This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: OrXOgzwwk/7gk5ErfKrE3qin4puESSz+h+CCnFKgp3w= Subject key identifier: 2C:35:B7:00:54:18:59:94:04:0B:AB:A6:2E:1E:4E:04:6D:B2:90:93 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B3AC6EDE56785AEA4E5E242303DBE0AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1366 Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 1U33mBKUUFvIaCQN4OGPGbmIIGb7EUT9Pmzazz6ZfaQ=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ed:e5:67:85:ae:a4:e5:e2:42:30:3d:be:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=2c35b70054185994040baba62e1e4e046db29093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:05:46:0a:58:e4:40:7d:08:07:19:97:06: ce:a6:53:64:14:25:5d:1d:9c:58:ab:52:9d:a2:d2: aa:99:0c:60:dd:29:5c:a8:e4:9e:1c:6a:b6:68:13: 55:6e:8b:c6:03:93:85:fc:92:7c:a1:02:c8:4c:25: c9:8e:be:fd:46:2a:f1:27:82:8c:89:de:a3:e4:18: 9b:03:3b:cf:0e:ba:32:88:1d:dc:43:47:5c:ae:c5: 8f:06:be:3f:06:b0:26:a9:c4:26:37:1b:70:a4:0e: 13:3b:9f:30:4b:51:be:8f:d7:8f:a5:7f:0e:08:87: 39:62:d9:eb:0c:3b:4a:c8:e1:75:84:e5:a0:8f:ad: d1:44:f6:ab:48:dc:0d:3a:03:58:8f:5a:26:bc:96: 3f:3b:fe:f9:48:57:dd:f0:ef:d3:73:11:a6:c8:57: b4:4f:ee:03:98:2d:d1:1b:51:71:f2:4d:00:b2:b1: 55:4e:2c:46:05:e3:98:38:f0:34:b6:9d:4e:86:a8: 75:3a:b7:35:e5:c7:4d:23:a4:a8:eb:74:bd:06:c8: 6f:2d:89:00:00:92:59:80:57:ba:62:5e:af:b1:03: 3e:9e:5f:24:02:d1:69:d3:02:4a:98:9a:e6:f1:2c: 75:73:3e:41:22:cb:6d:17:90:0b:df:ba:bc:3b:64: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:B7:00:54:18:59:94:04:0B:AB:A6:2E:1E:4E:04:6D:B2:90:93 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:54:c6:01:bc:0b:fe:8d:dd:9d:98:46:b8:6a:d9:8c:f5:06: c0:a3:12:e4:47:80:89:7c:e0:f2:90:b4:0f:d4:85:61:45:b8: aa:27:b9:b0:43:df:a4:be:25:52:6d:ab:4d:c3:ad:16:35:fb: 28:8d:16:c4:20:3d:fb:99:cb:2a:5d:98:dc:40:fe:c2:db:48: 40:1e:5d:4e:c3:e6:09:4e:61:1a:ca:76:a9:14:33:5c:f2:56: 8d:f5:8e:18:5b:e6:de:95:37:b0:3d:5a:51:07:e4:90:a9:e1: 8b:ab:e4:b3:09:cf:52:39:0d:d3:3c:36:61:85:c1:1e:ac:40: bf:0e:9f:db:54:5d:f9:39:0d:74:87:3d:35:e9:c0:c4:e0:12: a5:91:09:1d:0b:af:6c:56:16:0d:f4:40:9d:07:2e:ff:d7:a9: 75:1a:3d:38:24:ce:70:71:ba:a2:f9:73:f1:fb:bc:ea:43:19: b8:e9:bf:df:1e:ed:d3:7a:ff:f9:37:fc:e6:c3:6a:be:e7:29: c8:f6:fe:51:8d:77:a1:9f:cf:c2:f3:ae:b0:7c:c6:b1:e4:e2: 67:ba:db:2f:ee:47:bf:69:9d:f1:d4:22:e9:28:a1:9f:57:91: 89:93:18:5c:dc:01:b8:00:fa:02:e8:4a:55:1f:66:7f:2e:58: ff:0a:21:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xu3lZ4WupOXiQjA9vgriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EygyYzM1YjcwMDU0MTg1OTk0MDQwYmFiYTYyZTFlNGUwNDZkYjI5MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOgFRgpY5EB9CAcZlwbOplNkFCVd HZxYq1KdotKqmQxg3SlcqOSeHGq2aBNVbovGA5OF/JJ8oQLITCXJjr79RirxJ4KM id6j5BibAzvPDroyiB3cQ0dcrsWPBr4/BrAmqcQmNxtwpA4TO58wS1G+j9ePpX8O CIc5YtnrDDtKyOF1hOWgj63RRParSNwNOgNYj1omvJY/O/75SFfd8O/TcxGmyFe0 T+4DmC3RG1Fx8k0AsrFVTixGBeOYOPA0tp1Ohqh1Orc15cdNI6So63S9BshvLYkA AJJZgFe6Yl6vsQM+nl8kAtFp0wJKmJrm8Sx1cz5BIsttF5AL37q8O2R/ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw1twBUGFmUBAurpi4eTgRtspCTMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFTGAbwL /o3dnZhGuGrZjPUGwKMS5EeAiXzg8pC0D9SFYUW4qie5sEPfpL4lUm2rTcOtFjX7 KI0WxCA9+5nLKl2Y3ED+wttIQB5dTsPmCU5hGsp2qRQzXPJWjfWOGFvm3pU3sD1a UQfkkKnhi6vkswnPUjkN0zw2YYXBHqxAvw6f21Rd+TkNdIc9NenAxOASpZEJHQuv bFYWDfRAnQcu/9epdRo9OCTOcHG6ovlz8fu86kMZuOm/3x7t03r/+Tf85sNqvucp yPb+UY13oZ/PwvOusHzGseTiZ7rbL+5Hv2md8dQi6Sihn1eRiZMYXNwBuAD6AuhK VR9mfy5Y/wohmA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:21:08 2025 by rpki-client