This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json) Hash identifier: ncnsg/9/gzLpp0z7NxrH+dhrTtU0UrkT7/N+RblG0Uo= Subject key identifier: A8:1D:D2:66:0D:3F:A5:04:8F:02:AB:C0:5B:20:A2:63:8D:18:A4:04 Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Certificate serial: 019B40C8BF25CC79449C4F892D3467C5FE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 12:00:56 +0000 Manifest this update: Sun 21 Dec 2025 12:00:56 +0000 Manifest next update: Mon 22 Dec 2025 12:00:56 +0000 Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=) 2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: T2RTqBE+VTdGz7rtm8SLQ2yDfj64j/XuOjXDEO1AgvM=) 3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:bf:25:cc:79:44:9c:4f:89:2d:34:67:c5:fe:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Validity Not Before: Dec 21 12:00:56 2025 GMT Not After : Dec 22 12:00:56 2025 GMT Subject: CN=a81dd2660d3fa5048f02abc05b20a2638d18a404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:3a:78:0f:b3:1d:c8:62:23:ee:2e:92:33: 26:f2:fc:c6:af:33:a2:46:01:8c:7f:5a:05:37:00: 16:ae:47:02:41:b4:1a:6f:16:5a:3d:18:a1:c7:1d: e3:6f:d6:aa:ad:d5:88:38:78:6b:68:ed:9e:4c:29: 2e:96:86:48:76:f3:b2:23:18:16:4f:e8:9f:ab:33: ad:71:27:b1:f5:e5:b8:77:a8:83:7d:d8:e7:08:85: c1:05:e9:a9:41:2e:2c:ad:63:ec:00:12:aa:d6:9e: 73:84:f7:77:e9:d9:60:3d:39:93:b2:6b:f4:4f:e5: 05:b3:0f:b8:ba:61:5b:02:02:9f:96:e2:da:23:f0: cb:25:62:f4:50:63:c2:67:ca:64:ec:ce:ef:23:2f: cd:63:1f:9e:67:93:47:49:8d:b8:d1:62:2a:5f:1c: 5b:0f:0d:80:dd:65:5b:d3:d9:5e:6f:f7:2b:a2:b8: e9:5d:17:66:18:34:d5:fd:35:3b:5f:1e:49:fe:91: 7a:6e:73:ee:32:36:f9:41:5b:b0:da:1f:c3:44:db: a5:0a:72:99:53:98:68:56:69:6d:28:e5:f0:b7:ea: b5:81:7e:f3:dc:0d:4a:e0:40:33:83:51:15:34:83: 3a:1c:8b:32:85:5b:3b:21:59:ea:0d:e8:f2:84:bf: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1D:D2:66:0D:3F:A5:04:8F:02:AB:C0:5B:20:A2:63:8D:18:A4:04 X509v3 Authority Key Identifier: keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:27:af:f4:a3:30:e0:1f:5b:30:ab:42:64:85:da:ee:5d: e4:d8:01:47:a1:58:9f:a5:d1:b1:47:d6:80:7e:27:db:fe:fe: 46:34:91:57:cc:da:cf:c7:d2:5a:77:e1:a2:f5:10:ea:55:ba: c4:34:92:c3:fa:28:14:ca:64:d6:4c:76:37:a3:dc:65:c2:7f: b5:bf:92:76:4a:56:29:f7:ad:4e:85:64:6e:ed:2d:81:a5:fc: 25:7c:c8:8e:bc:e6:8c:d1:3f:e4:d1:36:cf:1b:77:d2:34:88: 67:48:cd:7a:08:e3:2a:51:f1:00:1e:97:b6:0f:a1:4e:7a:19: 25:dd:06:d6:35:bc:e5:2e:51:26:b7:4c:c2:13:e0:7e:b0:7f: 14:95:32:68:c1:20:e8:45:c8:89:07:9f:63:6b:23:a5:8e:9e: 97:a6:39:79:52:fd:dd:e7:c2:5e:1a:5a:5a:3b:a0:bc:72:53: 9c:4b:6c:c3:6c:fa:bf:d3:fa:d9:c9:40:4d:8d:a6:0a:c8:8b: e6:6c:49:92:fd:b3:35:84:69:28:b7:41:36:dc:d7:bb:3a:0f: 04:11:b8:98:09:a6:74:df:35:f5:dd:f2:e7:19:a3:6e:fa:51: 01:e6:03:9e:56:02:84:99:49:3e:34:02:aa:aa:24:c3:32:32: 9c:29:d9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyL8lzHlEnE+JLTRnxf4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx YTI4YjkwHhcNMjUxMjIxMTIwMDU2WhcNMjUxMjIyMTIwMDU2WjAzMTEwLwYDVQQD EyhhODFkZDI2NjBkM2ZhNTA0OGYwMmFiYzA1YjIwYTI2MzhkMThhNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYY6eA+zHchiI+4ukjMm8vzGrzOi RgGMf1oFNwAWrkcCQbQabxZaPRihxx3jb9aqrdWIOHhraO2eTCkuloZIdvOyIxgW T+ifqzOtcSex9eW4d6iDfdjnCIXBBempQS4srWPsABKq1p5zhPd36dlgPTmTsmv0 T+UFsw+4umFbAgKfluLaI/DLJWL0UGPCZ8pk7M7vIy/NYx+eZ5NHSY240WIqXxxb Dw2A3WVb09leb/crorjpXRdmGDTV/TU7Xx5J/pF6bnPuMjb5QVuw2h/DRNulCnKZ U5hoVmltKOXwt+q1gX7z3A1K4EAzg1EVNIM6HIsyhVs7IVnqDejyhL/IrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgd0mYNP6UEjwKrwFsgomONGKQEMB8GA1UdIwQY MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5 LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNonr/Sj MOAfWzCrQmSF2u5d5NgBR6FYn6XRsUfWgH4n2/7+RjSRV8zaz8fSWnfhovUQ6lW6 xDSSw/ooFMpk1kx2N6PcZcJ/tb+SdkpWKfetToVkbu0tgaX8JXzIjrzmjNE/5NE2 zxt30jSIZ0jNegjjKlHxAB6Xtg+hTnoZJd0G1jW85S5RJrdMwhPgfrB/FJUyaMEg 6EXIiQefY2sjpY6el6Y5eVL93efCXhpaWjugvHJTnEtsw2z6v9P62clATY2mCsiL 5mxJkv2zNYRpKLdBNtzXuzoPBBG4mAmmdN819d3y5xmjbvpRAeYDnlYChJlJPjQC qqokwzIynCnZ4g== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:39 2025 by rpki-client