This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json) Hash identifier: p9CWC8xwkjaa9U6ezmFx7uP0bih1/rYp6/cJX16yFMU= Subject key identifier: AC:22:F7:3E:96:50:3C:8E:A5:7A:C4:23:2A:DA:83:D8:A6:7F:12:C4 Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Certificate serial: 019B51BC2B041004C0436322747736770C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft Manifest number: 067E Signing time: Wed 24 Dec 2025 19:00:44 +0000 Manifest this update: Wed 24 Dec 2025 19:00:44 +0000 Manifest next update: Thu 25 Dec 2025 19:00:44 +0000 Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: URbj/Y9M3ZSFxunGyo/vLDJVc4vDJ6rb40/miQszCHs=) 2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:2b:04:10:04:c0:43:63:22:74:77:36:77:0c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Validity Not Before: Dec 24 19:00:44 2025 GMT Not After : Dec 25 19:00:44 2025 GMT Subject: CN=ac22f73e96503c8ea57ac4232ada83d8a67f12c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:8a:68:15:35:14:94:5e:ce:ee:5c:a1:cb: 03:6f:b8:c2:56:93:5e:ec:92:7f:88:83:f4:65:38: fd:19:29:e3:35:e0:94:8c:b4:d4:c4:68:30:7a:92: 93:25:4e:77:f8:c4:56:4e:a4:98:a7:11:b7:9d:e6: 9e:ea:95:06:dd:6a:38:9e:eb:8c:01:19:4e:b1:16: 09:3e:4d:d1:df:19:be:04:d3:bb:a6:94:f8:8f:36: 8b:fb:19:e2:c2:20:41:c2:44:e8:63:02:76:95:91: 89:6b:97:65:cf:81:57:23:b3:30:11:20:5f:b7:e7: e5:67:60:63:98:8a:2f:90:b7:c7:01:02:22:89:1e: 90:d3:0d:73:f0:f3:ee:b3:37:27:91:8e:97:1d:ac: cc:72:f8:2c:32:af:25:55:cc:ce:04:80:82:21:e1: 75:85:3c:f9:d1:60:39:b3:72:42:d6:9c:3a:cd:37: fa:88:05:12:54:d3:79:0a:4d:b7:00:b7:64:89:10: 9b:51:04:51:5c:87:15:24:9c:ea:69:8c:f8:2c:82: 46:7f:c9:be:a7:f9:5e:80:00:dc:d3:6c:82:7d:0d: 9a:f0:1f:b5:77:05:91:43:09:0f:6c:6b:a6:52:bd: 4b:8a:41:05:6d:92:70:cb:8d:fe:c0:17:4d:15:d4: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:22:F7:3E:96:50:3C:8E:A5:7A:C4:23:2A:DA:83:D8:A6:7F:12:C4 X509v3 Authority Key Identifier: keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:dc:ca:90:a1:46:c6:e3:97:7a:9d:bc:ac:36:1d:4b:2e:8c: 87:64:08:70:21:ad:9d:3d:f6:d6:bd:31:16:52:97:f9:05:1f: bb:76:39:b5:7f:2b:f4:58:95:7b:67:d0:98:0f:5c:d3:d8:84: 5a:51:56:12:fe:da:a1:bb:e6:f9:e7:38:b0:ff:7c:7e:e6:3c: fb:e0:b7:77:91:16:f4:77:72:7e:2c:41:bb:91:65:7b:c9:d5: d8:c1:39:db:9d:63:7d:39:31:62:12:3a:22:04:38:72:a0:62: 23:21:78:21:58:6c:9e:2f:e9:69:21:73:d5:21:d3:a3:b3:bf: 77:9f:36:58:4e:68:dd:4b:4c:34:9c:8a:20:f1:36:9e:01:0c: 71:b9:fb:30:a3:e2:29:bf:32:12:d5:7d:e8:91:61:56:dd:1c: 15:e0:76:a5:a5:30:05:29:c3:31:73:d7:53:75:1f:6e:65:0f: bb:96:46:ef:8d:a9:15:ae:64:8d:91:51:0c:74:0e:e3:ef:86: 09:fc:ef:85:ac:1c:63:f0:fa:6e:a9:b6:32:d3:e1:e6:51:35: 0f:6e:0b:7b:1d:01:15:64:3d:7a:9e:da:0f:01:51:fc:c8:35: 0d:ef:ed:f1:09:00:bc:da:4d:fc:a3:76:34:7d:7b:c2:88:8d: 03:7a:de:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCsEEATAQ2MidHc2dwwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZmYzU0ZTJkMjQxZjQ0MWFkMDNjYzE4ZTMzMWJmZTM0 YTU3ZWYwHhcNMjUxMjI0MTkwMDQ0WhcNMjUxMjI1MTkwMDQ0WjAzMTEwLwYDVQQD EyhhYzIyZjczZTk2NTAzYzhlYTU3YWM0MjMyYWRhODNkOGE2N2YxMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB6KaBU1FJRezu5cocsDb7jCVpNe 7JJ/iIP0ZTj9GSnjNeCUjLTUxGgwepKTJU53+MRWTqSYpxG3neae6pUG3Wo4nuuM ARlOsRYJPk3R3xm+BNO7ppT4jzaL+xniwiBBwkToYwJ2lZGJa5dlz4FXI7MwESBf t+flZ2BjmIovkLfHAQIiiR6Q0w1z8PPuszcnkY6XHazMcvgsMq8lVczOBICCIeF1 hTz50WA5s3JC1pw6zTf6iAUSVNN5Ck23ALdkiRCbUQRRXIcVJJzqaYz4LIJGf8m+ p/legADc02yCfQ2a8B+1dwWRQwkPbGumUr1LikEFbZJwy43+wBdNFdQnuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwi9z6WUDyOpXrEIyrag9imfxLEMB8GA1UdIwQY MBaAFEFm/FTi0kH0Qa0DzBjjMb/jSlfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTct ZjExYzZlMDY0ODhmLzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTctZjExYzZlMDY0ODhm LzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9zKkKFG xuOXep28rDYdSy6Mh2QIcCGtnT321r0xFlKX+QUfu3Y5tX8r9FiVe2fQmA9c09iE WlFWEv7aobvm+ec4sP98fuY8++C3d5EW9HdyfixBu5Fle8nV2ME5251jfTkxYhI6 IgQ4cqBiIyF4IVhsni/paSFz1SHTo7O/d582WE5o3UtMNJyKIPE2ngEMcbn7MKPi Kb8yEtV96JFhVt0cFeB2paUwBSnDMXPXU3UfbmUPu5ZG742pFa5kjZFRDHQO4++G CfzvhawcY/D6bqm2MtPh5lE1D24Lex0BFWQ9ep7aDwFR/Mg1De/t8QkAvNpN/KN2 NH17woiNA3rejw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:31:28 2025 by rpki-client