This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json) Hash identifier: GOjIfcFGmnpo5nGG9LXKPX9MtRcry+DG5BSq15ewyRs= Subject key identifier: 87:86:C3:00:03:24:09:F0:97:B3:8B:C9:02:DE:AD:F8:E3:65:D0:D8 Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Certificate serial: 019B2EF98A650D9C13F35D22EFD7392C354E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft Manifest number: 161B Signing time: Thu 18 Dec 2025 01:01:04 +0000 Manifest this update: Thu 18 Dec 2025 01:01:04 +0000 Manifest next update: Fri 19 Dec 2025 01:01:04 +0000 Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: gS6GAhxRcrygQlBuKI7CkDaaLuy/tztxRhQnpz4H3FM=) 2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:8a:65:0d:9c:13:f3:5d:22:ef:d7:39:2c:35:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da Validity Not Before: Dec 18 01:01:04 2025 GMT Not After : Dec 19 01:01:04 2025 GMT Subject: CN=8786c300032409f097b38bc902deadf8e365d0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:f9:80:e9:ed:95:91:24:05:6a:2d:23:2b: 10:89:be:99:b5:58:5a:69:5f:ff:3d:17:1c:09:b9: d6:9c:b6:35:a0:84:8f:47:ff:60:c0:e6:75:95:2a: 06:50:4b:91:ea:0a:0b:94:dd:52:13:af:d4:a6:f2: d3:2e:c1:44:45:49:32:82:aa:ae:c6:f0:48:3e:38: 09:40:38:32:d5:17:71:48:a3:76:11:81:45:06:96: d7:58:2a:f2:ee:1d:93:c8:87:a6:21:a3:6b:0a:ea: 6c:85:f8:f6:28:1a:d1:27:d9:f3:cd:93:6e:2f:96: 71:35:fa:ad:ff:23:4c:04:0f:c8:5a:5a:2a:2e:71: 3c:cf:a5:51:7f:93:a4:f8:b8:fd:0d:56:2d:53:0e: d0:c4:b8:a2:c1:61:a0:8c:32:9a:02:38:a8:d0:13: a7:05:9b:94:65:15:b4:46:9e:36:f0:f8:62:a3:26: cb:d7:a2:f4:cb:e2:96:71:22:c6:d4:c8:b4:49:81: 34:9f:51:63:f3:1c:1b:e6:d6:b2:2e:e1:c7:91:80: a7:b8:3c:e5:c2:88:f4:d5:c5:e6:15:74:d2:33:e7: 96:10:3b:3e:7f:a7:2b:96:93:a1:fa:25:3c:9d:b1: 7c:f5:7c:79:1d:66:38:80:53:da:05:5f:98:1f:5a: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:C3:00:03:24:09:F0:97:B3:8B:C9:02:DE:AD:F8:E3:65:D0:D8 X509v3 Authority Key Identifier: keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cd:03:be:a9:17:c8:8f:f4:f0:80:11:54:b9:dd:07:d1:d7: ad:4d:fd:c1:f7:e8:de:5f:71:ba:98:69:af:6d:39:f6:a6:f2: e6:de:7b:d0:60:fc:f6:95:12:c0:48:e5:52:4b:75:15:e8:c5: 1e:c2:11:de:e5:9b:96:6f:e6:90:4c:1f:ae:b2:f0:05:a7:56: e4:0e:ae:b4:93:83:eb:e4:30:8e:dd:ef:48:26:40:e3:50:b6: b9:67:b7:24:ac:8b:d4:1b:09:3e:fa:19:42:f5:c3:31:42:30: 6a:cd:ae:73:61:45:7a:3f:50:f0:e9:83:5a:b6:4a:1f:b7:8d: 65:1d:7a:7e:83:30:80:dd:22:c5:97:56:22:a4:00:ff:ef:10: 17:97:7b:1c:f9:34:90:b6:63:fd:52:46:4a:25:8e:02:3c:ef: 35:1b:77:63:b6:20:28:1c:45:e6:f0:bb:7a:21:3e:7e:df:03: ab:fa:65:d0:d6:bb:d8:ec:88:41:09:81:cf:75:4d:6e:99:92: a4:b9:e3:e3:1b:49:ad:9f:20:04:32:28:0a:08:9b:fc:a6:4e: 1e:5f:0a:09:46:e4:a5:27:43:b9:01:2b:73:36:9e:a4:4e:3e: 70:5f:be:58:fc:6c:00:3f:ff:4a:e1:fc:1f:13:d5:b6:6e:e5: a2:56:8d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+YplDZwT810i79c5LDVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWU2MTBiZGNkMjNiYWQyYjExOTJiZDQ1Y2E4YTk3NmQz ODU1ZGEwHhcNMjUxMjE4MDEwMTA0WhcNMjUxMjE5MDEwMTA0WjAzMTEwLwYDVQQD Eyg4Nzg2YzMwMDAzMjQwOWYwOTdiMzhiYzkwMmRlYWRmOGUzNjVkMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHn5gOntlZEkBWotIysQib6ZtVha aV//PRccCbnWnLY1oISPR/9gwOZ1lSoGUEuR6goLlN1SE6/UpvLTLsFERUkygqqu xvBIPjgJQDgy1RdxSKN2EYFFBpbXWCry7h2TyIemIaNrCupshfj2KBrRJ9nzzZNu L5ZxNfqt/yNMBA/IWloqLnE8z6VRf5Ok+Lj9DVYtUw7QxLiiwWGgjDKaAjio0BOn BZuUZRW0Rp428PhioybL16L0y+KWcSLG1Mi0SYE0n1Fj8xwb5tayLuHHkYCnuDzl woj01cXmFXTSM+eWEDs+f6crlpOh+iU8nbF89Xx5HWY4gFPaBV+YH1r3RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeGwwADJAnwl7OLyQLerfjjZdDYMB8GA1UdIwQY MBaAFEDuYQvc0jutKxGSvUXKipdtOFXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYt YTZjMTdjZTgyZDc3LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ZWZhZTUtMmM5Mi00MGQwLWEzYjYtYTZjMTdjZTgyZDc3 LzEvUU81aEM5elNPNjByRVpLOVJjcUtsMjA0VmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo80DvqkX yI/08IARVLndB9HXrU39wffo3l9xuphpr2059qby5t570GD89pUSwEjlUkt1FejF HsIR3uWblm/mkEwfrrLwBadW5A6utJOD6+Qwjt3vSCZA41C2uWe3JKyL1BsJPvoZ QvXDMUIwas2uc2FFej9Q8OmDWrZKH7eNZR16foMwgN0ixZdWIqQA/+8QF5d7HPk0 kLZj/VJGSiWOAjzvNRt3Y7YgKBxF5vC7eiE+ft8Dq/pl0Na72OyIQQmBz3VNbpmS pLnj4xtJrZ8gBDIoCgib/KZOHl8KCUbkpSdDuQErczaepE4+cF++WPxsAD//SuH8 HxPVtm7lolaNaQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:40 2025 by rpki-client