This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json) Hash identifier: MuiHgp3Phs3GOW8g5jm1xz9GhtXaO/yIvEBzBrxc5ZE= Subject key identifier: 7A:65:75:D4:B3:CE:BE:10:3F:84:B2:71:B4:CA:D9:10:FC:FC:05:75 Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019B2F6713566A08506AD15DBAEA0B335351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 03:00:42 +0000 Manifest this update: Thu 18 Dec 2025 03:00:42 +0000 Manifest next update: Fri 19 Dec 2025 03:00:42 +0000 Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: ttDn6N24DVni+iCG+vEH+oYpldlES23FR0xx8KLJpB4=) 2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:13:56:6a:08:50:6a:d1:5d:ba:ea:0b:33:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Dec 18 03:00:42 2025 GMT Not After : Dec 19 03:00:42 2025 GMT Subject: CN=7a6575d4b3cebe103f84b271b4cad910fcfc0575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:cf:50:ce:9a:c3:d9:bd:03:16:e5:ef:e2: a2:cc:1b:bc:5c:ad:ba:7d:c3:44:46:fb:fd:de:e6: 8b:38:5c:93:ca:75:d9:dc:07:80:5c:ef:9f:f2:9d: df:79:5e:63:6b:6c:87:0f:28:5b:7c:13:e2:5a:0b: 61:10:14:a4:b9:19:fd:49:a4:f9:f1:2c:e7:0b:1c: b9:6b:70:e6:6a:cc:35:1a:28:55:21:b6:d9:6d:3a: f3:b9:9f:db:9b:ec:91:bb:1d:1f:d5:69:61:a2:af: f9:20:68:48:4a:4f:53:17:c5:cc:bb:93:52:99:3e: e8:58:93:41:73:05:8b:7e:aa:94:f9:50:47:56:a2: e5:5c:d8:05:82:71:b0:42:fc:83:3e:47:12:56:9d: 20:5d:39:ce:d1:70:8b:53:ab:fe:28:d2:ca:41:5b: c7:1c:b8:32:55:a2:d4:be:99:3c:4d:65:39:48:17: 07:05:3f:c3:a2:6b:49:08:96:b0:9c:be:bf:8c:cc: e9:4f:81:c4:6a:21:15:13:1b:8e:a2:a7:4c:0c:f5: dc:ab:d8:cc:3e:29:ea:f3:08:79:10:02:03:4b:8f: 57:d0:9d:ab:ca:a8:05:49:1b:7b:38:b0:80:0f:60: 5a:16:14:b0:68:e8:f2:3c:b4:6b:8a:fe:32:00:bb: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:75:D4:B3:CE:BE:10:3F:84:B2:71:B4:CA:D9:10:FC:FC:05:75 X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:30:22:63:ba:da:6f:35:d8:c6:8d:5a:7b:7a:a9:21:96:89: 6a:e8:6f:60:9e:14:9a:97:67:ce:59:60:c5:8c:68:69:40:02: 83:ee:51:43:e8:31:12:e0:d1:40:c6:96:a8:14:88:40:ea:0c: 99:b4:d2:1f:33:87:9f:ab:8e:3a:44:72:3e:ba:34:95:e9:b2: 47:71:f8:f8:82:12:a5:fa:b4:0a:6e:f6:f6:18:36:64:0b:9d: c0:be:ff:3c:8d:18:70:e4:ec:62:86:02:76:91:37:cf:c1:43: 20:ec:59:5b:d8:9f:fd:55:6f:4d:9f:71:9e:e9:6e:42:9b:58: 4b:cd:41:88:ca:3c:e5:26:48:00:3d:ad:81:95:96:b1:59:76: d6:27:fa:e2:e2:45:11:c2:18:87:9e:0e:60:e7:e8:bf:29:71: 8f:2b:3a:56:ab:89:96:c9:a1:a2:40:34:f9:f0:2b:fa:9e:03: 39:54:f1:27:56:bb:44:86:89:44:fd:f7:ee:29:ba:b1:af:5b: 93:6c:d0:93:a6:86:48:2a:c2:fc:72:51:be:99:22:e8:02:76: 0b:33:e8:0b:01:9e:29:56:f8:b2:c3:3e:91:9b:b8:2e:90:14: e2:6b:5e:8a:57:db:a7:20:31:fb:0b:82:83:d0:88:09:5b:50: 0e:ea:0c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxNWaghQatFduuoLM1NRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjUxMjE4MDMwMDQyWhcNMjUxMjE5MDMwMDQyWjAzMTEwLwYDVQQD Eyg3YTY1NzVkNGIzY2ViZTEwM2Y4NGIyNzFiNGNhZDkxMGZjZmMwNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjDPUM6aw9m9Axbl7+KizBu8XK26 fcNERvv93uaLOFyTynXZ3AeAXO+f8p3feV5ja2yHDyhbfBPiWgthEBSkuRn9SaT5 8SznCxy5a3Dmasw1GihVIbbZbTrzuZ/bm+yRux0f1Wlhoq/5IGhISk9TF8XMu5NS mT7oWJNBcwWLfqqU+VBHVqLlXNgFgnGwQvyDPkcSVp0gXTnO0XCLU6v+KNLKQVvH HLgyVaLUvpk8TWU5SBcHBT/DomtJCJawnL6/jMzpT4HEaiEVExuOoqdMDPXcq9jM Pinq8wh5EAIDS49X0J2ryqgFSRt7OLCAD2BaFhSwaOjyPLRriv4yALu7PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHplddSzzr4QP4SycbTK2RD8/AV1MB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizAiY7ra bzXYxo1ae3qpIZaJauhvYJ4UmpdnzllgxYxoaUACg+5RQ+gxEuDRQMaWqBSIQOoM mbTSHzOHn6uOOkRyPro0lemyR3H4+IISpfq0Cm729hg2ZAudwL7/PI0YcOTsYoYC dpE3z8FDIOxZW9if/VVvTZ9xnuluQptYS81BiMo85SZIAD2tgZWWsVl21if64uJF EcIYh54OYOfovylxjys6VquJlsmhokA0+fAr+p4DOVTxJ1a7RIaJRP337im6sa9b k2zQk6aGSCrC/HJRvpki6AJ2CzPoCwGeKVb4ssM+kZu4LpAU4mteilfbpyAx+wuC g9CICVtQDuoMfg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:22:24 2025 by rpki-client