This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json) Hash identifier: NG32BSo9Se1NLUWWhC8tkMZO7V5TvAVWiyDVpNSgVlw= Subject key identifier: 7E:F8:C2:2C:BF:DA:B4:A9:95:60:1E:3B:8F:2A:D2:99:94:03:15:E4 Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Certificate serial: 019B45B8749E55C04C2A4B4F4F9A8EFED01D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft Manifest number: 1337 Signing time: Mon 22 Dec 2025 11:01:14 +0000 Manifest this update: Mon 22 Dec 2025 11:01:14 +0000 Manifest next update: Tue 23 Dec 2025 11:01:14 +0000 Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=) 2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: gt1ce61XY7+b5RwLRviXSSv5d85vnlyDGOdOPtXQtxg=) 3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:74:9e:55:c0:4c:2a:4b:4f:4f:9a:8e:fe:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Validity Not Before: Dec 22 11:01:14 2025 GMT Not After : Dec 23 11:01:14 2025 GMT Subject: CN=7ef8c22cbfdab4a995601e3b8f2ad299940315e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:fb:a7:07:5b:af:7a:57:4a:ad:e5:86:59: 23:6b:43:a2:a5:e6:93:73:ec:5d:dc:8c:a3:cd:51: 77:9f:bf:a9:f8:c2:ab:da:ae:75:f7:c2:fc:91:46: 54:63:7b:08:14:22:2e:1c:51:aa:c7:fc:c6:d8:d9: 80:86:ba:b5:d0:c8:3f:32:d3:e5:e1:59:f2:5c:cc: 9d:a1:a3:bc:74:65:74:df:6f:88:d8:37:eb:a6:6a: a6:47:58:2f:d9:16:32:f3:f1:b2:c4:59:73:ec:53: 17:06:bf:6c:21:c9:bc:4d:5e:f5:5f:5a:6a:34:bb: 95:4d:59:5e:be:ff:65:75:c0:09:68:aa:a0:8b:03: f5:21:2a:78:f2:25:e4:bf:80:8c:8e:8b:5e:c8:3b: bf:9a:e3:6a:21:52:8c:ef:c6:60:32:82:52:5e:ed: 75:6e:fa:4a:04:64:f6:fe:24:30:9e:24:d0:da:88: d2:2b:85:87:b4:48:5f:04:7d:e6:c5:01:2f:39:29: 39:55:3a:08:2c:b9:d7:fb:68:18:0d:da:12:97:97: de:06:5c:ed:22:51:72:38:81:f3:d1:e0:24:43:a8: ea:c1:f4:92:16:76:b3:c6:03:33:10:98:5c:f0:de: 07:42:10:2c:25:ca:3a:51:3e:94:c4:0a:14:ce:65: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:C2:2C:BF:DA:B4:A9:95:60:1E:3B:8F:2A:D2:99:94:03:15:E4 X509v3 Authority Key Identifier: keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:06:a0:72:f9:63:1f:22:7e:98:e8:01:c3:6d:96:80:85:b3: 05:c4:e3:1d:df:c6:d5:e6:f7:ca:58:35:91:1b:0a:f3:f7:82: 9b:97:77:cd:86:5d:22:ba:19:35:96:1a:a4:55:8f:68:98:07: eb:dd:04:79:2e:a3:c1:a7:a0:e4:c2:e2:44:f4:a9:41:41:d3: d2:02:58:9f:47:59:74:a0:cc:12:c8:d1:53:63:db:c7:1f:ef: 57:a2:31:f5:41:f3:92:4c:2e:27:8c:92:cf:55:e1:a0:3a:37: 2d:a5:e9:c8:db:35:a3:eb:21:4f:03:cc:37:f0:af:03:c9:92: de:e8:91:49:ed:da:98:cd:cc:63:42:7e:e9:38:05:d7:50:4e: ed:a4:32:8e:24:2f:ba:62:2b:94:72:b6:83:0f:ce:95:e5:2e: 5a:8b:d9:20:c0:c7:7e:1f:7d:11:38:e5:fd:59:a2:1d:af:a7: 9d:3a:59:90:18:84:9a:2f:e8:fc:b1:85:f0:02:87:bd:de:58: ed:32:03:8f:8d:89:55:f9:ac:d8:da:34:7c:c1:74:07:e4:4d: 2a:ff:dd:f0:84:00:52:b2:b5:5e:b1:5c:8b:c5:03:d4:a6:d9: 0e:50:96:e9:8b:88:a3:d5:c9:53:f3:2b:09:a2:6f:6e:5c:94: de:66:bf:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuHSeVcBMKktPT5qO/tAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk YTQ3ZDcwHhcNMjUxMjIyMTEwMTE0WhcNMjUxMjIzMTEwMTE0WjAzMTEwLwYDVQQD Eyg3ZWY4YzIyY2JmZGFiNGE5OTU2MDFlM2I4ZjJhZDI5OTk0MDMxNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKT7pwdbr3pXSq3lhlkja0OipeaT c+xd3IyjzVF3n7+p+MKr2q5198L8kUZUY3sIFCIuHFGqx/zG2NmAhrq10Mg/MtPl 4VnyXMydoaO8dGV032+I2DfrpmqmR1gv2RYy8/GyxFlz7FMXBr9sIcm8TV71X1pq NLuVTVlevv9ldcAJaKqgiwP1ISp48iXkv4CMjoteyDu/muNqIVKM78ZgMoJSXu11 bvpKBGT2/iQwniTQ2ojSK4WHtEhfBH3mxQEvOSk5VToILLnX+2gYDdoSl5feBlzt IlFyOIHz0eAkQ6jqwfSSFnazxgMzEJhc8N4HQhAsJco6UT6UxAoUzmWV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH74wiy/2rSplWAeO48q0pmUAxXkMB8GA1UdIwQY MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAagcvlj HyJ+mOgBw22WgIWzBcTjHd/G1eb3ylg1kRsK8/eCm5d3zYZdIroZNZYapFWPaJgH 690EeS6jwaeg5MLiRPSpQUHT0gJYn0dZdKDMEsjRU2Pbxx/vV6Ix9UHzkkwuJ4yS z1XhoDo3LaXpyNs1o+shTwPMN/CvA8mS3uiRSe3amM3MY0J+6TgF11BO7aQyjiQv umIrlHK2gw/OleUuWovZIMDHfh99ETjl/VmiHa+nnTpZkBiEmi/o/LGF8AKHvd5Y 7TIDj42JVfms2No0fMF0B+RNKv/d8IQAUrK1XrFci8UD1KbZDlCW6YuIo9XJU/Mr CaJvblyU3ma/9g== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:36 2025 by rpki-client