This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json) Hash identifier: kfw41RYGTeu4cAJ2ow48C5BP5Og0nKLpNpiZBZj0Cp8= Subject key identifier: 66:8D:B2:7B:23:00:A8:A4:EE:58:AB:7A:59:E2:50:4E:4D:A3:DB:5A Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1 Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1 Certificate serial: 019B44DD27CE911401E155386E41456FC8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 07:01:42 +0000 Manifest this update: Mon 22 Dec 2025 07:01:42 +0000 Manifest next update: Tue 23 Dec 2025 07:01:42 +0000 Files and hashes: 1: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: +DPiCyr/YYuWasUYhVHGvsEQpnVJzBp04wfMd2aDOHY=) 2: rnhdD5-8bSiFYqITT19uX_gBm3Q.roa (hash: yOuOYWqODTjCSSjzwtgNJuIQsfARCoasQhMpsxakuPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:27:ce:91:14:01:e1:55:38:6e:41:45:6f:c8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1 Validity Not Before: Dec 22 07:01:42 2025 GMT Not After : Dec 23 07:01:42 2025 GMT Subject: CN=668db27b2300a8a4ee58ab7a59e2504e4da3db5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:aa:2d:42:3c:b0:d1:5b:dd:64:f4:20:dc: c8:98:fe:53:ba:dc:9a:c8:d4:0e:ca:42:1b:57:f4: 77:17:f7:f1:d8:4b:4b:d5:53:a0:46:15:47:e3:c1: fc:ba:f3:ac:ee:8d:3b:c4:42:46:0f:ec:f1:f0:12: 76:0c:1c:c3:9a:2f:fe:66:f0:76:e3:87:99:cb:60: 1a:65:18:58:59:13:f3:08:5a:a2:0b:24:38:2d:06: 2d:0d:00:1a:ea:51:ef:de:e4:48:14:28:90:f7:33: fb:5e:68:91:3d:f5:1c:6d:17:31:ea:84:f4:97:3d: 5f:0a:7a:f4:5d:8c:7e:29:de:80:dd:fb:5c:ad:af: c4:d0:ea:7c:8a:0b:dd:ad:52:c0:55:a8:62:fa:4f: 0c:95:c7:b7:d4:27:4f:0e:b8:b6:28:26:c5:8c:2b: e0:9f:7d:38:5b:cb:37:e7:75:1d:bb:01:98:ae:e4: 36:27:a1:81:73:da:d2:36:66:88:f6:cf:dd:ef:29: 37:4c:b4:1b:2a:07:91:e2:83:a6:53:4c:8b:17:9e: ea:d1:8d:9c:a1:a9:76:4f:a7:c3:7c:c2:53:2f:64: 49:8b:a2:54:e7:65:71:25:9a:f2:22:93:01:d2:68: ed:76:55:93:8b:b3:08:1c:99:0b:c5:86:27:e1:d8: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:B2:7B:23:00:A8:A4:EE:58:AB:7A:59:E2:50:4E:4D:A3:DB:5A X509v3 Authority Key Identifier: keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e0:a2:b5:7d:2e:52:e0:db:15:fe:fb:e6:e9:58:be:0e:d8: 7b:1b:d5:05:35:7e:b3:30:3c:0e:85:8e:9a:dc:24:65:82:f2: e0:45:77:ea:3d:3b:1c:e4:45:aa:e5:11:00:13:d8:d0:62:b3: 71:93:84:bd:e1:2f:89:9e:68:df:90:13:e5:50:d0:36:44:82: 32:21:23:51:73:f9:b4:e4:ec:a2:90:4e:60:79:4d:70:0e:86: e4:a5:27:ca:d2:fa:ce:da:35:1f:93:3e:34:35:50:93:5e:f0: 55:cf:2e:70:38:f4:e8:c2:3b:07:f0:20:31:6d:08:8b:70:50: 79:53:48:ad:b7:3c:62:28:8c:8e:04:1f:a2:68:0a:19:ca:05: d6:3a:81:b4:99:f6:86:47:8c:da:bf:68:45:3a:d5:26:d3:0f: 55:6d:45:25:20:30:8e:33:77:cb:64:04:ef:4a:51:aa:1a:17: 37:32:37:b6:cc:47:91:75:8d:7b:01:f4:aa:a6:e3:0f:ee:93: 06:cf:95:03:a1:5e:18:16:18:b9:ff:fd:aa:25:a8:69:f4:9c: 01:26:76:8e:a7:6e:0c:cb:2f:09:dc:02:d1:b6:b0:13:1a:45: 4d:ba:c5:42:4a:df:80:1f:78:d7:e3:a6:ad:ea:7c:ef:15:0c: 02:12:72:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3SfOkRQB4VU4bkFFb8itMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNTFkNmI0NDFkM2Y1Nzc2MmMwMzJmOGZhZDIxNzYwOGEy MmY3YTEwHhcNMjUxMjIyMDcwMTQyWhcNMjUxMjIzMDcwMTQyWjAzMTEwLwYDVQQD Eyg2NjhkYjI3YjIzMDBhOGE0ZWU1OGFiN2E1OWUyNTA0ZTRkYTNkYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYKqLUI8sNFb3WT0INzImP5Tutya yNQOykIbV/R3F/fx2EtL1VOgRhVH48H8uvOs7o07xEJGD+zx8BJ2DBzDmi/+ZvB2 44eZy2AaZRhYWRPzCFqiCyQ4LQYtDQAa6lHv3uRIFCiQ9zP7XmiRPfUcbRcx6oT0 lz1fCnr0XYx+Kd6A3ftcra/E0Op8igvdrVLAVahi+k8Mlce31CdPDri2KCbFjCvg n304W8s353UduwGYruQ2J6GBc9rSNmaI9s/d7yk3TLQbKgeR4oOmU0yLF57q0Y2c oal2T6fDfMJTL2RJi6JU52VxJZryIpMB0mjtdlWTi7MIHJkLxYYn4dgZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaNsnsjAKik7lirelniUE5No9taMB8GA1UdIwQY MBaAFEFR1rRB0/V3YsAy+PrSF2CKIvehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZIV3RFSFQ5WGRpd0RMNC10SVhZSW9pOTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jZGRiNjMtOTMwOC00M2M5LTk0NzMt ZWFlNDE4MTU4YTUyLzEvUVZIV3RFSFQ5WGRpd0RMNC10SVhZSW9pOTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jZGRiNjMtOTMwOC00M2M5LTk0NzMtZWFlNDE4MTU4YTUy LzEvUVZIV3RFSFQ5WGRpd0RMNC10SVhZSW9pOTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieCitX0u UuDbFf775ulYvg7YexvVBTV+szA8DoWOmtwkZYLy4EV36j07HORFquURABPY0GKz cZOEveEviZ5o35AT5VDQNkSCMiEjUXP5tOTsopBOYHlNcA6G5KUnytL6zto1H5M+ NDVQk17wVc8ucDj06MI7B/AgMW0Ii3BQeVNIrbc8YiiMjgQfomgKGcoF1jqBtJn2 hkeM2r9oRTrVJtMPVW1FJSAwjjN3y2QE70pRqhoXNzI3tsxHkXWNewH0qqbjD+6T Bs+VA6FeGBYYuf/9qiWoafScASZ2jqduDMsvCdwC0bawExpFTbrFQkrfgB941+Om rep87xUMAhJy4g== -----END CERTIFICATE-----Generated at Mon Dec 22 13:59:18 2025 by rpki-client