This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json) Hash identifier: FPX1jzFobfG3tV6BfJ9SjaWKkYGBx31ebSEHim+IUrk= Subject key identifier: CD:2A:C0:5B:47:23:2C:E1:43:CA:45:93:83:6B:64:05:0C:22:3A:6C Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019B3CEBA12E7E9B6D90466318EF1898C8CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 18:00:33 +0000 Manifest this update: Sat 20 Dec 2025 18:00:33 +0000 Manifest next update: Sun 21 Dec 2025 18:00:33 +0000 Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=) 2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: Xc/+fInnsRJgRArMk6SmwoPrdk7Ry+a+zRKnXtB4N5s=) 3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a1:2e:7e:9b:6d:90:46:63:18:ef:18:98:c8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Dec 20 18:00:33 2025 GMT Not After : Dec 21 18:00:33 2025 GMT Subject: CN=cd2ac05b47232ce143ca4593836b64050c223a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:b7:b7:b4:08:34:be:08:9a:bf:2d:1f:aa: 83:19:41:ed:c9:13:34:8a:ed:d6:d1:9d:44:00:f8: ab:60:9a:cf:2d:67:30:e0:c3:9a:25:a2:d4:84:b4: 42:a3:90:cb:f3:c6:58:4e:aa:ca:ba:b9:43:7c:96: 61:6a:1a:86:37:1a:d0:3a:2b:7b:07:96:8f:1c:e2: 9c:e0:cd:8a:e5:ec:ee:f8:3c:41:fe:51:98:a6:aa: a8:d4:fc:5b:ef:fb:16:3b:5e:1b:49:9d:91:4c:b9: 25:25:99:55:42:10:75:15:dd:e6:aa:85:bb:5f:c7: 16:ed:03:f4:3c:dd:df:60:81:3c:ae:a9:15:cc:e3: 08:5f:c6:bf:a9:bc:30:fa:3c:c6:bb:48:c2:16:3c: 6e:a3:e7:d9:98:46:87:9c:8f:c2:6a:51:7b:29:b7: 29:3c:41:e3:56:a1:72:d5:60:34:55:ed:e9:5c:70: 92:d6:bf:7e:a5:1d:40:b7:07:cf:d6:a5:90:f0:a2: de:1c:a0:00:9c:80:2a:90:75:78:b2:f8:7f:b5:a4: 4d:14:24:ea:b1:3d:0b:b9:aa:f0:17:64:ac:81:51: 4a:37:b0:36:65:55:d7:3f:20:d3:91:90:8b:c9:69: 0d:9b:f6:e0:a9:22:2f:d8:1d:06:a5:d6:83:a3:0a: d3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2A:C0:5B:47:23:2C:E1:43:CA:45:93:83:6B:64:05:0C:22:3A:6C X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:85:84:d9:8c:56:e0:d9:f3:35:2e:8a:e0:a2:61:8d:4d: 7b:91:1c:11:96:4d:4d:c4:f0:23:02:69:6a:c1:6b:5c:84:cf: 33:fd:ba:d3:50:ee:99:f3:1b:ed:40:1d:e0:ed:dd:e4:6a:f0: 7d:5f:b9:25:23:65:5d:2a:5b:c5:44:ca:47:2c:03:19:5e:be: 90:c0:74:ac:93:93:b8:83:2f:16:ec:fe:68:1d:3d:b2:56:8a: ac:7d:bc:c2:12:8c:90:2f:69:dc:f7:bb:e6:d1:87:31:33:f7: 00:6a:e0:f0:41:6d:01:19:4b:f6:15:ab:31:e4:a2:7d:41:4d: a1:47:92:f5:b4:75:35:ec:58:00:81:58:bf:01:de:0c:a9:be: e7:76:cf:ef:2c:52:25:a0:c2:7a:63:41:51:27:ae:70:ae:88: 63:ef:18:d0:25:65:52:1b:0c:2e:b1:1a:32:fb:3c:35:6f:52: 19:6e:7c:32:1e:2b:74:ce:2f:fa:63:7a:a3:8b:a3:a1:d2:04: 97:3e:17:be:d5:fb:30:e5:25:b0:09:0d:57:79:42:3d:c9:d6: 79:22:ff:4c:5e:1d:0b:38:df:c4:91:ea:46:11:a5:22:c9:50: 76:7d:46:81:78:4a:c5:06:d3:77:47:ff:c2:81:38:e7:c3:87: 78:9b:d7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866EufpttkEZjGO8YmMjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjUxMjIwMTgwMDMzWhcNMjUxMjIxMTgwMDMzWjAzMTEwLwYDVQQD EyhjZDJhYzA1YjQ3MjMyY2UxNDNjYTQ1OTM4MzZiNjQwNTBjMjIzYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yi3t7QINL4Imr8tH6qDGUHtyRM0 iu3W0Z1EAPirYJrPLWcw4MOaJaLUhLRCo5DL88ZYTqrKurlDfJZhahqGNxrQOit7 B5aPHOKc4M2K5ezu+DxB/lGYpqqo1Pxb7/sWO14bSZ2RTLklJZlVQhB1Fd3mqoW7 X8cW7QP0PN3fYIE8rqkVzOMIX8a/qbww+jzGu0jCFjxuo+fZmEaHnI/CalF7Kbcp PEHjVqFy1WA0Ve3pXHCS1r9+pR1AtwfP1qWQ8KLeHKAAnIAqkHV4svh/taRNFCTq sT0LuarwF2SsgVFKN7A2ZVXXPyDTkZCLyWkNm/bgqSIv2B0GpdaDowrTHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0qwFtHIyzhQ8pFk4NrZAUMIjpsMB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle2FhNmM VuDZ8zUuiuCiYY1Ne5EcEZZNTcTwIwJpasFrXITPM/2601DumfMb7UAd4O3d5Grw fV+5JSNlXSpbxUTKRywDGV6+kMB0rJOTuIMvFuz+aB09slaKrH28whKMkC9p3Pe7 5tGHMTP3AGrg8EFtARlL9hWrMeSifUFNoUeS9bR1NexYAIFYvwHeDKm+53bP7yxS JaDCemNBUSeucK6IY+8Y0CVlUhsMLrEaMvs8NW9SGW58Mh4rdM4v+mN6o4ujodIE lz4XvtX7MOUlsAkNV3lCPcnWeSL/TF4dCzjfxJHqRhGlIslQdn1GgXhKxQbTd0f/ woE458OHeJvXSg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:06 2025 by rpki-client