This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json) Hash identifier: FXPVaBt4uEtKg/sDkh0o4B6rkXjdcBxQKpgl4sipQLE= Subject key identifier: 12:B1:10:12:A7:25:05:D3:77:A4:7C:39:13:02:D5:15:87:41:D9:FC Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Certificate serial: 019B4701A4E42061C93F532A3B7F07390924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft Manifest number: 0450 Signing time: Mon 22 Dec 2025 17:00:48 +0000 Manifest this update: Mon 22 Dec 2025 17:00:48 +0000 Manifest next update: Tue 23 Dec 2025 17:00:48 +0000 Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: Q/X2aazLs7fEr2EFHGSNUhaACStWtnf4dVoq/7A/2M8=) 2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:a4:e4:20:61:c9:3f:53:2a:3b:7f:07:39:09:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Validity Not Before: Dec 22 17:00:48 2025 GMT Not After : Dec 23 17:00:48 2025 GMT Subject: CN=12b11012a72505d377a47c391302d5158741d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:c9:12:ad:e8:f6:32:27:f4:6b:65:36:fe: 92:e9:90:a3:83:93:ec:79:b4:7d:e9:27:1e:3d:4c: 46:86:0c:49:42:36:46:11:4b:4e:0e:82:28:6c:e5: 78:15:ba:e3:c5:fc:92:c3:ab:d2:64:49:b9:7a:33: 86:91:73:32:0c:f9:d0:0c:61:be:7b:fb:07:a8:38: c1:67:fb:d5:f6:06:f0:47:10:43:23:71:50:c2:a9: d6:76:cf:9d:8f:34:f6:98:97:9a:f7:b7:ca:7f:86: 3e:8f:18:a2:eb:18:94:8f:5e:35:da:ab:fe:90:a1: ab:eb:cf:2e:68:3f:2f:e8:0b:fd:0b:58:f4:96:c0: af:bb:73:9b:0b:b4:ed:cc:06:f6:f0:99:87:01:49: 77:29:36:60:e7:24:b3:26:83:d5:f1:f5:57:5c:c6: c8:72:11:14:b2:1c:53:35:87:4b:85:65:75:62:9a: 7d:a2:8d:e0:de:f4:56:2c:50:24:49:99:1a:ff:08: 84:eb:d8:c4:35:60:ac:9e:ad:34:19:bb:2c:ae:e4: c3:19:6f:5c:69:85:20:56:57:a0:10:45:b5:c2:53: c6:c8:22:b3:57:88:39:0b:32:13:ea:a2:76:9f:9a: ac:1d:74:b7:b8:e8:1d:97:6e:ac:a8:ef:bc:a3:50: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:10:12:A7:25:05:D3:77:A4:7C:39:13:02:D5:15:87:41:D9:FC X509v3 Authority Key Identifier: keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:95:ce:b0:ea:eb:b9:84:11:2a:47:ec:7f:f1:ff:35:66: 11:ab:cb:c9:6e:c7:7c:56:b9:d4:d3:ea:5f:77:c2:13:12:1c: 19:d9:77:3b:15:65:41:a4:10:13:4d:cc:ed:80:48:1b:ac:99: 84:1e:6b:e9:3e:9b:89:db:0d:c3:5b:f3:05:86:7b:f8:4d:b9: ff:04:d7:ac:11:36:2d:4a:b9:c0:01:d3:29:c9:31:40:76:2f: 7d:c3:bb:6b:43:38:9e:47:5b:1e:c3:1c:b5:e7:1c:90:65:e2: 39:05:77:e9:e9:2b:2f:30:c7:9b:94:b4:2f:fd:fb:ce:65:0a: 0d:00:e4:3c:44:63:8e:70:80:bc:c8:46:70:4e:40:2e:31:5f: 5a:4e:ac:b7:24:59:57:de:cf:c1:ae:b9:25:08:16:77:e0:08: a6:85:50:89:de:fc:ba:bb:73:b3:5c:93:e1:3c:7a:a8:3e:0f: ae:a5:88:28:61:52:b6:cb:d4:e0:aa:66:03:39:d6:f6:d1:7e: c7:ca:4a:48:9e:f9:86:fd:40:7c:a5:ed:e3:52:23:78:e2:fe: ec:1c:3f:ed:f6:68:e8:3b:d3:79:f3:34:12:79:e5:3e:04:b2: bf:63:c7:20:68:b6:d1:55:a0:12:59:8b:97:f9:6f:73:2f:ad: 31:a5:4f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAaTkIGHJP1MqO38HOQkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMThmNTVhNmIwMzNiMjQ0Zjg2MTQ1YmQ5ZjBhNmYxNDAw YzFiZmYwHhcNMjUxMjIyMTcwMDQ4WhcNMjUxMjIzMTcwMDQ4WjAzMTEwLwYDVQQD EygxMmIxMTAxMmE3MjUwNWQzNzdhNDdjMzkxMzAyZDUxNTg3NDFkOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrJEq3o9jIn9GtlNv6S6ZCjg5Ps ebR96ScePUxGhgxJQjZGEUtODoIobOV4FbrjxfySw6vSZEm5ejOGkXMyDPnQDGG+ e/sHqDjBZ/vV9gbwRxBDI3FQwqnWds+djzT2mJea97fKf4Y+jxii6xiUj1412qv+ kKGr688uaD8v6Av9C1j0lsCvu3ObC7TtzAb28JmHAUl3KTZg5ySzJoPV8fVXXMbI chEUshxTNYdLhWV1Ypp9oo3g3vRWLFAkSZka/wiE69jENWCsnq00GbssruTDGW9c aYUgVlegEEW1wlPGyCKzV4g5CzIT6qJ2n5qsHXS3uOgdl26sqO+8o1C5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKxEBKnJQXTd6R8ORMC1RWHQdn8MB8GA1UdIwQY MBaAFEAY9VprAzskT4YUW9nwpvFADBv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAt NmUxNjlkNjVjOTExLzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAtNmUxNjlkNjVjOTEx LzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqaVzrDq 67mEESpH7H/x/zVmEavLyW7HfFa51NPqX3fCExIcGdl3OxVlQaQQE03M7YBIG6yZ hB5r6T6bidsNw1vzBYZ7+E25/wTXrBE2LUq5wAHTKckxQHYvfcO7a0M4nkdbHsMc tecckGXiOQV36ekrLzDHm5S0L/37zmUKDQDkPERjjnCAvMhGcE5ALjFfWk6styRZ V97Pwa65JQgWd+AIpoVQid78urtzs1yT4Tx6qD4PrqWIKGFStsvU4KpmAznW9tF+ x8pKSJ75hv1AfKXt41IjeOL+7Bw/7fZo6DvTefM0EnnlPgSyv2PHIGi20VWgElmL l/lvcy+tMaVPPg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:38 2025 by rpki-client