This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json) Hash identifier: xnOnfoJnWWTUl5fqo2qFuLW4QCV7X76bH3eQxzc5bkE= Subject key identifier: F3:4B:71:7E:D6:A1:FB:96:34:D4:DF:B8:F1:44:9E:D3:1F:77:DB:07 Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Certificate serial: 019B3E6C953B56CCA55CF9498E04BB69C59B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft Manifest number: 0674 Signing time: Sun 21 Dec 2025 01:01:02 +0000 Manifest this update: Sun 21 Dec 2025 01:01:02 +0000 Manifest next update: Mon 22 Dec 2025 01:01:02 +0000 Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: CSaTfrqhVM/zpppk/0jlIjoGoaJC1Pzovysf1JbWKoA=) 2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:95:3b:56:cc:a5:5c:f9:49:8e:04:bb:69:c5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Validity Not Before: Dec 21 01:01:02 2025 GMT Not After : Dec 22 01:01:02 2025 GMT Subject: CN=f34b717ed6a1fb9634d4dfb8f1449ed31f77db07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:7d:e5:1f:8a:4f:7b:1c:43:a6:85:e7:03: 85:c5:d8:71:9a:a5:b7:60:f6:29:f7:bf:bd:3f:48: 58:4f:84:70:8f:8a:58:12:07:f6:1d:d2:64:0b:ce: 14:c2:9a:10:83:4f:15:e3:bc:ee:62:d4:65:3c:26: 67:6f:59:91:0a:7a:42:71:e2:79:d7:b7:f1:b3:60: 9f:65:d0:c6:25:d0:a6:bc:98:6d:3e:8b:d9:97:19: f9:8d:9d:20:07:83:dc:e8:d6:f7:e2:7c:84:a5:52: 5c:94:db:31:bf:32:26:ae:f3:2d:be:94:a9:11:75: dc:0c:52:c3:78:73:37:1f:20:f7:43:51:57:d1:e6: 36:92:8c:c3:e3:85:ce:64:ef:cc:08:d6:ae:31:fc: 15:1c:ad:02:46:16:77:73:70:c6:b8:17:71:04:a8: 38:a1:21:84:da:ec:61:f8:84:1c:db:9a:c1:60:0d: e9:a3:99:a6:86:b5:97:8d:41:0f:0c:4f:1a:5a:f8: 4c:bb:c5:d3:b4:67:bc:65:0c:cb:a1:a2:ea:b3:e2: df:b4:f7:79:fa:4a:81:df:a4:be:98:64:eb:d3:5f: 0d:95:77:53:13:8d:66:9b:6d:0a:3f:af:99:56:b6: 72:e7:e5:dc:f2:36:77:6f:c2:59:13:92:3f:8e:ff: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:71:7E:D6:A1:FB:96:34:D4:DF:B8:F1:44:9E:D3:1F:77:DB:07 X509v3 Authority Key Identifier: keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:41:53:cd:76:83:3d:ed:02:a3:5b:ba:bf:2e:56:bd:4c:9a: a7:e7:6b:4b:90:5f:2f:7f:9c:77:19:ca:54:79:84:10:d6:aa: c6:4e:db:2f:80:a6:72:75:c0:db:24:b3:14:7e:a2:90:85:86: c0:1b:08:4d:c1:ab:e6:75:9d:49:24:48:47:62:73:41:a7:a8: 61:4a:f9:bd:3c:49:05:e7:9c:4c:ed:a5:b1:26:f8:54:62:d1: ba:18:fd:00:6e:33:5d:f4:07:df:db:d6:1f:7c:e6:cb:dc:90: d0:18:8b:50:92:89:de:1a:44:e6:8c:cf:f1:b0:40:88:e4:e4: 39:94:b5:5a:4f:14:52:ab:08:2d:d5:6d:fd:b0:4b:f7:4c:d4: ee:f7:1e:33:f7:5e:d2:fd:8e:ab:62:97:71:fd:0b:1e:89:84: 5d:5d:86:dd:44:80:dc:cd:e8:aa:cd:78:a0:b0:a1:05:fb:4e: 7c:9c:f7:6b:ac:c2:5b:7b:aa:1f:59:87:ca:d5:9e:d6:d3:98: a9:46:6d:e0:1f:4a:32:8e:0a:a3:bf:89:0f:f9:d2:80:3b:19: cb:c7:63:8e:8b:97:85:c4:d5:89:31:ef:f3:1f:3a:11:74:5b: a9:11:72:9e:11:ef:ad:f3:b7:f2:c7:7b:a1:be:6a:22:a8:8b: 1c:17:11:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJU7VsylXPlJjgS7acWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZmYzU0ZTJkMjQxZjQ0MWFkMDNjYzE4ZTMzMWJmZTM0 YTU3ZWYwHhcNMjUxMjIxMDEwMTAyWhcNMjUxMjIyMDEwMTAyWjAzMTEwLwYDVQQD EyhmMzRiNzE3ZWQ2YTFmYjk2MzRkNGRmYjhmMTQ0OWVkMzFmNzdkYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZt95R+KT3scQ6aF5wOFxdhxmqW3 YPYp97+9P0hYT4Rwj4pYEgf2HdJkC84UwpoQg08V47zuYtRlPCZnb1mRCnpCceJ5 17fxs2CfZdDGJdCmvJhtPovZlxn5jZ0gB4Pc6Nb34nyEpVJclNsxvzImrvMtvpSp EXXcDFLDeHM3HyD3Q1FX0eY2kozD44XOZO/MCNauMfwVHK0CRhZ3c3DGuBdxBKg4 oSGE2uxh+IQc25rBYA3po5mmhrWXjUEPDE8aWvhMu8XTtGe8ZQzLoaLqs+LftPd5 +kqB36S+mGTr018NlXdTE41mm20KP6+ZVrZy5+Xc8jZ3b8JZE5I/jv/I9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNLcX7WofuWNNTfuPFEntMfd9sHMB8GA1UdIwQY MBaAFEFm/FTi0kH0Qa0DzBjjMb/jSlfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTct ZjExYzZlMDY0ODhmLzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTctZjExYzZlMDY0ODhm LzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkFTzXaD Pe0Co1u6vy5WvUyap+drS5BfL3+cdxnKVHmEENaqxk7bL4CmcnXA2ySzFH6ikIWG wBsITcGr5nWdSSRIR2JzQaeoYUr5vTxJBeecTO2lsSb4VGLRuhj9AG4zXfQH39vW H3zmy9yQ0BiLUJKJ3hpE5ozP8bBAiOTkOZS1Wk8UUqsILdVt/bBL90zU7vceM/de 0v2Oq2KXcf0LHomEXV2G3USA3M3oqs14oLChBftOfJz3a6zCW3uqH1mHytWe1tOY qUZt4B9KMo4Ko7+JD/nSgDsZy8djjouXhcTViTHv8x86EXRbqRFynhHvrfO38sd7 ob5qIqiLHBcRJg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:25 2025 by rpki-client