This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json) Hash identifier: epAzr8pDgJcevWSYZfrhucT9TEmuHATi73GaeylHprI= Subject key identifier: 9A:BD:05:64:FA:A2:7E:AF:4F:27:2E:9F:68:E7:B7:29:95:99:EC:5F Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8 Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8 Certificate serial: 019B405A8F948FA1A45AB0CD51C7A26B9214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:00:35 +0000 Manifest this update: Sun 21 Dec 2025 10:00:35 +0000 Manifest next update: Mon 22 Dec 2025 10:00:35 +0000 Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: CAsD38hRsns1FjIUQYsTfbr+ByjZ0j7RJ1QVb1P31kM=) 2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:8f:94:8f:a1:a4:5a:b0:cd:51:c7:a2:6b:92:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8 Validity Not Before: Dec 21 10:00:35 2025 GMT Not After : Dec 22 10:00:35 2025 GMT Subject: CN=9abd0564faa27eaf4f272e9f68e7b7299599ec5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:2f:f6:6d:3d:02:f6:37:8f:9a:e3:46:c6: 84:df:69:55:67:90:7a:6c:7e:e6:23:74:a5:4f:14: 33:ec:92:fa:1e:72:11:ae:89:f0:86:a2:1c:02:02: 05:65:00:6a:14:20:75:fd:f7:d0:7c:9f:ea:33:c1: a1:a3:3a:8e:91:68:7f:1b:53:77:0a:d8:91:76:aa: 0f:43:c5:a3:66:24:05:ac:5f:9f:b7:f4:d8:80:c5: 47:42:7b:63:55:98:f5:24:15:e7:23:1f:fd:34:62: 41:23:6f:34:25:b8:13:92:76:95:c4:2e:38:b1:38: 01:20:7f:f0:47:62:a2:e6:4a:0d:24:fa:e1:98:61: 91:12:88:12:5d:77:6a:0f:37:d8:26:33:4b:28:dc: b6:03:d2:04:74:3b:e6:88:5e:e6:d1:79:c7:af:92: b9:81:3b:2f:12:a6:71:32:fd:64:be:6d:a9:30:b5: 8f:54:45:26:b6:ba:ca:36:4a:92:cb:b4:b2:08:59: f8:9c:a1:34:2c:db:58:b5:08:5c:12:60:ed:1a:17: 83:e1:4e:c0:e2:e3:32:af:9e:6a:63:4b:ae:0a:84: ff:60:fe:2c:58:c5:6e:fe:ce:15:99:fb:61:30:cc: da:0b:b5:a5:0b:d6:0e:88:23:70:ed:40:82:f2:89: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:05:64:FA:A2:7E:AF:4F:27:2E:9F:68:E7:B7:29:95:99:EC:5F X509v3 Authority Key Identifier: keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:67:f9:f6:32:a1:09:15:d6:6f:93:42:15:6b:e4:41:8f:ba: c0:b3:84:10:cc:38:3f:7e:f0:03:e3:8d:6f:e7:f3:77:1c:b0: f4:32:49:a0:f7:67:2b:d5:35:5a:dc:9e:d9:ac:4e:d4:be:d2: 1d:f3:9b:78:ad:94:c8:a8:b3:30:03:bf:a3:cf:98:0c:43:5d: 31:37:30:41:37:00:1c:0c:6b:1c:3a:32:3f:da:2c:19:e4:48: 44:5b:d4:b6:7c:71:02:14:12:3b:75:72:69:9e:51:99:1a:0a: 99:16:33:06:2e:4a:71:73:82:d2:9d:6d:08:cb:d8:a6:87:71: 5f:1a:eb:5e:26:51:bb:3b:a8:bb:58:2b:ae:e3:12:60:f9:b8: 8d:77:be:86:97:3e:a7:16:bc:8e:00:db:e6:ff:9a:c2:d9:6c: e1:7a:aa:74:bf:96:43:e6:82:82:64:46:6f:b6:5f:82:96:d4: 84:6b:c4:cd:57:e0:15:31:71:69:58:bf:a3:23:43:db:9f:63: 45:3c:95:93:36:fd:2a:0c:3c:50:2f:8d:b2:d4:7f:07:35:ce: 5f:a0:c5:41:5d:6b:86:82:8b:4a:ef:6c:ca:01:53:f8:c8:7c: 85:b7:16:fa:cc:64:04:f2:a1:3e:0d:53:58:c0:b6:6e:ef:b1: 4e:66:a8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWo+Uj6GkWrDNUceia5IUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYxZTZkMTZlYmYxN2U1NzFjNmJmNzdlYzA2YmRmN2Fi NjhhZjgwHhcNMjUxMjIxMTAwMDM1WhcNMjUxMjIyMTAwMDM1WjAzMTEwLwYDVQQD Eyg5YWJkMDU2NGZhYTI3ZWFmNGYyNzJlOWY2OGU3YjcyOTk1OTllYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlawv9m09AvY3j5rjRsaE32lVZ5B6 bH7mI3SlTxQz7JL6HnIRronwhqIcAgIFZQBqFCB1/ffQfJ/qM8GhozqOkWh/G1N3 CtiRdqoPQ8WjZiQFrF+ft/TYgMVHQntjVZj1JBXnIx/9NGJBI280JbgTknaVxC44 sTgBIH/wR2Ki5koNJPrhmGGREogSXXdqDzfYJjNLKNy2A9IEdDvmiF7m0XnHr5K5 gTsvEqZxMv1kvm2pMLWPVEUmtrrKNkqSy7SyCFn4nKE0LNtYtQhcEmDtGheD4U7A 4uMyr55qY0uuCoT/YP4sWMVu/s4VmfthMMzaC7WlC9YOiCNw7UCC8olNDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq9BWT6on6vTycun2jntymVmexfMB8GA1UdIwQY MBaAFEF2Hm0W6/F+Vxxr937Aa996tor4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUt YTg3OWRmNDZlYjk5LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUtYTg3OWRmNDZlYjk5 LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGf59jKh CRXWb5NCFWvkQY+6wLOEEMw4P37wA+ONb+fzdxyw9DJJoPdnK9U1Wtye2axO1L7S HfObeK2UyKizMAO/o8+YDENdMTcwQTcAHAxrHDoyP9osGeRIRFvUtnxxAhQSO3Vy aZ5RmRoKmRYzBi5KcXOC0p1tCMvYpodxXxrrXiZRuzuou1grruMSYPm4jXe+hpc+ pxa8jgDb5v+awtls4XqqdL+WQ+aCgmRGb7ZfgpbUhGvEzVfgFTFxaVi/oyND259j RTyVkzb9Kgw8UC+NstR/BzXOX6DFQV1rhoKLSu9sygFT+Mh8hbcW+sxkBPKhPg1T WMC2bu+xTmaorQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:34 2025 by rpki-client