This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json) Hash identifier: VypUY5PIZJsbwoqldLD0go5SeCxkHHF5Ow74Cp9ZfT0= Subject key identifier: C7:99:6D:97:7F:DF:B1:9E:40:34:4E:D1:65:13:22:95:C3:46:0E:53 Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Certificate serial: 019B533C760EDCE78E9FC73612150FBF6CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft Manifest number: 17AB Signing time: Thu 25 Dec 2025 02:00:29 +0000 Manifest this update: Thu 25 Dec 2025 02:00:29 +0000 Manifest next update: Fri 26 Dec 2025 02:00:29 +0000 Files and hashes: 1: L0PayBXw1av4AajNcmdw2-ceGI4.roa (hash: yrgEG4D+FXySVVv/ibFmYkuayuflUlw/y8vajoMW3DM=) 2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: GqVhXjSDKJHJOdk8WoXS2Axub0BaZWu8liL3rsmF6pA=) 3: a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa (hash: xRxfIlp8OxFc5k8i4YohXqRCQSb5ekQzI694uPO98mg=) 4: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:76:0e:dc:e7:8e:9f:c7:36:12:15:0f:bf:6c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Validity Not Before: Dec 25 02:00:29 2025 GMT Not After : Dec 26 02:00:29 2025 GMT Subject: CN=c7996d977fdfb19e40344ed165132295c3460e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:e5:c0:53:a5:06:b4:24:2f:45:7d:ef:8e: 00:08:47:db:79:60:4e:38:0a:a6:d6:37:9a:9f:ec: 86:3f:64:7f:b4:cd:06:32:28:40:90:6a:5d:be:b9: a0:7c:f9:af:b1:88:56:2e:7d:1a:9c:99:1a:fe:03: e6:96:8c:da:1c:77:9f:22:b1:26:73:e0:96:d5:b9: 2e:e5:4f:8c:2e:b5:bd:8d:3d:5e:1b:e2:a7:ae:f1: 7f:14:b5:7c:d0:a6:d3:49:99:da:45:4e:5d:0a:94: 06:83:4f:b6:7a:7a:72:c9:74:44:9d:93:b2:f0:df: c7:4e:8a:34:50:a9:01:a7:c2:00:2e:07:6f:10:dc: fd:70:c3:a2:11:09:36:2b:51:b5:2a:91:86:bf:b0: 9c:df:dc:dd:c0:49:53:c2:c0:65:28:31:b6:6d:f3: 59:7c:54:1c:7e:8e:8e:ea:4b:6b:82:41:41:ec:02: a9:eb:40:6b:0a:fa:72:d1:03:04:1f:5d:2b:a0:64: 08:30:22:8f:1b:49:3f:5a:0b:63:89:98:76:df:78: 39:6e:08:98:ac:e9:b4:ac:e3:60:09:20:e0:7e:f9: cb:d6:7a:f8:14:5f:d0:48:1b:44:b2:ca:e1:01:19: 62:76:69:a8:37:8a:83:c9:05:e9:9a:51:b5:6e:f2: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:99:6D:97:7F:DF:B1:9E:40:34:4E:D1:65:13:22:95:C3:46:0E:53 X509v3 Authority Key Identifier: keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d7:43:88:7e:cc:76:f9:78:cf:6c:e6:e4:73:48:f4:34:d4: 6e:b8:82:c3:b1:56:a9:f0:64:27:4d:97:73:38:8a:30:b2:a1: 9e:b9:bc:e5:b3:c0:64:58:63:06:22:7f:bc:8c:32:a5:d5:df: 55:38:6e:3b:14:70:57:2c:2a:6a:ea:bc:50:e1:b7:e4:07:f6: cf:3f:60:8a:3f:2a:38:4c:70:6d:b9:b6:59:e0:f9:ff:73:a0: 99:5c:af:77:55:6f:7a:8c:3d:8a:64:32:b4:d9:37:c8:e2:2b: 79:0e:88:2d:14:d7:30:51:2f:fd:2e:b6:d8:ed:17:d2:9e:88: 8a:e8:91:49:c7:1f:8d:1e:81:7f:3e:18:a4:f2:ef:e4:fa:11: 77:23:69:a1:11:38:b1:d6:c8:b0:e0:bf:d0:c5:44:c3:b4:51: 6d:e7:d1:10:0f:80:39:bb:73:fa:88:46:32:7e:77:83:e9:f4: 74:10:85:8a:d1:c2:7a:65:45:5b:95:8a:81:41:88:d3:42:79: 92:76:23:42:1f:30:7c:e9:58:42:60:89:f7:ea:4e:7b:23:c9: 6a:c2:c1:d1:08:6d:55:c6:f9:03:5b:56:c6:cf:74:03:f6:2e: 25:41:5b:b0:a6:af:77:e5:12:e9:4b:1f:60:74:07:dd:75:b0: 71:f8:bc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPHYO3OeOn8c2EhUPv2yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODM2OTY3MTZkYmNjMzYwYjlhNjJlZjdkODRiNGQyOGY5 NThiZGQwHhcNMjUxMjI1MDIwMDI5WhcNMjUxMjI2MDIwMDI5WjAzMTEwLwYDVQQD EyhjNzk5NmQ5NzdmZGZiMTllNDAzNDRlZDE2NTEzMjI5NWMzNDYwZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVblwFOlBrQkL0V9744ACEfbeWBO OAqm1jean+yGP2R/tM0GMihAkGpdvrmgfPmvsYhWLn0anJka/gPmlozaHHefIrEm c+CW1bku5U+MLrW9jT1eG+KnrvF/FLV80KbTSZnaRU5dCpQGg0+2enpyyXREnZOy 8N/HToo0UKkBp8IALgdvENz9cMOiEQk2K1G1KpGGv7Cc39zdwElTwsBlKDG2bfNZ fFQcfo6O6ktrgkFB7AKp60BrCvpy0QMEH10roGQIMCKPG0k/WgtjiZh233g5bgiY rOm0rONgCSDgfvnL1nr4FF/QSBtEssrhARlidmmoN4qDyQXpmlG1bvLDewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeZbZd/37GeQDRO0WUTIpXDRg5TMB8GA1UdIwQY MBaAFEKDaWcW28w2C5pi732EtNKPlYvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAt OTI0MGQ5Zjc1YWU2LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAtOTI0MGQ5Zjc1YWU2 LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNdDiH7M dvl4z2zm5HNI9DTUbriCw7FWqfBkJ02XcziKMLKhnrm85bPAZFhjBiJ/vIwypdXf VThuOxRwVywqauq8UOG35Af2zz9gij8qOExwbbm2WeD5/3OgmVyvd1Vveow9imQy tNk3yOIreQ6ILRTXMFEv/S622O0X0p6IiuiRSccfjR6Bfz4YpPLv5PoRdyNpoRE4 sdbIsOC/0MVEw7RRbefREA+AObtz+ohGMn53g+n0dBCFitHCemVFW5WKgUGI00J5 knYjQh8wfOlYQmCJ9+pOeyPJasLB0QhtVcb5A1tWxs90A/YuJUFbsKavd+US6Usf YHQH3XWwcfi8Pw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:06 2025 by rpki-client