This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json) Hash identifier: /xP1L6YzjJR7NGi4CAU2HHpAjzssDvi7mnPYZVjr2X0= Subject key identifier: C7:2C:4C:30:BD:01:8C:59:97:91:00:85:B0:25:C8:61:92:3C:26:C1 Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Certificate serial: 019AF31B6C59687724C7974AD9B220F39C97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft Manifest number: 064D Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: L078whEinGGV12WlL7G5a0449mpsAY97DVPxSf+hGIA=) 2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6c:59:68:77:24:c7:97:4a:d9:b2:20:f3:9c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=c72c4c30bd018c5997910085b025c861923c26c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:f7:0c:c3:34:9d:c0:0c:47:22:25:94:17: c5:18:29:49:23:8f:00:4a:ae:48:d9:0b:45:3f:a3: 3c:b8:89:18:c1:ea:b3:eb:d4:63:87:75:77:d9:39: 60:25:76:11:fc:be:98:fc:51:16:ea:4c:8e:05:9e: 7f:c2:3d:c3:5d:6d:f4:53:d3:11:e4:e8:68:06:0f: 9b:e6:77:a4:1e:a8:27:61:5e:6d:a0:a5:e4:46:67: 52:0a:6a:7e:1c:85:96:a4:5a:c9:67:2c:d2:37:71: 18:91:c1:37:ac:74:8d:a9:24:5b:31:95:c1:b3:e3: 28:6a:b4:6c:26:80:49:89:46:e6:6a:9f:9e:c6:65: ff:6a:d7:50:0b:5f:a3:f6:3b:51:93:d4:3d:5a:3b: ea:4d:8a:9a:c7:df:e4:14:ff:6c:e7:d0:05:11:4d: 64:92:09:b6:fb:d4:6b:59:92:94:44:92:a0:6c:08: 48:c7:98:c7:48:69:98:5e:1a:cd:7f:19:5e:a8:11: b9:2a:5e:8c:5e:da:04:27:67:03:41:09:5a:a7:31: 94:a4:f1:fa:84:9d:4a:94:ad:e2:36:1c:24:83:a2: f6:b1:a4:e8:b1:4a:1e:7f:6b:ad:55:6f:7a:cd:2d: 8b:2c:30:13:50:47:ed:60:20:e1:50:7d:66:75:f1: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2C:4C:30:BD:01:8C:59:97:91:00:85:B0:25:C8:61:92:3C:26:C1 X509v3 Authority Key Identifier: keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:4c:ca:15:09:1e:01:cb:16:31:93:5d:19:2e:73:60:05: 62:9e:32:53:4e:78:81:ce:dc:8f:7a:83:19:d2:d7:92:25:53: 62:b8:9a:3c:d7:a3:e8:6a:b9:d4:82:40:1d:0f:cc:20:96:3a: a3:7d:59:e4:6c:8e:6b:bc:2f:42:30:8f:50:34:a5:d5:ec:d1: a3:63:3f:87:42:0c:c0:6d:af:0d:a5:a9:ef:e6:3e:ea:74:ca: 18:9e:d7:fa:24:5f:ed:7b:48:52:24:83:6d:a0:68:00:18:5e: 65:f6:99:f8:81:9d:98:41:23:7a:86:0a:0e:e0:4a:ec:42:92: d1:a1:94:c3:a9:25:a9:a8:f4:03:5d:06:a9:1d:71:51:ad:c5: ea:5d:ed:7d:2f:46:74:a4:4c:f8:ed:57:3c:65:e5:55:25:6e: 6f:17:05:f8:0e:f3:f8:d1:eb:61:4e:6b:b7:31:c8:87:ed:04: 2a:8e:ee:cb:14:e5:9d:b2:d6:e5:05:56:05:31:01:fd:cd:7f: d1:55:f0:f3:ea:31:14:0c:e4:e7:35:77:55:6a:ae:ad:60:35: 86:a5:8f:37:15:a8:4a:66:c4:c8:af:e0:ce:75:48:e2:8f:df: ee:e8:5a:ef:f8:a1:e4:2d:e5:1a:59:58:05:89:37:93:a7:b1: 18:41:58:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2xZaHckx5dK2bIg85yXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZmYzU0ZTJkMjQxZjQ0MWFkMDNjYzE4ZTMzMWJmZTM0 YTU3ZWYwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EyhjNzJjNGMzMGJkMDE4YzU5OTc5MTAwODViMDI1Yzg2MTkyM2MyNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrH3DMM0ncAMRyIllBfFGClJI48A Sq5I2QtFP6M8uIkYweqz69Rjh3V32TlgJXYR/L6Y/FEW6kyOBZ5/wj3DXW30U9MR 5OhoBg+b5nekHqgnYV5toKXkRmdSCmp+HIWWpFrJZyzSN3EYkcE3rHSNqSRbMZXB s+MoarRsJoBJiUbmap+exmX/atdQC1+j9jtRk9Q9WjvqTYqax9/kFP9s59AFEU1k kgm2+9RrWZKURJKgbAhIx5jHSGmYXhrNfxleqBG5Kl6MXtoEJ2cDQQlapzGUpPH6 hJ1KlK3iNhwkg6L2saTosUoef2utVW96zS2LLDATUEftYCDhUH1mdfGHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcsTDC9AYxZl5EAhbAlyGGSPCbBMB8GA1UdIwQY MBaAFEFm/FTi0kH0Qa0DzBjjMb/jSlfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTct ZjExYzZlMDY0ODhmLzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS85ZDc4ODYtMzRkYy00OTk4LTk3MTctZjExYzZlMDY0ODhm LzEvUVdiOFZPTFNRZlJCclFQTUdPTXh2LU5LVi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0VMyhUJ HgHLFjGTXRkuc2AFYp4yU054gc7cj3qDGdLXkiVTYriaPNej6Gq51IJAHQ/MIJY6 o31Z5GyOa7wvQjCPUDSl1ezRo2M/h0IMwG2vDaWp7+Y+6nTKGJ7X+iRf7XtIUiSD baBoABheZfaZ+IGdmEEjeoYKDuBK7EKS0aGUw6klqaj0A10GqR1xUa3F6l3tfS9G dKRM+O1XPGXlVSVubxcF+A7z+NHrYU5rtzHIh+0EKo7uyxTlnbLW5QVWBTEB/c1/ 0VXw8+oxFAzk5zV3VWqurWA1hqWPNxWoSmbEyK/gznVI4o/f7uha7/ih5C3lGllY BYk3k6exGEFYBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:15 2025 by rpki-client