This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json) Hash identifier: pE7lioG2C8nTv8lSJmCQGC9DWRnQWr8TPPAVM1y3PAw= Subject key identifier: 4E:9A:AE:CB:47:B9:FD:47:BF:50:26:FD:65:62:84:89:DA:E6:C0:76 Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Certificate serial: 019B785C744282A7AF3B9D6780813CF63140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 07:01:23 +0000 Manifest this update: Thu 01 Jan 2026 07:01:23 +0000 Manifest next update: Fri 02 Jan 2026 07:01:23 +0000 Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=) 2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: AtE0v/uxwXNLt0DSINSlJSMxlX/mketkd4qNH2vVMaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:74:42:82:a7:af:3b:9d:67:80:81:3c:f6:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Validity Not Before: Jan 1 07:01:23 2026 GMT Not After : Jan 2 07:01:23 2026 GMT Subject: CN=4e9aaecb47b9fd47bf5026fd65628489dae6c076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:85:05:5a:e7:c3:7e:77:20:ac:df:22:8b: 43:af:fe:0c:01:03:19:9e:dc:2d:f1:79:fb:fa:6f: 62:c8:d1:a1:b5:3b:24:41:dd:8c:f0:d1:bf:16:33: 70:0f:30:38:fd:8b:b6:4d:de:59:a8:d3:6a:84:d7: da:20:97:38:fb:af:de:cf:ba:fc:8d:b3:29:f5:36: 15:f4:86:01:24:6d:1c:98:04:f6:54:62:57:eb:87: 6f:20:0a:73:7c:fe:d0:10:ec:ee:d6:79:12:fa:20: e8:87:0a:73:15:6a:28:31:66:15:99:eb:12:59:43: bd:93:0f:a5:3d:7f:e0:f2:9f:41:e3:25:5c:63:0b: 08:0a:74:ce:0d:f6:33:17:63:66:69:3b:79:7e:96: 7f:5a:24:2d:18:f3:3b:ab:aa:01:d6:17:c9:29:19: 17:8e:26:71:47:43:4c:b8:a0:27:c9:91:60:b6:14: 1c:d2:9a:ad:36:13:e9:7e:f4:c0:68:3f:83:a2:cf: c2:af:20:f6:76:15:d1:5b:1c:cd:f8:d6:52:d3:9c: 05:bb:fd:43:f4:80:b5:38:af:65:93:ff:f9:a1:73: 4f:50:08:2c:64:69:b7:29:69:5c:e1:b3:59:50:96: ba:37:11:f3:5c:3f:4b:0d:87:07:a8:cf:eb:cf:7d: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9A:AE:CB:47:B9:FD:47:BF:50:26:FD:65:62:84:89:DA:E6:C0:76 X509v3 Authority Key Identifier: keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:a1:59:eb:df:4d:22:54:f0:78:87:5a:f0:a2:e0:b9:17: a1:35:03:4f:1d:fd:04:96:f0:f6:8d:03:9c:a1:35:b6:d4:5c: 34:b9:66:37:a0:46:fa:f4:3e:5a:7b:9f:43:23:bc:40:fd:9e: 9a:b9:a4:6a:8d:16:eb:48:4a:f9:5d:0b:ae:fb:34:13:de:3d: b8:96:54:c0:f5:bc:52:01:a1:fb:a5:84:9f:00:01:f6:1f:d3: 76:97:5c:02:2b:24:39:5a:e8:d4:86:47:65:a0:d1:4f:73:d4: 9b:03:be:4f:df:ca:e4:1f:99:2c:70:86:da:d2:f7:70:14:91: 53:cb:b0:d5:94:28:9f:29:74:47:25:ec:a1:1f:17:6a:6e:30: 20:ef:d3:58:a8:ee:50:d3:f5:75:fd:81:5d:dd:db:82:f8:c5: a8:2f:ce:ca:af:63:af:0c:fd:a8:e9:6e:25:7b:81:39:8e:ac: 5f:dc:30:dd:d8:8d:c2:08:70:c6:31:88:31:c7:e5:ca:55:dd: 59:f8:6b:05:13:c7:f0:3b:e0:5f:32:b7:a5:0b:9f:51:55:72: f0:f9:10:b8:fa:db:55:09:3d:2c:88:a9:e1:d9:39:e4:9b:92: a2:8f:35:9c:0a:0b:05:08:04:a6:88:c3:76:7e:fb:9b:dc:a2: c5:7e:24:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XHRCgqevO51ngIE89jFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw NDc3OWYwHhcNMjYwMTAxMDcwMTIzWhcNMjYwMTAyMDcwMTIzWjAzMTEwLwYDVQQD Eyg0ZTlhYWVjYjQ3YjlmZDQ3YmY1MDI2ZmQ2NTYyODQ4OWRhZTZjMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kaFBVrnw353IKzfIotDr/4MAQMZ ntwt8Xn7+m9iyNGhtTskQd2M8NG/FjNwDzA4/Yu2Td5ZqNNqhNfaIJc4+6/ez7r8 jbMp9TYV9IYBJG0cmAT2VGJX64dvIApzfP7QEOzu1nkS+iDohwpzFWooMWYVmesS WUO9kw+lPX/g8p9B4yVcYwsICnTODfYzF2NmaTt5fpZ/WiQtGPM7q6oB1hfJKRkX jiZxR0NMuKAnyZFgthQc0pqtNhPpfvTAaD+Dos/CryD2dhXRWxzN+NZS05wFu/1D 9IC1OK9lk//5oXNPUAgsZGm3KWlc4bNZUJa6NxHzXD9LDYcHqM/rz30EmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6arstHuf1Hv1Am/WVihIna5sB2MB8GA1UdIwQY MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJuhWevf TSJU8HiHWvCi4LkXoTUDTx39BJbw9o0DnKE1ttRcNLlmN6BG+vQ+WnufQyO8QP2e mrmkao0W60hK+V0Lrvs0E949uJZUwPW8UgGh+6WEnwAB9h/TdpdcAiskOVro1IZH ZaDRT3PUmwO+T9/K5B+ZLHCG2tL3cBSRU8uw1ZQonyl0RyXsoR8Xam4wIO/TWKju UNP1df2BXd3bgvjFqC/Oyq9jrwz9qOluJXuBOY6sX9ww3diNwghwxjGIMcflylXd WfhrBRPH8DvgXzK3pQufUVVy8PkQuPrbVQk9LIip4dk55JuSoo81nAoLBQgEpojD dn77m9yixX4k7A== -----END CERTIFICATE-----Generated at Thu Jan 1 14:39:23 2026 by rpki-client