This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json) Hash identifier: WznMx+NSo1iXl1P/fR7rlp/FkJp8DQoq3poM1n6WKM0= Subject key identifier: 66:02:7B:F7:34:A0:9F:60:8E:86:A0:A3:1E:B5:86:32:F8:BB:5E:A8 Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc Certificate serial: 019B42806AF94FBBFAF3FC5C70D73C204EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft Manifest number: 1466 Signing time: Sun 21 Dec 2025 20:01:10 +0000 Manifest this update: Sun 21 Dec 2025 20:01:10 +0000 Manifest next update: Mon 22 Dec 2025 20:01:10 +0000 Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: iHKwiOOdhiDieGOqQ6EIkHu7bDBvfVweE5nSKO+UKOI=) 2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:6a:f9:4f:bb:fa:f3:fc:5c:70:d7:3c:20:4e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc Validity Not Before: Dec 21 20:01:10 2025 GMT Not After : Dec 22 20:01:10 2025 GMT Subject: CN=66027bf734a09f608e86a0a31eb58632f8bb5ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:48:f9:73:56:59:ec:ce:19:7e:5a:e3:a5: 2b:a6:a1:a6:aa:2b:3d:4f:0d:e9:67:16:63:96:9d: 81:a8:e0:fc:9c:0a:68:eb:35:ea:61:a0:0e:c7:8f: cc:25:bf:23:79:4f:a0:d8:37:c6:6e:fe:43:03:7e: 1c:01:00:36:0e:aa:e2:9e:fc:00:e9:2e:29:ba:58: 49:1e:20:05:4b:14:7b:7b:52:68:7a:68:18:ef:19: 7d:38:f7:5a:30:8c:cf:11:25:1b:4d:48:e1:21:8e: 5a:05:d3:7d:06:58:97:24:44:f9:77:fe:c3:1b:36: 2e:87:10:6d:a6:c2:4e:03:8e:a2:36:63:bf:f5:8b: d7:41:44:cb:4e:96:89:61:dc:46:07:b8:04:3d:b0: 51:0e:fe:07:a1:ea:35:a7:92:c9:19:02:06:45:db: 1e:22:d1:45:3a:7a:4d:73:04:f6:71:72:71:30:62: b0:90:32:e5:74:30:42:eb:7f:f2:d7:c0:af:1e:34: 8b:98:e1:c4:6c:cc:c2:eb:6e:bf:6c:59:6e:d5:73: 4c:53:f9:80:7a:1c:6c:2b:88:c7:0b:0e:11:a6:dc: ac:80:1f:24:2c:4d:de:dd:6f:5f:28:bc:a7:43:78: de:69:26:30:79:ca:f3:fc:23:c3:54:aa:c5:4d:2d: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:7B:F7:34:A0:9F:60:8E:86:A0:A3:1E:B5:86:32:F8:BB:5E:A8 X509v3 Authority Key Identifier: keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:73:81:26:5b:b6:07:82:ad:f5:20:6d:5c:64:4b:31:e8: 7f:7f:14:47:e5:dd:bc:5e:07:de:2f:e7:7c:b3:f9:6c:94:35: 4c:4c:be:89:9a:38:9b:55:e1:4a:53:7d:6e:53:e0:c0:5e:79: aa:32:53:85:b7:e3:ac:f5:f6:07:5c:8e:b8:d4:4a:b8:35:cd: 56:52:05:9b:13:7e:b2:83:f0:2f:dd:15:3d:5f:cb:a8:86:c9: 11:93:b5:00:8a:37:1e:5b:22:0c:b7:b9:a3:d3:3f:8f:cf:d0: 98:16:56:be:21:c6:dd:0c:ea:45:cf:e3:f8:e5:4b:19:0a:c6: 7e:4f:91:0a:98:cc:ae:16:b2:d4:e3:c7:0c:b9:aa:57:33:4d: c7:c9:cc:fa:45:04:2c:09:4d:e0:55:a6:0b:ac:34:9b:f5:18: 76:a7:7b:1b:d4:5a:c3:ce:e7:ff:dd:65:eb:d1:98:36:95:35: ec:a7:d7:50:37:89:38:c1:a0:ed:d3:55:8a:6a:78:d6:7d:5e: 1e:73:29:a1:5f:c8:05:5a:e2:ef:0d:50:1c:f4:72:a8:87:6e: ec:fc:48:a3:95:9b:3c:d5:e2:21:90:e0:f4:89:bd:6d:dd:af: f6:1c:31:e7:1c:6e:19:bf:a5:94:08:0b:d1:9f:87:b2:03:f2: 17:44:1f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgGr5T7v68/xccNc8IE68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2JjMWRjMmUxMWQ0OTFiOWI4NWUwOGQwMWMyMjJmOTc3 NmMzY2MwHhcNMjUxMjIxMjAwMTEwWhcNMjUxMjIyMjAwMTEwWjAzMTEwLwYDVQQD Eyg2NjAyN2JmNzM0YTA5ZjYwOGU4NmEwYTMxZWI1ODYzMmY4YmI1ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjplI+XNWWezOGX5a46UrpqGmqis9 Tw3pZxZjlp2BqOD8nApo6zXqYaAOx4/MJb8jeU+g2DfGbv5DA34cAQA2DqrinvwA 6S4pulhJHiAFSxR7e1JoemgY7xl9OPdaMIzPESUbTUjhIY5aBdN9BliXJET5d/7D GzYuhxBtpsJOA46iNmO/9YvXQUTLTpaJYdxGB7gEPbBRDv4Hoeo1p5LJGQIGRdse ItFFOnpNcwT2cXJxMGKwkDLldDBC63/y18CvHjSLmOHEbMzC626/bFlu1XNMU/mA ehxsK4jHCw4RptysgB8kLE3e3W9fKLynQ3jeaSYwecrz/CPDVKrFTS3/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYCe/c0oJ9gjoagox61hjL4u16oMB8GA1UdIwQY MBaAFEB7wdwuEdSRubheCNAcIi+XdsPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2It N2FmMGExNWY0MGI1LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2ItN2FmMGExNWY0MGI1 LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKodzgSZb tgeCrfUgbVxkSzHof38UR+XdvF4H3i/nfLP5bJQ1TEy+iZo4m1XhSlN9blPgwF55 qjJThbfjrPX2B1yOuNRKuDXNVlIFmxN+soPwL90VPV/LqIbJEZO1AIo3HlsiDLe5 o9M/j8/QmBZWviHG3QzqRc/j+OVLGQrGfk+RCpjMrhay1OPHDLmqVzNNx8nM+kUE LAlN4FWmC6w0m/UYdqd7G9Raw87n/91l69GYNpU17KfXUDeJOMGg7dNVimp41n1e HnMpoV/IBVri7w1QHPRyqIdu7PxIo5WbPNXiIZDg9Im9bd2v9hwx5xxuGb+llAgL 0Z+HsgPyF0QfvA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:09:25 2025 by rpki-client