This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json) Hash identifier: QpcQG4svM1sc+02o6LsPThLqfH/0p3asVpKv5FMMQI0= Subject key identifier: D5:0C:30:32:97:A1:F6:5C:66:BE:9A:B7:8D:60:ED:2B:31:CF:40:4E Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Certificate serial: 019B337B203D39A0D70A48776397CBDD1D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft Manifest number: 1711 Signing time: Thu 18 Dec 2025 22:01:05 +0000 Manifest this update: Thu 18 Dec 2025 22:01:05 +0000 Manifest next update: Fri 19 Dec 2025 22:01:05 +0000 Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=) 2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: t/+WupuCx0Pg0y618982Bn9a7Sk0M2ZaLYP1EAeMCyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:20:3d:39:a0:d7:0a:48:77:63:97:cb:dd:1d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Validity Not Before: Dec 18 22:01:05 2025 GMT Not After : Dec 19 22:01:05 2025 GMT Subject: CN=d50c303297a1f65c66be9ab78d60ed2b31cf404e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:fc:59:a9:53:ed:e6:55:f6:31:bd:e1:7f: 0a:2c:be:56:3a:4d:46:27:c2:61:3a:7c:21:b7:c2: 91:61:de:13:50:4c:df:e6:5d:76:75:eb:67:06:f3: 02:57:53:a5:01:a8:12:aa:c0:12:31:06:4d:4a:f4: 5f:bc:1e:d6:5f:83:2a:0a:56:d1:97:c0:60:d4:24: 98:da:ae:f3:8c:18:5c:a6:67:d2:a9:07:52:0f:1d: e4:88:d8:c7:94:42:fd:5c:82:3d:a6:5e:65:f5:20: 09:37:85:35:41:91:2d:3e:94:24:be:ee:06:4d:aa: c3:50:a6:7c:4e:09:71:3c:03:ac:92:cf:ba:5c:f4: af:82:f0:60:21:0e:73:34:57:ae:fa:30:b3:b7:48: b6:6f:0a:dd:7c:04:dc:b5:4b:30:1c:26:fc:11:5f: f8:1b:4d:d7:55:ab:56:5b:43:7e:64:b0:d2:e3:6f: 38:c2:ae:64:52:63:78:85:96:63:f3:67:a1:10:a7: 01:0f:27:37:e9:61:42:f7:be:93:9f:79:6e:85:64: f3:27:3c:98:60:e8:61:2f:37:81:98:d9:01:ca:f0: 1f:60:71:38:23:c6:7d:00:3a:a9:cb:e3:96:5b:ef: a2:17:75:9a:1f:74:e7:fb:40:c0:80:72:6f:bd:83: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0C:30:32:97:A1:F6:5C:66:BE:9A:B7:8D:60:ED:2B:31:CF:40:4E X509v3 Authority Key Identifier: keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:8e:df:2b:c0:f2:37:3d:6f:fc:41:ba:1c:b1:82:b5:08: 6a:51:eb:01:f3:72:e6:0b:38:0c:46:a7:50:ed:66:da:30:a7: b8:5e:e5:d2:ca:39:73:32:c0:c4:d4:c8:bc:77:fd:45:78:ed: b1:a2:27:63:ec:4f:43:6c:a8:84:47:74:64:7c:6e:7b:da:2a: c9:5e:4a:84:6e:21:02:97:38:d5:9f:fe:b4:ba:a6:5a:a7:85: e7:d0:ba:b3:69:ed:f3:f8:02:36:a6:dc:bb:a6:e1:f3:bb:1e: d3:a5:78:70:39:22:05:c3:d8:d9:3e:b2:2e:08:66:3c:81:13: 64:d6:b8:80:b6:0c:4f:a1:f4:81:2c:88:c1:85:11:84:b8:ca: e5:66:a6:92:ba:f1:69:4e:2e:fb:78:5b:28:5c:6a:37:9f:0d: 06:a6:98:04:03:57:65:8f:cd:50:4e:48:cb:4c:31:41:bd:de: ae:12:28:50:74:f1:2c:9f:80:d7:0b:6e:f4:07:5d:d6:e7:9c: 4f:cd:0b:df:b2:23:0e:d1:5d:9e:5f:fc:5e:63:c4:59:2e:cf: bb:3a:2e:b7:1b:ca:68:f8:c6:80:03:c3:37:db:e1:73:48:6d: b3:89:66:f2:dc:ef:4f:8a:d9:b0:e0:8c:d5:86:0c:01:cc:40: f2:61:ba:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeyA9OaDXCkh3Y5fL3R1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0 M2Q3YmEwHhcNMjUxMjE4MjIwMTA1WhcNMjUxMjE5MjIwMTA1WjAzMTEwLwYDVQQD EyhkNTBjMzAzMjk3YTFmNjVjNjZiZTlhYjc4ZDYwZWQyYjMxY2Y0MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ij8WalT7eZV9jG94X8KLL5WOk1G J8JhOnwht8KRYd4TUEzf5l12detnBvMCV1OlAagSqsASMQZNSvRfvB7WX4MqClbR l8Bg1CSY2q7zjBhcpmfSqQdSDx3kiNjHlEL9XII9pl5l9SAJN4U1QZEtPpQkvu4G TarDUKZ8TglxPAOsks+6XPSvgvBgIQ5zNFeu+jCzt0i2bwrdfATctUswHCb8EV/4 G03XVatWW0N+ZLDS4284wq5kUmN4hZZj82ehEKcBDyc36WFC976Tn3luhWTzJzyY YOhhLzeBmNkByvAfYHE4I8Z9ADqpy+OWW++iF3WaH3Tn+0DAgHJvvYNYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUMMDKXofZcZr6at41g7Ssxz0BOMB8GA1UdIwQY MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1 LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8aO3yvA 8jc9b/xBuhyxgrUIalHrAfNy5gs4DEanUO1m2jCnuF7l0so5czLAxNTIvHf9RXjt saInY+xPQ2yohEd0ZHxue9oqyV5KhG4hApc41Z/+tLqmWqeF59C6s2nt8/gCNqbc u6bh87se06V4cDkiBcPY2T6yLghmPIETZNa4gLYMT6H0gSyIwYURhLjK5Wamkrrx aU4u+3hbKFxqN58NBqaYBANXZY/NUE5Iy0wxQb3erhIoUHTxLJ+A1wtu9Add1uec T80L37IjDtFdnl/8XmPEWS7PuzoutxvKaPjGgAPDN9vhc0hts4lm8tzvT4rZsOCM 1YYMAcxA8mG6UQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:20:52 2025 by rpki-client