This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json) Hash identifier: kbtMshRSYJX6uHEOU5A9DY+tekJSk66Q5KCrvObu/L8= Subject key identifier: 6D:76:2C:04:72:1E:9A:5B:5B:70:9C:69:22:5C:6D:9A:3C:5F:B5:12 Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Certificate serial: 019B36B42DFF1A6A0AFE2E4DC724CD699F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft Manifest number: 161F Signing time: Fri 19 Dec 2025 13:02:16 +0000 Manifest this update: Fri 19 Dec 2025 13:02:16 +0000 Manifest next update: Sat 20 Dec 2025 13:02:16 +0000 Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: uO/FI0QsYpXD8TdiB37DSpcanrywvGA+TPrmHRp3ccE=) 2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:2d:ff:1a:6a:0a:fe:2e:4d:c7:24:cd:69:9f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Validity Not Before: Dec 19 13:02:16 2025 GMT Not After : Dec 20 13:02:16 2025 GMT Subject: CN=6d762c04721e9a5b5b709c69225c6d9a3c5fb512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:ff:b4:d9:03:58:0f:df:be:c8:3c:d1:bf: 0a:42:21:a3:d2:a0:fc:f7:33:ed:f2:21:dd:74:d5: be:d4:26:98:fc:d5:61:a0:37:1e:5b:34:55:a9:b6: 0c:be:89:f3:ef:a2:94:ed:72:95:2f:bc:b9:a2:c2: db:11:09:3e:7f:17:36:82:e0:45:74:ef:76:23:72: 11:e1:c1:eb:c8:67:36:7c:8d:54:4e:bb:f4:89:8f: a2:12:91:04:72:30:5d:3f:75:7e:22:1e:d8:5e:33: 0e:11:3e:eb:55:98:ed:c2:95:f7:78:9c:af:e0:09: 68:d9:b9:be:19:e0:e5:e4:68:a7:d6:a7:c9:c3:fb: d3:29:ad:9b:e2:78:d3:57:f6:ab:41:6c:f8:a0:55: a9:73:9a:b4:88:c0:01:5f:9b:e8:a5:3a:4c:8c:87: d1:81:6f:90:d7:f5:bd:75:06:e2:f4:e7:00:6d:ea: b5:58:fc:5e:3e:f6:c9:0e:42:66:0b:35:f5:d4:87: e6:14:7f:3d:0d:a4:09:2a:21:a6:5b:70:26:7a:1d: 26:4a:d1:3d:3b:6d:21:d0:c0:60:0f:5b:4a:c1:27: f7:20:b2:3a:4a:80:f0:10:bc:4d:6c:a3:db:f0:99: 6d:fd:af:4a:9a:fc:75:07:11:6b:28:f1:e3:f0:dd: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:2C:04:72:1E:9A:5B:5B:70:9C:69:22:5C:6D:9A:3C:5F:B5:12 X509v3 Authority Key Identifier: keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2b:e6:b8:b8:68:f8:70:6e:94:b3:f4:94:5e:3d:b1:8b:7a: 87:45:12:d3:22:96:74:5c:43:e7:54:d9:c6:a4:67:ae:f3:bd: e5:b4:2c:9e:8a:e5:39:93:2c:2d:9a:80:91:b3:30:30:52:27: 48:aa:04:b4:87:2b:cd:9e:e2:55:58:a6:22:c7:1b:f7:2e:5f: 50:5c:96:d6:35:3c:0c:ec:7e:bf:a8:38:86:fb:aa:e2:76:24: 98:77:fc:23:99:5b:b0:82:62:1a:0f:ea:dc:64:95:22:1a:4d: ca:1d:45:b4:01:48:e0:23:97:a6:e6:6b:6e:b0:4a:f8:b1:35: 0c:13:73:07:92:3b:b5:b1:66:7d:cf:3c:b6:58:ee:fc:ae:f3: f9:c4:81:29:78:4b:2c:c8:b4:f0:d3:19:02:73:23:43:bf:91: a3:14:61:4b:f1:e6:50:0b:6d:f3:bf:cc:46:ee:d9:c7:23:69: 03:dc:ae:7b:10:6b:fe:be:04:91:72:07:e1:14:81:56:63:05: db:4b:32:6d:26:0a:38:47:ce:3c:6b:c1:88:cf:6e:9b:c1:e0: 09:0c:e2:73:bf:52:de:37:f6:90:fb:49:09:a5:ac:16:f5:86: 8c:ed:01:66:ae:05:48:6e:c1:68:37:4d:77:ae:63:f4:ef:50: 15:dd:ef:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tC3/GmoK/i5NxyTNaZ9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWU2MTBiZGNkMjNiYWQyYjExOTJiZDQ1Y2E4YTk3NmQz ODU1ZGEwHhcNMjUxMjE5MTMwMjE2WhcNMjUxMjIwMTMwMjE2WjAzMTEwLwYDVQQD Eyg2ZDc2MmMwNDcyMWU5YTViNWI3MDljNjkyMjVjNmQ5YTNjNWZiNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtL/tNkDWA/fvsg80b8KQiGj0qD8 9zPt8iHddNW+1CaY/NVhoDceWzRVqbYMvonz76KU7XKVL7y5osLbEQk+fxc2guBF dO92I3IR4cHryGc2fI1UTrv0iY+iEpEEcjBdP3V+Ih7YXjMOET7rVZjtwpX3eJyv 4Alo2bm+GeDl5Gin1qfJw/vTKa2b4njTV/arQWz4oFWpc5q0iMABX5vopTpMjIfR gW+Q1/W9dQbi9OcAbeq1WPxePvbJDkJmCzX11IfmFH89DaQJKiGmW3Ameh0mStE9 O20h0MBgD1tKwSf3ILI6SoDwELxNbKPb8Jlt/a9Kmvx1BxFrKPHj8N3d3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG12LARyHppbW3CcaSJcbZo8X7USMB8GA1UdIwQY MBaAFEDuYQvc0jutKxGSvUXKipdtOFXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYt YTZjMTdjZTgyZDc3LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYtYTZjMTdjZTgyZDc3 LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtivmuLho +HBulLP0lF49sYt6h0US0yKWdFxD51TZxqRnrvO95bQsnorlOZMsLZqAkbMwMFIn SKoEtIcrzZ7iVVimIscb9y5fUFyW1jU8DOx+v6g4hvuq4nYkmHf8I5lbsIJiGg/q 3GSVIhpNyh1FtAFI4COXpuZrbrBK+LE1DBNzB5I7tbFmfc88tlju/K7z+cSBKXhL LMi08NMZAnMjQ7+RoxRhS/HmUAtt87/MRu7ZxyNpA9yuexBr/r4EkXIH4RSBVmMF 20sybSYKOEfOPGvBiM9um8HgCQzic79S3jf2kPtJCaWsFvWGjO0BZq4FSG7BaDdN d65j9O9QFd3vOQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:34 2025 by rpki-client