This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json) Hash identifier: RQ60FUP5+X0sTftYrGAteHh79w7AVzqmGIQqOu7Myw4= Subject key identifier: 0F:10:3C:56:3E:8F:8E:E9:8F:BC:AF:E7:CA:AC:32:B9:BA:71:D8:C9 Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb Certificate serial: 019B53ABBEF3B200E50693605EFF3F9A7B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:03 +0000 Manifest this update: Thu 25 Dec 2025 04:02:03 +0000 Manifest next update: Fri 26 Dec 2025 04:02:03 +0000 Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: nhyBxFPfC7Nmcpoqy+4DcxlBDpWF23t/SGph7fnH/wY=) 2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:be:f3:b2:00:e5:06:93:60:5e:ff:3f:9a:7b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb Validity Not Before: Dec 25 04:02:03 2025 GMT Not After : Dec 26 04:02:03 2025 GMT Subject: CN=0f103c563e8f8ee98fbcafe7caac32b9ba71d8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:ac:de:f4:25:36:bc:45:05:c0:f4:85:88: e4:9e:4e:5e:33:fa:a3:87:ad:74:1e:dc:6a:58:74: b3:3d:aa:64:2a:13:9e:05:09:eb:e1:93:18:ce:4d: 11:ee:49:cb:ba:01:fb:1e:fd:8f:c7:5c:79:4e:b4: 1f:8a:68:14:6c:aa:94:0c:0a:93:f0:42:8c:02:f2: d2:3d:43:29:70:93:99:b7:76:72:d3:28:10:f1:3e: e1:03:ff:78:25:8a:01:c1:21:0f:d4:c5:d8:ba:12: db:c2:54:60:c4:60:0c:74:10:cd:38:f7:e4:db:de: e1:ad:79:83:d0:c8:7f:9e:7b:a7:7c:59:15:09:89: 60:0b:84:b4:9a:2b:04:78:b6:1f:09:99:7d:4c:e5: 64:6d:c6:9b:b5:89:4c:fd:76:b6:00:ca:d7:ea:6d: 51:09:43:3c:ba:f3:52:a1:ed:03:80:b8:30:cf:bf: 0a:08:29:65:ab:f8:ad:e2:cf:37:7c:bc:38:88:90: 26:69:43:f4:55:e4:95:05:1e:c8:d7:16:17:cb:7f: d4:b5:2d:f9:ff:a9:23:cc:cd:4a:14:99:15:c2:25: 4e:cd:65:dd:0a:4a:dd:4e:f6:05:ad:fc:17:8e:55: 43:93:8d:02:54:82:42:fe:0c:88:12:0c:45:d9:db: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:10:3C:56:3E:8F:8E:E9:8F:BC:AF:E7:CA:AC:32:B9:BA:71:D8:C9 X509v3 Authority Key Identifier: keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:86:cd:21:c2:db:8b:b9:66:14:2f:ca:85:a9:d0:60:ed: fa:85:32:c5:a5:c2:e8:28:94:55:90:f7:40:bd:09:c8:ff:fa: f3:86:2e:e1:f8:bd:dc:ec:01:bb:c2:ef:b9:6e:e3:9e:6f:fb: 23:3d:8e:b6:9b:8c:fc:84:c9:76:e4:03:c7:fb:46:77:83:42: e0:74:23:fa:7e:fd:02:20:5f:56:d6:4c:d8:17:f2:df:5b:88: ca:b8:f3:ea:d7:05:e5:a4:29:be:c9:02:19:71:b1:8e:38:58: 7c:a1:95:d1:44:96:5e:43:c8:87:06:58:82:12:6f:35:40:a0: ba:15:9b:5a:4c:bd:57:91:22:0d:72:97:36:72:81:75:38:17: 4a:a3:8e:f2:57:4d:7b:7a:ef:02:f2:f2:ff:f5:00:ab:19:f4: ee:57:31:6b:fc:76:ea:7b:af:28:70:89:9f:78:dd:fd:78:64: 89:1e:d3:04:6d:f2:3a:48:83:80:08:de:7c:20:e9:18:fe:9a: c0:97:5d:1f:ed:46:ae:c0:3f:bd:c6:79:a6:e5:cc:7b:d6:f9: 20:bf:b9:44:3b:e1:60:b5:f2:a7:53:2d:de:ff:8d:f4:36:d3: 0b:ea:ea:69:61:26:64:79:f7:93:5c:35:6d:99:bd:49:59:87: 38:80:6a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq77zsgDlBpNgXv8/mntCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNzRhNzg5NTg3NWNmMmM2Nzg1NDRmNmNlNmY0YjIzOWY0 OTI5ZmIwHhcNMjUxMjI1MDQwMjAzWhcNMjUxMjI2MDQwMjAzWjAzMTEwLwYDVQQD EygwZjEwM2M1NjNlOGY4ZWU5OGZiY2FmZTdjYWFjMzJiOWJhNzFkOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzes3vQlNrxFBcD0hYjknk5eM/qj h610HtxqWHSzPapkKhOeBQnr4ZMYzk0R7knLugH7Hv2Px1x5TrQfimgUbKqUDAqT 8EKMAvLSPUMpcJOZt3Zy0ygQ8T7hA/94JYoBwSEP1MXYuhLbwlRgxGAMdBDNOPfk 297hrXmD0Mh/nnunfFkVCYlgC4S0misEeLYfCZl9TOVkbcabtYlM/Xa2AMrX6m1R CUM8uvNSoe0DgLgwz78KCCllq/it4s83fLw4iJAmaUP0VeSVBR7I1xYXy3/UtS35 /6kjzM1KFJkVwiVOzWXdCkrdTvYFrfwXjlVDk40CVIJC/gyIEgxF2dsMZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8QPFY+j47pj7yv58qsMrm6cdjJMB8GA1UdIwQY MBaAFEB0p4lYdc8sZ4VE9s5vSyOfSSn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUt ZjUyZDYwNjRkZDhiLzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUtZjUyZDYwNjRkZDhi LzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDiGzSHC 24u5ZhQvyoWp0GDt+oUyxaXC6CiUVZD3QL0JyP/684Yu4fi93OwBu8LvuW7jnm/7 Iz2OtpuM/ITJduQDx/tGd4NC4HQj+n79AiBfVtZM2Bfy31uIyrjz6tcF5aQpvskC GXGxjjhYfKGV0USWXkPIhwZYghJvNUCguhWbWky9V5EiDXKXNnKBdTgXSqOO8ldN e3rvAvLy//UAqxn07lcxa/x26nuvKHCJn3jd/XhkiR7TBG3yOkiDgAjefCDpGP6a wJddH+1GrsA/vcZ5puXMe9b5IL+5RDvhYLXyp1Mt3v+N9DbTC+rqaWEmZHn3k1w1 bZm9SVmHOIBqew== -----END CERTIFICATE-----Generated at Thu Dec 25 05:33:32 2025 by rpki-client