:00:c1:c5:80:40:4d:e6:4f:cc:8f:3d:99:e3:f2:b1:dd:47: 0b:fa:8b:3b:96:dd:7f:c5:ea:f5:27:ee:74:2b:34:0c:3e:78: 31:a4:82:c4:db:f1:af:c2:9c:85:56:21:7f:e9:a5:48:7b:73: 4e:21:09:bb:94:65:59:69:8d:ed:28:7d:06:a5:2d:5c:21:95: 6d:2c:b1:38:b1:55:b6:33:39:6c:e4:ef:38:69:e1:9c:5e:86: a9:54:97:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPN3calrMnHyWLDKTz0fJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw NDVmMGUwHhcNMjUxMjI1MDIwMDU2WhcNMjUxMjI2MDIwMDU2WjAzMTEwLwYDVQQD Eyg4Yzc1ZTM2YzFlZmNjZmU4MTNjNGRhYmI4NTQ5OTYyNjlkOWFjZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyQkrKGaKg1L/liXFicg7wnC783D Uhb0FNg8bpCmB4OzI/qt1l2kOD83/S0Gfw8MS9jULmT+Er2N9W0hMpg3zcrxKm90 SPIrOIJu1Rl9BTR08OB9K0WaE/BCN21707SpMnAWo48386ZOypn1qwiBG+Lh9dA/ qsyYoLfk9AuSdjqgM+9g4kae91x/gamx/CvJLfsrjbg14ICiyRowFVzDuh42QlFq /vGMj4VDCZQbg2OtumYtGgus2Zdy//lEnKPtdvoDv4qW93Y6FppTmypat8TouxKb AIK+LEJfVNJyINfo3XRieufHOuUuzPHDqj+WJBYxGiPHay6ztF+3TzD3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx142we/M/oE8Tau4VJliadms2XMB8GA1UdIwQY MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt ZDI5YjdkNDc4NjMxLzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDrKLPU/ pMf9Lrkvnitl/Orhv1/rkyru2W32OJACQ0L7ZLvfeLiUrJ5knFPAiB/IhgoeGMQq nBJ7UPVKvN6DJQxTDyPT19i9KOw7MsXaxXPs+QUQQ3ksc8X/sKma9RtLf4l+7ONe wX1deLsRkzFsme6aTPDrtsE/Ak1Efi3vS7hTrobbTV5oggTwFWgDUMOA5f82FhL1 dcMMtJgcg9hYCsERCwDBxYBATeZPzI89mePysd1HC/qLO5bdf8Xq9SfudCs0DD54 MaSCxNvxr8KchVYhf+mlSHtzTiEJu5RlWWmN7Sh9BqUtXCGVbSyxOLFVtjM5bOTv OGnhnF6GqVSXhA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:43 2025 by rpki-client