This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: vrLmXtsV6gZ4IaSg/mkZGDQp7/6CG64GIR2VQM3Yg6k= Subject key identifier: 68:B6:46:00:B1:91:A1:E4:E4:A4:91:55:AB:8F:9C:E2:D3:30:26:6C Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B378E5AC15FEB1EC56A74BD67C65F748A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 14E7 Signing time: Fri 19 Dec 2025 17:00:34 +0000 Manifest this update: Fri 19 Dec 2025 17:00:34 +0000 Manifest next update: Sat 20 Dec 2025 17:00:34 +0000 Files and hashes: 1: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 8IQSIrkFlhIoubJV4ZAXxyGtkM6Xi+WJxkFyJWonXT8=) 3: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 4: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 5: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 6: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 7: j8NjqBIRJXHLU6fz4KRQ0ytmrY0.roa (hash: GHDQRyU8BNxmW/AD2/CXO2KZK3zM4XOOhxJSq3Xe3ZQ=) 8: rDWaSHtZGK_wAave1oUt5myqQIQ.roa (hash: 6ORofU6kZ7mUvksV5r8YHqJNeWo5IFLQOTxYk+MlcYc=) 9: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 10: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 11: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:5a:c1:5f:eb:1e:c5:6a:74:bd:67:c6:5f:74:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Dec 19 17:00:34 2025 GMT Not After : Dec 20 17:00:34 2025 GMT Subject: CN=68b64600b191a1e4e4a49155ab8f9ce2d330266c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:7d:03:ef:da:bf:9c:5d:c2:cf:8a:4e:25: 93:45:3f:f3:c6:61:e1:dd:2a:69:58:36:3b:64:43: 61:17:98:15:14:e0:ce:d4:a5:01:43:b0:fc:8f:fb: 7f:b4:6a:d2:91:71:f1:37:d9:0d:e4:d1:56:56:3b: 74:b5:57:30:54:9f:cc:50:16:db:66:2c:70:b8:c3: 1c:a6:6c:b3:e9:d1:c0:c8:bc:80:b8:e6:20:b7:b8: 7b:f0:d9:d9:69:3c:1c:00:6f:e2:90:4d:64:9b:29: 8d:b1:c0:94:69:f2:90:3e:07:6e:66:40:20:bd:23: 76:f6:6e:64:c9:65:a0:5f:30:2d:12:b8:be:5c:a3: cd:98:a9:05:49:1d:c1:5e:0e:92:98:7b:a1:05:db: ec:31:28:0f:fd:1c:3a:6e:ad:ba:87:19:ac:32:43: 84:09:93:57:fa:ba:00:aa:33:f2:37:25:1c:ce:44: e3:93:64:01:f6:92:9e:28:91:7a:0b:8d:72:e5:3c: b2:3b:08:5c:8c:ee:a4:16:60:74:a3:f9:3f:7f:3f: 12:1d:e0:43:e9:eb:3c:b9:f0:22:b4:fa:2a:d4:46: c4:7a:83:4d:a6:dc:b9:3c:7b:40:b8:fa:89:a3:78: 68:19:78:d0:d0:9e:57:64:87:b4:eb:e7:3a:3b:62: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:46:00:B1:91:A1:E4:E4:A4:91:55:AB:8F:9C:E2:D3:30:26:6C X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:36:f2:b4:8b:28:f2:ed:d8:e6:58:60:e4:f6:20:27:7a:cf: 2b:62:3a:40:c9:2e:1c:32:11:99:03:84:92:e6:c7:8c:aa:73: 3e:c9:cd:48:c0:41:9b:fd:2c:35:96:c4:ae:34:c9:83:82:a9: a6:d6:75:d7:2a:a4:1e:e7:5a:bf:18:f2:9b:c0:14:18:4b:d0: 7e:5a:58:ac:ff:87:fa:19:f8:df:be:50:38:af:76:fe:83:a1: 18:2a:3c:3b:30:f8:f5:b5:ff:22:e3:34:c2:6c:74:00:64:60: 3a:ea:6e:fa:99:37:84:60:93:1e:4d:43:8b:ba:f0:68:31:14: 27:2a:f0:a1:ab:40:43:84:74:8f:6c:63:73:18:89:d2:04:e2: 5e:93:a4:f4:3b:f7:11:e1:4d:e2:9b:58:a4:0f:4f:cd:af:f5: 73:fa:3a:df:b9:ab:d3:6b:cf:d1:55:5e:52:37:42:1a:96:66: ae:96:37:bd:28:bc:c0:4f:fb:d5:6f:21:8a:a7:6f:ad:88:44: bc:32:7b:d5:66:8c:38:6f:6e:e0:1c:71:df:2d:27:b5:17:78: 39:f6:88:33:75:37:83:81:4e:f2:b0:6e:52:12:e4:84:b0:81: 39:00:3b:3f:41:db:41:5b:6d:82:89:d9:f8:5a:49:e5:dc:85: e4:4d:1e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jlrBX+sexWp0vWfGX3SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMjE5MTcwMDM0WhcNMjUxMjIwMTcwMDM0WjAzMTEwLwYDVQQD Eyg2OGI2NDYwMGIxOTFhMWU0ZTRhNDkxNTVhYjhmOWNlMmQzMzAyNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAZ9A+/av5xdws+KTiWTRT/zxmHh 3SppWDY7ZENhF5gVFODO1KUBQ7D8j/t/tGrSkXHxN9kN5NFWVjt0tVcwVJ/MUBbb ZixwuMMcpmyz6dHAyLyAuOYgt7h78NnZaTwcAG/ikE1kmymNscCUafKQPgduZkAg vSN29m5kyWWgXzAtEri+XKPNmKkFSR3BXg6SmHuhBdvsMSgP/Rw6bq26hxmsMkOE CZNX+roAqjPyNyUczkTjk2QB9pKeKJF6C41y5TyyOwhcjO6kFmB0o/k/fz8SHeBD 6es8ufAitPoq1EbEeoNNpty5PHtAuPqJo3hoGXjQ0J5XZIe06+c6O2L1uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi2RgCxkaHk5KSRVauPnOLTMCZsMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjbytIso 8u3Y5lhg5PYgJ3rPK2I6QMkuHDIRmQOEkubHjKpzPsnNSMBBm/0sNZbErjTJg4Kp ptZ11yqkHudavxjym8AUGEvQflpYrP+H+hn4375QOK92/oOhGCo8OzD49bX/IuM0 wmx0AGRgOupu+pk3hGCTHk1Di7rwaDEUJyrwoatAQ4R0j2xjcxiJ0gTiXpOk9Dv3 EeFN4ptYpA9Pza/1c/o637mr02vP0VVeUjdCGpZmrpY3vSi8wE/71W8hiqdvrYhE vDJ71WaMOG9u4Bxx3y0ntRd4OfaIM3U3g4FO8rBuUhLkhLCBOQA7P0HbQVttgonZ +FpJ5dyF5E0eCg== -----END CERTIFICATE-----Generated at Fri Dec 19 19:17:38 2025 by rpki-client