This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json) Hash identifier: FS26x98kdolpqXNk7YQ4hZlLqAFd0LmlOnW8s4or5nA= Subject key identifier: D7:67:B1:CF:18:71:F7:A4:63:D1:52:5C:63:B2:C1:5A:E7:4B:62:A9 Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2 Certificate serial: 019B687B428BFE229B598AA71F6AC3A97E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 05:01:06 +0000 Manifest this update: Mon 29 Dec 2025 05:01:06 +0000 Manifest next update: Tue 30 Dec 2025 05:01:06 +0000 Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=) 2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: lRbXUtP/Py0qxiL6q7AGahMLdGZrGr640KzofJl3i5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:42:8b:fe:22:9b:59:8a:a7:1f:6a:c3:a9:7e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2 Validity Not Before: Dec 29 05:01:06 2025 GMT Not After : Dec 30 05:01:06 2025 GMT Subject: CN=d767b1cf1871f7a463d1525c63b2c15ae74b62a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:e8:6d:b4:ff:65:59:bc:fe:78:af:24:51: 31:77:27:60:d1:39:7e:41:96:dd:08:67:d4:78:46: 08:26:59:e3:6b:30:96:f6:9c:20:59:c0:2a:6f:51: b0:49:44:cd:2a:5d:53:b8:a6:15:ee:61:7e:7e:1a: dd:3a:c2:24:70:7a:f1:76:7b:9e:3b:13:22:90:52: f8:12:d5:2b:1d:84:b9:95:7f:bf:2c:2e:e7:cf:b5: c8:95:7e:3d:24:43:96:48:f2:65:2b:c2:a1:49:c7: 40:31:13:d7:71:85:72:d6:ae:0d:da:87:5b:eb:1c: 49:2f:a5:26:25:53:be:6e:dd:97:10:ee:85:0a:74: ba:8f:75:5d:9a:fd:d8:b4:a9:cc:bc:86:b5:b3:7d: c3:a1:dc:ff:63:59:44:44:18:9a:b9:bf:ea:07:90: 7f:4b:b9:d4:54:b9:5b:16:0d:e0:32:f5:8f:1b:c9: 5e:d3:14:fb:04:0f:9c:98:b8:17:e1:03:5e:3e:b3: ac:2c:44:d4:bf:de:02:9d:42:03:58:0e:0f:b4:7e: 45:62:be:23:97:d5:d4:b5:21:d4:96:5e:a0:6c:e5: fa:09:8c:bd:51:f4:5a:0c:93:8f:a5:a0:6b:a2:24: a6:83:b4:cc:95:18:72:98:72:7b:93:88:1e:1c:92: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:B1:CF:18:71:F7:A4:63:D1:52:5C:63:B2:C1:5A:E7:4B:62:A9 X509v3 Authority Key Identifier: keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c1:6d:5b:f2:14:43:b2:16:cf:ef:61:aa:a9:26:7e:ad:95: ab:a1:21:42:35:47:33:62:e8:39:a4:b2:02:1c:3d:ce:a2:ec: a5:54:7e:19:d2:d7:d6:02:f8:d6:e8:cf:3f:3d:6a:e7:3b:5b: 2f:74:ce:07:64:2f:cf:ad:54:2a:d7:d8:14:59:49:a0:77:cd: c2:a7:7b:90:2d:f8:1c:17:a7:d4:61:a4:e5:a1:c6:e2:1c:c1: 71:a3:e0:3b:c4:99:99:a4:6b:9e:a7:dc:9c:e6:c7:e9:4c:da: 37:a8:24:e4:c6:d0:25:92:e2:cd:8e:b4:f8:84:ca:04:b0:c9: 6f:e8:e9:8b:9f:b1:ce:31:62:e5:6d:d8:69:68:bc:5a:eb:f8: 45:13:93:c1:39:5d:8c:9a:30:f7:71:b6:b6:98:04:fe:4e:2f: 1b:81:e9:4a:9b:37:b3:4b:cd:7e:df:2d:bf:47:6a:c4:df:a3: 92:df:7b:a1:63:2d:72:31:17:44:82:25:f2:db:4a:5e:06:20: 56:d8:e5:29:65:c8:83:7c:56:55:af:c9:70:53:4f:2b:48:0a: 1c:20:12:a2:ad:1f:d8:97:d6:95:4d:fe:62:a0:1e:84:00:0a: ab:20:32:1a:8a:52:20:9b:aa:34:05:02:f4:b3:26:84:84:cc: 05:12:53:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoe0KL/iKbWYqnH2rDqX6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj MzkzYjIwHhcNMjUxMjI5MDUwMTA2WhcNMjUxMjMwMDUwMTA2WjAzMTEwLwYDVQQD EyhkNzY3YjFjZjE4NzFmN2E0NjNkMTUyNWM2M2IyYzE1YWU3NGI2MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDTobbT/ZVm8/nivJFExdydg0Tl+ QZbdCGfUeEYIJlnjazCW9pwgWcAqb1GwSUTNKl1TuKYV7mF+fhrdOsIkcHrxdnue OxMikFL4EtUrHYS5lX+/LC7nz7XIlX49JEOWSPJlK8KhScdAMRPXcYVy1q4N2odb 6xxJL6UmJVO+bt2XEO6FCnS6j3Vdmv3YtKnMvIa1s33Dodz/Y1lERBiaub/qB5B/ S7nUVLlbFg3gMvWPG8le0xT7BA+cmLgX4QNePrOsLETUv94CnUIDWA4PtH5FYr4j l9XUtSHUll6gbOX6CYy9UfRaDJOPpaBroiSmg7TMlRhymHJ7k4geHJL7JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdnsc8YcfekY9FSXGOywVrnS2KpMB8GA1UdIwQY MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcFtW/IU Q7IWz+9hqqkmfq2Vq6EhQjVHM2LoOaSyAhw9zqLspVR+GdLX1gL41ujPPz1q5ztb L3TOB2Qvz61UKtfYFFlJoHfNwqd7kC34HBen1GGk5aHG4hzBcaPgO8SZmaRrnqfc nObH6UzaN6gk5MbQJZLizY60+ITKBLDJb+jpi5+xzjFi5W3YaWi8Wuv4RROTwTld jJow93G2tpgE/k4vG4HpSps3s0vNft8tv0dqxN+jkt97oWMtcjEXRIIl8ttKXgYg VtjlKWXIg3xWVa/JcFNPK0gKHCASoq0f2JfWlU3+YqAehAAKqyAyGopSIJuqNAUC 9LMmhITMBRJTew== -----END CERTIFICATE-----Generated at Mon Dec 29 13:41:56 2025 by rpki-client