This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json) Hash identifier: udyTd39YefAHLkrTnlcq3zHDZR8dBiM+Hx2FNugvcao= Subject key identifier: F2:00:FA:CB:16:3D:C7:F6:89:6A:FD:B9:80:35:D5:53:DF:9D:BE:2A Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44 Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144 Certificate serial: 019B53AAF9B29425E1B3140C3493F8356646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft Manifest number: 0FD9 Signing time: Thu 25 Dec 2025 04:01:12 +0000 Manifest this update: Thu 25 Dec 2025 04:01:12 +0000 Manifest next update: Fri 26 Dec 2025 04:01:12 +0000 Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=) 2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: E8Ta2ctxfJ9mg32QtOUavjVwVlPW0u6DXq8LOVK4bPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:f9:b2:94:25:e1:b3:14:0c:34:93:f8:35:66:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144 Validity Not Before: Dec 25 04:01:12 2025 GMT Not After : Dec 26 04:01:12 2025 GMT Subject: CN=f200facb163dc7f6896afdb98035d553df9dbe2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:e1:22:fa:a9:26:bb:ee:86:ed:0e:75:83: 28:2e:1c:9f:47:18:4e:3f:fe:5e:0a:01:ce:af:33: fe:2c:ce:c4:de:6b:67:92:6b:c3:24:f0:dc:0e:8c: fb:12:ee:23:92:66:ae:44:92:20:e5:f9:fb:c5:84: 56:d9:1a:de:7b:e8:94:32:20:de:cb:f6:4c:9b:78: e3:4a:38:e4:78:c8:8b:82:7f:0f:35:a7:1b:b9:6a: f4:78:32:44:5f:8a:89:d9:85:77:d8:90:69:95:ef: 48:9a:2e:03:0e:09:2f:53:5b:e8:87:f2:93:91:86: b1:af:b7:07:89:5c:fb:ea:7e:8f:1b:bd:22:2e:5d: 6d:b3:e0:52:66:df:c5:9b:17:f1:2a:0b:6f:67:e0: 96:1d:5d:66:a0:05:f8:dc:d6:81:9f:e5:f0:59:89: 82:3d:70:b0:53:40:e6:3e:13:60:20:11:42:a8:ab: eb:a4:2c:07:d5:62:2e:9d:0b:d7:2a:88:94:f4:43: 6c:33:29:2e:0c:4f:24:b2:ba:a6:89:ff:7d:69:19: 23:47:26:8f:0a:a7:93:7b:12:08:b5:ea:e8:eb:89: f9:43:5c:c2:02:30:f5:52:e0:d0:f6:88:87:36:f0: d4:b6:8c:84:2e:f7:e6:6a:2b:09:66:f9:14:c5:2c: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:00:FA:CB:16:3D:C7:F6:89:6A:FD:B9:80:35:D5:53:DF:9D:BE:2A X509v3 Authority Key Identifier: keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:25:16:c9:29:60:df:07:02:89:25:9a:32:73:a3:bc:89:ed: 43:f1:cd:69:7a:8e:a2:47:71:29:cf:b3:9b:bd:45:43:24:89: 0c:13:ea:f7:6c:b6:37:2b:df:49:83:3a:92:21:89:72:ee:b5: fa:8a:17:e7:ac:85:b7:3a:cb:f8:46:67:88:55:9c:72:18:60: f0:a6:a2:27:24:b7:81:4c:77:e9:ef:f0:4b:c4:59:b4:58:74: 32:0f:05:18:94:c0:d3:38:46:b1:46:c4:7e:8c:7c:44:db:aa: 44:61:f3:24:51:28:eb:ac:6c:f5:ba:45:0b:41:09:cb:49:8b: 81:5e:ce:c5:82:32:7f:e3:15:af:73:ce:d0:d5:bb:72:34:75: d2:e2:c3:75:9a:8f:5e:0c:7c:21:d7:d3:7e:5b:8f:89:ea:b4: dd:25:cc:fa:66:bb:1b:86:9e:54:b6:6e:5b:21:18:a0:ea:75: 33:f2:1f:c6:c4:74:2b:5a:df:67:ff:38:13:be:c4:47:37:e2: 00:dc:6a:03:3d:52:11:7d:07:03:76:3e:06:ea:75:5c:99:c8: ab:ad:c7:35:d7:f4:fe:30:14:fe:04:3a:88:c4:18:ac:3b:ce: c7:01:65:9f:b0:c3:e5:7b:08:79:91:f5:a3:72:f2:87:1d:4e: ff:d0:5c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqvmylCXhsxQMNJP4NWZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZmFjNmEzMmZlNGJhYTdkODliOTFlYzUxNjVhM2Q5NjY4 OGUxNDQwHhcNMjUxMjI1MDQwMTEyWhcNMjUxMjI2MDQwMTEyWjAzMTEwLwYDVQQD EyhmMjAwZmFjYjE2M2RjN2Y2ODk2YWZkYjk4MDM1ZDU1M2RmOWRiZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo07hIvqpJrvuhu0OdYMoLhyfRxhO P/5eCgHOrzP+LM7E3mtnkmvDJPDcDoz7Eu4jkmauRJIg5fn7xYRW2Rree+iUMiDe y/ZMm3jjSjjkeMiLgn8PNacbuWr0eDJEX4qJ2YV32JBple9Imi4DDgkvU1voh/KT kYaxr7cHiVz76n6PG70iLl1ts+BSZt/FmxfxKgtvZ+CWHV1moAX43NaBn+XwWYmC PXCwU0DmPhNgIBFCqKvrpCwH1WIunQvXKoiU9ENsMykuDE8ksrqmif99aRkjRyaP CqeTexIItero64n5Q1zCAjD1UuDQ9oiHNvDUtoyELvfmaisJZvkUxSwzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIA+ssWPcf2iWr9uYA11VPfnb4qMB8GA1UdIwQY MBaAFED6xqMv5Lqn2JuR7FFlo9lmiOFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEt YzlmZTBiYTI4NjQ3LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEtYzlmZTBiYTI4NjQ3 LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACUWySlg 3wcCiSWaMnOjvIntQ/HNaXqOokdxKc+zm71FQySJDBPq92y2NyvfSYM6kiGJcu61 +ooX56yFtzrL+EZniFWcchhg8KaiJyS3gUx36e/wS8RZtFh0Mg8FGJTA0zhGsUbE fox8RNuqRGHzJFEo66xs9bpFC0EJy0mLgV7OxYIyf+MVr3PO0NW7cjR10uLDdZqP Xgx8IdfTfluPieq03SXM+ma7G4aeVLZuWyEYoOp1M/IfxsR0K1rfZ/84E77ERzfi ANxqAz1SEX0HA3Y+Bup1XJnIq63HNdf0/jAU/gQ6iMQYrDvOxwFln7DD5XsIeZH1 o3Lyhx1O/9BcmQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:51 2025 by rpki-client