This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json) Hash identifier: BP90mksQ1muLqM/zNgOHHqez1W7FnSzA18vAw43OB40= Subject key identifier: AB:35:7B:E6:58:72:D6:26:BE:E8:11:58:C1:BA:9F:17:C4:00:DC:22 Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f Certificate serial: 019B45B84359016DD5A105D65BCA107E4688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 11:01:02 +0000 Manifest this update: Mon 22 Dec 2025 11:01:02 +0000 Manifest next update: Tue 23 Dec 2025 11:01:02 +0000 Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: qFeg6LORgABrn5EYZILIwgTTMAySU92Fs0275ea5xLw=) 2: ybs61exhN0sYw1YgpfqdbmCmhqk.roa (hash: PW/e8DJb4WqsNiI0ODBUiDNLr0vhf0OlyJoAR5NWnhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:43:59:01:6d:d5:a1:05:d6:5b:ca:10:7e:46:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f Validity Not Before: Dec 22 11:01:02 2025 GMT Not After : Dec 23 11:01:02 2025 GMT Subject: CN=ab357be65872d626bee81158c1ba9f17c400dc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:26:a8:6d:8f:cc:aa:5b:7a:ef:ab:6b:d7: ce:80:78:e4:00:8d:4a:ac:07:0f:f6:a0:f5:24:cb: 5a:38:a4:89:fe:48:b0:c3:a0:2a:c5:b8:a3:60:7c: 42:5e:c8:f7:3c:78:30:6f:4d:4c:19:d1:5f:e3:9f: ca:53:50:b3:96:79:cd:34:6c:a0:c2:c3:cf:94:dd: 48:95:ec:6a:27:c4:6f:fb:d5:1f:b6:46:df:02:c8: 19:f5:d4:3c:61:63:9f:ba:0e:aa:aa:dd:5c:94:7f: 54:aa:86:88:0c:82:c0:00:21:10:ea:32:57:f2:c9: 58:9b:b3:69:43:7c:c0:92:4f:97:d7:7a:c5:ed:cd: 29:3c:ca:d7:77:59:ed:ef:ff:3e:c0:c1:12:9e:bc: b1:60:61:cf:dd:7d:47:01:6e:8f:bf:12:98:4b:39: cb:9d:52:8a:00:a0:c1:6e:75:36:16:bc:53:4a:71: 79:0b:a3:40:31:2b:b4:21:eb:e3:38:84:62:42:15: d2:8b:57:16:0d:94:2d:40:86:eb:11:52:4a:ee:6b: 35:fc:d2:c0:16:a3:89:98:63:c3:9c:00:28:4b:12: e9:e8:93:98:35:5a:b6:9f:46:ae:0f:7c:85:fb:49: 28:8f:22:71:8f:d3:77:7f:19:4d:4e:25:32:91:07: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:7B:E6:58:72:D6:26:BE:E8:11:58:C1:BA:9F:17:C4:00:DC:22 X509v3 Authority Key Identifier: keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:52:29:6d:20:33:23:25:b3:1c:33:e4:0f:fb:f2:68:f1:c6: e2:55:04:45:69:24:2d:bc:11:d7:b4:99:2e:b3:f5:0a:22:b7: 62:bd:29:0d:d9:72:d9:51:29:08:29:e4:5f:e7:be:2a:0f:8b: 9f:83:d2:22:26:a0:da:2b:7a:82:79:ac:2a:26:5a:01:b3:80: 7d:88:83:83:5e:c3:85:9d:7e:91:24:e3:89:05:89:ef:e0:de: 9d:1b:21:e6:b2:40:05:ac:40:88:2a:f4:bb:ea:c7:7f:61:27: bd:b3:cf:18:f2:11:61:a0:ea:19:2b:a4:8e:61:49:d0:59:de: b6:bf:f9:59:7f:79:6f:8e:10:de:fd:db:54:5c:1a:00:61:8b: ed:dd:5c:7f:94:66:90:dc:86:f9:7b:21:e0:87:ab:71:4d:99: 29:2d:47:85:a4:ab:1b:2a:9c:8f:47:a6:3b:b9:75:7d:e5:ec: 8d:1c:29:5d:06:55:76:67:e4:e6:2b:8c:49:f1:6f:c7:3d:f2: 83:82:e5:7d:2d:93:c9:75:ae:98:ca:cb:a3:c5:c2:4d:0a:cc: b7:f5:15:2f:d2:f8:aa:0a:8c:43:e4:ac:0d:33:f6:22:7b:bc: b1:26:6e:0f:14:b4:8b:9d:28:fb:c0:ed:a4:ee:2d:fb:5c:44: 4b:6e:b7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuENZAW3VoQXWW8oQfkaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWE1ZTM5Zjg2MzU3MzZlNDhkZjUzODIyYTVjYWNjMTBi NDNhMWYwHhcNMjUxMjIyMTEwMTAyWhcNMjUxMjIzMTEwMTAyWjAzMTEwLwYDVQQD EyhhYjM1N2JlNjU4NzJkNjI2YmVlODExNThjMWJhOWYxN2M0MDBkYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8smqG2PzKpbeu+ra9fOgHjkAI1K rAcP9qD1JMtaOKSJ/kiww6AqxbijYHxCXsj3PHgwb01MGdFf45/KU1CzlnnNNGyg wsPPlN1IlexqJ8Rv+9UftkbfAsgZ9dQ8YWOfug6qqt1clH9UqoaIDILAACEQ6jJX 8slYm7NpQ3zAkk+X13rF7c0pPMrXd1nt7/8+wMESnryxYGHP3X1HAW6PvxKYSznL nVKKAKDBbnU2FrxTSnF5C6NAMSu0IevjOIRiQhXSi1cWDZQtQIbrEVJK7ms1/NLA FqOJmGPDnAAoSxLp6JOYNVq2n0auD3yF+0kojyJxj9N3fxlNTiUykQfadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs1e+ZYctYmvugRWMG6nxfEANwiMB8GA1UdIwQY MBaAFEDqXjn4Y1c25I31OCKlyswQtDofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMt MThlOTEyOTYwMjJkLzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMtMThlOTEyOTYwMjJk LzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFIpbSAz IyWzHDPkD/vyaPHG4lUERWkkLbwR17SZLrP1CiK3Yr0pDdly2VEpCCnkX+e+Kg+L n4PSIiag2it6gnmsKiZaAbOAfYiDg17DhZ1+kSTjiQWJ7+DenRsh5rJABaxAiCr0 u+rHf2EnvbPPGPIRYaDqGSukjmFJ0Fnetr/5WX95b44Q3v3bVFwaAGGL7d1cf5Rm kNyG+Xsh4IercU2ZKS1HhaSrGyqcj0emO7l1feXsjRwpXQZVdmfk5iuMSfFvxz3y g4LlfS2TyXWumMrLo8XCTQrMt/UVL9L4qgqMQ+SsDTP2Inu8sSZuDxS0i50o+8Dt pO4t+1xES263zQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:01 2025 by rpki-client