This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: VyCCCLwBYrtj2jtdrQJk97lHpqARqEFsQNghZFqPrK8= Subject key identifier: 16:E6:B0:BA:99:18:BB:32:36:AE:44:05:55:BF:AD:35:DB:48:16:0C Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019B4EF24EFCE961FF0ED0C1944166EF5175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 17D1 Signing time: Wed 24 Dec 2025 06:01:01 +0000 Manifest this update: Wed 24 Dec 2025 06:01:01 +0000 Manifest next update: Thu 25 Dec 2025 06:01:01 +0000 Files and hashes: 1: 587A_sxhnB_Cg2VH6zBxs_1aZV4.roa (hash: qUldoYoFLJ85vGl93bSFHpePwO1mUtBhilmXXO0xSlk=) 2: Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa (hash: mYux390OsCPiajLg/1tt+lZqU5GQYKEz7ajHTrFy5ig=) 3: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: dsXoA31grBu1v1Xe4GEms5zS9bNZZ1a0rYwvspgYHQc=) 4: _128UK9zOTVa_Y9MVH3vUjbt7Qo.roa (hash: FNzBqgTeEOzQKbwifiwA+0Ui5m8IUqXu4G69WrYDW18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:4e:fc:e9:61:ff:0e:d0:c1:94:41:66:ef:51:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Dec 24 06:01:01 2025 GMT Not After : Dec 25 06:01:01 2025 GMT Subject: CN=16e6b0ba9918bb3236ae440555bfad35db48160c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:61:d5:91:58:4f:c3:df:f3:26:8a:5c:be: df:2f:37:6a:71:8c:9e:9a:bf:c8:6e:60:f1:3e:7a: e3:0e:48:b0:9a:52:32:37:63:85:1c:8d:a0:73:af: be:40:60:d8:6a:06:aa:27:da:01:ca:7f:f4:9e:97: 6c:87:87:7a:96:a5:f8:90:34:cd:0f:db:06:e4:ab: 0f:c1:74:96:7c:8e:db:9d:2e:9e:e5:6e:d1:c4:64: 43:6d:83:4e:e0:92:69:61:90:08:2b:17:5e:dc:df: b3:61:3e:6d:64:c5:d1:96:9d:57:17:a3:dc:c6:2c: dc:6e:9f:0b:22:2e:a8:c4:fc:b8:b6:c0:b6:4f:0c: 1a:9e:0c:49:08:9c:17:82:12:08:96:f3:2f:d7:08: 89:15:c4:87:2a:2b:67:27:85:6b:20:dc:a1:5a:b6: aa:a8:6c:34:bd:b2:7c:96:df:e2:d6:dd:08:9d:8f: fe:46:8e:5d:99:94:c7:5d:52:15:3a:a6:48:48:a5: 98:e1:d9:58:b5:94:5b:7e:b7:1f:7a:2d:c6:be:08: 21:f2:0d:d2:64:1c:18:d4:7a:bc:bd:5a:7d:4e:f2: d6:1f:e1:9e:00:dd:58:01:b7:46:44:87:2c:d7:26: 8d:e3:90:11:47:1a:66:10:42:38:44:41:9f:52:ea: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:B0:BA:99:18:BB:32:36:AE:44:05:55:BF:AD:35:DB:48:16:0C X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:58:47:b5:21:98:04:75:92:41:f2:4e:ae:5c:0d:4a:e7:09: 03:d5:11:2c:76:95:a9:9e:3e:22:a5:24:d7:08:3f:3b:f0:3e: 87:a4:58:ea:1d:a3:08:1a:ce:f0:30:a5:d6:ed:bf:cc:1c:a8: 24:52:c5:55:1a:ac:31:ce:eb:8a:37:69:c8:7c:70:fa:38:90: 47:74:ff:1d:a4:34:05:67:52:de:9e:ad:4d:1f:39:fd:b1:ad: f0:d4:a4:6c:ca:6c:c7:29:3f:e2:d3:6e:df:01:53:f2:86:fd: 0e:1e:39:04:51:b6:b9:9e:07:c7:01:46:7a:e7:dc:63:f1:3c: 75:b8:6c:b8:39:78:a4:f2:a4:2a:a2:0a:33:70:43:ed:64:5f: 0e:10:1e:6b:c8:cf:e1:8b:c6:f0:0f:5f:d7:ff:74:90:df:a3: 14:f0:0a:a2:c9:4d:6b:07:08:40:cc:cf:eb:52:a9:fe:50:97: a3:b5:50:2e:21:92:1b:d4:e7:35:fd:f7:87:3e:3d:2e:86:2c: 11:73:01:f8:80:f4:5a:fe:0f:cb:50:52:d9:79:0f:cc:aa:b8: af:56:da:d3:d7:c0:77:5e:bf:f8:67:4e:18:b7:47:41:27:d8: e8:ca:ec:82:16:7f:72:d3:b9:e0:8c:98:e4:fe:77:7f:4c:94: 1b:7f:d4:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8k786WH/DtDBlEFm71F1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMjI0MDYwMTAxWhcNMjUxMjI1MDYwMTAxWjAzMTEwLwYDVQQD EygxNmU2YjBiYTk5MThiYjMyMzZhZTQ0MDU1NWJmYWQzNWRiNDgxNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DVh1ZFYT8Pf8yaKXL7fLzdqcYye mr/IbmDxPnrjDkiwmlIyN2OFHI2gc6++QGDYagaqJ9oByn/0npdsh4d6lqX4kDTN D9sG5KsPwXSWfI7bnS6e5W7RxGRDbYNO4JJpYZAIKxde3N+zYT5tZMXRlp1XF6Pc xizcbp8LIi6oxPy4tsC2TwwangxJCJwXghIIlvMv1wiJFcSHKitnJ4VrINyhWraq qGw0vbJ8lt/i1t0InY/+Ro5dmZTHXVIVOqZISKWY4dlYtZRbfrcfei3Gvggh8g3S ZBwY1Hq8vVp9TvLWH+GeAN1YAbdGRIcs1yaN45ARRxpmEEI4REGfUuqsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbmsLqZGLsyNq5EBVW/rTXbSBYMMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlhHtSGY BHWSQfJOrlwNSucJA9URLHaVqZ4+IqUk1wg/O/A+h6RY6h2jCBrO8DCl1u2/zByo JFLFVRqsMc7rijdpyHxw+jiQR3T/HaQ0BWdS3p6tTR85/bGt8NSkbMpsxyk/4tNu 3wFT8ob9Dh45BFG2uZ4HxwFGeufcY/E8dbhsuDl4pPKkKqIKM3BD7WRfDhAea8jP 4YvG8A9f1/90kN+jFPAKoslNawcIQMzP61Kp/lCXo7VQLiGSG9TnNf33hz49LoYs EXMB+ID0Wv4Py1BS2XkPzKq4r1ba09fAd16/+GdOGLdHQSfY6MrsghZ/ctO54IyY 5P53f0yUG3/UfA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:53 2025 by rpki-client