This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json) Hash identifier: vCED3jTrI0YRXywLec00BxgcJzlhCfzBq14RQHpOBZM= Subject key identifier: 14:2B:E3:2B:63:4E:99:D0:C9:69:39:64:E7:CC:B4:0C:E3:3A:70:02 Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16 Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16 Certificate serial: 019B53ABCB7ED6FB165D7C02258BBDC1A536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft Manifest number: 161C Signing time: Thu 25 Dec 2025 04:02:06 +0000 Manifest this update: Thu 25 Dec 2025 04:02:06 +0000 Manifest next update: Fri 26 Dec 2025 04:02:06 +0000 Files and hashes: 1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: E/4O+1AB6gJZaoCpOBxOjD9xVwpJqCxgCSoXHUmtlBA=) 2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:cb:7e:d6:fb:16:5d:7c:02:25:8b:bd:c1:a5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16 Validity Not Before: Dec 25 04:02:06 2025 GMT Not After : Dec 26 04:02:06 2025 GMT Subject: CN=142be32b634e99d0c9693964e7ccb40ce33a7002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:89:32:ef:bd:c9:4a:12:3f:8d:3f:f3:c6: 02:05:32:a2:4c:d2:3f:f7:ac:aa:85:ce:bc:e0:c9: 5e:39:36:e8:e4:b1:49:a7:6e:68:b0:de:07:c1:19: a5:30:47:99:bf:a5:ca:17:f6:ee:fd:3f:7f:bd:e5: c5:3a:2a:ba:74:3b:b0:91:26:ef:a6:45:b1:f7:e3: 77:5c:85:d6:4d:f7:dc:d9:37:0d:49:10:9d:de:7f: 4b:eb:53:7a:b5:05:d3:7c:4e:95:b1:6f:df:ae:62: d7:ff:ea:55:fa:2c:b8:57:99:47:df:9d:9d:6c:54: 0c:58:11:fd:5c:33:19:0f:42:b5:45:57:2f:c0:8b: fa:a6:2a:8a:61:dd:8b:8a:97:1d:42:6d:90:c8:5e: de:4e:32:1d:7f:fa:9c:9a:7b:71:95:a2:29:23:5d: ce:4f:c5:2b:1c:50:8a:a7:79:af:57:37:2a:af:be: 04:bf:5b:09:d4:ce:98:63:02:e9:62:b9:be:bf:71: df:b7:c4:df:5e:52:f9:89:31:53:0b:92:95:7f:1d: 21:8b:e5:5c:01:1a:73:7f:89:bd:3a:4a:0b:28:ff: 83:39:5a:29:47:0d:ce:29:75:d2:89:a8:b8:f6:f6: 14:d8:e7:d7:57:f5:84:b9:23:f0:09:9c:b7:89:ab: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:E3:2B:63:4E:99:D0:C9:69:39:64:E7:CC:B4:0C:E3:3A:70:02 X509v3 Authority Key Identifier: keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5f:f8:11:31:23:65:84:04:c5:db:67:2c:eb:88:b3:c3:9a: 03:b3:4f:25:c0:aa:3a:63:4d:7b:b5:02:fe:d0:8e:b0:ab:c6: 1b:74:2d:25:f7:02:c2:c6:eb:8b:c0:be:c3:87:d1:b5:5c:5a: 3b:92:33:d5:1a:fb:f9:cb:b6:c6:59:21:90:e4:10:94:c9:ab: 10:7d:48:a1:7d:f8:e8:ff:db:94:99:e6:ec:a1:0c:36:84:da: c6:6c:32:9e:d0:2b:42:79:6f:41:9d:12:6f:b0:9e:7c:eb:65: f0:e5:37:7f:70:93:18:c6:2f:dd:ff:f4:50:23:77:6e:ef:f5: b5:27:e6:1b:f4:a5:4e:e9:16:13:8b:95:75:d1:e2:bf:40:bb: d2:c3:4e:b1:4a:cc:5e:ae:00:2c:62:df:ee:6f:a5:51:4b:65: b0:9f:38:d6:1e:4f:75:e7:ae:01:1f:c6:db:a8:c7:8e:d5:89: e7:da:1e:39:7a:a5:74:c8:2f:a4:99:1f:41:63:0f:b2:37:49: 6a:72:52:31:71:7d:0f:7e:d8:59:ca:84:a1:ab:70:fe:4d:6b: fe:a6:2d:dd:da:6e:b1:8d:17:06:00:53:6c:5f:7f:61:b5:a6: 71:12:b8:13:e3:1c:c3:26:fd:69:7f:44:91:a1:31:ad:0a:7c: 9f:f0:b4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq8t+1vsWXXwCJYu9waU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjczNjcwYWMxNjFmNGI1NjY3OWM0OWRhOGI0ODliNjBi ZjBiMTYwHhcNMjUxMjI1MDQwMjA2WhcNMjUxMjI2MDQwMjA2WjAzMTEwLwYDVQQD EygxNDJiZTMyYjYzNGU5OWQwYzk2OTM5NjRlN2NjYjQwY2UzM2E3MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqWJMu+9yUoSP40/88YCBTKiTNI/ 96yqhc684MleOTbo5LFJp25osN4HwRmlMEeZv6XKF/bu/T9/veXFOiq6dDuwkSbv pkWx9+N3XIXWTffc2TcNSRCd3n9L61N6tQXTfE6VsW/frmLX/+pV+iy4V5lH352d bFQMWBH9XDMZD0K1RVcvwIv6piqKYd2LipcdQm2QyF7eTjIdf/qcmntxlaIpI13O T8UrHFCKp3mvVzcqr74Ev1sJ1M6YYwLpYrm+v3Hft8TfXlL5iTFTC5KVfx0hi+Vc ARpzf4m9OkoLKP+DOVopRw3OKXXSiai49vYU2OfXV/WEuSPwCZy3iatwEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQr4ytjTpnQyWk5ZOfMtAzjOnACMB8GA1UdIwQY MBaAFEH3NnCsFh9LVmecSdqLSJtgvwsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMzEwMzMtZTdhZS00YWIxLWFmNDkt Mjk2MTgzODdiYTI2LzEvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMzEwMzMtZTdhZS00YWIxLWFmNDktMjk2MTgzODdiYTI2 LzEvUWZjMmNLd1dIMHRXWjV4SjJvdEltMkNfQ3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl/4ETEj ZYQExdtnLOuIs8OaA7NPJcCqOmNNe7UC/tCOsKvGG3QtJfcCwsbri8C+w4fRtVxa O5Iz1Rr7+cu2xlkhkOQQlMmrEH1IoX346P/blJnm7KEMNoTaxmwyntArQnlvQZ0S b7CefOtl8OU3f3CTGMYv3f/0UCN3bu/1tSfmG/SlTukWE4uVddHiv0C70sNOsUrM Xq4ALGLf7m+lUUtlsJ841h5PdeeuAR/G26jHjtWJ59oeOXqldMgvpJkfQWMPsjdJ anJSMXF9D37YWcqEoatw/k1r/qYt3dpusY0XBgBTbF9/YbWmcRK4E+Mcwyb9aX9E kaExrQp8n/C0vA== -----END CERTIFICATE-----Generated at Thu Dec 25 10:42:08 2025 by rpki-client