This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json) Hash identifier: TWoc8f7g9SDTH12u53aTUe3ABdU3HZgVKYdIr2wURaU= Subject key identifier: 89:6A:62:10:29:93:6E:29:A7:78:E0:A4:EA:CD:35:27:7A:A1:C7:54 Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Certificate serial: 019B443812F77653E3DEF6B0C56D26EF94F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft Manifest number: 110C Signing time: Mon 22 Dec 2025 04:01:24 +0000 Manifest this update: Mon 22 Dec 2025 04:01:24 +0000 Manifest next update: Tue 23 Dec 2025 04:01:24 +0000 Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=) 2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: morP7gFlI4ii1vTDSdFvwYcSk2JT6JYQJyLXBtcMNvA=) 3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:12:f7:76:53:e3:de:f6:b0:c5:6d:26:ef:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Validity Not Before: Dec 22 04:01:24 2025 GMT Not After : Dec 23 04:01:24 2025 GMT Subject: CN=896a621029936e29a778e0a4eacd35277aa1c754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:07:8f:3c:d8:b5:66:17:dd:f5:08:03:b6: c2:1f:68:da:e0:70:0d:b0:5a:d4:10:af:7e:56:2a: 5e:62:bd:65:3e:6e:63:fb:53:e9:c7:15:eb:40:11: b1:28:35:eb:93:1e:c0:e4:94:c4:6a:75:5b:d3:e3: 8f:05:d6:80:3b:7d:f3:c1:e8:26:53:94:b6:86:22: 7f:30:5d:89:df:e9:ab:63:3e:c6:7d:fa:d1:50:f4: ff:ae:2e:e7:7c:37:bd:6b:f0:ad:5d:8b:19:9c:da: c9:d1:d0:7a:f8:2c:3e:8e:84:86:97:e3:bb:56:09: 42:b8:98:ba:db:26:3c:dc:40:ec:94:21:0f:d8:9d: bb:df:9f:95:3e:fb:d2:86:d4:7d:ff:62:e9:ed:f6: fb:b3:2f:69:b5:b7:db:c2:a6:f5:e2:08:45:ec:85: 34:5e:6b:f0:92:96:00:03:97:ba:bf:de:a9:38:8a: ec:1b:14:b6:b0:47:14:04:3a:36:71:c3:d6:b1:2b: e4:12:35:e7:a8:91:c5:52:8f:09:55:12:77:01:39: fa:c6:f6:01:3b:5b:82:fb:83:1b:fa:5a:9b:c5:08: df:8d:a2:b8:7b:50:51:8d:4a:91:29:0d:77:67:61: a4:51:d9:43:db:d7:bd:70:34:b6:fb:aa:96:29:50: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6A:62:10:29:93:6E:29:A7:78:E0:A4:EA:CD:35:27:7A:A1:C7:54 X509v3 Authority Key Identifier: keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:67:8c:9e:30:3a:12:42:6e:ff:96:87:bd:84:49:40:57: a2:7b:64:56:7d:90:e0:fa:ab:a0:73:69:78:38:b2:b7:13:eb: 52:16:4d:32:e4:7e:11:61:53:b7:b5:00:63:cf:b5:e3:87:c3: a6:4f:51:dd:51:b0:fd:49:93:e6:49:44:df:c2:2c:cb:5c:16: 12:45:f5:0d:57:ac:82:6c:b4:0f:f3:07:89:47:8a:86:bf:bf: 9b:b3:c1:d5:81:1e:b2:00:96:73:68:82:47:38:a7:5f:07:2f: ef:95:33:de:b2:7e:6b:e1:ca:06:7e:15:fe:2d:9a:93:ca:46: 27:8b:ff:b1:70:33:a3:b6:da:ae:f1:b1:b0:e1:e5:34:69:e7: 86:a9:3b:5a:33:9a:69:91:e3:a1:e3:6c:a8:d0:bd:0a:10:65: 1c:67:bc:e8:f3:0c:d9:87:b4:8d:62:1d:7a:95:aa:2c:95:02: f4:07:76:41:b1:80:09:84:30:6c:ea:16:02:e4:d3:a9:f2:28: 04:8e:22:d2:5e:a0:9f:42:b0:8f:a3:62:8d:3a:c5:95:6d:7a: ba:67:14:30:97:df:cb:36:be:6f:fb:8b:ec:3c:45:57:fc:73: 33:52:6c:29:a9:dc:d3:02:77:7f:5e:09:d1:52:e5:e2:7f:ca: d5:c9:de:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOBL3dlPj3vawxW0m75T4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5 NDlmYTgwHhcNMjUxMjIyMDQwMTI0WhcNMjUxMjIzMDQwMTI0WjAzMTEwLwYDVQQD Eyg4OTZhNjIxMDI5OTM2ZTI5YTc3OGUwYTRlYWNkMzUyNzdhYTFjNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2UHjzzYtWYX3fUIA7bCH2ja4HAN sFrUEK9+VipeYr1lPm5j+1PpxxXrQBGxKDXrkx7A5JTEanVb0+OPBdaAO33zwegm U5S2hiJ/MF2J3+mrYz7GffrRUPT/ri7nfDe9a/CtXYsZnNrJ0dB6+Cw+joSGl+O7 VglCuJi62yY83EDslCEP2J2735+VPvvShtR9/2Lp7fb7sy9ptbfbwqb14ghF7IU0 XmvwkpYAA5e6v96pOIrsGxS2sEcUBDo2ccPWsSvkEjXnqJHFUo8JVRJ3ATn6xvYB O1uC+4Mb+lqbxQjfjaK4e1BRjUqRKQ13Z2GkUdlD29e9cDS2+6qWKVDmOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlqYhApk24pp3jgpOrNNSd6ocdUMB8GA1UdIwQY MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpVnjJ4w OhJCbv+Wh72ESUBXontkVn2Q4PqroHNpeDiytxPrUhZNMuR+EWFTt7UAY8+144fD pk9R3VGw/UmT5klE38Isy1wWEkX1DVesgmy0D/MHiUeKhr+/m7PB1YEesgCWc2iC RzinXwcv75Uz3rJ+a+HKBn4V/i2ak8pGJ4v/sXAzo7barvGxsOHlNGnnhqk7WjOa aZHjoeNsqNC9ChBlHGe86PMM2Ye0jWIdepWqLJUC9Ad2QbGACYQwbOoWAuTTqfIo BI4i0l6gn0Kwj6NijTrFlW16umcUMJffyza+b/uL7DxFV/xzM1JsKanc0wJ3f14J 0VLl4n/K1cneHQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:05:40 2025 by rpki-client