This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json) Hash identifier: HjHi5TfUt2MCYLgL5mPlpvvsPRmN1klHzIow/YDVt3g= Subject key identifier: 12:B9:F9:10:1B:BE:49:5F:87:39:FE:DF:71:31:7F:A4:56:50:08:8D Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7 Certificate serial: 019B47A6C9C07EE5DB834E68B555C1FDC825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 20:01:11 +0000 Manifest this update: Mon 22 Dec 2025 20:01:11 +0000 Manifest next update: Tue 23 Dec 2025 20:01:11 +0000 Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=) 2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: iMQ6ZJ0YEJvkgnI7irPT+AvE+nd/IztYIrRlSbTkQV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:c9:c0:7e:e5:db:83:4e:68:b5:55:c1:fd:c8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7 Validity Not Before: Dec 22 20:01:11 2025 GMT Not After : Dec 23 20:01:11 2025 GMT Subject: CN=12b9f9101bbe495f8739fedf71317fa45650088d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:22:fc:2f:2c:fb:7a:10:e7:2a:4d:5e:50: 4f:b4:92:ff:74:ec:df:57:14:77:f5:a1:de:1e:dc: c7:f4:77:15:89:01:76:44:70:95:18:00:2c:8f:f2: 93:7a:db:45:68:5c:27:ce:5c:a8:66:ba:6c:46:34: 6f:62:c3:6f:3b:b4:ba:7c:ed:f5:47:b0:e9:16:c2: bf:72:53:61:7d:3d:0b:50:f5:15:21:6a:81:00:25: 54:3b:76:2e:a8:e9:0a:cd:eb:33:55:20:87:bb:50: 97:72:6f:00:b4:de:7a:2e:5d:cd:54:a4:80:c2:9a: 75:76:db:ae:1c:90:e5:51:ee:79:bc:f1:f8:31:41: 51:6e:0e:28:9f:cb:6a:67:00:13:10:a4:50:1d:8b: 26:76:17:93:a8:f3:f9:78:97:4c:e9:76:2f:d9:dc: 09:c0:1a:cf:07:45:86:19:86:77:db:a8:ab:f1:e1: df:87:02:0b:44:d2:7f:6d:f9:73:12:cd:30:02:88: 7c:f3:3b:56:4f:7c:70:19:72:d4:30:a6:91:c0:a4: 68:e0:39:9b:6d:1a:0a:cf:09:93:a1:0e:5a:0d:cb: c3:67:e5:0c:84:7c:00:17:27:b4:b4:3f:09:d8:13: 8a:25:2c:7d:38:69:fb:df:b2:3a:43:c0:ab:67:c4: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:F9:10:1B:BE:49:5F:87:39:FE:DF:71:31:7F:A4:56:50:08:8D X509v3 Authority Key Identifier: keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b4:e6:93:15:70:4a:47:94:72:4c:11:b9:95:e3:1f:6c:6c: 76:da:3d:51:42:3e:59:22:6a:24:f4:99:33:e9:9f:25:bf:43: 74:35:79:55:99:5e:5b:28:99:4e:17:ee:07:d5:0b:36:3f:75: cf:fd:1c:08:70:7d:51:98:14:f6:c3:89:7b:b8:57:30:37:ef: 5b:b7:80:a9:b0:71:7b:80:39:99:d3:87:b4:06:16:8a:05:97: f1:eb:f8:34:8a:cd:1d:81:4b:3e:5e:fb:f6:4f:24:4f:37:1f: 40:97:8e:35:9e:d0:37:56:ee:2e:e0:13:9f:e9:47:0f:0d:c8: f1:f9:b8:20:c6:5d:05:b4:18:93:38:d5:65:76:eb:5c:9f:80: bd:8d:4f:de:57:4a:74:3c:17:be:70:84:fe:1c:da:b6:18:ed: 17:16:5d:62:b9:f2:b2:de:3a:7e:25:ee:7c:74:75:1c:6f:f5: bc:50:f6:70:78:be:88:02:a1:b5:c3:04:b7:93:9f:1b:b2:b0: e2:42:c8:99:ca:c8:04:72:64:7e:27:1c:0c:12:9e:b4:14:de: e6:25:2f:27:0e:6c:07:92:73:bb:e8:41:ac:2a:b1:50:a2:84: 85:9f:b1:ed:93:65:26:75:79:6c:64:ec:e3:4f:44:77:f2:04: 27:1b:d6:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpsnAfuXbg05otVXB/cglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2 OTA2ZDcwHhcNMjUxMjIyMjAwMTExWhcNMjUxMjIzMjAwMTExWjAzMTEwLwYDVQQD EygxMmI5ZjkxMDFiYmU0OTVmODczOWZlZGY3MTMxN2ZhNDU2NTAwODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqAi/C8s+3oQ5ypNXlBPtJL/dOzf VxR39aHeHtzH9HcViQF2RHCVGAAsj/KTettFaFwnzlyoZrpsRjRvYsNvO7S6fO31 R7DpFsK/clNhfT0LUPUVIWqBACVUO3YuqOkKzeszVSCHu1CXcm8AtN56Ll3NVKSA wpp1dtuuHJDlUe55vPH4MUFRbg4on8tqZwATEKRQHYsmdheTqPP5eJdM6XYv2dwJ wBrPB0WGGYZ326ir8eHfhwILRNJ/bflzEs0wAoh88ztWT3xwGXLUMKaRwKRo4Dmb bRoKzwmToQ5aDcvDZ+UMhHwAFye0tD8J2BOKJSx9OGn737I6Q8CrZ8QxcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK5+RAbvklfhzn+33Exf6RWUAiNMB8GA1UdIwQY MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4 LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrTmkxVw SkeUckwRuZXjH2xsdto9UUI+WSJqJPSZM+mfJb9DdDV5VZleWyiZThfuB9ULNj91 z/0cCHB9UZgU9sOJe7hXMDfvW7eAqbBxe4A5mdOHtAYWigWX8ev4NIrNHYFLPl77 9k8kTzcfQJeONZ7QN1buLuATn+lHDw3I8fm4IMZdBbQYkzjVZXbrXJ+AvY1P3ldK dDwXvnCE/hzathjtFxZdYrnyst46fiXufHR1HG/1vFD2cHi+iAKhtcMEt5OfG7Kw 4kLImcrIBHJkficcDBKetBTe5iUvJw5sB5Jzu+hBrCqxUKKEhZ+x7ZNlJnV5bGTs 409Ed/IEJxvWcg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:51:30 2025 by rpki-client