This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json) Hash identifier: V0+8x1u9ktlhTGy7QJAmSJ9RDoMCij+FMwG3hxtVTf8= Subject key identifier: 02:4A:D0:AF:84:50:2B:57:DE:2A:8F:0C:C2:D8:96:60:00:53:04:CE Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae Certificate serial: 019B52CED7943A5DE6FB07BA57F507C7650F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 00:00:45 +0000 Manifest this update: Thu 25 Dec 2025 00:00:45 +0000 Manifest next update: Fri 26 Dec 2025 00:00:45 +0000 Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=) 2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: cM4xP8ZTk585m+OxT4eJxaWJ6wOc6S0OCBPCAO6ot7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:d7:94:3a:5d:e6:fb:07:ba:57:f5:07:c7:65:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae Validity Not Before: Dec 25 00:00:45 2025 GMT Not After : Dec 26 00:00:45 2025 GMT Subject: CN=024ad0af84502b57de2a8f0cc2d89660005304ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:e3:30:13:b7:29:43:6f:6c:d6:cd:f6:f3: 00:42:5f:6f:5e:1b:d8:0b:f6:4c:a6:b9:a1:f1:a8: 87:54:b4:1c:45:ab:33:52:ff:ce:f6:3f:67:09:d2: 49:d1:83:3f:26:f7:91:19:7b:ed:03:9e:e5:ca:df: cc:34:8b:33:62:39:51:47:9d:a8:1b:f8:47:7c:52: 7b:5e:8f:37:8d:9a:4a:2a:46:4b:e5:28:6f:cf:e3: 06:62:75:d3:36:68:8c:2b:ee:d5:e6:be:83:22:75: 7b:9c:c0:d6:df:15:fc:6e:04:aa:56:78:d4:bd:f7: 92:b9:f3:21:1c:e0:8c:1f:3e:8b:94:98:83:9d:7d: a2:f1:a1:74:01:71:c6:a8:d6:56:f6:82:c3:81:98: 8b:91:e1:75:8e:73:38:b9:a7:13:cb:fa:0b:27:a7: 35:6e:45:b6:be:d3:57:db:91:83:a9:36:39:0b:1c: 93:a6:ea:2c:2b:50:a1:b1:65:26:fb:58:0c:37:be: 84:6c:21:ee:76:43:73:26:ee:53:fb:49:bb:9d:de: 42:f6:58:18:c9:23:b8:c0:4c:fe:5a:62:30:d7:3d: c3:ff:d8:37:1d:d3:3b:07:ec:37:19:00:f5:d6:5e: 99:ee:e3:30:0e:a9:88:99:b7:c2:8e:aa:f5:a6:f8: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4A:D0:AF:84:50:2B:57:DE:2A:8F:0C:C2:D8:96:60:00:53:04:CE X509v3 Authority Key Identifier: keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:e3:b7:cb:85:62:d6:40:3f:07:49:29:bb:b1:e1:d1:54: b8:5b:a5:b2:32:42:0b:57:39:34:5d:41:38:89:83:97:74:e0: 0d:57:02:36:51:99:1c:39:16:93:c0:28:4d:85:e9:43:7f:37: 21:cf:59:3b:81:7b:0f:87:b3:43:1f:17:5e:17:25:ba:bd:cb: 30:cf:31:03:67:28:b5:7c:93:5f:30:c0:b7:8b:0b:fb:f1:45: dc:87:8b:00:d6:bf:da:94:e4:5e:34:ef:34:2e:ea:2a:d8:ec: ca:8e:81:3b:ad:ae:57:d3:8a:a1:ab:7e:60:c7:dd:92:f6:d2: 7c:f5:ca:20:9d:3f:8b:27:a9:12:a7:15:1b:b3:1d:2a:62:fc: 63:01:e9:f3:e1:91:34:cf:42:e7:a4:f4:e3:38:07:e4:58:bf: 1f:65:e7:fc:a7:a2:f9:cd:fa:ec:df:f1:54:da:16:08:52:a3: 57:65:b4:4f:e3:4f:bb:e2:e1:8e:e4:80:76:c9:7c:de:aa:53: 91:cd:f1:55:5a:a3:81:d1:8d:ca:12:77:05:11:16:3a:4e:5b: 18:0c:93:82:c4:28:f4:8c:3e:ab:b1:2a:3c:c4:64:31:e5:4f: e7:6e:04:1d:99:7c:dd:2c:bc:97:0a:8a:a1:0f:83:88:54:ae: fb:14:9d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzteUOl3m+we6V/UHx2UPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2VkZTkwNzQ5MmU1MGM5NTEyNjM5NTc4ODFiYzNjYzVj ZTMwYWUwHhcNMjUxMjI1MDAwMDQ1WhcNMjUxMjI2MDAwMDQ1WjAzMTEwLwYDVQQD EygwMjRhZDBhZjg0NTAyYjU3ZGUyYThmMGNjMmQ4OTY2MDAwNTMwNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAXjMBO3KUNvbNbN9vMAQl9vXhvY C/ZMprmh8aiHVLQcRaszUv/O9j9nCdJJ0YM/JveRGXvtA57lyt/MNIszYjlRR52o G/hHfFJ7Xo83jZpKKkZL5Shvz+MGYnXTNmiMK+7V5r6DInV7nMDW3xX8bgSqVnjU vfeSufMhHOCMHz6LlJiDnX2i8aF0AXHGqNZW9oLDgZiLkeF1jnM4uacTy/oLJ6c1 bkW2vtNX25GDqTY5CxyTpuosK1ChsWUm+1gMN76EbCHudkNzJu5T+0m7nd5C9lgY ySO4wEz+WmIw1z3D/9g3HdM7B+w3GQD11l6Z7uMwDqmImbfCjqr1pvhWmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJK0K+EUCtX3iqPDMLYlmAAUwTOMB8GA1UdIwQY MBaAFEHO3pB0kuUMlRJjlXiBvDzFzjCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgt NzBhZjVmNjU3M2I1LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgtNzBhZjVmNjU3M2I1 LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsXjt8uF YtZAPwdJKbux4dFUuFulsjJCC1c5NF1BOImDl3TgDVcCNlGZHDkWk8AoTYXpQ383 Ic9ZO4F7D4ezQx8XXhclur3LMM8xA2cotXyTXzDAt4sL+/FF3IeLANa/2pTkXjTv NC7qKtjsyo6BO62uV9OKoat+YMfdkvbSfPXKIJ0/iyepEqcVG7MdKmL8YwHp8+GR NM9C56T04zgH5Fi/H2Xn/Kei+c367N/xVNoWCFKjV2W0T+NPu+LhjuSAdsl83qpT kc3xVVqjgdGNyhJ3BREWOk5bGAyTgsQo9Iw+q7EqPMRkMeVP524EHZl83Sy8lwqK oQ+DiFSu+xSdeA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:34 2025 by rpki-client