This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json) Hash identifier: W257gpCsd4QGOsEYF6grhbOqytw3aeyk7ci1YqjmD0Y= Subject key identifier: C6:EB:3D:59:1F:B4:66:52:58:CD:A2:76:C4:4A:92:2D:96:3B:1A:7E Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Certificate serial: 019B3CB4F82E6E03A36D72416F93F9639D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft Manifest number: 0BB9 Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=) 2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: D/dRpnumiecULJLEB1ypAtsxoMbXgE8ae9gXv9HTECE=) 3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f8:2e:6e:03:a3:6d:72:41:6f:93:f9:63:9d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=c6eb3d591fb4665258cda276c44a922d963b1a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:17:b7:ef:2d:ff:b6:e9:01:ad:da:ad:fc: c0:89:86:40:80:86:04:c3:7d:e7:f1:97:9c:90:19: d3:06:16:92:61:8c:60:d9:40:ee:e6:98:1d:e0:18: 12:46:ef:5c:0b:60:0a:8c:d5:c2:be:10:51:06:e8: b8:f6:37:9f:cc:3d:ce:78:6e:92:80:89:dc:e1:61: 9e:fc:88:f8:46:1a:a4:3d:bc:a0:0a:9b:42:40:c3: 9c:8c:c1:7b:91:75:bd:3e:48:4b:97:dd:49:31:10: 5a:73:37:44:f8:b0:f4:ad:82:56:cb:9b:0c:ea:31: 8b:7f:4e:e6:14:5b:40:94:44:ad:40:f1:2a:1e:0b: 81:01:4a:00:76:43:f8:cc:2a:ab:71:37:2a:37:c5: 41:64:99:f0:47:a3:c1:3a:2d:c9:7b:05:96:37:8a: f5:b2:91:1b:f3:95:a2:c7:b8:36:2c:f4:f7:e6:23: 2e:48:78:a7:a3:22:db:50:8a:6f:7d:2c:bb:5d:96: ac:93:69:a7:a1:cc:41:e5:34:fe:06:42:da:54:9d: 59:c5:22:27:07:da:16:9f:72:3c:bf:18:70:ed:a6: 96:e5:d5:69:97:15:29:9b:93:49:76:f0:f3:a2:22: 15:d6:1e:d0:3a:09:55:61:c6:bf:cc:45:1b:51:23: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:3D:59:1F:B4:66:52:58:CD:A2:76:C4:4A:92:2D:96:3B:1A:7E X509v3 Authority Key Identifier: keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b2:16:cf:de:b7:70:8f:e3:8c:f5:55:3d:76:0f:d8:86:e5: f1:1c:58:05:83:66:40:3d:f8:3f:1d:8f:a4:40:d5:49:0e:ac: 1c:50:ad:41:fd:52:3b:a7:bd:70:03:48:79:3f:de:3b:4f:e4: fd:97:48:6d:30:82:f5:7e:62:30:c0:43:e6:ca:32:51:f0:60: 34:79:2b:c3:6e:83:d9:01:55:c1:2f:1d:5b:bb:87:95:d1:ca: b3:97:32:54:57:9e:0f:08:4e:8a:df:9b:bf:43:62:2e:cd:1c: 24:fa:98:44:42:87:06:bb:d2:88:26:3c:cb:00:82:33:90:02: b2:84:a1:6f:50:c8:65:c4:05:1d:8d:13:0f:2e:35:aa:b1:d1: e3:93:f8:ee:20:5f:a5:88:86:ed:f2:2e:17:e2:7c:16:2d:c1: 29:f2:fe:e0:95:17:07:89:2d:ab:f0:3e:a0:e3:ce:c9:38:95: 13:06:ef:b5:1d:32:ef:ab:5f:6c:d5:86:91:fe:b3:a3:a6:86: 0e:50:c3:b2:a0:54:80:a3:1b:6d:20:40:1f:1f:96:1c:b1:c7: e7:2d:b3:4e:35:f4:40:97:a0:d9:28:e4:8a:ab:5a:4a:5a:b7: 18:bd:bf:09:2d:82:e3:a8:28:7c:b0:e4:d3:b9:f0:7d:0a:8f: 57:a9:d0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPgubgOjbXJBb5P5Y51TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj ZWFjNzgwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD EyhjNmViM2Q1OTFmYjQ2NjUyNThjZGEyNzZjNDRhOTIyZDk2M2IxYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRAXt+8t/7bpAa3arfzAiYZAgIYE w33n8ZeckBnTBhaSYYxg2UDu5pgd4BgSRu9cC2AKjNXCvhBRBui49jefzD3OeG6S gInc4WGe/Ij4RhqkPbygCptCQMOcjMF7kXW9PkhLl91JMRBaczdE+LD0rYJWy5sM 6jGLf07mFFtAlEStQPEqHguBAUoAdkP4zCqrcTcqN8VBZJnwR6PBOi3JewWWN4r1 spEb85Wix7g2LPT35iMuSHinoyLbUIpvfSy7XZask2mnocxB5TT+BkLaVJ1ZxSIn B9oWn3I8vxhw7aaW5dVplxUpm5NJdvDzoiIV1h7QOglVYca/zEUbUSN+bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbrPVkftGZSWM2idsRKki2WOxp+MB8GA1UdIwQY MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt OWJiYjQyZmE4Y2VkLzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobIWz963 cI/jjPVVPXYP2Ibl8RxYBYNmQD34Px2PpEDVSQ6sHFCtQf1SO6e9cANIeT/eO0/k /ZdIbTCC9X5iMMBD5soyUfBgNHkrw26D2QFVwS8dW7uHldHKs5cyVFeeDwhOit+b v0NiLs0cJPqYREKHBrvSiCY8ywCCM5ACsoShb1DIZcQFHY0TDy41qrHR45P47iBf pYiG7fIuF+J8Fi3BKfL+4JUXB4ktq/A+oOPOyTiVEwbvtR0y76tfbNWGkf6zo6aG DlDDsqBUgKMbbSBAHx+WHLHH5y2zTjX0QJeg2SjkiqtaSlq3GL2/CS2C46gofLDk 07nwfQqPV6nQ/w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:29 2025 by rpki-client