This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: S1tJhRlz+cV8agcW6O1w+CRVwqjMZ2Yi6sFa+zdTjNk= Subject key identifier: 89:C8:82:A1:35:09:AB:A7:71:29:90:A6:79:2E:F8:41:35:5D:93:66 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019B35C94ACB983C679528B773CB35A7872E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 17C3 Signing time: Fri 19 Dec 2025 08:45:42 +0000 Manifest this update: Fri 19 Dec 2025 08:45:42 +0000 Manifest next update: Sat 20 Dec 2025 08:45:42 +0000 Files and hashes: 1: 587A_sxhnB_Cg2VH6zBxs_1aZV4.roa (hash: qUldoYoFLJ85vGl93bSFHpePwO1mUtBhilmXXO0xSlk=) 2: Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa (hash: mYux390OsCPiajLg/1tt+lZqU5GQYKEz7ajHTrFy5ig=) 3: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: gILFdHX4RK3KxlPVB5m81QTGFWkkPFzJSTqhLOFethg=) 4: bYA_FpiQq2-r3BgrfhC0leKBTz8.roa (hash: WITp7QcTYy47EA7fSLKGVL2Flf3F/KsorJAHnpJe3P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:c9:4a:cb:98:3c:67:95:28:b7:73:cb:35:a7:87:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Dec 19 08:45:42 2025 GMT Not After : Dec 20 08:45:42 2025 GMT Subject: CN=89c882a13509aba7712990a6792ef841355d9366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:c1:fe:a3:c9:da:a0:f6:74:09:34:6b:34: 5b:21:4f:50:2b:ba:45:1b:36:ff:c1:ea:c8:99:7a: 16:fb:81:36:2e:4c:9b:c8:19:c3:b6:91:38:bb:7e: e8:df:c8:dc:89:bf:48:c6:97:43:f3:3a:a4:a9:ad: 8d:cf:95:e0:58:01:69:80:9e:92:a1:94:12:d2:c3: 00:5b:ad:4a:41:85:7e:20:e0:40:19:2f:3d:61:ed: 89:62:08:96:2a:8e:08:e0:55:a9:f9:fd:cf:26:98: ab:48:17:45:a2:dd:6a:6d:01:ff:8a:70:c6:76:aa: ad:15:d9:ec:c0:88:e2:c2:26:c5:5b:99:fe:60:78: 54:5a:5b:4e:2b:fd:7b:c1:7a:c3:c0:c1:a4:05:c1: f6:5e:0e:98:a3:bb:74:34:c1:c7:1c:40:d3:63:63: 72:cd:e6:b1:3c:26:3c:37:e0:5c:74:63:e6:ec:13: c1:93:30:b5:1a:da:d4:f1:45:3e:56:f0:18:d3:d8: 65:a8:29:58:07:77:67:23:97:0d:35:b0:95:50:53: a0:af:b5:99:f9:49:fe:eb:17:fb:33:b3:fd:5d:24: 45:65:04:fc:05:ea:42:fa:05:a3:2a:f1:0c:ae:a0: 33:6a:f4:1b:30:27:6c:89:9c:8a:8b:f9:ad:fc:aa: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:82:A1:35:09:AB:A7:71:29:90:A6:79:2E:F8:41:35:5D:93:66 X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:61:6c:b4:f4:d2:22:ce:e9:ac:1c:47:90:6c:54:7f:e9: 9f:99:50:eb:36:38:9a:fe:6b:3c:29:b4:c6:0e:e4:f6:ee:88: 17:b7:1f:24:bc:4f:35:6c:cd:d5:69:85:d6:44:9b:df:49:dc: 8e:98:6c:e1:7e:b3:f2:24:18:ee:09:85:96:a9:b8:5a:e4:dc: 2f:c9:46:05:8b:c0:7b:5c:b7:d1:37:00:18:d2:b2:98:2d:ea: fe:f4:d2:a5:ea:a5:cd:37:ff:4c:51:70:98:e3:32:ab:a1:04: e3:35:ef:b9:19:42:74:0c:a5:52:68:c1:61:8f:80:96:15:67: ad:7a:27:93:5f:8c:19:b2:80:b6:87:90:d2:f9:86:ed:8b:85: 9b:31:ce:0b:3d:94:55:f2:9e:ce:d6:40:f6:d5:df:33:23:cb: 66:3c:b8:44:c2:5c:39:ba:b6:34:ae:27:75:06:84:00:db:2f: 63:17:a5:5f:5f:c2:99:72:39:1f:e2:ab:31:ed:15:d1:a1:1d: 4f:d2:a0:44:cb:ed:6b:96:94:09:b3:b6:7f:a8:40:04:d1:26: fd:dc:1a:ac:f1:97:f8:8b:34:ed:dc:ea:30:66:3d:fa:2d:a0: 3d:76:7f:14:bc:c0:c4:80:45:32:a6:db:2e:64:fe:1a:d0:f4: 67:cc:ae:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1yUrLmDxnlSi3c8s1p4cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMjE5MDg0NTQyWhcNMjUxMjIwMDg0NTQyWjAzMTEwLwYDVQQD Eyg4OWM4ODJhMTM1MDlhYmE3NzEyOTkwYTY3OTJlZjg0MTM1NWQ5MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0TB/qPJ2qD2dAk0azRbIU9QK7pF Gzb/werImXoW+4E2LkybyBnDtpE4u37o38jcib9IxpdD8zqkqa2Nz5XgWAFpgJ6S oZQS0sMAW61KQYV+IOBAGS89Ye2JYgiWKo4I4FWp+f3PJpirSBdFot1qbQH/inDG dqqtFdnswIjiwibFW5n+YHhUWltOK/17wXrDwMGkBcH2Xg6Yo7t0NMHHHEDTY2Ny zeaxPCY8N+BcdGPm7BPBkzC1GtrU8UU+VvAY09hlqClYB3dnI5cNNbCVUFOgr7WZ +Un+6xf7M7P9XSRFZQT8BepC+gWjKvEMrqAzavQbMCdsiZyKi/mt/KpxNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInIgqE1CauncSmQpnku+EE1XZNmMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbRhbLT0 0iLO6awcR5BsVH/pn5lQ6zY4mv5rPCm0xg7k9u6IF7cfJLxPNWzN1WmF1kSb30nc jphs4X6z8iQY7gmFlqm4WuTcL8lGBYvAe1y30TcAGNKymC3q/vTSpeqlzTf/TFFw mOMyq6EE4zXvuRlCdAylUmjBYY+AlhVnrXonk1+MGbKAtoeQ0vmG7YuFmzHOCz2U VfKeztZA9tXfMyPLZjy4RMJcObq2NK4ndQaEANsvYxelX1/CmXI5H+KrMe0V0aEd T9KgRMvta5aUCbO2f6hABNEm/dwarPGX+Is07dzqMGY9+i2gPXZ/FLzAxIBFMqbb LmT+GtD0Z8yu5w== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client